Please answer these simple 10 questions.

This survey will help determine if your security and governance would improve with YouAttest.

Are all individuals with access to AI development data, code, or models identified and re-certified at least quarterly via an automated attestation workflow? NIST AI RMF Control Std.Govern 1.1, Govern 1.2, Govern 1.3

Yes

Legal and regulatory requirements involving AI are understood, managed, and documented. Trustworthy AI characteristics are integrated into policies. Risk tolerance determines level of risk management activities.

Is there a documented AI risk management policy that includes access attestation as a required control, and is it reviewed and acknowledged annually by relevant AI actors? NIST AI RMF Control Std. Govern 1.4

Yes

The risk management process and its outcomes are established through transparent policies, procedures, and other controls based on organizational risk priorities.

Are ongoing access reviews for AI systems, datasets, and model repositories scheduled, tracked, and completed with ≥95% compliance in your enterprise? NIST AI RMF Control Std. Govern 1.5

Yes

Ongoing monitoring and periodic review of the risk management process and its outcomes are planned, with clearly defined roles and frequency.

Does your enterprise maintain a real-time inventory of all users with access to AI tools, datasets, and model repositories across integrated platforms? NIST AI RMF Control Std. Govern 1.6

Yes

Mechanisms are in place to inventory AI systems and are resourced according to organizational risk priorities.

Does your enterprise access certification reports included in AI governance reporting packages presented to executive leadership and the board? NIST AI RMF Control Std. Govern 2.1

Yes

Roles, responsibilities, and lines of communication related to mapping, measuring, and managing AI risks are documented and clear.

Upon an AI incident or anomaly, is a targeted access review immediately launched in your enterprise for all users with modify access to affected models or data? NIST AI RMF Control Std. Govern 4.3

Yes

Organizational practices are in place to enable AI testing, identification of incidents, and information sharing.

Do all AI actors acknowledge organizational policies on AI mission, context of use, and societal impact via your enterprise upon onboarding and annually? NIST AI RMF Control Std. Map 1.3

Yes

The organization’s mission and relevant goals for the AI technology are understood and documented.

For AI systems using third-party pre-trained models or data, are access permissions attested in your enterprise by both internal admins and authorized vendor contacts? NIST AI RMF Control Std. Map 4.2

Yes

Internal risk controls for components of the AI system including third-party AI technologies are identified and documented.

Do all third-party AI vendors complete a self-certification campaign confirming adherence to access governance and data handling standards? NIST AI RMF Control Std. Manage 3.1 (extended)

Yes

AI risks and benefits from third-party resources are regularly monitored, and risk controls are applied and documented.

Are high-risk AI systems (per the AI Risk Register) subject to enhanced access review frequency (e.g., monthly) in your enterprise, with rationale documented? NIST AI RMF Control Std. Govern 1.3, Manage 1.2

Yes

Risk tolerance determines risk management activities. Treatment of documented AI risks is prioritized based on impact, likelihood, or resources.

Full Name *

Email *

Phone *

Business *

GRC Partner Email(Optional)