A practical template for cataloging AI tools, embedded AI features, custom models, automations, and AI agents. Track owners, data sources, risk tier, controls, and audit evidence.
A practical guide to testing AI systems for bias and fairness. Covers metrics, test design, documentation, and remediation - built for security, risk, and compliance teams.
Pre-drafted contract clauses for AI vendor agreements covering data usage, training restrictions, audit rights, incident notification, change management, and liability.
A comprehensive template for establishing AI usage guidelines across your organization. Covers approved tools, data classification rules, prohibited activities, security requirements, IP considerations, and enforcement procedures.
Includes
Data classification matrix (Public/Internal/Confidential/Restricted)
A structured checklist for evaluating your organization's AI risk posture across 7 critical domains. Score your compliance, identify gaps, and prioritize remediation with built-in risk scoring.
A complete incident response plan template specifically designed for Shadow AI security incidents. Covers detection through recovery with severity levels, communication plans, and post-incident review procedures.
A weighted scoring framework for evaluating AI vendors across 5 security domains: data security, access control, compliance, AI-specific security, and operational security. Includes recommendation matrix and risk identification.
A practical guide defining what data can and cannot be used with AI tools. Includes 4-level classification system, decision flowchart, common scenarios, and file upload rules, the essential reference for every employee.
Includes
4-level data classification with AI-specific rules
A complete charter template for establishing an AI governance committee with defined roles, responsibilities, decision-making processes, meeting cadence, and success metrics.
A structured acknowledgment form confirming employees have completed AI training and understand key policies. Includes role-specific sections for managers, developers, customer-facing, and HR roles.
Evaluate your organization's AI governance maturity across 5 pillars: Policy & Strategy, Risk Management, Security & Technology, Compliance & Legal, and People & Culture. Includes improvement roadmap template.
A structured request form for employees to submit new AI tool adoption requests. Covers business justification, data assessment, security questions, integration requirements, and multi-level approval workflow.
A comprehensive monthly reporting template for AI governance teams. Covers tool inventory, security incidents, compliance status, training metrics, risk dashboard, and executive recommendations.
A comprehensive security questionnaire with 68 questions across 8 domains for evaluating AI vendors. Includes scoring guidance, risk rating framework, and documentation checklist, the essential tool for procurement and security teams assessing AI vendor risk.
Includes
68 questions across 8 security domains
Built-in 0–5 scoring with risk rating framework
AI model security section (prompt injection, bias, red-teaming)
A structured change management plan for rolling out AI tools and policies across your organization. Covers stakeholder analysis, communication strategy, training rollout, resistance management, and success measurement.
A ready-to-use data processing agreement template tailored for AI and machine learning vendors. Covers data processing terms, sub-processors, cross-border transfers, breach notification, and GDPR/CCPA compliance clauses.
A step-by-step onboarding guide for new employees on approved AI tools, security practices, and company AI policies. Includes quick-start guides, do's and don'ts, and a first-week checklist.
Establish an AI Ethics Review Board with this comprehensive charter template. Defines mission, membership criteria, review processes, ethical principles, escalation procedures, and reporting requirements.
A concise executive briefing template for presenting AI governance status, risks, and recommendations to C-suite leadership and board members. Designed for quarterly board presentations.
A thorough validation checklist for AI and ML models before production deployment. Covers bias testing, performance benchmarks, security validation, explainability checks, and ongoing monitoring requirements.
Security-focused prompt engineering guidelines for enterprise teams. Covers safe prompting practices, data leakage prevention, prompt injection awareness, output validation, and approved prompt patterns for common business tasks.
Track compliance across major AI regulations including the EU AI Act, NIST AI RMF, ISO 42001, and emerging state-level AI laws. Includes requirement mapping, gap analysis, and remediation tracking.
A comprehensive security audit checklist for assessing AI systems and tools across your organization. Covers access controls, data protection, model security, API security, logging, and incident response readiness.
Assess and manage risks from third-party AI integrations and embedded AI features in SaaS tools. Covers shadow AI discovery, data flow mapping, contractual requirements, and ongoing monitoring procedures.
One email, one download, every template. Drop them straight into your policy folder and start adapting.
25 .docx files
1.1 MB total
Updated May 2026
NIST AI RMF · ISO 42001 · EU AI Act aligned
Work email only. We'll email them to you.
Beyond templates
Need more than a downloadable template?
Templates are a great start, but managing AI governance at scale takes real-time visibility. Aona discovers shadow AI, enforces policies, and produces continuous compliance evidence. Templates won't catch the prompt that just left your browser.