Frameworks & Standards Followed
NIST AI RMF + GenAI Profile ISO/IEC 42001 ISO/IEC 23894 OECD AI Principles Colorado AI Act Ready
Aidor, your AIMS Charter guide
Aidor Hi. Answer honestly, no wrong answers here.
Step 1 of 3 · Assess

See where you are today, in 2 minutes.

Answer twelve fast multiple-choice questions about your team's AI posture. We generate a scored AI Risk Snapshot you can forward to your CEO, CFO, or board. No AI-governance expertise required. Free. No credit card. Yours to keep.

~2 min · 12 questions · PDF Snapshot
New to AI governance? Read a 60-second primer first

What is AI governance?

How your company decides which AI tools to use, who is responsible when AI makes a decision, and how you prove your AI use is safe. Increasingly, boards, regulators, and enterprise customers ask about this. If your CFO or Chief Legal Officer has recently asked about AI, they're asking about governance.

Which frameworks matter?

You don't need to memorize them, but here are the big ones you'll see:

  • NIST AI RMF - the US voluntary framework for managing AI risk. Most US companies reference it.
  • ISO/IEC 42001 - the international certification for AI Management Systems (the "ISO/IEC 27001 for AI"). AWS, Microsoft, Anthropic, and IBM are all certified.
  • EU AI Act - EU law taking effect in stages through 2027. Applies to anyone selling AI-enabled products in the EU.
  • Colorado AI Act (SB 205/SB 26-189) - first US state AI law. SB 205 was repealed and replaced by SB 26-189, effective January 1, 2027, covering notice and explanation rights for consequential automated decisions.

What is ISO/IEC 42001 certification?

An independent audit that proves your AI governance is real. Certification bodies like Schellman and BSI conduct the audit. A certified organization can point at the certificate when customers, regulators, or investors ask "is your AI safe?" It's becoming a vendor trust signal in enterprise RFPs.

What is cyber insurance and why does it matter here?

Insurance that covers financial losses from cyber incidents. Increasingly, insurers ask about AI use because AI creates new risks (data leakage, model errors, biased outputs). Companies with documented AI governance may qualify for lower premiums because their risk is easier for insurers to price. High Intent Digital helps translate your Charter into the format specialty AI carriers accept. We share program details on a consultative call.

What is an AIMS?

AI Management System. A structured set of policies, roles, controls, and evidence that governs how your company uses AI. ISO/IEC 42001 is the standard for AIMS. Your AI Risk Snapshot is the entry point to an AIMS; the paid platform builds it out.

You're ready. Close this and take the Snapshot when you are. We'll explain everything else as it comes up.