Download the Readiness Checker (TOOLKIT-AIMS-FRIA-001-CL) and answer all 12 questions. Your score tells you whether to proceed directly to the FRIA Workbook or complete prerequisite work first. A score of 20+ means you are ready to open the workbook and complete the assessment in one or two sessions.

If your readiness score identifies gaps — an incomplete classification register, no designated FRIA lead, an unresolved DPIA status — address those before starting Part B. The workbook is built on the assumption that those prerequisites are in place. Gaps identified during the workbook session create delays and incomplete dimensions.

Open the FRIA Workbook and work through Part A. If none of your AI systems are classified as High-Risk under Annex III, and Article 27(2) does not apply, Part A produces a signed non-trigger confirmation — your compliance document. If a High-Risk system is in scope, Part A triggers Part B.

If Part B is triggered, work through all eight dimensions in order. Dimension D (Rights Risks) requires qualified legal input — do not complete it without a solicitor or legal adviser who can assess EU Charter implications. Dimension H coordinates with your DPIA. Section B9 determines your Article 27(3) notification obligation.

Print to PDF and obtain wet signatures from both the COLP and the AI Risk Owner. File the signed document in your AI governance register alongside the Annex III classification register it depends on. Set a review date — the workbook includes a dated FRIA Review Schedule in the sign-off section.