Checklist

AI Governance & Ethics — Rapid Checklist (Interactive)

An interactive, saveable checklist to rapidly assess essential AI governance controls: allowed uses, data governance, bias & fairness, human oversight, monitoring & incident response, and stakeholder communications. Record owners, residual risk, evidence, and next review date to support follow-up.

Interactive Tool

AI Governance & Ethics — Rapid Checklist

This interactive checklist helps teams quickly assess governance controls for an AI pilot or deployment. For each item, mark whether controls exist, assign an owner, rate residual risk (1 = low — 5 = high), and provide evidence or notes. Save the checklist to record decisions and support follow-up actions.

Has the project documented permitted uses and explicit unacceptable uses (for example: profiling, exclusionary decisions, or other high-risk applications)?
Who is responsible for defining and approving allowed/unacceptable uses? (name or role)
Rate the residual risk if this control is missing.
1.0 10.0
Are data lineage, retention policies, and consent/privacy basis recorded and accessible?
Who owns data controls and compliance for this project?
Rate residual risk related to data quality, consent, or retention issues.
1.0 10.0
Have bias audits, demographic impact assessments, or fairness tests been performed and documented?
Who is responsible for bias and fairness reviews?
Rate residual risk related to fairness and potential disparate impact.
1.0 10.0
Are the decision points where a human reviews, overrides, or approves model outputs defined and documented?
Who is responsible for human oversight and escalation?
Rate residual risk if human oversight is insufficient or unclear.
1.0 10.0
Is there a monitoring plan, alerting, and an incident response workflow for model failures, drift, or harmful outcomes?
Who maintains monitoring systems and leads incident response?
Rate residual risk related to lack of monitoring or slow detection.
1.0 10.0
Is there a plan for informing affected users, partners, or regulators about the system, its limitations, and incidents?
Who leads stakeholder communications and public disclosures?
Rate residual risk related to poor or delayed communications.
1.0 10.0
Provide links to documents, reports, datasets, tickets, or other evidence that support your answers.
Rate overall readiness to operate safely and responsibly (1 = low — 5 = high).
1.0 10.0
After how many months should this checklist be reviewed? Enter a whole number.
Anything else the reviewer should record (open issues, mitigation actions, dependencies).
You can explore this tool now. Sign in or create an account to save your responses and return to them later.
Sign In to Save Create an Account
Make this tool part of your work

Save a personal copy, bring it to your team, or tailor the questions and workflow to fit what you are hungry to improve.

Member customization and team collaboration are coming soon.
Discuss Ask the Librarian

Discussion

Comments and conversation will live here.