A2 · Advisory
Fiduciary Readiness Assessment
The full five-pillar Scorecard assessment: a scored report the audit chair can put in the minutes, a gap analysis, a 90-day remediation plan, and the board presentation to go with it.
The report the audit chair can put in the minutes
A board that has asked management about AI and received a reassuring answer has not discharged anything. What discharges the duty is a documented, independent assessment against a stated framework, with findings the board acted on and a record of it having done so.
That is what this is. The Fiduciary AI Scorecard™ assesses AI governance from the board's point of view across five pillars — inventory and materiality, risk ownership and controls, vendor and third-party governance, monitoring and incident response, and board reporting and documentation.
The assessment is deliberately identical every time it is run: the same eight interviews, the same rubric, the same deliverables. That is what makes the score comparable year over year, and what makes it defensible when someone asks how it was reached.
What you get
-
Scored report — 0 to 100, with pillar breakdown
Scored against a published rubric, not a judgement call. Every pillar score shows the evidence behind it.
-
Full AI inventory and exposure map
The Regulatory Exposure Snapshot process, run without the 12-system cap, across every operating entity in scope.
-
Eight structured interviews
GC, CRO or CCO, CIO or CTO, CHRO, one business unit head, procurement, internal audit, and the audit chair. Same questions every time.
-
Gap analysis against the five pillars
What is missing, what it would take to close, and what the consequence of not closing it is — stated plainly, without severity theatre.
-
90-day remediation plan
Sequenced, with named owners and dates, written so it can be tracked at the next committee meeting.
-
Board or audit committee presentation
Delivered in person or by video, rehearsed with the GC beforehand. Never presented cold.
Scope
Fixed on both sides. Anything outside it is a separate engagement, quoted separately.
Included
- Full AI inventory, no system cap
- Document review: policies, contracts, training records
- Eight structured interviews
- Scored report with pillar breakdown
- Gap analysis and 90-day remediation plan
- One board or audit committee presentation
- Snapshot fee credited if taken within 60 days
Not included
- Execution of the remediation plan
- Policy or contract drafting
- Technical model testing or bias auditing
- Ongoing monitoring (see the Annual Oversight retainer)
- Additional board sessions beyond the first
- Legal advice or a compliance opinion
How it runs
| Week 1 | Inventory and exposure map — the Snapshot process, uncapped. |
|---|---|
| Weeks 2–3 | Eight interviews. Document review: policies, vendor contracts, training records, incident logs. |
| Week 4 | Scoring against the rubric. Gap analysis. Draft remediation plan. |
| Week 5 | Client review of findings. Board deck built and rehearsed with the GC. |
| Week 6 | Board or audit committee presentation. |
Common questions
Why is the price a range?
Because the two things that drive effort — the number of operating entities and the size of the AI estate — vary by an order of magnitude between companies of the same revenue. $25,000 is the floor for a single entity. We scope it on a call and the fee is fixed before we start.
What does the score actually mean?
It measures governance, not AI quality. A company running very little AI, very carefully, scores well. The score exists so that next year's score means something — a single measurement is a baseline, not a verdict.
Will the board see something embarrassing?
Probably, on the first run. Findings go to the GC before the board, and the presentation is rehearsed with them. Nothing arrives in the boardroom that management has not already seen and had the chance to respond to.
Is this an audit?
No. No assurance opinion is issued and NEUBoard is not a certification body. It is an independent advisory assessment against a published rubric — which is precisely what makes it usable in the minutes.
What happens after the 90 days?
Most boards ask the same question at the presentation: how do we know this stays fixed? That is the Annual Oversight retainer — quarterly board packs, an annual re-score, and named incident on-call. It is only offered to assessment clients.
Do you use our data afterwards?
Only with consent, only anonymised, and only in aggregate benchmarks. The consent clause is in the engagement letter and you can strike it without affecting the engagement or the price.
NEUBoard provides governance advisory services. An assessment is not a legal opinion, a compliance certification, or an assurance engagement, and creates no attorney–client relationship. Scores reflect governance practice observed during the engagement against the published Scorecard rubric, and are not a prediction of outcomes.
Start with a conversation
Most engagements begin with a Snapshot, and the fee is credited in full if you proceed within 60 days.