AI Risk Checklists for Better Business Decisions

Support AI vendor review and audit preparation with evidence, risk questions and accountable ownership.

Two resources to structure the review

AI Vendor Risk Checklist

Organise due diligence before committing to a third-party AI tool.

  • Clarify the intended use and information sent to the vendor.
  • Ask about prompt handling, retention, security and contractual limits.
  • Record evidence, gaps and questions for the approval owner.

AI Audit Readiness Checklist

Organise governance and control evidence for an AI risk review.

  • Identify accountable roles and the AI systems in scope.
  • Review monitoring, data lineage and audit trails.
  • Capture gaps and follow-up actions with named owners.

Start with the business decision: what use is being approved, who owns the outcome, and what evidence is needed to challenge, restrict or stop it?

Use with judgment. The current PDFs are version 2 resources. Check their relevance to your organisation, use case and jurisdiction. Checklist completion does not establish security, audit success or regulatory compliance.

Request the checklists

Email is required; first and last names are optional. Receiving occasional AI risk insights is a separate, optional choice.

Email delivery notice: Automatic checklist delivery is being checked. Submitting the form does not confirm that the PDFs have been sent. For checklist access, contact Gary.

AI Risk Checklists Signup

Read the Privacy Policy for how submitted information may be used.