Seven questions about AI your customers and board will ask. Can you answer them?
Most organizations already run more AI than anyone has approved. This assessment shows where your exposure sits today: what’s in use, what data it touches, who owns the risk, and what you could prove to an auditor tomorrow.
25 questions across six areas: Governance, Security, Compliance, Third-Party Risk, Human Oversight, and Model & Agent Monitoring. Each answer is scored on a five-level maturity scale, and each question maps to the frameworks your customers and regulators reference.
About 8 minutes. You get an exposure index, a radar of all six areas, the answer to each of the seven questions above, your top five priority exposures with specific remediation steps, and a PDF report.
Mapped to
Built by DISC InfoSec, ISO 42001 and ISO 27001 lead implementers who have taken a client through ISO 42001 certification on the first audit attempt.
Exposure by area
Maturity from L1 (Initial) to L5 (Optimizing). The dashed ring marks L3 Defined, the minimum most customers and auditors expect to see evidenced.
The seven questions, answered
Based on your responses, here’s how well your organization could answer each question today, with evidence.
Top five priority exposures
Ranked by distance from the L3 baseline and by how much each gap typically drives incidents, regulatory findings, or lost deals.
What each area tells us
Close the gaps that matter first.
DISC InfoSec runs a 7–10 day AI Governance Quick-Start: AI and agent discovery, shadow AI and data exposure review, a risk register with named owners, and a remediation roadmap mapped to ISO 42001, NIST AI RMF, and the EU AI Act. If certification is the goal, we take you the rest of the way.