SCORE: ___/12

10-12 🟢 Strong – Annual review recommended, 7-9 🟡 Watch – Fix yellow gaps in 30 days, <7 🔴 DANGER – Audit risk imminent.

🟢Copilot Gap Finder🟢

(For public sector, health and education)

Score your gaps in 10 mins. Red flags mean audit risk.

# Question Check Now Yes/No

Governance (Who owns Copilot?)

• Named Copilot owner per team? Ask dept heads

  YES ☐ NO ☐

• Prompt approval process? Check workflow

  YES ☐ NO ☐

• Output sign-off required? Review SOP

  YES ☐ NO ☐

Risks (What could go wrong?)

• Copilot data risks listed? Find risk register

  YES ☐ NO ☐

• Bias testing done? Check test results

  YES ☐ NO ☐

• Risk controls documented? Review treatments

  YES ☐ NO ☐

People (Are they ready?)

• Copilot training completed? Check records

  YES ☐ NO ☐

• Safe prompt guidelines? Find templates

  YES ☐ NO ☐

• Incident reporting process? Test it

  YES ☐ NO ☐

Proof (Compliance?)

• Usage monitoring dashboard? Open it

  YES ☐ NO ☐

• AI policy document exists? Locate it

  YES ☐ NO ☐

• Mock audit evidence ready? Test folder

  YES ☐ NO ☐