Course contents
Advanced · Course 5: AI Governance, Risk and Buying AI · Lesson 5 of 5

Building a complete AI governance and risk checklist

Level: AdvancedTime: 50 minutesOrder used: A (the T-shirt) and B (the jeans)Tool: AI governance and risk checklist
For anyone who has completed lessons 5.1 to 5.4 and now needs to bring policy, risk, adoption checks and accountability together into one working checklist. Cedar & Co.'s own domestic, hybrid buying role is used alongside Order A and Order B's approved master figures.
Domestic brandCedar & Co. (12 shops)
Hybrid supplier mixDelta Garments and Suez Denim
Reference order A15,000 T-shirts, FOB USD 3.20
Reference order B3,000 jeans, FOB USD 9.80
Order A total valueUSD 48,000
Order B total valueUSD 29,400
02Opening

This page teaches how to combine policy, risk awareness, adoption checks and accountability into one complete AI governance and risk checklist

Cedar & Co. now buys from more than one supplier under a hybrid mix of order types, using its own domestic Make to Stock forecast alongside occasional made-to-order runs for a new product line. Omar has, across the four earlier lessons of this course, written an AI-use policy, learned the real risks an ungoverned tool creates, checked a stock-reorder tool before adopting it, and named who is accountable for its recommendations. What he does not yet have is all four of these written down together, in one place, that a new AI tool can be measured against before it is trusted with any real decision.

This lesson mainly teaches the decision flow for assembling that one checklist, so a business does not have to re-derive the whole of Lessons 5.1 to 5.4 each time a new AI tool is proposed. Without a single checklist, each new tool gets checked as thoroughly as whoever happens to be reviewing it remembers to be, which is not a reliable standard across a growing number of AI tools.

03Before you start

What you need, and what this lesson does not cover

You need: Lessons 5.1 to 5.4 of this course. This lesson does not introduce new rules; it organises the rules already taught into one working checklist.

By the end of this lesson you can:

  • list the four sections a complete AI governance and risk checklist must have;
  • apply the checklist to a new AI tool proposal from any part of the business;
  • score a proposed AI tool against the checklist and decide whether it needs a stronger review step before adoption;
  • explain why a checklist built from four separate lessons is more reliable than one person's memory of the rules;
  • identify which checklist section catches which kind of AI-related mistake.

Not covered here: the reasoning behind each individual rule, already covered in Lessons 5.1 to 5.4. This lesson is a recap and an assembly exercise, not a source of new rules.

04Key terms

Words you will meet in this lesson

TermMeaning
Governance checklistA single working document that brings a business's own AI-use policy, risk awareness, adoption checks and accountability rule together in one place.
Checklist scoreA simple count of how many checklist items a proposed AI tool passes, used to decide how much review it needs before adoption.
Standing ruleA rule written once in the checklist and applied the same way to every future AI tool, rather than re-decided each time.
Gap itemA checklist item a proposed AI tool fails or cannot answer, recorded so it is addressed rather than quietly ignored.
Renewal checkA repeat of the checklist run on an AI tool already in use, done on a fixed schedule rather than only at first adoption.
05Teaching
The rule

A complete AI governance and risk checklist has four sections: the use policy, the known risks, the adoption checks, and the named accountability

Each section answers one of the questions the earlier lessons of this course raised on its own: which tools are approved and what information rule applies (Lesson 5.1), what could go wrong and how badly (Lesson 5.2), whether this specific tool passes the pre-adoption checks (Lesson 5.3), and who is accountable once it is in use (Lesson 5.4). Bringing all four into one checklist means a new AI tool proposal is measured the same way every time, by whoever happens to be reviewing it, rather than depending on how much of the earlier reasoning that person remembers.

A tool that cannot pass every section is not necessarily rejected outright; a gap item is recorded, and the tool is either given a stronger review step, a shorter pilot period, or is held back until the gap is resolved.

1. Use policyApproved tools,information rule2. Known risksLeak, silent error,error at scale3. Adoption checksData ownership,failure plan, pilot4. AccountabilityNamed person,sign-off, correction
Each section catches a different kind of mistake. A tool that passes three sections and fails one still has a real gap that needs a decision, not silence.
What you meet in real life

The same four-section checklist applies across market, business model and role, with the weight on each section shifting

What can differThe shapes you will meetWhy it matters to you
Export order under Make to OrderThe use-policy and known-risk sections carry the most weight, since confirmed buyer commitments are exposed quickly.A tool touching export commercial fields should score strongly on sections 1 and 2 before it is trusted with anything sent to a buyer.
Domestic replenishment under Make to StockThe adoption-checks section carries the most weight, since a wrong recommendation ties up cash slowly rather than breaking a single commitment at once.A pilot period and a clear failure plan matter more here than they do for a one-off drafted reply.
Hybrid order handled through a millThe accountability section carries the most weight, since a specification shared across more than one buyer's order needs one clearly named sign-off.Without a named accountable person, a hybrid mill cannot answer quickly when one buyer asks how an error reached its own order.
Buying office or agent roleAll four sections matter roughly equally, since a buying office holds several buyers' confidential information and drafts messages to all of them.A buying office cannot afford a weak section, because a gap in any one of the four can expose more than one buyer's information at once.
Different product familiesSocks, knit-to-garment, terry and home-textiles businesses apply the same four-section checklist; only the specific documents and figures inside each section change.The checklist's structure holds across every product family in this academy's cast; only the illustrative content changes.
The case we follow

