AI Readiness Assessment: A 5-Pillar Framework and Scorecard

An AI readiness assessment measures whether your business can get real value from AI right now: whether you have clear goals, usable data, documented processes, willing people, and basic guardrails. It gives you a score, shows your weakest area, and tells you what to fix before you spend money on tools or custom builds.

This is the five-pillar framework we use with small and mid-sized businesses: Strategy & Leadership, Data & Systems, Processes & Operations, People & Culture, and Governance & Risk. Each pillar has three diagnostic questions scored 0–3, for 15 questions in all. Your total scales to 0–100 and maps to one of four tiers, each with a clear next move. Score yourself below, or use our free interactive AI Readiness Assessment, which scores the same five pillars.

Most businesses skip this step and go straight to tools. In the Census Bureau's 2026 AI survey, 64% of AI-using businesses reported no organizational adjustments to use AI. The most common changes, training staff and developing new workflows, were each reported by only about 15%. That's how AI ends up as a stack of logins nobody uses.

When to run an AI readiness assessment

Run one before you roll out AI tools to the whole team, before you hire a consultant or agency, and before you set an AI budget. It's also the right reset after a pilot that fizzled, because the cause often sits in one of the five pillars rather than in the tool.

A readiness assessment isn't an IT audit or a list of AI ideas, and it won't tell you which project will pay off most. That's an opportunity question, covered below. What it tells you is whether the projects you pick have a fair chance of working.

How to score each question

Score every question from 0 to 3 on the same scale:

When you're torn between two scores, pick the lower one. An honest 40 is more useful than a flattering 70. Answer as a group if you can: the owner, whoever runs operations, and whoever knows your systems and data.

The five pillars of AI readiness

1. Strategy & Leadership

What ready looks like: a named owner for AI, one to three business goals with metrics attached, a budget (even a small one), and leaders who use AI themselves.

1. Have you named the business outcomes you want from AI, with a metric for each, such as hours per invoice, response time, or close rate?
2. Is one person accountable for AI decisions, with time set aside to do the work?
3. Have you set a budget, and decided in advance what result would count as success or failure?

Scoring tip: a goal written down with a number and a date scores a 3. "Save time with AI" scores a 1.

2. Data & Systems

What ready looks like: your core data lives in a handful of known systems, such as your CRM, accounting, and scheduling software, instead of inboxes and personal spreadsheets. Key fields are filled in consistently, and your systems can share data.

4. Do you know where your core data lives (customers, jobs or orders, invoices, inventory), and does each system have an owner?
5. Is that data consistent enough to trust, with few duplicates, required fields filled in, and one version of the truth?
6. Do your main systems share data through integrations or regular exports, so you can see last week's key numbers within an hour?

Scoring tip: if your weekly report exists only because the office manager rebuilds it by hand every Monday, question 6 scores a 1.

3. Processes & Operations

What ready looks like: your most frequent workflows are written down, you know how often they run and how long each one takes, and some steps are already automated with templates, rules, or integrations.

7. Are your most frequent workflows, such as intake, quoting, scheduling, and billing, documented step by step?
8. Do you know the weekly volume and time per task for those workflows: the baseline AI would improve?
9. Have you already automated some repetitive steps, and do you know which steps are next?

Scoring tip: if the only documentation is in one long-time employee's head, score a 1, however well it works.

4. People & Culture

What ready looks like: people use AI at work through approved business accounts, leaders talk openly about how AI will and won't change jobs, and training uses your own workflows rather than generic demos.

10. Do people use AI tools for work today through approved business accounts?
11. When you change how work gets done, does the change stick, and do people suggest improvements on their own?
12. Has your team had hands-on AI training on your own workflows, with someone they can go to for help?

Scoring tip: heavy AI use on personal accounts with customer data scores a 1 on question 10, not a 3. Enthusiasm isn't the same as readiness. If this is your weakest pillar, practical AI training and adoption is the most direct fix.

5. Governance & Risk

What ready looks like: a written AI policy, clear rules for sensitive data, business-tier tools with reviewed terms, human review for anything customer-facing or financial, and a defined way to measure results.

13. Do you have a written AI policy covering approved tools, off-limits data, and when a person must review AI output?
14. Is sensitive data (customer, financial, health) protected with business-tier tools, access controls, and the right vendor agreements, such as a HIPAA business associate agreement?
15. Do you measure AI's results against a baseline and review them on a schedule?

Scoring tip: a policy nobody has read scores a 1. Our AI policy template is the fastest way to move question 13. For a formal reference, NIST's AI Risk Management Framework is a free, voluntary framework built around four functions: Govern, Map, Measure, and Manage. You don't need to adopt it wholesale, but it's a useful checklist as your use grows.

How to calculate your AI readiness score

Your AI readiness score is your total points divided by 45, multiplied by 100:

1. Score each of the 15 questions from 0 to 3.
2. Add up your points. The maximum is 45.
3. Divide by 45, multiply by 100, and round to a whole number.
4. Add up each pillar separately (out of 9) and circle the lowest one.

The weakest-pillar rule: if any pillar scores 3 or less out of 9, make it your first project, whatever your total says. A clear strategy can't make up for data nobody trusts, and a promising pilot can be shut down by one data incident.

Worked example

Example: a 30-person home services company scores itself.

The total is 18 of 45, so (18 ÷ 45) × 100 = 40, the bottom of the Experimenter tier. But Governance & Risk scores 1 of 9: there's no written policy, several people use personal AI accounts, and nobody measures results.

Their first move is a 2-week fix: a short written policy, business seats for the people already using AI, and a baseline for one workflow. With that done, they're ready for a controlled pilot.

Rather not do the math by hand? Take the free interactive version.

What to do at each readiness tier

Each tier has a different next move. The biggest mistake is acting like a tier above your own.

If you're an Explorer, start with level one in our guide to AI for small business. Experimenters can find a pilot in our list of 40 AI use cases for small business. Builders should calculate the ROI of each roadmap item before committing budget.

Common AI readiness gaps in small businesses

When we map a small business's workflows, the same gaps come up again and again. None of them needs a big budget to fix.

1. Tools without an owner. Everyone has an AI login, and nobody is responsible for results.
2. No baseline. The business can't say how long a task takes today, so it can't prove AI helped.
3. Data in inboxes and heads. Key information lives in email threads, personal spreadsheets, and one long-time employee's memory.
4. Undocumented workflows. "We all just know how it works" holds up until you try to automate it.
5. Shadow AI. Staff use personal accounts with customer data because nobody offered approved ones.
6. Waiting for perfect data. Some businesses overcorrect and wait on a cleanup that never ends. You need data clean enough for one workflow, not the whole company.
7. Silence about jobs. When leaders don't say how AI will affect roles, people assume the worst and quietly resist.

AI readiness vs. AI opportunity

Readiness tells you whether you can execute; opportunity tells you where the money is. They're different questions, and a business can score high on one and low on the other.

Example: a moving company with messy dispatch data might have a large opportunity in scheduling but low readiness in Data & Systems. The right plan cleans up the data for that one workflow first, then builds.

Our free AI Readiness Assessment measures readiness. Our paid AI Opportunity Assessment is a 2–3 week deep dive that covers both. It follows the first two steps of our Assess → Prioritize → Build → Scale method: we baseline your KPIs, then rank each opportunity by impact, feasibility, and risk, with a payback estimate for each.

How often should you reassess AI readiness?

Reassess every 6–12 months, or after a major change: a new core system, a new leader, an acquisition, or your first AI workflow in production. Keep your pillar scores from each round. The trend tells you more than any single score.