Enterprise AI Governance & Risk Kit

Twelve documents built to work together, from the first policy to board reporting. They point to each other, so risk tiers, approvers, review cycles and KPIs stay consistent across the kit.

• AIG-GDE-00 Setup Guide, in PDF: kit map, approval flow by risk tier, RACI, 90-day rollout and KPIs
• AIG-POL-01 AI Acceptable Use Policy, in Word and PDF: permitted, restricted and prohibited uses, data classes and approved tools
• AIG-FRM-02 AI Vendor Due-Diligence Questionnaire, in Word and PDF: 51 questions in 11 weighted sections, with 13 knock-out questions
• AIG-FRM-03 AI Use-Case Intake Form, in Word and PDF: Parts A to H, from request and risk screening to the approval decision
• AIG-CHK-04 Human Oversight Checklist, in Word and PDF: 29 controls in 7 areas, with 7 go-live blockers
• AIG-PLN-05 AI Incident Response Plan and Report, in Word and PDF: SEV-1 to SEV-4, contact matrix, notification timelines, report form and tabletop exercise
• AIG-FRM-06 Employee AI Training Acknowledgment, in Word and PDF: AI literacy programme and annual acknowledgment
• AIG-REG-01 AI System Inventory, in Excel: register with automatic review dates and a live dashboard
• AIG-REG-02 AI Risk-Classification Matrix, in Excel: risk tiering, risk register and heat map
• AIG-REG-03 AI Vendor Due-Diligence Scorecard, in Excel: weighted scoring and comparison of up to three vendors
• AIG-DCK-01 AI Governance Programme Overview, in PowerPoint and PDF: a 16-slide briefing for the executive team and board
• AIG-LIC License Terms, in PDF

Questions buyers ask

What does the kit cover?

Twelve documents that take AI use from policy to board reporting: an acceptable use policy, a use-case intake form and risk classification matrix, a vendor due-diligence questionnaire and scorecard, a human oversight checklist, an incident response plan, a staff training acknowledgment, an AI system inventory, a 16-slide executive deck, and a setup guide with a 90-day rollout plan.

Which laws and standards is it aligned to?

The EU AI Act, ISO/IEC 42001, the NIST AI Risk Management Framework, ISO/IEC 27001, GDPR, the UAE Personal Data Protection Law, the Saudi PDPL, and DIFC and ADGM data protection rules. The references are for orientation; have the final documents reviewed by qualified local counsel.

How do we roll it out?

The Setup Guide sets out a 90-day plan: approve the policy and name the owners, register the AI systems you already use, then send every new use case through intake and risk tiering. It includes the approval flow for each risk tier, a RACI and KPIs.

Is the kit better value than the single documents?

Bought separately, the eight single products cost AED 1,792. The kit costs AED 1,299 and adds the Setup Guide, which is only available in the kit.

Do we need this if staff only use public AI tools such as ChatGPT or Copilot?

Yes. That is where most AI risk starts: company or customer data pasted into public tools. The acceptable use policy sets which tools and data classes are allowed, and the inventory records each tool, its owner and its next review date.

Can we edit and rebrand the documents?

Yes. Policies and forms come in editable Word with PDF copies, the registers in Excel and the deck in PowerPoint. One purchaser may adapt, rebrand and share them inside their own company; resale and redistribution are not allowed.

Licence: one purchaser downloads the files and may use, adapt, rebrand and share them inside their own company. No resale or redistribution. Full terms are in the AIG-LIC License Terms included with your download.

A template, not legal advice. References to the EU AI Act, GDPR, the UAE PDPL, the KSA PDPL, DIFC and ADGM rules, ISO/IEC 42001, ISO/IEC 27001 and the NIST AI RMF are for orientation only; have the final documents reviewed by qualified local counsel.