How mature is your AI governance?

Eight domains. A clearer starting point.

Rate each statement according to the evidence currently available. Your answers stay in this browser session and are not submitted to MAST.

01 / AI inventory

Do you maintain an inventory of AI systems with named business owners?

02 / Accountability

Are AI decision rights, responsibilities and escalation routes documented?

03 / Risk & impact

Are risk and stakeholder impact assessments completed and reviewed?

04 / Lifecycle controls

Are design, validation, approval, change and retirement checkpoints defined?

05 / Data governance

Are data sourcing, quality, privacy and retention controls established?

06 / Third-party AI

Are AI suppliers assessed and contractual requirements reviewed?

07 / Monitoring & incidents

Are AI performance, changes and incidents monitored with assigned owners?

08 / Assurance & competence

Are governance controls reviewed and staff trained for their responsibilities?