PRACTICAL GUIDE | Free download · 21-page PDF · Fillable forms

AI Governance Guide for Businesses

Assess how your company uses AI with a checklist of 24 controls, six practical tests, and a 90-day action plan. It includes fillable templates to document evidence, assign responsibilities, and prioritize improvements.
Mockup_Guide_Governance in the Age of AI_Bismart

How Can You Implement AI Governance in Your Company?

A system that retrieves documents and one that modifies orders require different controls. To decide which controls to implement, your company must clearly define what each system can do, who is responsible for it, and how to respond when something goes wrong.

This guide helps you review these issues in an organized manner, from the data used by AI to permissions, approvals, and evidence of its performance.

What will you find in the guide?

- A checklist of 24 controls

Review the key aspects of each use case: purpose, data, definitions, results, permissions, and oversight. Identify what has been verified and what needs attention.

- An autonomy matrix for AI agents

Distinguish between retrieving information, preparing drafts, modifying data, and executing actions. Assess which permissions and authorizations each level requires.

- Six practical control tests

Test how the system responds to unauthorized access, malicious instructions, changes made after approval, or a suspension with pending tasks.

- A form for documenting approval

Records the person responsible, the authorized scope, outstanding risks, and the evidence supporting the decision.

- A 90-day work plan

Organize the initial steps to review a priority case, implement controls, and establish a follow-up process.

- A guide to connecting business, data, and technology

Intended for business, data, technology, security, and complianceleaders who need to assess how AI is used in their organization.

It is useful both for reviewing systems that are already in operation and for preparing new deployments or expanding the autonomy of agents.

ai-governance-checklist-preview-bismart

Start evaluating a use case for your company


Check which controls are in place, document the evidence, and identify areas for improvement using the fillable checklist in the guide.

Who is this guide intended for?

It is intended for business, data, technology, security, and compliance leaders who need to review AI systems currently in use, prepare for new deployments, or expand the autonomy of their agents.

Start with a use case from your company

Download the guide and see if you can answer these three questions:

  • Who has the authority to approve or halt the system?
  • What data and actions are permitted?
  • What evidence demonstrates that its controls are working?

Download the AI Governance Guide for Free

Frequently Asked Questions About the AI Governance Guide

What does the AI governance guide include?

The guide includes a checklist of 24 controls, an autonomy matrix for AI agents, six practical tests, a form for documenting the approval of each use case, and a 90-day work plan. These tools help you identify gaps, assign responsibilities, and prioritize improvements.

Who is this guide intended for?

It is intended for business, data, technology, security, and compliance leaders who are involved in the selection, development, or oversight of AI systems. It allows participants to address the same use case from the perspective of each team’s responsibilities.

Is this useful if my company already uses artificial intelligence?

Yes. You can use it to review systems that are already in operation, check their permissions, and identify any outstanding controls. It's also useful before deploying a new solution or expanding the capabilities of an AI agent.

Do I need technical knowledge to use it?

You don't need to know how to code to use the guide. The questions and tools allow you to review objectives, responsibilities, and usage limits. To verify controls such as access, logging, or the revocation of permissions, you'll need the technical team's assistance.

Does the guide help ensure compliance with the AI Regulation?

The guide helps organize responsibilities, controls, and evidence that can support compliance efforts. It does not certify compliance with the AI Regulation nor does it replace a legal assessment of the obligations applicable to each system and organization.

For more information on the AI Regulation, you can download the AI Act Guide.

Is the download free?

Yes. Fill out the form on this page to download the guide as a PDF for free.

Can the templates in the guide be filled out?

Yes. The PDF includes fillable fields for recording the status of controls, evidence, improvement actions, and the approval of a use case.