Answer for the devices, accounts and services covered by this assessment, including remote work and applicable personal devices. “Yes” means every applicable check in the description is in place. Choose “Not sure” when evidence is missing; use “Not applicable” only when its stated reason is true. This questionnaire does not inspect your systems.

Question 1 of 120% Complete
Category: AI governance

Are approved AI uses, prohibited data and responsible owners documented?

Include exceptions, review dates and what staff should do when unsure. A drafted policy needs review and implementation.