HTML TOOL ✓ Interactive Assessment Q2 2026

AI Agent Governance & Risk Assessment Tool

198-item interactive assessment for organizations deploying autonomous AI agents. Profile-scoped wizard with 16 use case templates, real-time compliance dashboard, 10 deployment gates, 8 agentic threat categories, interactive risk classifier, and 5 premium PDF exports. Open in any browser, complete in one session, export board-ready reports. Built for GRC professionals and engineering leads alike.

198

Assessment Items

Frameworks

Governance Domains

PDF Reports

ISO 42001 NIST AI RMF EU AI Act OWASP LLM CSA MAESTRO HIPAA HITRUST

Open in Browser

Single HTML file. No install, no server, no account.

Set Your Profile

Industry, autonomy level, region, capabilities. Items auto-scope.

Assess & Score

Table view or guided wizard. Status, notes, evidence per item.

Export Reports

5 PDF types: self-assessment, executive, detailed, risk profile, governance.

INTERACTIVE HTML TOOL

$250.00

One-time purchase · Instant download

✓198-item assessment across 16 governance domains with tier-weighted scoring
✓Profile-scoped: 16 use case templates, auto-filtering by autonomy, region, industry, capabilities, and maturity
✓Interactive risk classifier with guided 4-question wizard for EU AI Act and standard classifications
✓Real-time compliance dashboard with SWOT, 10 deployment gates, and 8 agentic threat categories
✓5 premium PDF reports (jsPDF, offline): Self-Assessment Summary, Executive Summary, Full Detailed, Risk Profile, Governance Report
✓Built-in acronym tooltips and help modals for non-GRC users. Engineers and GRC pros both get value.
✓Gap analysis with wizard mode, evidence linking, owner assignment, and remediation tracking
✓Works 100% offline. No CDN, no cloud, no account. Data stays in your browser.

.HTML OFFLINE 7 FRAMEWORKS 5 PDF EXPORTS 16 TEMPLATES ✦ UPDATED Q2 2026

Overview

What this tool does

1 / 10

Click image or thumbnail to browse · 10 views of the live tool

This is not a spreadsheet with checkboxes. It’s a fully interactive, browser-based assessment tool purpose-built for organizations deploying autonomous AI agents. Open the HTML file in any browser, pick from 16 use case templates (customer service agent, trading bot, coding assistant, and more), and the tool auto-scopes 198 assessment items to your specific deployment. Filtering by autonomy level, regulatory region, industry, data sensitivity, agent capabilities, and organizational maturity.

Every item is weighted by severity tier (CRITICAL, HIGH, MEDIUM, LOW), mapped to specific framework controls across 7 standards, and scored in real time. The compliance dashboard shows your composite risk score, a 16-domain heatmap, dynamic SWOT analysis, deployment readiness verdict, stakeholder impact cards, and mitigation status across 8 agentic threat categories. An interactive risk classifier walks you through 4 questions to recommend the right EU AI Act or standard classification for your system. Built-in acronym tooltips and help modals make every item accessible to engineering leads, not just GRC professionals.

When you’re done, export board-ready PDFs from 5 report types: Self-Assessment Summary with attestation blocks, Executive Summary with KPI cards and threat tables, Full Detailed Report with every item and remediation plan, Agent Risk Profile with threat intelligence narrative, and Post-Assessment Governance Report with deployment verdict and residual risk statement. All generated offline via jsPDF. No cloud, no CDN, no external dependencies.

Capabilities

What makes this different from a checklist

🎯

Profile-Scoped Assessment

Set your deployment profile or pick from 16 use case templates (customer service, trading, coding assistant, healthcare, infrastructure). Autonomy level, region, industry, data sensitivity, 9 capability types, and 3 maturity tiers auto-filter which items apply. An interactive risk classifier guides you through 4 questions to recommend the right classification. Three assessment depths (Starter, Standard, Advanced) let you scale from quick evaluation to full pre-certification audit.

AUTO-SCOPE16 TEMPLATESRISK CLASSIFIER

📊

Real-Time Compliance Dashboard

Composite risk score with tier-weighted methodology. 16-section risk heatmap, SWOT analysis with sector-specific threats, N/A coverage KRI, Critical In-Progress tracker, and methodology panel explaining the scoring model. N/A items are properly excluded from denominators so marking items not-applicable never deflates your progress. Scores update live as you assess items.

