AI is already changing how employees work. But do you know which tools are being used, what data is being shared and whether the right controls are in place? Take the PSTG AI Governance Gap Analysis to understand where your organisation stands and which areas may need attention.
Takes around 5 minutes. No technical knowledge required.
The operating model, the five pillars and the reporting framework, all in one short read.
An indicative view of where your AI governance stands today.
The governance areas with the biggest gaps.
What to fix first, in plain English.
See your result straight away. No form to fill in first.
Employees may already be using Microsoft Copilot, ChatGPT, Claude, meeting assistants and AI-enabled apps before formal policies, security controls or approval processes are in place. None of it makes a noise, so the gaps tend to show up after something has gone wrong.
Free AI services and browser tools get adopted team by team. Most organisations can’t say for certain which ones are in use.
Without clear rules, customer, personal and confidential information ends up pasted into tools you haven’t assessed.
AI works with your existing permissions. If access to SharePoint and Teams is too broad, AI makes that easier to find.
IT, security, data protection and the business each assume someone else has it covered.
A policy only works if people know it exists, understand it and know who to ask.
“The question usually isn’t whether your people are using AI. It’s whether you’d know what they’ve shared with it.”
Three short questions per area. Answer Yes, Partly, No or Not sure. “Not sure” is a useful answer, because a visibility gap is a gap too.
Who approves, manages and reviews AI.
Which tools are allowed, and what can be shared.
What’s actually being used, approved or not.
What data can be used with AI, and how it’s classified.
Whether access controls are ready for tools like Copilot.
How new tools and providers get assessed.
Matching the level of review to the level of risk.
Whether people know the rules and how to check AI output.
A clear route when something goes wrong.
Keeping governance current as AI changes.
One governance area at a time. Go back and change answers whenever you like.
Your maturity band, three priority areas and next steps, shown straight away.
If you want it, we’ll send a personalised gap report with priority actions.
Book an AI Governance Discovery Workshop to turn gaps into a practical roadmap.
Answer based on what you know today. There are no right or wrong answers, and nothing you enter here is confidential business data.
Your result is indicative, based on your answers. It shows where to focus first, not a pass or fail.
Many of the core foundations appear to be in place.
Good foundations exist, but some areas need strengthening.
AI adoption may be moving ahead of governance controls.
You may have limited visibility or control over current AI usage.
We help organisations put the right controls around AI without slowing adoption down. We work alongside your IT, security, data protection and business teams, starting with the gaps that carry the most risk.
Microsoft Gold Partner
ISO 27001 aligned
NHS · Finance · SME
AI Governance
Operating model, policy, tool approval, use-case risk assessment and ongoing reviews.
Copilot Health Check
Permissions, oversharing and Microsoft Purview controls reviewed before or after rollout.
AI Training
Practical awareness training so employees know the rules and how to check AI output.
AI Support Services
Incident reporting, escalation and quarterly maturity reviews that keep governance current.
No. It’s an indicative self-assessment that shows where gaps may exist. It isn’t a security, compliance, legal or regulatory assessment. A PSTG review can validate your controls properly.
xx
xx
xx
xx
xx
Complete the assessment, understand your priorities and speak to PSTG about a practical governance roadmap.
Say ‘yes’ to a practical partnership designed around what your organisation needs next.
Reduce risks and get rapid expert support.
Lower costs and streamline your Microsoft environment.
Build a roadmap that supports long-term growth & compliance.