# Governance Readiness Assessment

**Scoring:** Yes (1.0) · Partial (0.5) · No (0.0) · N/A (excluded)

**RAG:** Green 80%+ · Amber 50–79% · Red <50%

All data stays in your browser.

<div id="assessment-app" class="assessment-container">
  <noscript>
    <div class="admonition warning">
      <p class="admonition-title">JavaScript Required</p>
      <p>The Governance Readiness Assessment tool requires JavaScript to run.
      Please enable JavaScript in your browser to use this tool.</p>
    </div>
  </noscript>
  <div class="assessment-loading">
    <p>Loading assessment tool...</p>
  </div>
</div>

---

## About This Tool

The Governance Readiness Assessment is an interactive tool that helps organizations evaluate their implementation of the [FSI Agent Governance Framework](../framework/index.md) across all 78 controls. It produces a personalized scorecard, gap analysis, and remediation roadmap.

!!! note "Assessment surface distinction"
    The browser-based assessment SPA is a self-assessment questionnaire that scores answers entered by the assessor against the manifest's zone requirements. The Python assessment engine is a telemetry-driven scorer that evaluates collected tenant data (PPAC, Graph, Purview, SharePoint, Sentinel) against manifest `pass_condition` values. The two surfaces serve different audiences and operate on different inputs by design — the SPA is for facilitated self-assessment, the engine is for automated tenant verification. They share `assessment/manifest/controls.json` as a common source of truth but apply it differently.

**New in v1.4:** The assessment tool now includes a per-control "How to verify" drawer showing portal paths, PowerShell commands, expected evidence, and collector field mappings. Sector calibration adjusts control thresholds for 8 institution types (bank, broker-dealer, investment-adviser, insurance-carrier, insurance-wholesale, credit-union, holding-company, other). The solutions bridge integrates with the companion [FSI-AgentGov-Solutions](https://judeper.github.io/FSI-AgentGov-Solutions/) repository, displaying matched automation solutions with tier badges and version pills in the verification drawer and remediation roadmap. Per-role pre-session homework pages group controls by administrator role for delegated pre-assessment review.

### How It Works

1. **Scoping** — Configure your organization type, active governance zones, and adoption phase
2. **Phase 1 Assessment** — Rate each control's implementation status (Yes / Partial / No / N/A)
3. **Phase 2 Drill-Down** — Answer detailed sub-questions for gap controls to refine scores
4. **Results Dashboard** — View executive scorecard, regulatory exposure, and remediation roadmap
5. **Export** — Download results as Excel workbook, JSON, CSV, or print to PDF. JSON exports include a `_metadata` + `_computedScores` envelope (framework version, schema version, pre-computed pillar/overall scores, derived `assessmentStatus`) so downstream tools and reporting agents can consume scores directly without recomputing them. See [`assessment/data/README.md`](https://github.com/judeper/FSI-AgentGov/blob/main/assessment/data/README.md#portal-export-schema) for the full schema.

### Scoring Methodology

- **Yes** = 1.0 (fully implemented)
- **Partial** = 0.5 (refined by drill-down sub-questions)
- **No** = 0.0 (not implemented)
- **N/A** = excluded from scoring

Aggregate scores are calculated as: `score = sum(controlScores) / count(applicableControls) x 100`

**RAG thresholds:** Green (80%+), Amber (50–79%), Red (below 50%)

**Zone-specific scoring:** Zone scores exclude controls whose zone requirements are optional, awareness-only, or N/A.

- **Zone 1** (Personal Productivity) — approximately 10 controls excluded from scoring
- **Zone 3** (Enterprise Managed) — all 78 controls apply

This prevents penalizing organizations for enterprise-only controls that do not apply to personal productivity agents.

### Risk Priority

Gap controls are prioritized for remediation using: `riskPriority = (1 - score) x regulatoryWeight x zoneWeight x phaseWeight`

- Regulatory weight: 3.0 (4+ regulations), 2.0 (2-3), 1.0 (1)
- Zone weight: 3.0 (Zone 3), 2.0 (Zone 2), 1.0 (Zone 1)
- Phase weight: 3.0 (current phase), 2.0 (next phase), 1.0 (future)

### Collaboration

The governance lead can export role-specific sections as JSON files for relevant admins to complete independently, then import completed sections back with conflict detection.

### Data Privacy

All assessment data stays in your browser. No data is sent to any server. Use "Save to File" (JSON export) as the primary artifact for sharing and archival. Browser localStorage is used only as a convenience cache.

!!! note "Disclaimer"
    This tool helps support governance readiness assessment. It does not constitute legal advice, is not a compliance certification, and should not be used as a substitute for professional compliance guidance.