LIVE SCORINGSWOTHEATMAP

🚦

10 Deployment Gates

Three-state verdict: GO, CONDITIONAL GO, or NO-GO. 8 hard gates (critical items assessed, risk register complete, kill-switch documented, N/A inflation check, etc.) and 2 soft advisory gates. EU AI Act obligations gate is region-aware. Fires as HARD for EU deployments, SOFT for others. Consistent across dashboard, print report, and PDF export. Single shared computation ensures no gate divergence.

GO/NO-GOEU-AWARECONSISTENT

🛡️

8 Agentic Threat Categories

Prompt Injection, Privilege Escalation, Data Exfiltration, Multi-Agent Hijack, Memory Poisoning, Tool/MCP Exploitation, Autonomy Drift, and Cascading Failure. Each card shows risk reduction percentage and drill-down to related assessment items.

MITRE ATLASOWASPDRILL-DOWN

📄

5 Premium PDF Reports

Five export formats powered by jsPDF. Fully offline, no CDN calls, no external dependencies. Self-Assessment Summary (attestation blocks, signature lines), Executive Summary (KPI cards, SWOT grid, threat tables), Full Detailed Report (all sections, remediation plan, framework coverage), Agent Risk Profile (threat intelligence narrative, risk scoring breakdown), and Post-Assessment Governance Report (deployment verdict, domain analysis, remediation roadmap, residual risk statement). Choose your report from a dropdown and generate in seconds.

SELF-ASSESSMENTEXECUTIVEDETAILEDRISK PROFILEGOVERNANCEOFFLINE PDF

💾

Full Data Persistence & Import Hardening

Auto-saves to browser localStorage with debounced writes and beforeunload flush. Session restore banner on reload. JSON import/export with automatic backup before overwrite, record count limits, field length truncation, and status whitelist validation. CSV export for spreadsheet integration. Quota monitoring with size indicator. All data stays local. Nothing leaves your machine.

OFFLINEAUTO-SAVEEXPORTIMPORT HARDENED

🧰

Guided Wizard Mode & Evidence Linking

Switch between table view and guided wizard at any time. The wizard walks you through each in-scope item with full context: why it matters, which frameworks require it, and what evidence to collect. Link shared evidence across items. If one policy satisfies multiple requirements, link them to avoid documenting the same thing twice. Built-in acronym tooltips explain every technical term (HITL, SBOM-AI, NHI, MCP) on hover. Per-section time estimates help you plan your assessment schedule.

STEP-BY-STEPEVIDENCE LINKINGACRONYM TOOLTIPSTIME ESTIMATES

Assessment Sections

16 Governance Domains · 198 Items · Tier-Weighted

Core AI regulations, autonomy-specific requirements, and standards documentation. Covers EU AI Act classification, NIST AI RMF GOVERN functions, and ISO 42001 management system alignment.

EU AI ActISO 42001NIST AI RMF

Boundary enforcement, dynamic control monitoring, and testing/validation for agent action scope. Addresses least-privilege access, action-space boundaries, and tool use authorization.

OWASP LLMCSA MAESTRO

Core risk identification, advanced risk types, and risk treatment for autonomous AI operations. Covers autonomy drift, emergent behaviors, and cascading failure scenarios.

NIST AI RMFISO 42001

HITL requirements, kill-switch and emergency controls, monitoring and feedback loops, and approval fatigue management. EU AI Act Art. 14 human oversight compliance.

EU AI Act Art. 14ISO 42001 A.9.3

Explainability mechanisms and taint tracing for agent decision chains. Covers audit trail requirements, decision rationale logging, and transparency obligations.

EU AI Act Art. 13NIST AI RMF

Core testing, security and adversarial testing, bias and impact testing, and regression testing for autonomous agents. Covers prompt injection testing, multi-agent coordination validation, and red-team exercises.

OWASP LLMMITRE ATLAS

Security controls, inter-agent trust boundaries, and instruction hierarchy. API key management, data exfiltration prevention, and credential rotation for autonomous systems.

OWASP LLM Top 10CSA MAESTRO

Privacy compliance including GDPR consent management, HIPAA PHI protections, data minimization, BAA requirements, and breach notification procedures for AI-processed data.

HIPAA 45 CFR 164GDPR

Model cards, system documentation, AI Bill of Materials (AI-BOM), and behavioral documentation requirements for autonomous AI agents.

