Governing the AI already in use

Downloads

Files you keep and edit: PDF, Excel, Word or PowerPoint. Most show part of the file before you ask for it.

• Register
  LLM Model-Risk Register
  A spreadsheet register of LLM failure modes per feature, scored by likelihood and impact, with controls and owners.
• Checklist
  AI-Dependency Vetting Checklist
  A checklist for vetting a package an AI coding assistant suggested, from whether it exists to its license and CVEs.
• Pull request checklist
  AI Code Review Gate
  Acceptance criteria for AI-generated code, to paste into a pull request template so no change merges unread.
• Policy and checklist
  AI-Generated-Code Debt Guardrails
  Team guardrails that keep AI-generated code reviewable, tested and owned, with a one-page policy summary.
• Policy template
  AI Acceptable Use Policy Template
  A two-page employee AI policy to fill in: approved tools, data by classification, prohibited uses, review and disclosure, plus a manager FAQ.
• Worksheet
  AI Agent Autonomy Matrix
  Score each action an AI agent can take on reversibility, blast radius and data sensitivity, and set its autonomy level and the controls it needs.
• Playbook
  AI Incident Response Playbook
  Six AI incident types, severity levels, the first hour, roles, the evidence to keep, notification duties with citations, and a tabletop scenario.

Online tools

Fill in the page and get the result on screen. No account needed.

• Checklist
  AI Governance & Ethics Checklist
  Ensure responsible AI development and deployment across your organization.

Apps

Enter your situation and get the analysis back: a score, a draft or a plan. They run with a CIOPages account.

• App
  Shadow AI Exposure Register
  Inventory the AI-built apps and automations sprawling across your org, score each on data, blast radius, and ownership, and assign a disposition before they become incidents.
• App
  AI Coding Governance Policy Builder
  Generate a tiered, board-ready acceptable-use policy for AI coding tools — calibrated to your industry, risk appetite, and the data your teams touch.

Other sets

• Management consulting tools for CIOs
• Deciding where AI goes
• Cutting cloud and SaaS spend
• Buying AI: vendors and models
• Buying technology without regret
• AI regulation and risk
• Architecture decisions that hold up
• Technical debt you can show the CFO
• Security platform evaluations
• Running IT like an investment portfolio
• Org design and decision rights
• The first 100 days as a CIO
• Board and budget season
• Incidents and resilience