AI adoption is a programme governance challenge, not a technology challenge. The same disciplines that determine whether an ERP or HRIS implementation succeeds apply here: data governance, change readiness, strategic alignment, and accountable oversight. This assessment evaluates whether those foundations are in place. For the seven dimensions in full, and four questions that test readiness against evidence rather than intent, read how to assess AI readiness below.
Three minutes on what the Auditor-General counted at the Australian Taxation Office, the distinction between a model being sound and an organisation being able to show it, and the seven dimensions this assessment measures.
43 artificial intelligence models were running in production. 32 of them had no completed data ethics assessment. The framework existed. It had not been pointed at them. That is the Auditor-General, counting the Australian Taxation Office's models in 2024.
A data ethics assessment is how an organisation shows a model is fair, explainable and contestable. The audit was not about whether those models were unfair. It was about whether the Tax Office could show they were not.
The Australian National Audit Office found no clearly defined arrangements for testing, review and approval. And no evidence of regular monitoring once a model was in production. Capability was never the problem. The Tax Office had built 43 of them. Deployment had run ahead of the governance.
The Tax Office was already building the monitoring the audit found missing. It agreed to all 7 recommendations. And the rules for government AI were still being written while the audit ran.
Since 2024, Commonwealth agencies have had to assign accountability for AI. That is a governance instrument, not a technical one. A model in production has already changed a default. And a changed default needs what every programme needs.
Someone accountable, and a record of what was approved. A review cadence, and a way to contest the result. This is the same discipline an ERP or HRIS programme needs. The platform is different. The gap is not.
7 dimensions decide whether an adoption holds. Data readiness. Whether what sits underneath is governed, not just available. AI governance framework. Whether anyone holds clear accountability for AI decisions. Talent and skills. Whether you have the people to guide this, and can keep them.
Technology infrastructure. Whether it can be integrated and secured. Strategic alignment. Whether the executive agrees what AI is meant to deliver. Ethics and risk management. Whether bias and drift are somebody's job. Change readiness. Whether the people working alongside it were prepared.
A tool was approved for a pilot and it is now across the business. Your vendor has added AI to a module you already license, and nobody signed anything. Your privacy team is still forming a view. Your delivery team has booked the go-live.
21 questions. 7 dimensions. 4 minutes. Only two of them are technical. That distribution is the finding. The technology arrives on its own. The framework has to be pointed at it.
An AI readiness assessment is only useful if it tests behaviour rather than intent. Four questions do most of the work, and none of them requires a specialist to answer.
Where is AI already active in the platforms you run? Most organisations cannot produce the list. Features have been enabled by default, switched on during configuration, or delivered in a release note nobody read. An inventory of where the technology is already making or shaping decisions is the first honest measurement of readiness, and it is usually the most uncomfortable.
For each of those, who approved the delegation? Not who configured it. Who decided that this class of decision should move. If the answer is the implementation partner or the release cycle, the delegation happened without a decision.
What is the standard the output is checked against? A recommendation is only as good as the reference point used to challenge it. Organisations that cannot name the standard are not reviewing outputs. They are receiving them.
What happens when it is wrong? Follow one hypothetical error end to end. Who notices, how quickly, what gets rolled back, who is accountable to the customer or the employee affected. If the path breaks at any point, that break is the readiness gap and no amount of infrastructure closes it.
Four questions, all answerable from evidence that already exists. An assessment that scores intention will return a comfortable result. An assessment that scores these will return a useful one.