Firms that cannot demonstrate effective AI governance are now facing a concrete commercial penalty: coverage denials at renewal. To help organizations get ahead of that shift, Aon has launched an AI Risk Diagnostic, an enterprise-level tool that assesses AI governance maturity and risk exposure as the professional liability market moves away from silent AI assumptions.
The diagnostic was developed by Aon's Global Risk Consulting team. It evaluates AI governance, maturity, and risk exposure. The tool aligns with established frameworks: ISO standards, the EU Artificial Intelligence Act, and the National Institute of Standards and Technology (NIST) AI Risk Management Framework.
"Artificial intelligence is creating significant opportunities for organizations, but it is also introducing new and increasingly complex risk considerations across governance, compliance, operations, and resilience," said Richard Waterer, Aon global risk consulting leader. Waterer said boards and regulators now expect greater visibility into how AI is deployed, adding that organizations need a clearer view of their maturity, control environment, and exposure to respond.
The tool works through two analytical lenses: an AI Maturity Analysis and an AI Risk Taxonomy Analysis. The first assesses the maturity of AI governance, lifecycle management, processes, and controls. The second identifies areas where AI may create new risks or amplify existing exposures across the organization.
Clients receive reporting that covers an overall assessment of AI maturity, governance gaps, and priority actions. The output also includes visual dashboards, heat maps, and risk exposure mapping. The package includes prioritized recommendations to strengthen governance, controls, compliance, and resilience.
By linking maturity scores with risk exposure, the tool helps organizations identify where AI may be generating operational, regulatory, cyber, liability, and business risks. Aon said the assessment is intended to provide a foundation for AI-related decision-making at the enterprise level.
Willis research found that firms without documented AI governance frameworks now face coverage denials at renewal. The professional liability market has responded by shifting away from silent AI assumptions, with carriers now requiring affirmative warranties or applying absolute exclusions.
For underwriters and brokers, the risk picture spans several lines. Cyber, professional indemnity, errors and omissions, product liability and D&O all carry potential AI exposure. The EU AI Act's high-risk obligations take effect in August 2026. That adds a compliance dimension to what has until now been a governance conversation.
Aon's existing suite includes Broker Copilot, Claims Copilot, and Risk Analyzer tools, all positioned as part of a wider risk intelligence offering. The AI Risk Diagnostic adds an assessment layer to that portfolio. Independent, structured evaluations of AI governance are becoming a practical requirement across commercial lines.
