Skip to content
AI Policy Generator

Assessments, matrices and reports · Assessment template · Governance

AI Maturity Assessment

Questionnaire and scoring scale to measure maturity in AI strategy, data, governance, risk and talent, with a prioritized list of next steps.

GROU LLC · built on AI Business Core, by Vreinn · How we verify sources

Who it helps

Any organization starting to organize its AI use and needing a baseline.

Who uses it
Executive leadership, AI committee, PMO, legal, compliance and process owners
Usual owner
AI committee; digital transformation
Formats
DOCX, PDF
Languages
Español, English
Approximate length
4 pages
Length
Standard. A complete policy, procedure, plan or guide, with roles, deadlines and evidence.
Document type
Assessments, matrices and reports. Tools to analyze a system, a vendor or a risk and document the conclusion.
Document code
APG-GOV-005. APG is the AI Policy Generator collection, GOV the area (Governance) and the number identifies the document. Use it to cite the document in your document system.

Preview

Excerpt generated from the document: the "How to use this document" section, the title and the first two sections, plus the full table of contents. The rest of the text is not shown.

APG-GOV-005 · Version 1.1.0 · sources as of November 4, 2026

How to use this document

  • What it is for. This is a template to measure, in a few weeks, the organization's starting point in artificial intelligence: strategy, governance, use and inventory of systems, risk, data and technology, and people. It turns scattered opinions into a score per dimension, a list of risks to contain now and a prioritized plan of next steps.
  • Who should own it. The AI lead, who presents the results to Management or the AI committee. Enter the function in [RESPONSIBLE FUNCTION] and the person who coordinates the assessment in [OWNER].
  • Decisions to take first. Decide the scope (the whole organization or one business unit), who will answer (Section 2.2) and the date results will be presented to leadership.
  • How to score. Score each statement from 1 to 5 using the scale in Section 3 and note the evidence behind the score. Without evidence, the maximum score is 2. When torn between two levels, choose the lower one.
  • Fields to complete. Replace the bracketed fields, such as [ORGANIZATION NAME], [OWNER] and [COMPLETE]. You may add sector-specific statements at the end of each dimension.
  • Country variants. This document has no country variants. For the risk and compliance dimension, see "Related regulatory references" and the obligations that apply to your country and sector.
  • Review. It does not need legal review to be applied, but legal, privacy and security should validate the answers to dimension 4 and the list of immediate risks (Section 6).
  • Approval and use of results. Present the summary (Section 8) to the AI committee or executive leadership, record the decisions in the minutes and use the plan in Section 7 as input to the 30-60-90 Day AI Implementation Roadmap and the Corporate AI Strategy Plan. Repeat the assessment every year to measure progress.

AI Maturity Assessment

Field Value
Organization [LEGAL ENTITY NAME]
Scope assessed [COMPLETE: whole organization or business unit]
Coordination [OWNER] ([RESPONSIBLE FUNCTION])
Assessment date [DATE]
Results approved by [APPROVED BY]
Next assessment [DATE]

1. Purpose and scope

1.1 This assessment measures the maturity of [ORGANIZATION NAME] in the use and governance of artificial intelligence, with three goals:

a) establish an objective baseline that can be compared over time;
b) identify risks that require immediate containment;
c) prioritize actions for the next 90, 180 and 365 days.

1.2 It assesses six dimensions:

No. Dimension What it looks at
1 Strategy and value Whether AI serves business objectives, with priorities, budget and measured results.
2 Governance and roles Whether there are rules, owners and a body that decides on AI.
3 Use and system inventory Whether the organization knows which AI it uses, who uses it and for what.
4 Risk, ethics and compliance Whether risks and obligations are identified and controlled before and during use.
5 Data and technology Whether data, integrations and system operations are reliable, secure and traceable.
6 People and talent Whether staff have the skills, training and culture to use AI with good judgment.

2. Method

2.1 Phases.

Phase Activity Indicative duration
Preparation Define scope and participants and gather existing documents 1 week
Data collection Interviews or a workshop per dimension and completion of the questionnaire 1 to 2 weeks
Validation Check scores against evidence and reach consensus 1 week
Results Calculate levels, write findings and plan, present to leadership 1 week

2.2 Participants. At a minimum, representatives of leadership, technology, data, information security, legal and privacy, human resources and two or three AI user functions answer. For a realistic view of day-to-day use, a short staff survey is recommended as a complement.

2.3 Scoring rules.

  • Each statement is scored from 1 to 5 using the scale in Section 3.
  • The score reflects what exists and works today, not what is planned.
  • Without documentary or verifiable evidence, the maximum score is 2.
  • When torn between two levels, choose the lower one.
  • If participants disagree, record the disagreement and resolve it with evidence.
  • "Not applicable" is used only when the statement makes no sense for the organization; it is justified and excluded from the average.

2.4 Calculation. Each dimension's level is the average of its statements, rounded to one decimal place. The overall level is the average of the six dimensions. The lowest dimension is also highlighted, because it usually limits overall progress.

Full table of contents of the document:

  • 1. Purpose and scope
  • 2. Method
  • 3. Maturity scale
  • 4. Questionnaire
  • 5. Results sheet
  • 6. Risks requiring immediate containment
  • 7. Next steps plan
  • 8. Executive summary
  • Implementation aids
  • Related regulatory references
  • Version history

No obligation in the registry references this document directly. It is a good-practice document: it helps organize AI use and clients and standards often ask for it.

Kits that include this document

Includes 91 documents

Complete pack

Every sellable template in the catalog in a single pack: base policies, procedures, registers, notices and matrices to adapt with your own team, at a flat price below the sum of the individual documents.

USD 297USD 3393

Complete kit · available to buy

What AI Policy Generator is and how it works