ISO 42001 Cl. 7.5NIST AI RMF

Fairness, bias prevention, environmental impact, and societal risk assessment for autonomous AI deployments.

OECD AI PrinciplesISO 42001

Role-based training, competency assessment, and organizational readiness for autonomous AI operations.

ISO 42001 Cl. 7.2

Agent-specific incident response procedures, containment strategies, recovery playbooks, and post-incident analysis for autonomous system failures.

NIST AI RMF MANAGEHIPAA Breach

Agent versioning, identity management, lifecycle governance, decommissioning procedures, and behavioral bill of materials (BBOM).

CSA MAESTRO

Multi-agent coordination, inter-agent communication protocols, delegation chains, and emergent behavior monitoring for multi-agent systems.

CSA MAESTROOWASP ASI

Tool authorization, MCP server governance, composition risk assessment, and capability expansion controls for tool-using AI agents.

MCP Risk GridOWASP LLM

Memory poisoning prevention, context window management, persistence controls, and long-term memory governance for stateful AI agents.

CSA MAESTROMITRE ATLAS

Audience

Who uses this tool

🛡️

CISO / Security Lead

Assesses agent security posture across 8 threat categories. Uses deployment gates to make GO/NO-GO decisions. Exports Certification Statement for the board and stakeholders.

⚖️

Compliance Officer

Runs the full 198-item assessment scoped to their regulatory environment. EU region auto-activates EU AI Act hard gates. HIPAA items surface for healthcare. Framework coverage tab proves alignment.

🔧

AI/ML Engineering Lead

Uses the wizard mode to walk through technical controls item by item. Gap analysis with owner assignment and target dates creates an actionable remediation backlog for the engineering team.

📈

Risk / GRC Manager

Exports the Executive Summary PDF for leadership briefings. SWOT analysis surfaces strategic risks. Per-item effort estimates (Quick/Moderate/Significant) feed into remediation budgeting.

Framework Alignment

7 frameworks mapped to 198 items

42001

ISO/IEC 42001:2023

AI Management System requirements. Covers Annex A controls for autonomous systems, human oversight (A.9.3/A.9.4), risk assessment (Cl. 6.1.2), and documentation (Cl. 7.5).

A.9.3A.9.4Cl. 6.1.2Cl. 7.5

NIST

NIST AI RMF 1.0

All four functions: GOVERN (organizational accountability), MAP (context and risk identification), MEASURE (metrics and monitoring), MANAGE (response and recovery).

GOVERNMAPMEASUREMANAGE

EU AI Act 2024

Art. 9 risk management, Art. 13 transparency, Art. 14 human oversight, Art. 26 deployer obligations. EU gate auto-activates for EU/EEA deployments.

Art. 9Art. 13Art. 14Art. 26

OWASP LLM Top 10 / ASI

Addresses top LLM security threats including prompt injection, insecure output handling, and supply chain vulnerabilities specific to agentic architectures.

LLM01LLM02LLM07ASI

CSA

CSA MAESTRO

Agentic AI threat modeling framework. Multi-agent coordination, tool composition risks, memory poisoning, and delegation chain vulnerabilities.

Multi-AgentTool CompositionMemory

HIP

HIPAA 45 CFR 164

Privacy Rule, Security Rule, and Breach Notification requirements for AI systems processing protected health information. BAA assessment and PHI safeguards.

Privacy RuleSecurity RuleBreachBAA

Value Proposition

Interactive tool vs. building your own

✓ This Assessment Tool

✓198 items auto-scoped to your profile. Start assessing in minutes, not weeks.

✓Real-time scoring, heatmap, deployment gates, and threat mitigation status. No manual calculations.

✓5 premium PDF exports, generated offline. Self-Assessment Summary, Executive Summary, Detailed, Risk Profile, Governance Report.

✓7 frameworks mapped per item. Framework coverage proven, not claimed.

✓Guided wizard mode with context, framework references, and effort estimates per item.

✓Offline, private, no account. Data never leaves your browser.

✗ From Scratch

✗40+ hours to research, draft, and map assessment items across 7 frameworks for agentic AI.

✗Manual scoring in spreadsheets. No real-time dashboard, no deployment gate logic, no heatmap.

✗PDF report formatting takes hours. No attestation blocks, no branded layouts, no framework tables.

✗Framework mapping requires deep expertise in each standard. Crosswalk errors create audit risk.

