a) We maintain a clear inventory of AI systems in use
b) We classify AI use cases by risk level
c) AI incidents have a defined escalation process
a) We have a formal AI policy
b) AI use cases require structured approval
c) Roles and accountability are defined
a) Board receives AI reporting
b) Risk appetite for AI is defined
c) AI strategy aligns to business goals
d) Crisis response plan exists
a) Data quality supports AI use
b) Data lineage is traceable
c) Access controls are enforced
d) Model performance is monitored
a) AI impact on roles has been assessed
b) Staff trained on safe AI use
c) Skills roadmap defined
d) Productivity impact measured