Where does your AI compliance posture stand?

Section 1 of 5, Governance

Does your organisation have a written, approved, and reviewed AI policy with clear approval gates?

• Do you have a written AI policy approved at executive committee or board level?

  A written policy makes the difference between a defensible deployment and one that gets paused mid-rollout when a regulator asks the question.

  Yes, approved and currentDraft circulated, not yet approvedInformal, not written downNo

• When was the AI policy last reviewed?

  The Voluntary AI Safety Standard expects review at least annually; faster if you have a live deployment.

  Within the last 6 months6 to 12 months agoMore than 12 months agoNo policy to review

• Who must approve a new AI use case before it goes to production?

  Board or risk committee with documented sign-offExecutive committee approvalIT or single technical owner onlyNo formal approval process