The AI Readiness Assessment: How Mature Is Your Organisation, Really?

Strategy readiness asks whether the organisation has a clear, specific AI strategy that is integrated with its business strategy, or whether it has a general aspiration to use AI more.

Indicators of low strategy readiness: AI investment is driven by individual function requests rather than a prioritised portfolio aligned to strategic objectives. There is no named executive accountable for AI strategy outcomes. AI ROI is not defined in advance of investment. The board has not discussed AI strategy as a standalone item in the past 12 months.

Indicators of high strategy readiness: AI investment is allocated according to a portfolio framework that prioritises use cases by strategic value. An executive with board-level accountability is responsible for AI strategy outcomes. Pre-defined business metrics will be used to evaluate AI programme success. The board reviews AI strategy at least annually with substantive agenda time.

Data readiness asks whether the organisation's data is in a condition to support the AI deployments it is prioritising.

Indicators of low data readiness: data is fragmented across systems that do not integrate. Significant proportions of data records are incomplete, inaccurate, or inconsistently structured. There is no organisation-wide data classification scheme. Data governance policies are not consistently enforced. There is no clear data ownership at an executive level.

Indicators of high data readiness: key data domains are integrated through a data platform (such as Microsoft Fabric or Azure Data Lake). Data quality programmes are actively managed with defined standards. Data is classified according to sensitivity and appropriate access controls are enforced. Data ownership is assigned at function level with executive accountability.

People readiness asks whether the workforce and leadership have the capability to use, govern, and benefit from AI effectively.

Indicators of low people readiness: AI literacy training has not been systematically provided. Middle managers have not been prepared for their role in AI adoption. There is significant anxiety or resistance about AI in the workforce that has not been addressed. The senior leadership team cannot explain the AI strategy in their own words.

Indicators of high people readiness: a structured AI literacy programme has been delivered to all relevant staff. Middle managers have been specifically prepared to champion AI adoption in their teams. The leadership team is personally using AI tools. The organisation has a programme for developing AI specialists internally.

Governance readiness asks whether the organisation has the policies, controls, and oversight structures needed to manage AI responsibly at scale.

Indicators of low governance readiness: there is no AI policy or acceptable use policy. AI deployments are not risk assessed before production. There is no AI incident reporting process. Data protection impact assessments are not conducted for AI deployments involving personal data. The board has no visibility of AI risk.

Indicators of high governance readiness: an AI policy covering acceptable use, data handling, and human oversight requirements is in force and enforced. Material AI deployments are risk assessed before production. An AI risk register is maintained and reviewed by the board. AI incidents are reported and investigated systematically.

A board that conducts this assessment honestly will typically find that it is strong in some dimensions and weak in others. Very few organisations are uniformly ready or uniformly unready.

The appropriate response to the assessment is not to wait until all dimensions are at high readiness before investing in AI. It is to sequence AI investment in ways that are consistent with current readiness, to invest in readiness improvement in the dimensions that are most constraining, and to govern AI programmes with a clear understanding of which readiness gaps create risk that needs to be actively managed.

An organisation with high strategy and governance readiness but low data readiness should invest in data infrastructure while deploying AI in domains where data quality is already sufficient. An organisation with high data and technology readiness but low people readiness should invest heavily in change management before scaling AI deployment. The assessment drives the sequencing, not the binary decision of whether to proceed.