Tools · AI governance

AI governance target

Six rings that hold from the inside out, on a floor of people who understand what they use. Rate each control on its real evidence and find out which ring your organization is stuck on.

Direct answer

What does the AI Governance Target measure?

It measures whether your organization governs artificial intelligence in the right order: leadership mandate first, then inventory and risk, data, output quality, agents and monitoring, all resting on a base of trained people.

There are 34 controls rated on a 0–4 scale. An outer ring does not count if the inner one fails, because that is how risk behaves in practice. It is free, requires no sign-up, and your answers are stored only in your browser.

Self-assessment

Rate your organization ring by ring

It opens with a fictitious example so you can see how the target reads. Press “Start assessing my company” to answer with your own data.

How it works

Six rings from the inside out, on a floor

Your organization’s level is the last resolved ring counting from the center. A ring holds when it reaches 65% and has no nonexistent controls.

1 · Mandate and accountability

Leadership decides what AI is used for, within which limits, and who answers for it.

2 · Inventory and risk

Which AI is used, where, with which vendor and how much risk each case carries.

3 · Trusted data

Provenance, measured quality, one shared meaning and legitimate use of data.

4 · Defensible output

Answers that are tested, protected and explainable to a customer or an auditor.

5 · Bounded agents

Machine permissions that are clear, limited, logged and revocable.

6 · Monitoring and continuity

Watch, respond, recover and demonstrate what was done.

Floor · People and culture

Role-based training, acceptable use, AI-literate leadership and a reporting channel.

01

Describe your organization

Industry and size give context to the report; nothing is sent to any server.

02

Rate on evidence

From 0 (nonexistent) to 4 (measured). Rate what you can prove, not what is planned.

03

Assign owners

A named person per ring, and whether it was reviewed or drilled in the last 12 months.

04

Take the result to the committee

Copy the summary, print it to PDF or review it with LandoHOUSE.

Reference frameworks

Built on recognized standards

Each control points to where you can go deeper. The target is a guide: it does not replace an audit or a certification.

ISO/IEC 42001:2023

AI management system: leadership, risk, Annex A controls and continual improvement.

NIST AI RMF 1.0

Govern, Map, Measure and Manage functions for trustworthy AI risk.

EU AI Act

Good-practice reference on risk classification, data, transparency and human oversight.

ISO/IEC 27001 · OWASP Top 10 LLM

Agent identity and access, logging, and threats specific to language models.

Next step

From assessment to action

Applied AI · CAIO as a Service

AI leadership on subscription: policy, committee, use case inventory and measurable return.

View service

Executive training

Role-based AI literacy for the board, management and teams: the floor beneath the whole target.

View programs

More tools

Free cybersecurity assessment, threat map and other self-assessment instruments.

View tools
FAQ

What people usually ask

What is the AI Governance Target?

It is a free LandoHOUSE self-assessment that measures, across six rings and a floor of people, whether an organization governs artificial intelligence with a mandate, an inventory, trusted data, defensible outputs, bounded agents and monitoring.

How long does it take and what do I need?

There are 34 controls on a 0–4 scale. It is best answered with evidence at hand and, where possible, with representatives from business, technology, risk and legal.

Where are my answers stored?

Only in the browser of the device you use. LandoHOUSE does not receive the information unless you choose to send us the summary through the contact form.

Why does an outer ring not count if the inner one fails?

Because an advanced control without its base does not hold: a well-configured agent using data without provenance, or a tested model with no owner, is still a risk. The target rewards order, not just the average.

Does the EU AI Act apply to my company?

It applies to those who place AI systems on the European Union market or whose outputs are used there. For other organizations, the target uses it as a good-practice reference alongside ISO/IEC 42001 and the NIST AI RMF.

Is the result equivalent to a certification?

No. It is a guidance self-assessment that does not replace an audit or a certification. It helps you prioritize and talk with leadership in a common language.

Contact

Shall we review your assessment together?

Which process, risk or opportunity does your company need to address? Let's talk to understand your situation and define the next step.

CoverageBased in Guatemala · regional service according to the agreed scope

Let's talk about your next project

Tell us what you need to improve, build or protect. We will review your request and coordinate the next step.