✗No guided mode. Assessors need existing expertise to know what each item means and why it matters.

✗Cloud tools require accounts, data leaves your perimeter, vendor lock-in on export formats.

Return on Investment

Platform capabilities. Standalone price.

What This Capability Typically Costs

GRC platforms bundle risk, compliance, audit, and vendor management under annual subscriptions that often require professional services, onboarding, and team training before your organization sees full value. This tool is a fit-for-purpose program enhancement. It covers one specific workflow, works immediately in your browser, and doesn’t require committing to a technology platform just to access the capability you need.

GRC Platform Pricing

Entry-level (Sprinto, Vanta)$5,000 – $15,000/yr

Mid-market (Hyperproof, ZenGRC)$12,000 – $72,000/yr

Enterprise (LogicGate, Archer)$25,000 – $150,000+/yr

Recurring$5,000+/yr

This tool

One-time purchase$250.00

RenewalNone. Yours forever

198 items + 8 frameworksIncluded

PDF evidence reportsIncluded

One-time$250.00

$4,750+ first-year savings

vs. $5,000+/yr entry-level GRC platform. Own it forever

Platform pricing based on published 2026 rates from Sprinto, Vanta, Hyperproof, ZenGRC, and LogicGate

“Why is this $250?”

I’ve been building governance documentation since 2012. That year I helped my healthcare analytics company earn its first HITRUST certification. Since then I’ve created and managed compliance documentation for SOC 2, PCI DSS, HITRUST, and ISO 27001 programs across enterprise organizations. I have a writing degree and I genuinely like this work.

HITRUST CSF SOC 2 PCI DSS ISO 27001 14 Years in GRC Writing Degree

Credentials don’t explain the price though. This does:

I want AI adopted responsibly. I don’t want my friends, my family, or my kids dealing with threats and risks that come from deploying AI without governance. Organizations will take the path that earns them the most money. That’s how business works. So I feel obligated to put quality documentation out at a price where governance isn’t something only Fortune 500 companies can afford. I don’t need to charge thousands of dollars to make a difference. I care about helping where I can.

You’re building something that matters. Documentation that earns trust from your board, your customers, and your team. And it has to be right.

The citations in these templates were checked against the published standards. The actual ISO 42001:2023 PDF, the EU AI Act regulation text, the NIST AI RMF 1.0 document, the OWASP LLM Top 10, and CSA MAESTRO. Control IDs, article numbers, crosswalk mappings. This is practitioner-built from someone who’s sat in the audits, written the remediation plans, and knows what survives a compliance review.

Derrick Jackson // Founder, Tech Jacks Solutions

Related Templates

Often bought together

ISO 42001 NIST AI RMF EU AI Act OWASP LLM CSA MAESTRO HIPAA HITRUST

198 assessment items
16 governance templates
10 deployment gates
8 threat categories
5 premium PDF reports
Interactive risk classifier
Acronym tooltips (15 terms)
Per-section time estimates
Evidence linking per item
SWOT analysis
Gap analysis + remediation
Guided wizard mode
JSON/CSV import & export
Auto-save + session restore
100% offline & private

★ BUNDLE DEAL. SAVE 30%

Get the complete AI Risk Management suite

The Command+Agentic Bundle includes this tool plus 17 more risk management documents and interactive tools. $919 instead of $1,312 individually.

Explore the Agentic AI Hub

Guides, policies, assessments, and tools for governing autonomous AI agents, from autonomy classification to multi-agent pipelines.

Important

This tool is a starting point, not a finished product. It’s designed to accelerate your AI agent governance program by giving you a professionally structured assessment with verified framework citations across 7 standards. It doesn’t replace legal counsel, compliance review, or organizational judgment. Every organization is different. You’ll need to customize the assessment scope for your specific regulatory context, risk tolerance, and deployment architecture. Assessment results and PDF reports reflect the data you enter and the profile you configure. We recommend routing assessment outputs through your legal, compliance, and security teams before making deployment decisions. What you’re buying is a jumpstart that saves you weeks of research and development, not a guarantee of compliance. Framework citations reflect regulations as of Q2 2026. Regulatory frameworks evolve. Check for updates to the EU AI Act, ISO 42001, and NIST AI RMF before your annual governance review. Single organization license. All purchases include a 14-day money-back guarantee. If the tool does not meet your needs, contact us for a full refund.