A practical, self-guided programme for organisations that need to understand their AI use, establish proportionate governance and organise the work — without designing the process from scratch.
The promise
You do not need to become an AI regulation expert to get started. Lucentreg gives your organisation a recommended sequence, clear responsibilities, ready-made meeting structures and practical tools. Your team makes the decisions; the programme helps them know what to do next.
How to use this programme
There are two core roles. The executive sponsor owns the business decision: confirm why the programme is needed, appoint the programme lead, approve the scope and resources, remove obstacles and review progress at key points. This is usually a senior leader with authority to bring functions together. The programme lead runs the work: coordinate the six phases, engage departments, maintain the inventory and action plan, prepare decisions for the sponsor and escalate uncertainty. This can sit with an existing risk, compliance, IT, data or operations lead. One person may cover both roles in a smaller organisation, but accountability should remain explicit.
Executives can start with this overview and Phase 1. The programme lead should then use the phase pages as a working sequence. Employees are not expected to interpret legislation: they simply report how they use AI at work and follow the organisation’s internal guidance.
Your implementation journey
- 01 · Mobilise — Week 1. Appoint a sponsor and programme lead, agree scope and form a small working group. Open phase 1 →
- 02 · Discover — Weeks 2–3. Find out where AI is being used, including casual, experimental and embedded use. Open phase 2 →
- 03 · Prioritise — Weeks 4–5. Review what has been discovered and decide which uses need closer attention. Open phase 3 →
- 04 · Establish governance — Weeks 6–7. Agree roles, policies, decision-making and oversight. Open phase 4 →
- 05 · Implement — Weeks 8–12. Work through priority actions, controls, training and evidence. Open phase 5 →
- 06 · Maintain — Ongoing. Put a manageable review and reporting rhythm into business as usual. Open phase 6 →
The recommended operating rhythm
- A weekly 30-minute programme check-in during the initial rollout.
- A monthly 45-minute steering meeting while the programme is being established.
- A quarterly governance review once the arrangements are operating routinely.
- Immediate escalation of suspected prohibited practices, serious harm, material security or privacy incidents, or other urgent concerns.
Designed for busy organisations
The 90-day sequence is a starting point, not a legal deadline. Keep the core team small, delegate work to existing functions and scale the process to the organisation’s size, AI use and risk profile.
Before you begin
- Name one accountable executive sponsor and one day-to-day programme lead.
- Use the short discovery process to capture real behaviour, not just officially approved tools.
- Do not ask employees to make legal classifications. Capture facts and escalate uncertainty.
- Keep sensitive or personal information out of general discovery forms unless there is a clear, approved need.
Supporting resources
Lucentreg provides guidance and downloadable, blank resources for your organisation to use and maintain in its own environment. This includes an executive briefing, meeting and communications templates, an AI usage questionnaire, an integrated governance workbook, policy templates, assessment guidance and worked examples. Keep completed questionnaires, inventories, assessments and decisions in your organisation’s approved systems. Do not send operational records or sensitive information to Lucentreg.
Explore Lucentreg resources → Read the EU AI Act overview →
Advisory notice
Lucentreg provides regulatory intelligence, educational material and practical implementation guidance. It is not a law firm and does not provide legal advice, legal opinions, conformity assessments or certification. This programme does not guarantee compliance. Regulatory applicability depends on the organisation’s facts and circumstances. Obtain independent qualified advice where needed, particularly for legal classification, prohibited practices, high-risk systems, fundamental rights, regulatory notifications and conformity assessments.