Skip to content
Free assessment

AI risk assessment for marketing teams

Eight questions on how your team actually uses AI. You get an exposure tier, the two or three places your risk is concentrated, and the approval workflow that fits — not a generic policy template. It scores in your browser and nothing is stored.

0 of 8 answered
–/24
Usage

How widely is AI already used across your marketing work?

Claims

Does your marketing make performance, pricing or comparative claims?

Regulation

How regulated or claim-sensitive is your sector?

Data

What kind of information gets pasted into AI tools?

Policy

Is there a written rule for what AI may and may not be used for?

Review

What happens before AI-assisted content is published externally?

Evidence

If a published claim were challenged, could you show what evidences it?

Brand voice

Since adopting AI, has your content held its distinctiveness?

The four tiers

Exposure sets the workflow, not the other way round

Governance that costs more than the risk it removes does not get followed, which is worse than none at all because it creates a false record of control. So the approval model scales with what is actually at stake.

Score 0–5

Contained exposure

AI use is limited, or the controls around it are already doing their job. The risk here is complacency rather than exposure: as usage widens, the informal checks that work today stop scaling. Keep the rules light, write them down, and revisit them when adoption steps up.

Workflow: Light-touch approval

Score 6–11

Moderate exposure

AI is embedded enough to matter and the controls have not caught up. Nothing here is alarming on its own, but the combination — daily use, external publishing and no documented boundary — is how unevidenced claims and quiet data leaks happen. A single reviewer and a short evidence habit closes most of it.

Workflow: Single-reviewer approval

Score 12–17

Elevated exposure

You have real exposure: AI in regular use, claims or regulated content in play, and no reliable record of what was checked. This is where a challenged claim becomes a scramble and where confidential detail has probably already been pasted into a public tool. Governance here is genuinely urgent, and cheap relative to the risk.

Workflow: Tiered approval with recorded evidence

Score 18–24

Critical exposure

Heavy AI use, claim-sensitive output, sensitive data in public tools and no gate anywhere. The realistic assumption is that something has already gone out that you could not defend if it were questioned. Fix the data boundary and the publish gate this week; the documentation can follow.

Workflow: Gated approval with an audit trail

Free starter pack

The AI Governance Starter Pack

The templates that turn your result into something operational: a one-page AI use policy, a risk register with starter rows already written, and a tiered approval workflow with the pre-publication checks to go with it.

  • A one-page AI use policy your team will actually read
  • A risk register with six starter rows most marketing teams need
  • A three-tier approval workflow sized to real exposure
  • A six-question pre-publication checklist for your content brief
  • A session plan for completing the pack with the people who publish

PDF · 10 pages · templates, not legal advice. Your details are used to send the pack and nothing else.