Omar runs Cedar & Co.'s new AI-drafted product-description tool through the complete checklist before its first use

Cedar & Co. is offered a second AI tool, this time to draft product descriptions for its own online shop, drawing on both its domestic Make to Stock lines from Delta Garments and a new made-to-order line woven by Suez Denim. Omar runs the tool through all four sections before deciding.

On the use policy, he confirms the tool is added to Cedar & Co.'s approved list and that no confirmed supplier price or unreleased specification will be entered into it, matching the rule set for the earlier reorder tool. On known risks, he identifies that a silent error here would most likely be a wrong fabric or care claim on the shop's own website, a real but modest risk compared with a wrong figure sent to a buyer. On adoption checks, the vendor's data terms keep Cedar & Co.'s own product data as its property, and Omar sets a pilot on one new product line before using the tool for the shop's full catalogue. On accountability, he names Cedar & Co.'s own marketing lead as the person who signs off on every AI-drafted description before it is published.

The tool passes all four sections with one gap item: the vendor could not confirm how quickly it corrects a description across all shops once one error is found. Omar records this gap and adds his own rule to the checklist: any correction is checked across all 12 shops within one working day, regardless of what the vendor's own tool does automatically.

The worked number

One gap item, recorded and covered by the business's own rule, shows how the checklist turns an unclear vendor answer into a managed risk

Cedar & Co.'s own shops: 12
Vendor's own correction speed across all shops: not confirmed (gap item)
Cedar & Co.'s own added rule: check every correction across all 12 shops within 1 working day

Reusing Order A and Order B's (the jeans order) own fixed figures as a reminder of what is at stake if a business skips this kind of check entirely: Order A's total value is USD 48,000 and Order B's jeans value is USD 29,400 (3,000 × USD 9.80). Neither figure is directly exposed by a product-description tool, but the same discipline, a written gap item covered by the business's own rule rather than left unaddressed, is exactly what would have caught the earlier lessons' larger risks: the leaked specification in Lesson 5.2, the missing failure plan in Lesson 5.3, and the unclear accountability in Lesson 5.4.

GOOD: gap recorded and coveredVendor's unclear answer written downCedar & Co.'s own 1-day rule fills the gapBAD: gap left unaddressedUnclear answer accepted silentlyA wrong description could sit uncorrected on any shop
A recorded gap item, covered by the business's own added rule, is what turns "the vendor could not say" into a managed risk instead of an ignored one.
The method

Build and apply a complete AI governance and risk checklist in five steps

  1. Copy the four sections from Lessons 5.1 to 5.4 into one checklist: use policy, known risks, adoption checks, accountability.
  2. Run every new AI tool proposal through all four sections before it is adopted, not only the sections that seem most relevant.
  3. Record any gap item where the tool or vendor cannot answer a section clearly, rather than treating silence as a pass.
  4. Cover each gap item with the business's own added rule, a stronger review step, or a shorter pilot, before the tool is trusted with a real decision.
  5. Repeat the checklist on a fixed schedule for tools already in use, not only at first adoption.
The trap

A common mistake is treating a checklist as a one-time form instead of a standing rule applied to every AI tool and repeated over time

A checklist filled in once, at adoption, and never looked at again misses exactly the kind of drift this course has warned about throughout: a policy that no longer matches what staff actually do, a risk that grows as a tool is used more widely, or an accountable person who has since changed roles. Treating the checklist as paperwork to complete once defeats its purpose, which is to be the standing rule every AI tool is measured against, including the ones already trusted.

The better rule is simple: apply the same four-section checklist to every AI tool, old and new, and repeat it on a fixed schedule, not only when a tool is first proposed.

06In plain words

By now you have four separate habits: write down which AI tools are allowed and what they may be told, know the specific ways an unsupervised AI tool can go wrong, check a new tool properly before you trust it, and always know who answers for a decision it helped make. Put all four together in one list, and use that same list every time a new AI tool shows up, and again later for the tools you already trust.

That one list is what stops good judgement from depending on which person happens to be looking at the new AI tool that day.

