Skip to content

AI readiness check · 2 minutes

Where does your firm’s AI stand today?

Six yes-or-not-yet questions on the controls MAS’s AI risk management guidelines expect a firm to show. Your score stays in your browser. Want it in writing, with what to fix first? Ask at the end.

Start the checkRead the MAS guidelines

MAS Guidelines on Artificial Intelligence Risk Management

  1. 13 Nov 2025MAS consults on AI risk management guidelines
  2. 7 Oct 2026Final guidelines issued
  3. 7 Oct 2027Oversight, AI inventory and risk materiality expected
  4. 7 Oct 2028Life-cycle controls and capability expected

The check

Answer honestly. Nobody sees this but you.

Answer all six for your score. Then, if you like, ask for a written read-out.

  1. 01

    We know every AI tool in use, including vendor features and staff accounts.

  2. 02

    Each AI use has a named owner and a risk rating.

  3. 03

    Consequential AI outputs are approved by a named person before they leave the firm.

  4. 04

    Prompts, outputs and approvals are logged and kept.

  5. 05

    Our AI is tested on our own cases, and re-tested when a model or vendor changes.

  6. 06

    We could hand the board or a supervisor our AI evidence this week.

Does your AI act? · 1 minute

Think of the AI tools your firm uses. Does any of them…

Your answers stay in your browser.

  1. 1

    Send, pay, file, approve or change a record without a person pressing the button?

  2. 2

    Put its output in front of a client or regulator without someone reading it first?

  3. 3

    Act inside another system for you, such as email, a CRM or banking?

Questions

About the check.

Does anyone see my answers?

No. The score is worked out in your browser and isn’t sent anywhere. Only if you ask for a written read-out do your answers, name, email and firm come to us, so we can reply.

What does the score mean?

Each question is one control MAS’s AI risk management guidelines expect a firm to be able to show: knowing its AI, owning and rating it, a person on consequential outputs, records, testing and evidence. The score is how many you could show today.

Is this a compliance assessment?

No. It’s a quick self-check, not an audit, and we don’t certify compliance. For a firm-specific picture, talk to us about building the controls: the register, approvals, logging and evaluation.

Rather talk it through?

Thirty minutes. Tell us how your firm uses AI today, and we’ll tell you what we would control first, or that you don’t need us yet.

Book 30 minutesHow we build AI controls