Standfirst. Readiness is not enthusiasm, tool access or the number of pilots. A credible assessment examines whether an organisation can choose, control, operate and retire defined AI workflows with evidence.
Avoid self-scoring theatre
Surveys often ask whether strategy, governance or data “exist”, then convert optimistic answers into a maturity percentage. This rewards policy documents and confidence rather than operating evidence. Scores also conceal unevenness: strong infrastructure does not compensate for absent ownership or unusable documents.
Assess capabilities against evidence
Review six domains: business selection, information governance, legal and risk review, technology and security, human control, and operations. For each, use an evidence ladder:
- Unformed: no repeatable practice.
- Defined: an owner and documented method exist.
- Demonstrated: the method has operated on a bounded workflow.
- Measured: outcomes, failures and exceptions are monitored.
- Adapted: evidence changes controls and investment.
Do not average away a critical gap. A workflow requiring sensitive data cannot inherit a high readiness label from unrelated public-content experiments.
| Domain | Example evidence |
|---|---|
| Selection | Prioritised workflows with baselines |
| Information | Owners, classifications, authorised sources |
| Risk | Recorded assessments and approvals |
| Technology | Architecture, access, testing and exit plan |
| Human control | Named checkpoints and exception evidence |
| Operations | Monitoring, incidents, change and retirement |
Use interviews, document review and workflow sampling, not survey answers alone. Report confidence and missing evidence. Separate organisation-wide capability from readiness of a specific use case.
Cytria’s operational interpretation
Maturity is the organisation’s demonstrated ability to repeat a controlled outcome, not its vocabulary. A restrained report should identify the next capability to build and the workflows currently outside tolerance.
Limitations, sources and metadata
- NIST, AI RMF Core; FINMA, AI survey; reviewed 14 July 2026.
- Type: Field Notes
- Title tag: Assess AI readiness without exaggerating maturity | Cytria
- Meta description: An evidence-based maturity method that separates enthusiasm and policy from demonstrated operational capability.
- Slug: `how-to-assess-ai-readiness-without-exaggerating-maturity`
- Author / owner: Cytria Research / Cytria
- CTA: Replace one maturity score with an evidence review
- Editorial risk: Do not imply that the ladder is a regulated standard or a validated benchmark.