Home › Free tools › AI Governance and EU AI Act Readiness Assessment
AI Governance and EU AI Act Readiness Assessment
Use this assessment if your organisation builds, buys or uses AI systems, from chatbots and document tools to scoring or eligibility systems. It checks you against the EU AI Act timeline as amended by the 2026 Digital Omnibus on AI, the OECD AI Principles (updated May 2024), the NIST AI Risk Management Framework and the ISO/IEC 42001 AI management system standard. You get a readiness score by area, the gaps that matter most and the training that closes them. This is a real readiness tool: each question is drawn from the current official texts listed under "Based on", and Risalat's guideline monitor re-checks those sources every two weeks so the questions follow new editions.
- Assessment
- 12 min
- Free
- Saved in your browser
Who it is for
- Ministries, agencies and regulators using or procuring AI tools
- Project teams adding AI to donor-funded digital projects
- Consulting firms and suppliers working with EU clients
- Data, ICT, legal and compliance officers
- Managers preparing for ISO/IEC 42001 certification
What you get
- A readiness score across six AI governance areas
- A list of your AI systems that may be prohibited, high-risk or subject to transparency duties
- The key EU AI Act dates that apply to you
- Practical next steps for each weak area
- Programmes that build the missing skills
Programmes that build these skills
Upcoming Risalat programmes matched to the areas this tool measures. Your results show which ones fit your weakest areas.
Questions
Does the EU AI Act apply to organisations outside the EU?
It can. It applies to providers placing AI systems on the EU market and to providers and deployers outside the EU when the output of the AI system is used in the EU. Donor-funded projects often follow EU-style rules through their financing agreements too.
What did the Digital Omnibus on AI change?
It moved the start of the high-risk rules: Annex III systems from 2 December 2027 and AI in Annex I regulated products from 2 August 2028. It also added new prohibitions from 2 December 2026. Other dates, such as AI literacy and prohibitions from 2 February 2025, stay in place.
What is AI literacy?
Providers and deployers must take measures so that staff dealing with AI have enough knowledge of how it works, its risks and its limits, taking their role and the context into account.
Is ISO/IEC 42001 mandatory?
No. It is a voluntary management system standard, but it gives an auditable structure for AI governance and can support compliance and client confidence.
Based on
- Regulation (EU) 2024/1689 (Artificial Intelligence Act) Official Journal of the EU, in force since 1 August 2024.
- AI Act Service Desk: implementation timeline European Commission. Includes the Digital Omnibus on AI changes: Annex III high-risk rules from 2 December 2027, Annex I from 2 August 2028.
- OECD AI Principles OECD, adopted 2019, updated May 2024.
- NIST AI Risk Management Framework (AI RMF 1.0) US National Institute of Standards and Technology, 2023.
- ISO/IEC 42001:2023 Artificial intelligence: Management system ISO and IEC, published December 2023.
This is a self-assessment and training tool, not legal advice or a conformity assessment. Dates reflect the AI Act as amended by the Digital Omnibus on AI (checked October 2026); always confirm against the Official Journal and your national authority.