07Quick check
  • A complete checklist has four sections: use policy, known risks, adoption checks, accountability.
  • Each section catches a different kind of AI-related mistake; a strong score on one does not cover a gap in another.
  • A gap item should be recorded and covered by the business's own added rule, not left as an unclear answer.
  • The checklist applies the same way across export, domestic and hybrid business, with the weight on each section shifting by context.
  • Apply the checklist to AI tools already in use, on a fixed schedule, not only to new proposals.
  • The checklist replaces relying on one person's memory of four separate lessons' worth of reasoning.
08Workplace scenario

A staff member proposes reusing Cedar & Co.'s approved product-description tool for supplier-facing replies without running it through the checklist again

Six months after the product-description tool is adopted, a staff member at Cedar & Co. proposes using the same, already-approved tool to draft replies to Delta Garments and Suez Denim about order status, reasoning that it is "already approved" and does not need checking again.

  • The tool's original approval covered only customer-facing product descriptions, not supplier-facing order communication.
  • Supplier-facing replies could include confirmed prices, quantities or specifications from both Order A and Order B, the jeans order.
  • No one has re-run the four-section checklist for this new, different use of the tool.

Should the tool be used for supplier-facing replies on the strength of its earlier approval? Decide before opening the answer.

Show decision

No. The checklist is run again for this new use before the tool touches any supplier-facing reply.

1. The earlier approval covered product descriptions, not confirmed order information, so the use-policy section's information rule has not been checked for this new purpose at all. 2. Supplier-facing replies could expose Order A's and Order B's (the jeans order) own confirmed commercial fields, which is exactly the kind of information the known-risks section in Lesson 5.2 warns about. 3. No accountable person has been named for this specific new use, so even a correct reply would have no one clearly responsible for having checked it first.

The cost of skipping the checklist for this new use is not that the tool is untrustworthy; it is that "already approved" was true for a different job, and treating it as automatically true for this one skips exactly the checks this course has taught.

09What it costs

A complete governance checklist costs a fixed, small amount of time and protects every order value this course has used as an example

Order A's and Order B's own fixed total values (Order B being the denim jeans order), used throughout this course, are a reminder of what a single ungoverned AI-related mistake could put at risk:

Order A: 15,000 × USD 3.20 = USD 48,000
Order B (jeans): 3,000 × USD 9.80 = USD 29,400
Combined reference value: 48,000 + 29,400 = USD 77,400

Running the full four-section checklist on a new AI tool takes a similar amount of time to any one of the earlier lessons' individual checks, a few hours at most, repeated on a fixed schedule rather than constantly. Skipping it does not remove the risks this course has shown; it only removes the business's own visibility into them until an AI-assisted mistake reaches a buyer, a supplier or a shop shelf and the cost has already been paid.

10Working template

AI governance and risk checklist: use the complete four-section workbook on your own business's own AI tools

Use the T18-C05 AI governance and risk checklist workbook in full. The AI tool inventory, AI risk points, AI tool evaluation and Accountability sheets together form the complete four-section checklist this lesson has taught. Run every AI tool your own business uses, or is considering, through all four sheets, and repeat the exercise on a fixed schedule.

[Download the AI governance and risk checklist workbook](../../templates/T18-C05-ai-governance-and-risk-checklist.xlsx)

Download the AI governance and risk checklist (Excel)

11Check yourself

1. Why does Omar record the vendor's unclear answer about cross-shop correction speed as a gap item, rather than treating the tool's pass on the other three sections as good enough?

2. A hybrid mill's AI drafting tool was approved only for internal specification drafts, and a staff member now wants to use the same tool, unchecked again, to draft a reply directly to a buyer about a price change on a new export order. What should happen first?

12Glossary
ENARFRTRMeaning
Governance checklistقائمة تدقيق الحوكمةListe de contrôle de gouvernanceYönetişim kontrol listesiA single working document that brings a business's own AI-use policy, risk awareness, adoption checks and accountability rule together in one place.
Checklist scoreنتيجة قائمة التدقيقScore de la liste de contrôleKontrol listesi puanıA simple count of how many checklist items a proposed AI tool passes, used to decide how much review it needs before adoption.
Standing ruleقاعدة ثابتةRègle permanenteKalıcı kuralA rule written once in the checklist and applied the same way to every future AI tool, rather than re-decided each time.
Gap itemبند فجوةÉlément d'écartEksiklik kalemiA checklist item a proposed AI tool fails or cannot answer, recorded so it is addressed rather than quietly ignored.
Renewal checkفحص التجديدVérification de renouvellementYenileme kontrolüA repeat of the checklist run on an AI tool already in use, done on a fixed schedule rather than only at first adoption.
13Next

End of Course 5: AI Governance, Risk and Buying AI, and end of Track 18

This is the last lesson of Course 5 and of Track 18, AI for Apparel and Textile Work. There is no lesson 5.6 to move to; instead, revisit any of the five lessons in this course whenever a real AI-use policy, risk review, adoption decision or accountability question comes up at your own workplace. Back to the course map

14Ladder

RecognizeList the four sections of a complete AI governance and risk checklist.
ConnectSee how a tool's approval for one use does not carry over automatically to a different use.
CompareSeparate a recorded, covered gap item from an unclear answer left unaddressed.
DecideChoose whether an already-approved AI tool may be reused for a new purpose without re-running the checklist.