Board AI Governance Readiness Check

Is there a named individual accountable to the board for each AI system in production?

Do you maintain a current inventory of the AI systems in use across the organisation, including vendor tools?

Are AI policies, approval gates and decision rights written down and approved by management?

Is every AI system risk-classified before deployment, with the classification recorded?

Could you produce the documentation trail for a high-impact AI decision if a regulator asked tomorrow?

Are impact or conformity assessments completed and signed off before high-risk systems go live?

Are models monitored in production for drift, degradation and unexpected behaviour, with thresholds that trigger action?

Is there a tested incident response plan that covers AI failures, including who can stop or roll back a model?

Do contracts with AI vendors give you the evidence, audit and notification rights you would need after an incident?

Does the board receive regular, structured reporting on AI risk — not just project updates?

Have you reviewed your public AI claims and disclosures for accuracy and consistency with what the systems actually do?

Do directors have enough AI literacy on record to demonstrate informed oversight?