Register the AI systems in scope
Maintain a current inventory before assessing or approving use.
6 systems registeredGovernance lifecycle checklist
Governance lifecycle review
This checklist is derived from the live workspace inventory, governance assessment, guardrails, release gate, roadmap and incident register. Maturity, guardrail and release-gate results remain workspace-level; system cards below measure inventory-profile completeness only.
22%2 of 9 applicable checks complete
Map and register
CompleteOpen inventory
Complete each system profile
Check system type, accountable owner, supplier and data classification are recorded.
6 of 6 profiles completeRecord a governance disposition for each system
Resolve systems still under review; an approval status is not a legal classification.
5 of 6 dispositions recordedRecord an accountable use decision for each AI system
Capture the approver, rationale and conditions; new decisions supersede rather than erase earlier records.
0 of 6 systems have a current governance decisionReview due or expired risk decisions
Risk acceptance and conditional approvals require a review date; reassess decisions when conditions or system use change.
No current decisions recordedReview material AI-system changes before implementation
Assess changes to purpose, data, model/provider, autonomy, affected people and controls; implementation must follow an approval record.
No material changes submittedMaintain monitoring for deployed AI systems
Keep an owner, measurable signal, threshold and review cadence; investigate overdue checks and threshold breaches.
0 of 4 deployed systems have active plans; 0 overdue, 0 latest threshold breaches, 0 active plans awaiting a first readingAssess and treat
Verify evidence for critical governance controls
Only mark evidence verified when it has been reviewed and supports the control claim.
3 of 7 critical controls verifiedConfigure guardrails for the workspace risk tier
Coverage is calculated at workspace level for the currently selected tier.
18 of 21 required controls enabled (86%)Meet the workspace release-readiness gate
The gate reflects the workspace assessment, not an individual system score.
Workspace gate: BlockedOperate and improve
Assign owners to open remediation actions
Every open roadmap item should have a named accountable owner.
0 of 7 open actions assignedTriage and assign all recorded incidents
Route each logged incident, assign an owner and track it through closure.
No active incidents recordedSystem profile completeness
These checks assess whether inventory fields are present. They do not calculate an individual system’s governance score or determine legal applicability.
Clinical Summary Copilot
In-house RAG · Preliminary tier: High-risk · Governance disposition: Approved with limits
4 of 4 profile fields complete: system type, owner, supplier and data classificationHR Screening Assistant
Vendor model · Preliminary tier: High-risk · Governance disposition: Under review
4 of 4 profile fields complete: system type, owner, supplier and data classificationPatient Support Agent
Agent · 4 tools · Preliminary tier: Limited · Governance disposition: Approved with limits
4 of 4 profile fields complete: system type, owner, supplier and data classificationEngineering Code Assistant
SaaS feature · Preliminary tier: Minimal · Governance disposition: Approved
4 of 4 profile fields complete: system type, owner, supplier and data classificationMarketing Copy Generator
SaaS · Preliminary tier: Minimal · Governance disposition: Approved
4 of 4 profile fields complete: system type, owner, supplier and data classificationSentiment on Call Recordings
Vendor model · Preliminary tier: Limited · Governance disposition: Not approved
4 of 4 profile fields complete: system type, owner, supplier and data classificationA readiness checklist supports internal governance coordination. It is not a certification, compliance conclusion or legal applicability assessment.