Continuous Assurance Review™
Purpose. Provide independent and periodic assessment of AI governance effectiveness, operational controls and assurance readiness.
Core question
Can the organisation demonstrate that its AI governance controls remain effective, monitored and continuously improved?
Review scope
Seven domains reviewed
Governance Effectiveness
Review:
- Governance framework effectiveness
- Accountability effectiveness
- Decision-making effectiveness
- Oversight effectiveness
Assessment questions
- Is governance operating as designed?
- Are governance decisions evidenced?
- Are responsibilities still appropriate?
Deliverable: Governance Effectiveness Score
Control Assurance
Review:
- Policy compliance
- Control operation
- Control testing
- Evidence availability
Assessment questions
- Are controls operating consistently?
- Can effectiveness be demonstrated?
- Are control failures detected?
Deliverable: Control Assurance Assessment
Monitoring & Reporting
Review:
- Governance dashboards
- KPI monitoring
- Incident reporting
- Management information
Assessment questions
- What is monitored?
- Who reviews the results?
- How often are reviews completed?
Deliverable: Monitoring Maturity Score
Governance Operations Review
Review:
Detect → Assess → Intervene → Recover → Learn → Improve
Assessment questions
- Were incidents detected?
- Was intervention timely?
- Were lessons captured?
- Were improvements implemented?
Deliverable: Governance Operations Effectiveness Review
Attributable Authority Assurance
Review:
- Authority records
- Delegated authority
- Review cycles
- Revocation processes
Assessment questions
- Can authority be evidenced?
- Are reviews occurring?
- Are expired delegations identified?
Deliverable: Attributable Authority Assurance Score
AI Risk Assurance
Review:
- AI risk register
- Risk treatment plans
- Residual risk
- Emerging risks
Assessment questions
- Are risks current?
- Are mitigations effective?
- Are new risks tracked?
Deliverable: Risk Assurance Assessment
Certification Readiness Assurance
Review:
- ISO 42001 evidence
- Audit trail completeness
- Internal review processes
- Corrective actions
Assessment questions
- Is evidence available?
- Are gaps understood?
- Is the organisation audit ready?
Deliverable: Certification Readiness Score
Scoring model
Seven domains, scored 0–5
| Domain | Score |
|---|---|
| Governance Effectiveness | 0–5 |
| Control Assurance | 0–5 |
| Monitoring | 0–5 |
| Governance Operations | 0–5 |
| Attributable Authority | 0–5 |
| Risk Assurance | 0–5 |
| Certification Readiness | 0–5 |
| Overall Continuous Assurance Score | 0–35 |
Maturity levels
- Level 1ReactiveProblems are identified after impact occurs.
- Level 2ControlledReviews occur periodically.
- Level 3ManagedMonitoring and assurance are established.
- Level 4OperationalContinuous reviews and improvements are embedded.
- Level 5AssuredGovernance effectiveness can be evidenced at any time.
Deliverables
- Executive Assurance Dashboard
- Continuous Assurance Score
- Maturity Rating
- Top Risks
- Emerging Risks
- Governance Assurance Heatmap
- Control Effectiveness Review
- Continuous Improvement Plan
- Certification Readiness Assessment
- 90-Day Assurance Roadmap
Fees
Pricing options
One-Off Review (SME)
£1,500 – £3,000
Includes:
- Governance effectiveness review
- Controls review
- Risk review
- Assurance dashboard
- Improvement recommendations
Quarterly Assurance Review
£750 – £1,500 per quarter
Includes:
- Quarterly governance review
- AI system health check
- Risk review
- Assurance dashboard update
- Executive report
Assurance Retainer
£250 – £750 per month
Depending on organisation size.
Includes:
- Ongoing support
- Assurance reviews
- Governance advice
- Annual maturity review
Where it sits
- AI Readiness
- Governance Architecture
- Attributable Authority™
- Governance at Execution™
- Governance Operations™
- Continuous Assurance Review™
- Certification Readiness
Discover your AI Governance Maturity Score
The Trestano AI Governance & Readiness Diagnostic™ measures where you stand across five dimensions — and gives you a prioritised plan for what to do next.
Book a Diagnostic