Shadow AI Risk Assessment

AI is already active in your organisation – whether you've approved it or not. Complete this 5-minute assessment to understand your risk exposure and receive a complementary personalised report with practical next steps.

What you'll receive: A comprehensive risk analysis covering 8 critical areas, your AI maturity band, and a prioritised action plan – delivered to your inbox within 60 seconds.

0 of 16 questions completed

Processing Your Assessment...

Calculating your risk score and generating your personalised report. This should take less than 60 seconds.

Contact Information

What is your email address?

Your name

Organisation name

Yes, send me practical AI insights and updates (unsubscribe anytime)

Organisation Context

How many people work in your organisation?

1–10 (Micro business) 11–50 (Small business) 51–200 (Medium business) 201–500 (Large business) 500+ (Enterprise)

AI Governance & Access

Do you provide staff with access to any approved AI tools for work purposes?

Yes — widely available across the business Yes — available to some teams only No — but access is under consideration No — we do not provide access to any AI tools Not sure

Has your organisation experienced any negative issues from AI tool usage?

Yes — confirmed incident Yes — poor quality or incorrect output Possibly — suspected but not confirmed No known issues Not sure — we don't have visibility

Do you have a process for approving which AI tools can be used for work?

Yes — formal approval process Yes — informal process No formal process, but some tools are approved No process — staff choose their own tools AI tools are not permitted

What's your best estimate of AI tool usage in your organisation?

Only approved tools being used Mostly approved tools, some unauthorised Mix of approved and unauthorised Mostly unauthorised/personal tools No AI tools being used Don't know what's being used

How would you know if staff used free or unauthorised AI tools with company data?

Our systems would detect it We'd find out via audit Only if someone told us No detection capability Haven't considered this

Policy & Training

Which best describes your organisation's AI usage policy?

Written policy — actively managed Written policy — not regularly reviewed Verbal or informal guidelines only AI use is prohibited (formally documented) AI use is prohibited (not documented) No policy

What AI training or guidance have staff received?

Comprehensive training on risks and safe usage Basic "dos and don'ts" Policy shared but no usage training Told not to use AI tools No training or guidance provided

Which risks worry you most about AI use in your organisation? (Select all that apply)

You can select multiple options

Privacy breaches (e.g. Privacy Act 2020) Customer data exposure IP / trade secret leakage Incorrect or biased AI output Cyber security / vulnerability Competitive disadvantage Reputation risk Not sure what the risks are

Data & Compliance

Has customer, company or personal data been put into unauthorised AI tools?

Definitely not — blocked by technical controls Unlikely — against policy Possibly — can't rule it out Likely — some staff have done this Confirmed — this has happened Don't know

If a customer asked which AI tools had processed their data, could you answer confidently?

Yes — complete confidence Yes — for approved tools only Partially No Never considered this

Are you aware of your legal obligations when AI tools process personal or customer data?

Fully aware and compliant Generally aware Somewhat aware Not really aware Didn't know there were obligations

Your personalised report will be emailed to you within 60 seconds