AI Governance Playbook Generator™

NIST AI RMF · ISO/IEC 42001 · EU AI Act

1 · Business Profile & Environment

Organisation Business / organisation name * Company website * Industry / sector Headcount Primary operating jurisdiction(s)

EU / EEA United Kingdom United States Canada Other / global

What the business does (one or two lines) Primary customer type

Data & regulatory environment Types of data the AI may touch

Personal data (PII) Health data (PHI) Financial / payment data Biometric data Children's data Confidential / IP Employee / HR data Public / non-sensitive only

Regulations & standards in scope

GDPR (EU) UK GDPR / DPA 2018 EU AI Act CCPA / CPRA PIPEDA (Canada) HIPAA PCI-DSS SOC 2 ISO 27001 Sector-specific None / unsure

AI ambition & use cases Current AI maturity Planned / current AI use cases

Customer chatbot / assistant Internal productivity Content generation Document / data analysis Decision support / scoring Coding assistant Agentic workflow automation Autonomous agents

AI system types in scope

Third-party SaaS tools Foundation-model APIs RAG over internal data Fine-tuned / custom models Agentic systems w/ tool access

For agents, what can they act on? (if using agentic systems)

Read-only retrieval / search Send emails / messages Create / modify records (CRM, ERP, files) Trigger payments / financial actions Execute code / call external APIs

AI Governance Readiness Top AI Objectives or Concerns * Existing governance in place

Infosec policy Privacy program DPO / privacy lead Acceptable-use policy Vendor risk process Incident response plan Existing AI policy None of the above

In-house technical capability Risk appetite for AI Cloud / hosting environment (optional) AI Platform (optional) Executive Sponsor / Governance Owner (optional)

One step before your playbook

Enter your details to generate and download your AI Governance Playbook.

Full name * Job title * Work email * I agree that my submitted data is being collected and stored. View our Privacy Policy. *

By continuing you agree to be contacted by IRM Consulting & Advisory about your Cybersecurity and AI Governance needs.

2 · Playbook, Review, Revise & Export

The document below is fully editable. Click into any text to revise wording, add notes, or remove sections before you export and finalise.

DISCLAIMER - Generated by the IRM AI Governance Playbook Generator™ · Aligned to NIST AI RMF, ISO/IEC 42001 & the EU AI Act · This is a DRAFT Report for professional review, not legal advice. We recommend you seek advice from a Virtual CISO.