Many organizations now have an AI policy, but only about a quarter report a fully implemented AI governance program (AuditBoard, July 2025). Ten yes-or-no questions place you on a five-level maturity model anchored to NIST AI RMF, ISO/IEC 42001, and the EU AI Act.
Scoring is gated, the way real maturity works: you hold the highest level whose requirements you fully meet. Answer honestly. Nobody sees this but you.