Self-assessment tool

AI Governance Readiness Checklist

A 24-point assessment covering AI inventory, human oversight, governance policy, regulatory compliance, and agentic AI. Mapped to IMDA, MAS AIRG Guidelines, PDPA, and ISO 42001. Work through it in your browser or download the PDF for your team.

Progress 0/24

1 AI Inventory & Classification

You have a documented inventory of all AI systems currently in production

Each system has a documented risk classification

You know which regulatory frameworks apply to each system

Your inventory is reviewed and updated at least quarterly

2 Human Oversight

Human reviewers have clear authority to reject or modify AI outputs

Reviewers have sufficient information and time to provide genuine oversight

There is a documented process for escalating AI output concerns

Oversight effectiveness is assessed periodically, not just assumed

3 Governance Policy & Roles

A written AI governance policy exists and is actively followed

AI risk ownership is defined at senior management level

The board receives regular reporting on AI risk

New AI deployments go through a governance review before launch

4 Monitoring & Incident Response

AI systems are monitored for performance and behavioural changes after deployment

There are defined thresholds that trigger human review

An AI incident response process exists and has been tested

Monitoring reports are reviewed by someone with authority to act

5 Regulatory Compliance

Your governance posture has been mapped against the IMDA Model AI Governance Framework and, where applicable, the IMDA Model AI Governance Framework for Agentic AI

Financial services firms: the MAS AIRG Guidelines have been reviewed and a readiness gap has been identified

PDPA obligations for AI systems processing personal data have been documented

EU AI Act applicability has been assessed for any EU-touching activities, and organisations in scope are preparing for the August 2026 enforcement deadline

6 Agentic AI (if applicable)

You have identified all AI systems that take autonomous actions

Operating parameters for each agent are defined and documented

External system integrations are documented and authorised

Human approval is required at defined decision points

How to interpret your results

All 24 items: Strong governance posture. Focus on maintaining currency as regulations evolve.

16 to 23 items: Gaps worth addressing. These are the areas most likely to be flagged in an audit or due diligence process.

Under 16 items: Prioritise the Enforcement Gap Diagnosis. The gaps represent real regulatory and reputational risk.

The checklist showed you the gaps. Let's close them.

The 30-Minute Enforcement Gap Diagnosis turns the checklist into a one-page diagnosis on Aivance letterhead, naming the one missing control most likely to cost you in the next 12 months and the actions that close it.

Book Your Enforcement Gap Diagnosis