AI Governance Alignment

Know exactly where
your AI governance stands

Answer 7 questions. Get a free AI Governance Alignment report by email. Aligned to NIST AI RMF, ISO 42001, and NIST 800-53. No call required.

Free Screener / Expert Engagement / Remediation

MITU.S. NavyAkamaiNSFXeroxU.S. DHSOhio StateU.S. ArmySAP

Why now

AI is being used in your organization right now. Most leaders cannot tell you who owns AI governance, what tools are in use, or what controls exist. Auditors, regulators, insurers, and clients are starting to ask harder questions. The cost of being unprepared compounds with every new tool deployed.

ABA Formal Opinion 512, ISO 42001 publication, EU AI Act enforcement, and CMS AI guidance all landed in the past 24 months. Standards are converging. Buyers want answers. The window to align before scrutiny is measured in months, not years.

Take the Free Screener

7 questions. PDF report emailed to you. No obligation.

How it works

Four steps from screener to a defensible governance posture. Free tier is fully self-serve. Expert engagement adds a senior practitioner and a 38-item assessment.

1. Submit

Answer 7 questions across the governance domains that matter. Drop your contact details so we can send the report.

2. Score

Automated scoring across 7 domains. Your alignment tier and top 3 governance gaps are identified.

3. Report

PDF report emailed to you. Includes domain bar chart, top 3 gaps with industry context, and plain-English next steps.

4. Engage

Bring in a senior practitioner for the expert engagement when you need depth. 38-item assessment, 11-page report, remediation roadmap.

Two ways to engage

Start with the free screener to see where you stand. Move into an expert engagement when you need a defensible deliverable.

Free Screener

Free
  • 7-question alignment screener
  • Scored across 7 governance domains
  • Alignment tier and top 3 gaps identified
  • Industry-specific context (legal, healthcare, financial services)
  • PDF report emailed to you. No call required.

Use a working email you check. Self-reported responses, not an audit opinion.

Take the Free Screener

Expert Engagement

Custom scope
  • 38-item assessment by a senior practitioner
  • 11-page report aligned to NIST AI RMF, ISO 42001, NIST 800-53
  • Framework crosswalk table
  • Domain-level findings and prioritized remediation roadmap
  • Defensible deliverable for boards, auditors, insurers, and clients

Scoped to your environment. Released after expert review.

Get Started

What you walk away with

A scored alignment posture

Your governance posture against NIST AI RMF, ISO 42001, and NIST 800-53. One number, five tiers (Critical Gaps, Foundational, Progressing, Strong, Governance Ready). No fluff.

Top 3 gaps you can act on

The three lowest-scoring domains. What they mean. Why they matter. What an auditor, regulator, or client would ask. What good looks like.

Industry-specific context

Legal, healthcare, financial services, and technology contexts each carry different governance pressures. Your report calls out what is most relevant for your industry.

A path forward

Plain-English next steps. No 90-page report. The free screener tells you where to focus first. The expert engagement gives you the remediation roadmap.

Free Screener

7 questions. Scored PDF. No call.

Answer the 7 questions below. Use the email you check. Your scored AI Governance Alignment report arrives shortly after submission.

Q1. AI Policy and Ownership

Does your organization have a documented AI use policy with a named person or committee responsible for AI governance?

NIST AI RMF GOVERN 1.1, 1.2, 2.1 · ISO 42001 5.1-5.3

Q2. AI System Inventory

Do you know what AI tools are being used across your organization, by whom, and for what purpose?

NIST AI RMF GOVERN 1.6, MAP 1.1 · ISO 42001 6.1.2

Q3. Data Controls

Are there controls in place that prevent sensitive, confidential, or privileged information from being entered into AI tools (including ChatGPT, Copilot, Claude, or similar)?

NIST AI RMF MAP 2.1-2.3, MEASURE 2.10 · ISO 42001 A.8.4 · NIST 800-53 AC-4, SC-28

Q4. Risk Assessment

Has your organization conducted a formal risk assessment specific to AI usage?

NIST AI RMF MAP 3.1-3.5, MAP 5.1 · ISO 42001 6.1, 8.4 · NIST 800-53 RA-3

Q5. Output Verification

Are AI-generated outputs reviewed by a qualified person before being used in client-facing work, filings, reports, or decisions?

NIST AI RMF MEASURE 2.3-2.5, MANAGE 2.4 · ISO 42001 A.6.2.6

Q6. Training

Have your staff received training on responsible AI use and your organization's AI policies?

NIST AI RMF GOVERN 2.2 · ISO 42001 7.2-7.3 · NIST 800-53 AT-2, AT-3

Q7. Audit Trail

If asked by a regulator, client, or opposing counsel, could you produce a record showing what AI was used, when, by whom, and for what purpose?

NIST AI RMF GOVERN 1.4, MANAGE 4.1 · ISO 42001 9.1-9.2 · NIST 800-53 AU-2, AU-3

Self-reported responses. Not an audit opinion, legal advice, or certification. We respond promptly.

Lost your report?

Resend my report

Enter the email you used. If we have a report on file we will send a fresh copy. We never confirm or deny whether an email is in our system.

Expert Engagement

Bring in a senior practitioner

38-item assessment, 11-page report, framework crosswalk, prioritized remediation roadmap. Defensible deliverable for boards, auditors, insurers, and clients. Tell us about your situation and a senior practitioner will follow up.

Start an Engagement Conversation

Founder follow-up. One business day response.