Assessment methodology
A practical baseline for workplace AI governance
PeopleHacker helps organizations identify governance gaps before workplace AI use moves further ahead of their policies, controls, and oversight.
Methodology updated August 2, 2026What does the assessment measure?
The 24 questions are divided equally across six dimensions:
- Policy: documented rules, accountability, use boundaries, and review cycles.
- Tools: inventories, approvals, use-case records, and shadow-AI controls.
- Data: data-entry rules, employee information, vendor retention, and source-data quality.
- People: employee training, manager guidance, communication, and reporting channels.
- Oversight: risk tiers, human review, testing, and ongoing monitoring.
- Response: incident handling, correction, vendor events, and evidence retention.
How does scoring work?
Each answer receives zero to three points. PeopleHacker converts earned points into a percentage for every dimension and for the assessment overall. All 24 questions carry equal weight.
- 0–39, Exposed: foundational controls are substantially incomplete.
- 40–64, Developing: essential practices exist but remain inconsistent or informal.
- 65–84, Managed: a meaningful governance foundation is operating, with gaps to close.
- 85–100, Operational: practices are broadly established; evidence and continuous improvement become the priority.
Results prioritize the lowest-scoring dimension so teams can begin with a practical first action instead of treating every gap as equally urgent.
How is privacy built into the assessment?
The assessment does not request employee names, employee records, or access to internal systems. Individual answers remain in the browser. PeopleHacker stores only the limited summary and contact information described in the Privacy Policy when a visitor requests emailed results.
What does a score not mean?
The Workforce AI Governance Score is educational decision support. It is not a legal opinion, regulatory assessment, security audit, employment review, or certification of compliance. Organizations should validate decisions with qualified advisers and the laws, contracts, policies, and risk obligations that apply to them.
Where should an organization begin?
Complete the free assessment to review your current posture across all six dimensions. For a practical example, read the guide to shadow AI risks.
To learn about the practitioner experience and purpose behind the assessment, visit About PeopleHacker.
