# Governance Readiness Assessment Worksheet

Score each item from 0 to 3.

- 0 = not present
- 1 = informal
- 2 = defined but inconsistent
- 3 = active and repeatable

## Section 1: Ownership

- A named governance lead exists.
- Roles for approval, training, and escalation are defined.
- Managers understand their enforcement role.

## Section 2: Tool visibility

- Approved tools are documented.
- Unapproved tools can be identified.
- New tools have a review path.

## Section 3: Data handling

- Data classes are defined.
- Staff know what data may not enter AI systems.
- Restrictions are enforced in practice.

## Section 4: Output review

- Review requirements exist by use case.
- External-facing use requires review.
- High-impact decisions are not automated without oversight.

## Section 5: Training

- Staff received training.
- Managers reinforce training.
- Training is refreshed on a schedule.

## Section 6: Monitoring and incidents

- Violations can be reported.
- Incidents have a response path.
- Governance is reviewed periodically.