The Resilience Standard · AI Governance Resilience · Rung 1Pulse

AI Governance Resilience Pulse

Fourteen questions, about five minutes. An indicative maturity reading of how AI is adopted and governed, organised around the domains of ISO/IEC 42001 and the NIST AI Risk Management Framework.

4–5 minutesFourteen questionsSeven domainsIndicative band only

The gate rule. No overall band may exceed the band of its lowest gated domain. Here the gated domains are Data and Governance. Strong strategy on ungoverned data is the failure mode boards and regulators act on.

Your reading is saved with your email so we can follow up.

7 domains · 14 questions0 of 14 answered

1 Absent2 Ad hoc3 Defined4 Managed5 Optimised

AI Strategy

Is there a clear, value-linked thesis for where AI creates advantage?

1.1Who owns the organisation’s view of AI’s role?

1 = No one · 5 = The board, tied to goals and reviewed on a cycle

1.4Is the expected return from AI defined and tracked?

1 = No expected return defined · 5 = Measured and reviewed on a cycle

Data Foundations

Gated

Is your data good, connected and secure enough for AI to use?

2.2How reliable and well structured is the data AI would use?

1 = Unreliable and unstructured · 5 = Measured, maintained and improved

2.4Are access controls, privacy protections and backups in place?

1 = None · 5 = Enforced, audited and improved

Technology & Tools

Can your systems host AI tools in how work gets done?

3.2How is AI tooling used in day-to-day work?

1 = Not at all · 5 = Embedded and managed across workflows

3.5Who maintains AI tools and manages vendor and model risk?

1 = Nobody · 5 = Managed, with fallbacks

People & Culture

Will your people use AI well, and is the culture ready?

4.1How broad is AI literacy across the organisation?

1 = None · 5 = Broad, measured and sustained

4.2Do leaders use AI themselves and model good practice?

1 = Leaders avoid it · 5 = Leaders model it consistently

Process & Workflow

Is AI embedded as a partner in real workflows?

5.3Is AI output reviewed by a person before it is acted on?

1 = Never · 5 = Oversight enforced and measured

5.4Is the impact of AI on the work measured?

1 = Not measured · 5 = Tracked and reviewed on a cycle

Governance & Risk

Gated

Is AI use controlled, responsible and compliant?

6.1Is there an acceptable-use policy for AI?

1 = No rules; shadow AI · 5 = Enforced, monitored and reviewed

6.3Is someone accountable for AI decisions, with human oversight?

1 = Nobody accountable · 5 = Enforced and reviewed on a cycle

Financial Readiness

Can you fund AI sensibly and prove it pays off?

7.1Is there a budget for AI?

1 = No budget · 5 = Funded and optimised on a cycle

7.3Is the return on AI spend measured?

1 = Never measured · 5 = Tracked to outcomes and reviewed

Your email address

Required. Your reading is saved with it so we can follow up.

14 questions left.