Stage 1: Set up governance
"AI at work" quick reference card
A one-page card for staff: what to do, what not to do, data rules and who to ask.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)Download (DOCX, EU edition, 10 KB)Download (DOCX, US edition, 10 KB)Download (DOCX, UK edition, 10 KB)Download (DOCX, India edition, 10 KB)
Stage 1: Set up governance
AI change management and rollout plan
Plan the people side of introducing an AI tool or policy.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 10 KB)
Stage 1: Set up governance
AI ethics review board charter
Terms of reference for a group that reviews higher-risk or sensitive AI uses.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 10 KB)
Stage 1: Set up governance
AI governance charter
Purpose, membership, decision rights, meeting cadence, escalation and reporting for your governance group.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 2 KB)Download (DOCX, 10 KB)
Stage 1: Set up governance
AI meeting assistant and note-taker policy
Rules for recording and transcribing meetings with AI tools.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 1: Set up governance
AI tools onboarding guide for new staff
A short guide for new joiners on using AI tools safely here.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 1: Set up governance
AI use policy
A short policy covering purpose, roles, permitted uses, data, oversight, vendors, training, incidents and review.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 4 KB)Download (DOCX, 12 KB)
Stage 1: Set up governance
Data classification guide for AI tool use
Which kinds of data may go into which AI tools.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 1: Set up governance
Employee acceptable use policy for AI tools
What staff may and may not do with AI tools, the data rules and how to raise a concern.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 2 KB)Download (DOCX, 10 KB)Download (DOCX, EU edition, 10 KB)Download (DOCX, US edition, 10 KB)Download (DOCX, UK edition, 10 KB)Download (DOCX, India edition, 10 KB)
Stage 1: Set up governance
ISO/IEC 42001 gap analysis (clauses 4 to 10, references only)
Rate each clause 1 to 4 with evidence, owner and due date. Use your licensed copy of the standard.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (XLSX, 10 KB)Download (CSV, 1 KB)Download (DOCX, 17 KB)
Stage 1: Set up governance
ISO/IEC 42001 statement of applicability (Annex A by reference number)
List each Annex A control area by reference with a short paraphrase; add sub-controls from your licensed copy. Reference numbers are marked Verify.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (XLSX, 10 KB)Download (CSV, 908 B)Download (DOCX, 18 KB)
Stage 1: Set up governance
NIST AI RMF gap analysis (functions and categories)
Rate each category 1 to 4 with evidence. NIST AI RMF is being revised; categories may change.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (XLSX, 15 KB)Download (CSV, 2 KB)Download (DOCX, 26 KB)
Stage 1: Set up governance
RACI matrix
Activities and roles with suggested defaults (R, A, C, I; AR means one role is both Accountable and Responsible).
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (XLSX, 19 KB)Download (CSV, 1 KB)Download (DOCX, 35 KB)
Stage 1: Set up governance
Staff AI awareness training deck with speaker notes
An outline for a 30-minute staff session, with speaker notes. Provided as a document outline; paste into your slide tool.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 1: Set up governance
Training plan and attendance record
Groups, paths, due dates and completion. Numbers are entered by you.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (XLSX, 7 KB)Download (CSV, 533 B)Download (DOCX, 12 KB)
Stage 2: Inventory and intake
AI system register
The register columns, in the exact order the ClearPath register tool exports and imports, with a Lists sheet of allowed values in the XLSX.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources. Columns match the ClearPath register tool export exactly. Lines starting with # are notes and are skipped on import.
