← All resourcesResources

Board and governance

Governance documents are easy to write and hard to evidence. Each tool here asks the follow-up question an auditor or regulator would ask, so a "yes" only counts when it would hold up. Several print a register or a board pack you can table at the next meeting.

Usually opened by Directors, audit and risk committees, CROs and compliance leads.

9 tools in this group, all free with a printable result

Combined reportCombined AI Governance Board PackGather the results you have already saved in the board oversight, ISO 42001, agent risk and technology risk tools into one printable board pack, with the questions to put to management and the evidence to ask for. Nothing leaves your browser.
  1. Checklist

    Board AI Oversight Checklist

    Is our board actually overseeing AI, or just receiving updates about it?

    When to use it
    Ahead of a board or audit committee session on AI.
    What you get
    An oversight score across six areas, with the probes behind each answer.
    Effort
    23 questions, 69 follow-up probes
    Last updated
    30 Sept 2026
    Take the checklistBackground reading: Governance Theatre Is What Fear Looks Like on a Slide
  2. Checklist

    Technology Risk Board Pack

    Could our bank answer the questions MAS put to DBS in 2023?

    When to use it
    For bank boards and technology risk committees, before the regulator asks.
    What you get
    A printable board pack: the evidence to request and the MAS, PRA, DORA, APRA, HKMA or Basel rule behind each gap.
    Effort
    20 questions, about 8 minutes
    Last updated
    12 Oct 2026
    Build the board packBackground reading: The Vulnerability Didn't Change. The Attacker Did.
  3. Checklist

    ISO 42001 AIMS Readiness Checklist

    How far are we from passing an ISO/IEC 42001 audit?

    When to use it
    When certification is on the plan, or a client has started asking for it.
    What you get
    A live readiness score across all seven clauses and 103 evidence checks.
    Effort
    36 requirements
    Last updated
    30 Sept 2026
    Take the checklistBackground reading: Local Governments Are Using AI Without Rules to Guide It
  4. Calculator

    ISO/IEC 42001 Clause Readiness Calculator

    Which clauses would an auditor grade as a nonconformity, and are we ready to book Stage 1?

    When to use it
    When certification has a date, and you need to know what to fix first.
    What you get
    A maturity score for each clause, likely major and minor findings, Stage 1 and Stage 2 blockers, and a draft Statement of Applicability for all 38 Annex A controls.
    Effort
    27 ratings and 38 control decisions
    Last updated
    29 Oct 2026
    Rate your clausesBackground reading: Local Governments Are Using AI Without Rules to Guide It
  5. Assessment

    EU AI Act Risk Classifier

    Does the EU AI Act apply to this AI system, and what does it require of us?

    When to use it
    Before an AI system reaches EU customers, or when its output is used in the EU from outside it.
    What you get
    The risk class, your role, each obligation with its article, and the dates that apply after the July 2026 Omnibus.
    Effort
    Up to 11 questions, about 5 minutes
    Last updated
    25 Oct 2026
    Classify your systemBackground reading: Where AI Is Actually Safe to Deploy in 2026: An Industry-by-Industry Guide
  6. Assessment

    Agent Risk Assessment Matrix

    How much oversight does each of our AI agents need?

    When to use it
    Before an agent goes live, or when you need a register of the ones already running.
    What you get
    An oversight tier per agent, the controls it requires and the ISO 42001 clause each satisfies, printed as a register.
    Effort
    8 questions per agent
    Last updated
    17 Sept 2026
    Build your registerBackground reading: Agent-Aware Vulnerability Management Ranks Flaws by What the Agent Can Do
  7. Calculator

    Oversight Ceiling Calculator

    How much AI output can go out unreviewed before our quality promise breaks?

    When to use it
    When someone proposes cutting human review to save cost.
    What you get
    The largest safe unreviewed share, the reviewers it takes, and what model correlation costs you.
    Effort
    10 inputs from your own records
    Last updated
    1 Oct 2026
    Compute your ceilingBackground reading: AI Could Do the Job Tomorrow. The Math Still Caps How Much You Can Automate.
  8. Assessment

    Public Sector Algorithmic Impact Assessment

    What impact level is this government AI system, and which safeguards does that level require?

    When to use it
    At the concept stage of an automated-decision system, before the business case or the approval meeting.
    What you get
    An impact level from I to IV, the safeguards that level requires, the gaps in your design, and a cross-walk to Canadian, Australian, UK, Singapore and OECD frameworks.
    Effort
    12 questions, about 10 minutes
    Last updated
    25 Oct 2026
    Assess a systemBackground reading: Local Governments Are Using AI Without Rules to Guide It
  9. Dashboard

    AI Trust, Risk and Governance Dashboard

    Are our live systems fair, traceable and secure?

    When to use it
    When AI is in production and the risk team needs one place to monitor it.
    What you get
    Bias and fairness, data lineage, OWASP LLM threats and RAG access-control posture against benchmark thresholds.
    Effort
    Adjust the inputs to your systems
    Last updated
    17 Sept 2026
    Open the dashboardBackground reading: Beyond the Pilot: A Risk Governance Framework for Scalable AI Deployment

Other groups

Work through it together

The workshop turns these diagnostics into a half-day session with a benchmarked scorecard and roadmap. Or book a private session on your specific situation.

Book the WorkshopBook a 1:1 Session
Terence Kok
Before You Go

A board doesn't need to understand the model. It needs to know who answers for it and what evidence sits behind each yes. These tools ask those questions for you.

Terence Kok