AI Governance Readiness Programme
Most institutions know they need an AI governance framework. Few have a clear picture of where the gaps are or what closing them will require.
The AI Governance Readiness Programme is a structured assessment of your institution’s current AI governance position across six areas. It produces a written gap analysis and a prioritised improvement roadmap, both designed to be presented to your senior leadership team or governing body. It tells you where you are, not where you would like to be.
The programme is designed for institutions that are deploying AI tools, approaching regulatory scrutiny, or that need to demonstrate to a funder, regulator, or governing body that AI governance is being taken seriously and is being managed with evidence behind it.
This service is available on enquiry. Engagements are scoped individually to reflect the complexity and size of the institution. A conversation is the right starting point.
What the Programme Covers
The programme assesses your institution’s current position across six areas, each evaluated against current regulatory expectations and sector good practice.
AI policy and procedure. Whether your institution has documented, current policies governing AI use, and whether those policies are proportionate to your current and planned AI deployment. Includes acceptable use frameworks and staff guidance.
Procurement and due diligence. Whether AI tools are being assessed before deployment, how procurement decisions are made, and whether there is a consistent, documented process for evaluating new tools before they are adopted.
Data protection and UK GDPR alignment. Whether your AI use is compliant with UK GDPR, including DPIA obligations for high-risk processing, ICO guidance on AI and data protection, and any specific obligations arising from the Age Appropriate Design Code.
Staff awareness and acceptable use. Whether staff understand how to use AI tools appropriately, what the limits of permitted use are, and what to do when something goes wrong. Includes assessment of training provision and internal communications.
Board and senior leadership accountability. Whether AI governance is owned at the right level of the institution, how the governing body receives assurance, and whether there is a named senior owner for AI risk.
AI risk management. Whether your institution has a systematic approach to identifying, assessing, and managing the risks associated with AI use, including security, reputational, regulatory, and operational risk.
What is Included
Structured assessment. A formal assessment across all six areas, drawing on document review, structured conversations with key stakeholders, and analysis of your current policies and governance arrangements.
Evidence review. Assessment based on what exists, not on what institutions say is in place. We review policies, procedures, governance records, training logs, and procurement documentation.
Written gap analysis. A structured report setting out findings across all six areas, identifying where the institution currently stands and what the gaps are. Designed to be presented to your senior leadership team or governing body.
Prioritised improvement roadmap. A practical, sequenced plan for closing the gaps identified, scoped to your institution’s specific needs, resource constraints, and risk profile. Not a generic checklist.
Senior practitioner delivery. Assessments are conducted and reports written by a senior practitioner with direct experience in AI governance in education and the public sector.
Frequently Asked Questions
How long does the programme take?
Most engagements are completed within three to six weeks, depending on the size and complexity of the institution and the availability of stakeholders. We confirm the timeline at scoping.
What does the assessment process involve?
Document review, structured conversations with relevant senior staff, and analysis of your current governance arrangements. The process is designed to be proportionate and not to create a significant burden on your team. We work around your schedule, not ours.
How does this relate to the EU AI Act?
The EU AI Act is primarily a product regulation rather than an institutional governance framework, but it does create obligations for institutions deploying high-risk AI systems within the EU. UK institutions that deploy AI systems within the EU for example, through joint operations or licensed platforms provided to EU partner institutions may have obligations as providers or deployers under the Act. The readiness programme flags where this is likely to be relevant
Can we act on the findings ourselves?
Yes. The improvement roadmap is designed to be actionable without ongoing external support. Where specific gaps require specialist input DPIAs for AI tools, contract reviews, or a full AI strategy development Clark & Company can provide that through the relevant services.
What happens after the programme is complete?
The gap analysis and roadmap are yours to act on. Some institutions use the programme as a standalone exercise and implement the roadmap internally. Others move into ongoing AI governance consultancy to maintain the position over time. Both are valid approaches.