Download (CSV, 944 B)Download (XLSX, 10 KB)
Stage 2: Inventory and intake
Shadow AI staff survey and amnesty message
An original survey and a no-blame introduction to find AI tools staff already use.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 2 KB)Download (DOCX, 10 KB)
Stage 2: Inventory and intake
Use-case intake form
The form for any new AI idea or purchase, matching the intake tool.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 2 KB)Download (DOCX, 10 KB)
Stage 3: Assess risk and impact
AI data protection impact assessment (EU and UK GDPR oriented)
A data protection impact assessment structure with screening questions for AI that uses personal data.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 2 KB)Download (DOCX, 10 KB)
Stage 3: Assess risk and impact
AI impact assessment
The structure used by the ClearPath impact assessment builder, with region pointers.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 2 KB)Download (DOCX, 11 KB)
Stage 3: Assess risk and impact
AI risk register with starter risk library (5 x 5 scoring)
Starter risks with likelihood and impact columns; scores are your own judgment. Bands: 1-4 Low, 5-9 Medium, 10-16 High, 17-25 Critical.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (XLSX, 28 KB)Download (CSV, 5 KB)Download (DOCX, 50 KB)
Stage 3: Assess risk and impact
Risk assessment form
System description, the five screening questions with reasoning, resulting tier, risks and sign-off.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 3 KB)Download (DOCX, 10 KB)
Stage 4: Design controls and document
AI clauses checklist for data processing agreements
Topics to check when personal data goes to an AI supplier. A checklist of topics, not a contract.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 10 KB)
Stage 4: Design controls and document
AI contract clause checklist
Topics to cover in supplier contracts for AI. A checklist of topics, not a contract.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 10 KB)
Stage 4: Design controls and document
Datasheet for a data set
Document where a data set came from and how it should and should not be used.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 10 KB)
Stage 4: Design controls and document
Model or system card
The fields used by the ClearPath system card builder.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 10 KB)
Stage 4: Design controls and document
Vendor questionnaire
The sixteen vendor due diligence questions with columns for status and the vendor answer.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (XLSX, 13 KB)Download (CSV, 2 KB)Download (DOCX, 21 KB)
Stage 5: Test and validate
Bias testing report
Report group comparisons honestly, with limits.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 5: Test and validate
LLM application security checklist
A checklist organized around the OWASP Top 10 for LLM Applications, in original wording. Check the current OWASP list.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 2 KB)Download (DOCX, 11 KB)
Stage 5: Test and validate
Model validation checklist
A short checklist for validating a model before go-live.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 10 KB)
Stage 5: Test and validate
Testing and validation plan
Metrics, methods, thresholds and sign-off for pre-launch testing.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 10 KB)
Stage 6: Approve and deploy
AI agent deployment checklist
Pre-launch checks for AI systems that take actions. Review each release.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 2 KB)Download (DOCX, 10 KB)
Stage 6: Approve and deploy
AI transparency notice (for users)
A plain notice for people who meet an AI system.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 6: Approve and deploy
Human oversight procedure
Who oversees a system, when to step in, and how to override and stop it.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 6: Approve and deploy
Notice to employees and applicants about AI use
A generic notice for people affected by AI in hiring or work decisions. Region rules differ.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 2 KB)Download (DOCX, 10 KB)
Stage 7: Monitor and respond
AI incident response plan
Stages, roles, severity levels and notification steps for AI incidents.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 7: Monitor and respond
Incident checklist
Detect and record, contain, assess severity, notify, investigate, fix, document and review.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 3 KB)Download (DOCX, 14 KB)
Stage 7: Monitor and respond
Incident report form
The fields recorded for each AI incident.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 7: Monitor and respond
Monitoring plan
Metrics, methods, thresholds, frequency, owner and actions on breach.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (XLSX, 8 KB)Download (CSV, 574 B)Download (DOCX, 14 KB)
Stage 8: Review, report and retire
Board report
A leadership report built from risk, incidents, maturity and deadlines.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 8: Review, report and retire
Change log
Record each change to an AI system with the reason, approval and risk impact.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (XLSX, 6 KB)Download (CSV, 457 B)Download (DOCX, 10 KB)
Stage 8: Review, report and retire
Decommissioning checklist
Steps to retire an AI system safely.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 8: Review, report and retire
Executive briefing deck
An outline for a leadership briefing. Provided as a document outline; paste into your slide tool.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
Stage 8: Review, report and retire
Monthly AI governance report
A short monthly report for the governance group.
Version 1.0 · Reviewed 3 Oct 2026 · Draft for review by a qualified professional
How to use
Replace every [placeholder], delete guidance notes, and have counsel review before approval. Check names, references and dates against the primary sources.
Download (MD, 1 KB)Download (DOCX, 9 KB)
The two slide-deck templates are provided as document outlines you can paste into your slide tool. DOCX files use real heading styles and table header rows; check tagged-PDF output in your browser's print dialog.