MENUCLOSE
AI GOVERNANCE READINESS ASSESSMENT
Understand your AI exposure before deciding what comes next.
A fixed-scope assessment that uncovers observable shadow AI, identifies material governance gaps, and gives leadership a practical ninety day action plan.
No ongoing engagement required.
The problem
AI adoption is moving faster than organizational visibility.
Employees are using approved tools, embedded AI features, and unapproved applications across everyday workflows. Most leadership teams cannot confidently answer:
- Which AI tools are actually in use?
- Where is sensitive information being shared?
- Are policies being followed and enforced?
- What evidence could we provide to a board, client, investor, or auditor?
- Which risks require action now?
Tallin turns those questions into an evidence-based plan.
What you receive
A clear picture of where you stand, and what to do next.
- AI usage inventory
- Approved tools, AI embedded in software you already run, and observable shadow AI. Business owners, use cases, access methods, and cost where it is available. Every finding carries a confidence level.
- Exposure register
- Material risks prioritized by severity and business impact. Unsanctioned tools, likely movement of sensitive information, high risk workflows, and the vendor retention and training terms behind them.
- Governance gap analysis
- The difference between written policy, actual practice, and enforceable controls. This separates a policy problem from an enforcement problem.
- Maturity assessment
- Current capability across ownership, acceptable use, tool approval, identity and access, data handling, training, human oversight, monitoring, testing, and evidence.
- Ninety day roadmap
- Sequenced actions with named owners, priorities, dependencies, effort and cost bands, target dates, and measures of success.
- Executive readout
- A concise summary suitable for boards, clients, investors, and diligence requests, presented in a working session with your leadership team.
How it works
Fixed scope. Defined outcome. Four to six weeks.
- 01 Discover
- Review available records, systems, policies, and stakeholder input to build an evidence-based view of AI usage.
- 02 Assess
- Identify material exposure and evaluate the organization's governance capabilities across the control areas above.
- 03 Prioritize
- Separate urgent risks from longer-term improvements and assign clear ownership to each.
- 04 Present
- Deliver the findings, the executive summary, and an actionable ninety day roadmap in a leadership readout.
The assessment identifies observable AI usage based on the evidence and systems available. It does not claim to detect every use of personal accounts, devices, or unobservable networks. Every finding carries a confidence level, and gaps in visibility are stated explicitly rather than left implied.
Scope and fee
One fixed fee, agreed before the work starts.
- AI Governance Readiness Assessment
- $25,000. Four to six weeks. The full engagement described above, ending in the executive readout.
- AI Exposure Baseline
- $10,000. Two weeks. An evidence-based inventory of authorized and observable unsanctioned AI from selected sources, prioritized exposure findings, and a thirty day action brief. It does not include comprehensive shadow AI discovery, the maturity assessment, or the ninety day roadmap.
Payment is half at kickoff and half on delivery. Larger organizations and multi business unit scopes are quoted individually. The deliverables stand on their own. If you start an annual Tallin Core or Enterprise subscription within 90 days of the final readout, 50% of the assessment fee becomes a non-cash account credit applied to subscription invoices: $5,000 after the AI Exposure Baseline or $12,500 after the AI Governance Readiness Assessment.
Afterward
The assessment is valuable on its own.
You can implement the roadmap internally, work with your existing providers, or ask Tallin to help. There is no requirement to purchase an ongoing engagement. The assessment uses the same Tallin evidence model as Core, and your workspace, connected sources, evidence mappings, and findings are structured to carry forward.
If you choose continuous coverage, Tallin begins from that established foundation instead of repeating discovery and setup. Start annual Tallin Core or Enterprise within 90 days of the final readout and 50% of the assessment fee becomes a subscription credit.
Two starting points
One governance system. Two ways to begin.
Already know you need ongoing governance? Begin with Tallin Core. Need a clear starting point first? Choose an assessment. Both use the same evidence foundation, so continuing does not mean starting over.
Get started
Start with a defensible view of your AI environment.
In four to six weeks, your leadership team will know what AI is being used, where the material exposure lies, and what to do next.