A checklist for technical and management teams to assess the readiness, safety, and compliance of internal AI systems. It helps organizations ensure that AI serves legitimate business goals, operates transparently with proper controls, complies with regulations such as Vietnam's Decree 13, GDPR, and ISO standards, and minimizes the ethical, security, and legal risks that AI can introduce. Suitable for: - PMs: tracking progress and ensuring AI workstreams are managed methodically. - Tech Leads / AI Engineers: assessing AI systems in development or production in detail. - Compliance / DPOs: verifying legal compliance and personal-data protection for AI use. - CTOs / CISOs: performing periodic reviews of all AI systems in operation.

A checklist for assessing compliance with regulations, industry standards (ISO 27001, GDPR, etc.), and internal security policies. It includes security-testing activities such as vulnerability assessments and penetration testing to surface weaknesses in the environment.

A checklist for protecting data throughout its lifecycle - covering data-loss prevention (DLP), regular backups, and disaster-recovery planning - to ensure data availability and integrity under any scenario.