Governance Toolkit / AI and technology oversight
AI and technology oversight · Editable Word document · FreeTechnology Risk Oversight Checklist (Word)
A board checklist for technology and cyber risk: ownership, risk appetite and reporting, major programs, resilience, data and AI.
Version 1.0 · Last updated
What it is
A board checklist for technology and cyber risk: ownership, risk appetite and reporting, major programs, resilience, data and AI. It is a plain Word file you can edit, brand and adapt.
Who it's for
Chairs, board secretaries.
When to use it
Work through it once a year with the committee that owns technology risk, and again before the board approves a major technology program. Work through the checklist once a year with the committee that owns technology risk, or with the full board. Mark each item Yes, Partly or No, and agree owners and dates for every gap. Revisit open items at each meeting until they are closed.
How to use it
- Work through each section before the meeting or event the checklist covers.
- Mark what is in place and assign an owner and date to anything that is not.
- Keep the completed checklist with the board's records and revisit it at the next review.
Preview of contents
- 1. Governance and accountability: Oversight of technology and cyber risk is assigned to the full board or a named committee, and written into its charter or…
- 2. Risk appetite and reporting: The board has approved a risk appetite statement that covers technology, cyber and data risk.
- 3. Major programs and systems change: Every major technology program has an approved business case, and benefits are tracked against it after go-live.
- 4. Cybersecurity and resilience: Management maintains an inventory of critical systems and data, and the board knows which ones matter most.
- 5. Data, AI and emerging technology: Management maintains an inventory of AI use, including AI built into vendor products.
- 6. Board capability: The board skills matrix includes technology, cyber or AI oversight, and gaps inform director searches.
- 7. Annual review: The committee reviews this checklist, its charter duties for technology risk, and its own effectiveness each year.
Get the template
Download the templateWord (.docx), 37 KB
Check your inbox for the download link.
Review with counsel before adoption. Templates are general resources, not legal advice.