Tools

AI Governance Quick Scan

The AI Governance Quick Scan is the fast version of CCA's full readiness assessment. It runs 20 questions instead of 65, one per control domain across the same five pillars: Data Trust, Model Governance, Agent Autonomy, Enterprise Operations, and Responsible AI. It takes about five minutes and gives a directional read on where governance holds and where it doesn't, before you commit the time for the full evidence-mapped assessment.

Questions

Common questions

How does this relate to the full AI Governance Readiness Assessment?

This is a fast triage: 20 questions, one per control domain, pulled from the same five pillars as the full instrument. The full 65-question assessment at /tools/ai-governance covers all 65 controls across the four lifecycle stages in each pillar and is what maps in depth to NIST AI RMF, ISO/IEC 42001, and the EU AI Act. Run this first for a directional read; run the full assessment when you need the evidence-ready version.

What are the limits of a 20-question self-scored read?

It's a sample, not a census: one probe per control domain instead of four, so it can miss unevenness within a pillar that the full assessment would catch. It's also self-reported, and self-assessment tends to score generously. Treat the band as a starting point for where to look, not a verified result.

Who should run this?

Anyone who wants a five-minute directional read before committing to the full assessment: a CISO or CTO sizing up whether a board review is needed, or a PE deal team doing an early sanity check on a target's AI posture before deciding whether full diligence is warranted.

How does the 0-100 scoring work?

Each question uses the same five-level maturity ladder as the full assessment (non-existent, reactive, defined, managed, optimized) mapped to 0, 25, 50, 75, and 100. Your pillar score is the average across its four questions here; your composite band weights all five pillars equally.