AI readiness assessment: 16 questions about evidence and responsibility
Record unknowns across data, workflow, team and risk, with evidence, responsible people and the decision each item supports. Readiness has no universal production pass score; assess the actual use and acceptance conditions.
By
Tenten AI FDE Team
Implementation Methods
Published
Updated
Read time
5 min

An AI readiness assessment can start with one intended use: what evidence is available, what is missing and who can provide it. A total score cannot predict staff adoption or replace production acceptance and risk decisions.
The following editorial worksheet groups 16 questions into data, workflow, team and risk. It has no validated weights, industry norms or deployment score. Add or remove questions for the task and record why.
Establish the decision being made
Exploring a use, running a restricted test and launching in production require different conditions. Define the scope being considered: users, eligible data, permission to change external records, review and stop conditions. The evidence then has a specific decision to support.
The NIST AI RMF organizes risk work into GOVERN, MAP, MEASURE and MANAGE. It states that its actions are neither a fixed checklist nor a necessarily ordered sequence. Organizations apply and revisit them in context. The four question groups below do not map directly to NIST's four functions and are not an official certification form.
Sixteen questions and inspectable materials
| Area | Question | Evidence to collect |
|---|---|---|
| Data | 1. Which sources does the task need, and who may provide them? | Source inventory, responsible people and approved access methods |
| Data | 2. Do samples represent the intended use? | Normal, missing, stale and unusual cases, with selection reasons |
| Data | 3. Who may read which content, and how do changes propagate? | Roles and permissions, revocation and update verification records |
| Data | 4. How can someone trace the source and version used? | Source identifiers, versions, update times and necessary transformation records |
| Workflow | 5. Who needs to complete which task? | A bounded task description with inputs and outputs |
| Workflow | 6. How is the work done now, with which limitations? | Defined baseline samples, processing time or quality records |
| Workflow | 7. Which results need human confirmation before taking effect? | Approval points, reviewers and permitted actions |
| Workflow | 8. What happens with missing data, incorrect results or service failure? | Stop, refusal, human handoff and recovery scope |
| Team | 9. Who may decide scope and accept results? | A named process owner, decision authority and communication route |
| Team | 10. Can actual users participate in evaluation? | Representative participants, evaluation arrangements and feedback |
| Team | 11. Who will complete integration, permissions and testing? | Technical contacts, available time and dependencies |
| Team | 12. Who handles changes and incidents after launch? | Agreed operations, support, handover and backup responsibilities |
| Risk | 13. Which processing conditions need prior confirmation? | Data location, retention, deletion and review of applicable requirements |
| Risk | 14. How will errors or unauthorized use be detected? | Appropriate monitoring and audit records, access limits and retention |
| Risk | 15. What dependencies and limitations come with third-party services? | Versions, data-use terms, failure and replacement arrangements |
| Risk | 16. What establishes acceptance, a pause or a need to retest? | Task-specific acceptance cases, risk decisions and review triggers |
The required detail depends on the intended use. Tests may use approved synthetic data; production use may require further permissions and responsibility checks. Manual export is not automatically a failure, and recent updates alone cannot establish that data fits a task.
The GAO AI accountability framework covers governance, data, performance and monitoring, with questions for organizations and assessors to consider. It supports ongoing examination without assigning weights or a pass mark to this 16-question worksheet.
Turn unknowns into assigned work
For each question, record evidence available, evidence needed, or not applicable with a reason. Add the responsible person, the material to obtain and the decision that depends on it. These are collaboration states, not universal deployment readiness levels.
For example, an internal knowledge assistant may not yet have a confirmed limit for stopping document access after a user leaves a group. The work item could ask identity and knowledge-system owners to establish synchronization conditions, reproduce the event with approved test accounts and record document, citation and cache behavior. They can then assess those results against the deployment's requirements. This is a hypothetical example, not a completed test.
If scoring helps prioritize work, document its definitions, evidence and limitations. A total cannot offset missing data-use permission, incomplete required acceptance work or unassigned operations responsibilities. Whether a gap blocks a particular step depends on the actual use and the accountable decision maker.
Decide the next step from acceptance evidence
An assessment can lead to gathering materials, narrowing a test, proceeding under confirmed conditions or stopping the current proposal. Record the reasons and unresolved items. Recheck when versions, data, usage or risks change after launch; an initial assessment is not permanent proof of readiness.
To compare delivery arrangements, read build, buy and FDE options. For receiving and acceptance conditions, see the AI project handover guide. In a scope discussion, this worksheet can explain what is already known and where further assessment is needed.
Summarize this page with AI
Related posts

Start with one workflow.
Agree on the next step.
Leave your contact details and question type. We will follow up by email to understand the work and discuss scope.