Questions

Questions about the AI risk assessment

What does the AI risk assessment actually measure?
Eight things that decide how exposed a marketing team is when it uses AI: how widely AI is already in use, whether your content makes performance or comparative claims, how regulated your sector is, what information gets pasted into AI tools, whether a written rule exists, what review happens before publishing, whether claims have recorded evidence, and whether your brand voice has held. Each answer scores nought to three, and the total places you in one of four exposure tiers.
How is the exposure tier calculated?
The eight answers add to a score out of twenty-four. Nought to five is contained exposure, six to eleven moderate, twelve to seventeen elevated and eighteen to twenty-four critical. The tier then sets the approval workflow: light-touch self-checking at the low end, a named reviewer in the middle, and two reviewers plus a retained evidence record where claims are regulated or commercially weighted.
Why does the recommended approval workflow have tiers rather than one rule?
Because uniform approval is the mistake that kills governance. Route everything through one reviewer and the team builds a workaround within a month. Tiering by exposure means internal drafting needs no approval at all, external content gets one reviewer, and only claim-heavy or regulated content carries a second review with recorded evidence. The gate holds where the risk is and disappears where it is not.
Is anything I enter stored or sent anywhere?
No. The quiz scores entirely in your browser and nothing is submitted — there is no email gate on the result. If you want the templates that go with it, the AI Governance Starter Pack is a separate download you can request with your email.
Is this legal advice?
No. It is a practical marketing governance assessment built from how AI actually gets used inside SME marketing teams. It will tell you where your exposure sits and what control closes it, and the output is written to be handed to a legal adviser or data protection officer for review where you have one.
Do you use AI in your marketing consultancy work?
Yes — deliberately, and I help clients do the same. AI is used for research and synthesis, keyword and intent clustering, first drafts that a specialist then corrects, campaign variants and reporting commentary, all under human review with a written data and brand policy behind it. It is never used for the parts that carry commercial risk: positioning, pricing narrative, segment priorities or any claim that has to be defensible. I also work on the other half of the AI shift — making sure your business is the source ChatGPT, Google AI Overviews, Gemini and Perplexity cite when a buyer asks who the credible options are, because a growing share of shortlists are now formed inside an assistant rather than on a search results page.
Why should I use you as my marketing consultant rather than an agency?
An agency sells you delivery. I sell you judgement. Before anyone writes an ad or a blog post, someone has to decide which segments you are targeting, what your proposition is, which channels deserve budget and what a qualified enquiry is actually worth. That is the work that decides whether the delivery pays for itself. I do that work first, in writing, then either brief your existing agency properly or build the plan in-house — and because I have no media to sell you, there is no incentive for me to recommend spend you do not need.
What makes you different from other Fractional CMOs and marketing consultants?
Three things. First, a client-side operating background rather than a pure agency one: I have run marketing inside an industrial B2B manufacturer, dealing with technical buyers, distributor networks, long sales cycles and a board that wants commercial numbers rather than impressions. Second, formal grounding — Member of the Chartered Institute of Marketing (MCIM) and an MSc in Digital Marketing Management, so recommendations are based on tested frameworks rather than whatever is trending on LinkedIn. Third, I work across B2B, retail and SaaS, which means the retail pricing and merchandising discipline informs the B2B work and the SaaS retention thinking informs both.
How much does a marketing consultant cost compared with hiring a Marketing Director?
A full-time Marketing Director in the UK typically costs £70,000-£110,000 plus employer's NI, pension, recruitment fees, holiday and the risk of a bad hire — realistically £100,000+ a year all-in before they have spent a penny on marketing. Consultancy and Fractional CMO retainers give you the same seniority for one or two days a week, at a fraction of that cost, with no notice period and no recruitment risk. For most SMEs turning over £1m-£20m that is the difference between having senior marketing judgement and having none.
Do you work with B2B, retail and SaaS businesses?
Yes — all three, and the differences matter. B2B work centres on pipeline: proposition clarity, technical content, sales and marketing alignment, cost per qualified enquiry. Retail and ecommerce work centres on unit economics: contribution margin after ad spend, repeat purchase rate, lifetime value and the seasonality of demand. SaaS work centres on efficient acquisition and retention: activation, trial-to-paid conversion, churn and payback period. The strategic method is the same; the metrics I hold the plan to are different.
How quickly will I see results from working with a marketing consultancy?
You get clarity in the first two to three weeks: a written diagnosis of where marketing is losing money, what to stop and a prioritised plan. Quick operational wins — tracking that actually works, tightened paid search, fixed conversion paths, a CRM that reports honestly — typically land inside 30 to 60 days. Compounding channels such as SEO and content usually show meaningful movement in three to six months, and that is exactly why the plan sequences fast wins first: they fund the patience the slower channels require.
Will you replace my team or agency?
No. The aim is to make what you already have work harder. In most engagements your team and your agencies keep delivering; what changes is that they receive clear priorities, a proper brief and a measurement framework, and someone senior holds the whole thing to commercial outcomes. Where a supplier genuinely is not performing, I will tell you plainly and help you replace them — but replacement is a conclusion, not a starting assumption.
How do you measure success, and how am I kept accountable to it?
Every engagement is tied to commercial metrics agreed up front: qualified enquiries, cost per qualified enquiry by channel, pipeline value, conversion rate and, where the data allows, revenue and contribution. You get a monthly review pack you can put in front of a board, showing what was done, what it produced and where the next pound of budget should go. If a channel is not paying for itself, you will hear it from me before you have to ask.
What does the first conversation involve, and is there any commitment?
It is a one-hour call, free, with no pitch deck. We cover your growth target, how you sell today, what marketing is currently producing and where the obvious gaps are. You leave with an honest view on whether consultancy, a Fractional CMO retainer, a defined project or nothing at all is the right next step. There is no obligation, and I will say so directly if I do not think I am the right partner for your situation.
Talk it through

Want the governance built rather than described?

The assessment tells you where the exposure is. A governance engagement puts the policy, the register, the brand-safety standards and the approval workflow in place with the team that has to use them.