How well is your organisation governing AI?

AI is already changing how employees work. But do you know which tools are being used, what data is being shared and whether the right controls are in place? Take the PSTG AI Governance Gap Analysis to understand where your organisation stands and which areas may need attention.

Takes around 5 minutes. No technical knowledge required.

YOUR FREE RESULT

What you’ll get in five minutes

The operating model, the five pillars and the reporting framework, all in one short read.

Your maturity band

An indicative view of where your AI governance stands today.

Your three priority areas

The governance areas with the biggest gaps.

Three practical next steps

What to fix first, in plain English.

See your result straight away. No form to fill in first.

THE PROBLEM

AI adoption is moving faster than governance

Employees may already be using Microsoft Copilot, ChatGPT, Claude, meeting assistants and AI-enabled apps before formal policies, security controls or approval processes are in place. None of it makes a noise, so the gaps tend to show up after something has gone wrong.

Tools nobody approved

Free AI services and browser tools get adopted team by team. Most organisations can’t say for certain which ones are in use.

Data going where it shouldn’t

Without clear rules, customer, personal and confidential information ends up pasted into tools you haven’t assessed.

Copilot sees what your users can see

AI works with your existing permissions. If access to SharePoint and Teams is too broad, AI makes that easier to find.

Nobody owns it

IT, security, data protection and the business each assume someone else has it covered.

Rules nobody’s been told

A policy only works if people know it exists, understand it and know who to ask.

“The question usually isn’t whether your people are using AI. It’s whether you’d know what they’ve shared with it.”

WHAT WE’LL CHECK

10 governance areas. 30 questions. Plain English.

Three short questions per area. Answer Yes, Partly, No or Not sure. “Not sure” is a useful answer, because a visibility gap is a gap too.

01

AI Ownership and Accountability

Who approves, manages and reviews AI.

02

AI Policy and Acceptable Use

Which tools are allowed, and what can be shared.

03

Shadow AI and Tool Visibility

What’s actually being used, approved or not.

04

Data Protection and Sensitive Information

What data can be used with AI, and how it’s classified.

05

Security, Permissions and Access

Whether access controls are ready for tools like Copilot.

06

AI Tool and Supplier Approval

How new tools and providers get assessed.

07

AI Use Cases and Risk Assessment

Matching the level of review to the level of risk.

08

AI Training and Employee Awareness

Whether people know the rules and how to check AI output.

09

AI Incidents and Reporting

A clear route when something goes wrong.

10

Monitoring, Review and Ongoing Governance

Keeping governance current as AI changes.

HOW IT WORKS

A useful answer in five minutes

Answer 30 questions

One governance area at a time. Go back and change answers whenever you like.

See your result

Your maturity band, three priority areas and next steps, shown straight away.

Get the detailed report

If you want it, we’ll send a personalised gap report with priority actions.

Talk it through

Book an AI Governance Discovery Workshop to turn gaps into a practical roadmap.

THE ASSESSMENT

Start your AI Governance Gap Analysis

Answer based on what you know today. There are no right or wrong answers, and nothing you enter here is confidential business data.

WHAT YOUR RESULT MEANS

Four levels of AI governance maturity

Your result is indicative, based on your answers. It shows where to focus first, not a pass or fail.

Strong Governance Foundation

Many of the core foundations appear to be in place.

Governance Developing

Good foundations exist, but some areas need strengthening.

Significant Governance Gaps

AI adoption may be moving ahead of governance controls.

Immediate Governance Attention Recommended

You may have limited visibility or control over current AI usage.

WHY PSTG

Practical AI governance, not a shelf document

We help organisations put the right controls around AI without slowing adoption down. We work alongside your IT, security, data protection and business teams, starting with the gaps that carry the most risk.

Microsoft Gold Partner

ISO 27001 aligned

NHS · Finance · SME

AI Governance

Operating model, policy, tool approval, use-case risk assessment and ongoing reviews.

Copilot Health Check

Permissions, oversharing and Microsoft Purview controls reviewed before or after rollout.

AI Training

Practical awareness training so employees know the rules and how to check AI output.

AI Support Services

Incident reporting, escalation and quarterly maturity reviews that keep governance current.

Questions IT leaders usually ask

No. It’s an indicative self-assessment that shows where gaps may exist. It isn’t a security, compliance, legal or regulatory assessment. A PSTG review can validate your controls properly.

xx

xx

xx

xx

xx

Understand your AI governance gaps before they become business risks.

Complete the assessment, understand your priorities and speak to PSTG about a practical governance roadmap.

Let’s Get You Back in Control

Say ‘yes’ to a practical partnership designed around what your organisation needs next.

Stabilise today

Reduce risks and get rapid expert support.

Optimise for tomorrow

Lower costs and streamline your Microsoft environment.

Plan ahead

Build a roadmap that supports long-term growth & compliance.