Tools
AI Governance Quick Scan
The AI Governance Quick Scan is the fast version of CCA's full readiness assessment. It runs 20 questions instead of 65, one per control domain across the same five pillars: Data Trust, Model Governance, Agent Autonomy, Enterprise Operations, and Responsible AI. It takes about five minutes and gives a directional read on which controls are in place and which are missing, before you commit the time for the full evidence-mapped assessment.
DT
MG
AA
EO
RA
Context
Do you have EU customers, or do you process data on EU residents?
This answer does not change your score. It changes the interpretation shown with your result.
Questions
Frequently asked questions
- How does this relate to the full AI Governance Readiness Assessment?
This scan asks 20 questions, one per control domain, drawn from the same five pillars as the full assessment. The full 65-question assessment at /tools/ai-governance covers all 65 controls across the four lifecycle stages in each pillar. It is the version that maps in depth to NIST AI RMF, ISO/IEC 42001, and the EU AI Act. Run this scan first for a directional read, and run the full assessment when you need the evidence-ready version.
- What are the limits of a 20-question self-scored read?
The scan asks one question for each of the 20 control domains, where the full assessment asks 65 questions across the same domains. It can miss uneven maturity inside a pillar that the full assessment would find. It is also self-reported, and self-assessment tends to score generously. Use the band to decide where to look first. It is not a verified result.
- Who should run this?
It is for anyone who wants a five-minute directional read before committing to the full assessment. A CISO or CTO can use it to decide whether a board review is needed. A PE deal team can use it as an early check on a target's AI posture before deciding whether full diligence is warranted.
- How does the 0-100 scoring work?
Each question uses the same five-level maturity ladder as the full assessment (non-existent, reactive, defined, managed, optimized) mapped to 0, 25, 50, 75, and 100. Your pillar score is the average across its four questions here; your composite band weights all five pillars equally.