None of that is solved by a better tool. It is solved by decisions — which is why this audit ends in a decision list with owners rather than a maturity score to file. The score exists because boards ask for a baseline they can compare against next year, not because a number changes anything on its own.
The audit is run as part of the AI Readiness & Governance Assessment: the same inventory, interviews and document review produce both the readiness picture and the governance baseline, because in practice they come from the same conversations. Organizations that only need the governance half can scope it that way.