Question 1

What is the AI Governance Readiness Assessment?

Accepted Answer

A free, ungated self-assessment from iqontree. It first classifies your AI use by impact, then scores your governance readiness against the four functions of the NIST AI Risk Management Framework — Govern, Map, Measure and Manage — and returns a downloadable report with the actions that close your gaps.

Question 2

Which framework is it based on?

Accepted Answer

The NIST AI Risk Management Framework is the backbone, cross-walked to ISO/IEC 42001 as the certification target, the EU AI Act for the impact-tiering concept, and SDAIA AI Ethics Principles with PDPL regionally. NIST AI RMF is used because it is function-based, voluntary and non-certifiable, so a low score is never a failed certification.

Question 3

Does it tell me which laws apply to my organisation?

Accepted Answer

No. The report describes regimes commonly in scope for organisations of your profile, as general information. It is not a determination of what applies to you and it is not legal advice. The impact tier is iqontree's own scale for deciding which questions apply — not a legal classification of your systems.

Question 4

Do I have to give my contact details to get the report?

Accepted Answer

No. The assessment runs entirely in your browser and the report downloads without any contact form. The site sets no cookies, runs no analytics and tracks nobody.

Question 5

How long does it take?

Accepted Answer

About five minutes. Two questions about your organisation, five that classify your AI use by impact, then between eight and ten readiness questions depending on that impact tier. Questions that do not apply at your tier are excluded from the score rather than counted as zero.

How well governed is the AI you already run?