Assessments

AI Cyber Risk Board Readiness Assessment

Score six cyber controls your board must be able to evidence. Eighteen questions across six dimensions, about ten minutes.

Register for free to access this tool. It takes less than a minute.

Try it now

No login needed to try it — you'll be asked for your details to see the result.

AI Generated - Product Image AI Cyber Risk Board Readiness Assessment

What it is

Eighteen questions across six control dimensions, each scored and interpreted on its own so you see which controls are evidenced and which are asserted. Answer for what you could produce on request today, not for what policy says should exist. Anything you are unsure of scores as a gap, because uncertainty at board level is the same as absence.

It is for the person who has to answer to a board or an audit committee: the CISO, the IT or security lead, and the risk or compliance owner preparing a review. Which EU regimes turn these into obligations depends on you. NIS2 binds essential and important entities in covered sectors, DORA binds financial entities in scope, and Article 15 of the EU AI Act sets accuracy, robustness and cybersecurity requirements for high-risk AI systems. Map only the ones that bind you and treat the rest as awareness.

How it works

Work through the six dimensions and answer each question honestly, including the ones where the honest answer is that nobody has checked. Each dimension scores out of twelve and returns its own band, so a strong identity programme does not disguise an untested incident response plan. Take the weakest dimensions into your next review with an owner, a remediation date and the residual risk the board is accepting until then.
  1. Answer for evidence, not intent. If you could not produce it this week, it is not in place.
  2. Read each dimension separately. The weakest band is the one that matters.
  3. Turn every gap into an owner, a date and an accepted residual risk before the next board meeting.

Pricing and Access

Try it now

No login needed to try it — you'll be asked for your details to see the result.

Your Tool

The KIDS Act gates AI chatbots What Spain’s First AI Agent Data Breach Actually Proves The ECB puts a number on AI dependence Microsoft’s AI Code Of Conduct Puts You Second The Data Act now bites at design stage CRA reporting starts today, portal too Compute Sovereignty Is Not About Where The Building Is Mistral raises €3bn with EU fund co-lead A model that can write its own exploits

Privacy & Data Protection

We take your privacy seriously. Your data is stored encrypted on EU servers. We collect only what is needed to deliver your purchase and run your account. We never sell or share your information with third parties. Read our Privacy Policy for details.

Related Content

What comes next

Ready to go deeper? Train your strategic ‘Human in the Loop

Related Training
Scroll to Top

Request a quote