AI Risk Assessment

Which AI tools do you use?

Select all that apply. We'll assess your exposure based on AI tool adoption.

AI Tools in Use

ChatGPT / GPT-4

OpenAI's language model for content, code, analysis

Microsoft Copilot

Microsoft's AI assistant in Office 365

Claude / Anthropic

Anthropic's AI assistant

Zapier Agents / n8n

Automated AI workflows and integrations

Custom AI Models

Proprietary ML models or fine-tuned models

None / Just getting started

We don't use AI tools yet

Who can access AI tools?

Access control is critical for preventing unauthorized AI usage and data leaks.

AI Tool Access Policy

Open Access

Anyone in the company can use any AI tool

Department-Based

Specific departments have access to specific tools

Controlled Access

Approved users only, with documented approvals

No AI Tools

We don't use AI tools in our business

What type of data goes into AI tools?

Data sensitivity determines your risk exposure if AI tools are compromised.

Data Types Shared with AI

Public Data Only

Marketing content, public-facing info

Client Data

Client names, details, communications

Financial Data

Revenue figures, financial reports, budgets

Proprietary IP

Trade secrets, formulas, processes

PII / Personal Data

Employee or customer personal information

Do you have prompt injection controls?

Prompt injection is the #1 AI attack vector. Controls are critical.

Prompt Injection Protection

No Controls

We don't have specific prompt injection controls

Basic Guidelines

Team follows best practices, but no enforcement

Technical Controls

Input validation, context limits, AI guardrails

Comprehensive

Technical controls + monitoring + incident response

How do you evaluate AI vendors?

Vendor risk management is critical for AI supply chain security.

AI Vendor Evaluation Process

Ad Hoc

We use tools as needed, no formal evaluation

Basic Review

We review security features before adoption

Structured Process

Formal vendor evaluation with checklist

Comprehensive

Risk assessments, SLAs, regular reviews

Is your team trained on AI security?

Human error is a major risk factor. Training is essential.

AI Security Training

No Training

Team hasn't received AI security training

Informal

We've shared best practices informally

Formal Training

Structured training program with documentation

Regular Updates

Quarterly training on emerging AI threats

Do you have an AI incident response plan?

When an AI breach happens, speed matters. Planning is critical.

AI Incident Response

No Plan

We haven't planned for AI-specific incidents

Basic Plan

We have a general incident response process

Documented AI Plan

Specific procedures for AI incidents

Practiced & Tested

We've run AI incident response drills

What compliance requirements apply?

Regulatory compliance affects your AI risk profile.

Compliance Frameworks

No Specific Requirements

General business, no regulated data

GDPR

EU data protection regulations

HIPAA / Healthcare

Healthcare data protection

PCI-DSS

Payment card industry compliance

Financial Regulations

SEC, FINRA, or financial services

Where should we send your results?

Get your personalized AI risk assessment and recommendations via email.

Name * Email * Company