Skip to main content

AI Governance & Assurance

AI Governance Assessment

Review how AI is identified, owned and governed, then establish a prioritised plan for the material gaps.

A defined-scope review of organisational AI governance — not technical model testing, certification or a legal opinion.

View relevant evidence — View Relevant Evidence

When this service fits

For organisations that need a clear view of their AI governance position before scaling AI use, answering procurement questions or committing to a programme.

  • AI is in use but nobody has a complete picture

  • Ownership of AI use cases is unclear

  • Customers or procurement are asking how AI is governed

  • Leadership wants to know the position before scaling AI

  • ISO/IEC 42001 or regulatory readiness is being considered

  • Privacy, cyber and technology reviews of AI are disconnected

The service

What the assessment covers — and what it does not

The agreed organisational scope is reviewed against your existing arrangements: where AI is used, who owns it, how use cases are approved, which risks and suppliers are involved and what evidence exists. Where relevant, readiness against ISO/IEC 42001 and applicable regulatory considerations — for example the EU AI Act, where your role and market make it relevant — are included in the criteria.

It is a governance assessment, not technical model testing. Readiness is not certification, and advisory review is not accredited conformity assessment. Findings support accountable decisions; they do not guarantee compliance.

You can commission the assessment on its own. Its findings can inform a later build or managed programme if you choose, but no credits or additional work are implied.

What changes for your organisation

Outcomes the service is built to deliver

  • Agreed organisational scope

    Entities, functions and AI use in scope are confirmed at the outset.

  • Existing arrangements

    Policies, roles, approval routes, risk processes and supplier controls already in place.

  • Inventory baseline

    A first governed view of AI use cases, owners and purpose within scope.

  • Evidence review

    What evidence supports the current position, and where it is thin or missing.

  • Accountability gaps

    Where ownership, decision rights or escalation are unclear.

  • Prioritised recommendations

    Material gaps ranked so effort goes where exposure is greatest.

How we deliver

Assess → Build → Manage → Assure → Improve

  1. Assess

    Confirm scope, gather evidence and review current arrangements.

  2. Build

    Turn findings into prioritised, owned recommendations.

  3. Manage

    Optional — continuing governance is scoped separately if wanted.

  4. Assure

    Report findings and evidence reliability to leadership.

  5. Improve

    Recommendations can inform a later programme.

Improve feeds the next Assess cycle, so evidence stays current.

What you receive

The working records this service produces

Illustrative examples of the registers, records and executive reporting that may support the engagement.

AI Governance Dashboard · Q3 periodIllustrative data — not client data
Overall positionAmber — improving
AI systems registered
16
▲ 3 this period
Impact assessments open / closed
3 / 9
▲ 2 closed
Systems awaiting approval
2
No change
AI issues under review
1
No change

AI risk by level

  • High2
  • Medium3
  • Low2

Controls evidenced

76%

Model reviews due
3
Overdue actions
2
Matters for escalation
1

Illustrative output

AI Governance Dashboard

Ongoing oversight

A recurring view of AI systems, assessments and controls, so AI risk is seen and escalated before it becomes exposure.

What it helps you see

  • AI system inventory and movement
  • Impact assessments and approvals
  • AI risk by level
  • Reviews, actions and escalations

Likely format

Dashboard / reporting view · Supporting registers and evidence records · Executive PDF summary where agreed

AI Inventory BaselineIllustrative data — not client data
Illustrative AI Inventory Baseline
Use caseOwnerPurposeSupplier
Use case AOwner ADefinedYes
Use case BUnassignedUnclearNo

Illustrative output

AI Inventory Baseline

Inventory

A first governed view of AI use in the agreed scope.

What it helps you see

  • AI use cases in scope
  • Owner
  • Purpose
  • Supplier involvement

Likely format

Findings & Accountability GapsIllustrative data — not client data
Illustrative Findings & Accountability Gaps
AreaEvidenceGapRisk
Approval routePartialNo thresholdElevated
Supplier AILimitedNo reviewModerate

Illustrative output

Findings & Accountability Gaps

Findings

What was reviewed, what was found and where accountability is unclear.

