We do not know where AI is being used.
Use a structured inventory form to record tools, owners, purposes, users, and information involved.
A focused introduction to AI risk management
AI Risk Management Starter Guide
Find out where AI is being used, identify applications that deserve a closer review, and document sensible next steps with a concise guide and six practical forms.
Buy the AI Risk Guide — $9$9 · PDF guide + 6 PDF forms
Secure checkout and immediate delivery powered by Gumroad
Who it is for
A practical starting point for businesses that need visibility before a full governance program.
- Owners and operations leaders introducing AI tools
- Small teams without a dedicated AI governance function
- IT, security, privacy, and compliance staff
- Managers responding to questions about employee AI use
- Businesses reviewing AI features in software and vendor services
Problems it solves
A practical response to the questions that slow important decisions.
Every AI use feels equally urgent.
Apply a first-pass screen to distinguish routine uses from applications that deserve closer review.
We do not know what to ask an AI vendor.
Use a focused vendor-review form to collect information about data handling, oversight, reliability, and accountability.
Decisions are being made informally.
Document the review, safeguards, owner, outcome, and next review date.
We need a manageable place to begin.
Start with a concise process that can be expanded as AI use and business exposure grow.
What is included
Know exactly what you are getting.
Built for practical use without specialized software or a consulting engagement.
- Plain-English AI risk management guide for small businesses
- AI use inventory form
- Initial AI risk-screening form
- AI vendor-review form
- Safeguards and controls worksheet
- Decision and approval record
- Review schedule and follow-up form
- Methodology informed by the NIST AI Risk Management Framework
How it works
A clear path from initial setup to a documented, repeatable process.
- 01
Inventory current AI use
Record known tools and use cases, then ask department leaders where AI is already part of everyday work.
- 02
Complete the initial screen
Consider the information involved, business impact, affected people, human review, and consequences of an error.
- 03
Look more closely where needed
Use the vendor-review form and request clarification for higher-risk or poorly understood tools.
- 04
Document safeguards and the decision
Record conditions, ownership, review expectations, and the reason for proceeding, pausing, or declining.
- 05
Schedule follow-up
Revisit uses when the tool, purpose, data, impact, or external requirements materially change.
Practical uses
Use it when the decision matters, but time is limited.
- Creating a first inventory of employee AI tools
- Reviewing a new generative-AI service
- Assessing an AI feature added to existing software
- Preparing for customer questions about AI use
- Documenting safeguards for a higher-impact application
- Deciding whether the business needs a broader governance system
Frequently asked questions
What to know before you download.
Is this a complete AI governance program?
No. It is a focused starting point for visibility, initial screening, vendor review, safeguards, decisions, and follow-up. The Professional Edition adds a centralized Excel control center, policy template, implementation guidance, employee training, and a more complete operating process.
Is the guide based on NIST guidance?
The methodology is informed by the NIST AI Risk Management Framework and translates relevant concepts into a smaller-business workflow. Purchasing the guide does not create certification, endorsement, or compliance with NIST.
Are the forms editable?
The six forms are supplied as fillable or printable PDFs for consistent use and recordkeeping.
Does this provide legal or regulatory advice?
No. AI requirements vary by location, industry, use case, and the people affected. Higher-risk uses may require qualified legal, privacy, security, employment, or industry advice.
What software is required?
A current PDF reader is required. No spreadsheet or word-processing software is needed for this Starter Guide.
Related practical guidance
Use these guides to make the next decision easier.
This is a general business resource intended to help organize internal reviews and decisions. It is not legal, insurance, cybersecurity, or regulatory-compliance advice and does not guarantee compliance with any requirement.
Need an operating system rather than a starter guide?
Move from initial screening to ongoing AI governance.
The Small Business AI Governance Toolkit adds a centralized Excel control center, acceptable-use policy template, manager implementation guide, employee training presentation, and a repeatable approval and safeguards workflow.
Practical Business Works, LLC