Orientation assessments and gap analysis

What an assessment is for

A questionnaire helps organise inputs and prepare questions. It relies on the user’s answers; it does not itself verify operations, complete evidence or legal conclusions. A service decision should therefore not depend only on a percentage score.

Tool or process	Result	What the result does not establish
Quick readiness check	Orientation around organisational needs using eight questions	Legal classification or certification readiness
AI Check	Initial orientation for further governance work	A complete inventory of systems and obligations
Detailed gap analysis	Comparison of observed conditions with defined requirements and a list of gaps	Satisfaction of requirements lacking verifiable evidence
Supplier dependency assessment	Overview of data, contracts, portability and options for changing services	A general supplier compliance or security score

The public readiness check, AI Check and working assessments in AI Governance Studio are different parts of the customer journey. Question counts and outputs may vary; use the description of the current version.

Conducting a gap analysis

For each item, record the requirement, why it applies, actual conditions, evidence, unresolved question and remediation owner. Distinguish “implemented and verified”, “partly implemented”, “missing” and “not yet assessable”. Exclude irrelevant requirements with a documented rationale.

A high aggregate score must not conceal a critical problem in one system. Assess severity and impact as well as the number of completed items.

Choosing the next step

Turn findings into specific tasks: what is missing, who will address it and how the result will be checked. Work internally or use assessment and policy support. Set priorities from each finding and its impact, rather than the score alone.

A legal opinion, technical validation, DPIA where required or certification needs its own scope and appropriate expertise. Compare the variants and outputs.