What it helps you see

  • Finding
  • Evidence reviewed
  • Gap
  • Risk

Likely format

Prioritised RecommendationsIllustrative data — not client data
Illustrative Prioritised Recommendations
RecommendationPriorityOwnerHorizon
Confirm ownershipHighExecutive sponsorNear term
Define intakeMediumGovernance leadNext period

Illustrative output

Prioritised Recommendations

Plan

Material gaps ranked into a practical plan.

What it helps you see

  • Recommendation
  • Priority
  • Suggested owner
  • Dependency

Likely format

Illustrative structure — not a client document. Exact outputs and formats depend on the agreed scope.

Scope boundaries

What is included, and what is scoped separately

Included in the core service

  • Scoping and evidence request
  • Stakeholder interviews within agreed scope
  • Inventory baseline
  • Evidence and accountability review
  • Findings report with prioritised recommendations
  • Leadership read-out

Separately scoped where required

  • Technical model testing, red teaming or bias evaluation
  • Formal legal opinions
  • Certification or accredited conformity assessment
  • Implementation of recommendations
  • Continuing managed governance

Scope, deliverables and assumptions are agreed in writing before work begins.

Relevant evidence

Relevant governance & assurance capability

This evidence shows related governance, assurance and HealthTech capability. It is not presented as a completed AI governance assessment unless the case says so.

  • Named client · Technology / SaaS / RegTech

    Clini-Hub

    Embedded governance and clinical-safety support since start-up

    NHS AI Toolkit, DSPT, DTAC and clinical-safety governance from start-up

    View the evidence: Clini-Hub

  • Anonymised engagement · Technology / SaaS / RegTech

    A FTSE 100 organisation

    Three-stage governance and audit-readiness plan

    Audit-ready UK policies ahead of a third-party maturity assessment

    View the evidence: A FTSE 100 organisation

  • Named client · Financial Services

    AIG

    Supplier data-governance audit

    Nationwide supplier audit

    View the evidence: AIG

Explore all case studies →Request AI Governance Evidence →

Your IG-Smart team

Specialist expertise, coordinated around your requirement

Subject-matter expertise is paired with a clear client and programme contact from initial scoping through delivery.

  • Subject-matter expert

    Michael Abtar

    LLB (Hons), PG.Dip.Law, Cert. DPO

    View profile

  • Client & programme contact

    Julia Andrade

    Coordinates scope, practitioners, delivery and stakeholder communication.

    View profile

Buyer decisions

Questions before you engage

Do we need a retainer to commission this?

No. The assessment is a defined-scope engagement. Findings can inform a later programme if you choose, without automatic credits or additional work.

Does it test our AI models?

No. It assesses governance — ownership, decisions, risk processes and evidence. Technical model testing is separately scoped where required.

Does it cover ISO/IEC 42001 or the EU AI Act?

Where relevant to your scope, role and markets, readiness criteria can be included. Readiness is not certification, and the EU AI Act does not apply to every UK organisation.

What do you need from us?

Access to the people who own AI use, existing policies and records, and supplier information within scope. An evidence request is agreed at the start.

Who acts on the findings?

Your organisation. Recommendations are prioritised with suggested owners; decisions and implementation remain with management.

Investment

Starting investment: £12,500 + VAT

Typical investment: £12,500–£15,000 + VAT. Scope, deliverables, assumptions and fees are agreed in writing before work begins.

The fee depends on

  • Organisational scope and entities
  • Number of AI use cases
  • Evidence maturity
  • Standards or regulatory criteria included
  • Stakeholder availability

Procurement or supplier-assurance review?

Visit our Trust Centre

Ready to move forward?

Need a clear view of how AI is governed today?

Not sure which service applies? Find the Right Service

  • Still defining your requirement?

    Discuss an AI Governance Assessment

    Discuss the requirement, risk, scope and the right engagement model with an experienced practitioner.

    Discuss an AI Governance Assessment

  • Have a defined scope, tender or RFP?

    Submit an AI Assessment Requirement

    Share a defined requirement, RFP, tender, statement of work or existing scope for senior review.

    Submit an AI Assessment Requirement

  • Procurement or supplier assurance

    Prepare for Procurement Review

    Access company, security and assurance information for supplier review, with controlled evidence available on request.

    Open Trust Centre