AI Governance Assessment

When this service becomes necessary

• The organisation is using AI tools but has not established what is approved, what is prohibited, or who is accountable.
• The board, audit committee, or a risk function has asked for an AI risk assessment and there is nothing to show.
• A regulatory audit or external review has identified AI governance as a gap requiring attention.
• The organisation is about to deploy a significant AI capability and needs to establish the governance position before go-live.
• An AI tool has produced a concerning outcome, incorrect output used in a decision, unexpected data surfacing, or an accountability question with no clear answer.

What Evoltra reviews

• AI tools and capabilities currently in use, approved, unapproved, and embedded in existing vendor systems
• Current governance coverage: policies, ownership, approval processes, and monitoring
• Risk classification of current AI use cases by impact and reversibility
• Data handling, privacy, and consent considerations for AI tools in use
• Human oversight adequacy by use case
• Gaps between current governance and what is required
• Priority governance actions with severity assessment

How the engagement works

1. 1

   Discovery

   Document AI tools in use: approved tools, tools used without formal approval, and AI embedded in existing enterprise systems. Establish the actual inventory, not just the approved list.

2. 2

   Risk assessment

   Classify current AI use cases by risk tier. Identify the use cases carrying the highest risk, data exposure, inaccurate outputs used in decisions, accountability gaps, or regulatory exposure.

3. 3

   Governance gap analysis

   Assess current policies, ownership, approval processes, and monitoring against what is needed. Identify what exists and what is missing.

4. 4

   Written findings

   Deliver a clear written gap analysis with priority assessment. Not a theoretical framework: a specific assessment of your current position.

5. 5

   Governance roadmap

   Prioritised governance improvement plan: what to fix first, what can wait, and what the recommended next steps are. Designed to lead either into independent action or a broader AI Governance engagement.

Who this is for

Organisations that need to establish where they stand on AI governance before committing to a full framework development engagement. The assessment produces a clear picture of the current position and a prioritised action plan. It typically either stands alone: where the gaps are manageable, or leads directly into a broader AI Governance engagement where the gap is significant.