Quick self-score

Eight stages. One screen each. About three minutes for this pass.

The five levels

01Intent

Why are we doing this, and what risk will we accept?

1 · Ad hocIndividual executives are curious. There's no stated organisational position on what AI is for.

2 · RepeatableA position exists in a deck. It gets referenced when someone asks, not when someone decides.

3 · DefinedA written adoption thesis, a risk appetite statement, and a named executive owner with budget authority.

4 · ManagedThe thesis and the appetite get reviewed on a set cadence against what actually happened.

5 · OptimisingRisk appetite tightens and loosens deliberately, based on how the controls actually performed.