Strategy
Board mandate, risk appetite, and use-case portfolio.
Free Tool
AI Maturity Calculator: Score Your AI Readiness in 5 Minutes.
An 8-question diagnostic that places your organisation in one of four maturity bands (Foundational, Developing, Operating, Optimising) with three tailored next steps. Built on NIST AI RMF and ISO 42001 mapping. Free, no signup required to run.
- 5 min
- 8 dimensions
- Free
- No signup to run
AI Maturity Assessment
StrategyStep 1 of 8
Does your organisation have a board-approved AI strategy?
What is it?
What is the AI Maturity Assessment?
The AI Maturity Assessment is a free 5-minute self-diagnostic that scores an organisation's AI readiness across eight dimensions: strategy, governance, model risk, data, engineering, regulatory compliance, people and accountability, and operations. Each question maps to controls referenced by NIST AI RMF and ISO 42001. The output is a numeric score (range 8 to 40), a maturity band (Foundational, Developing, Operating, or Optimising), and three concrete next steps tailored to where your organisation sits today.
The 8 dimensions
What the assessment covers
Each dimension reflects what regulators, internal audit, and boards now expect from a credible enterprise AI programme.
Governance
Policies, controls, and operating model for AI risk.
Model Risk
Lifecycle controls aligned to SR 11-7 and NIST AI RMF.
Data
Lineage, quality, consent, and protection across training and inference.
Engineering
MLOps, LLMOps, evaluation, and monitoring platform.
Compliance
Readiness for MAS, EU AI Act, HIPAA, GDPR, PDPA, DPDP.
People
Roles, accountability, and capability across the lifecycle.
Operations
Observability, incident response, and change control.
Interpreting your score
How to interpret your score
The four bands describe a typical organisation at each maturity level, the top risk to watch for, and the recommended next move.
01
Foundational
Score 8 to 16Typical organisation has experimented with AI in isolated pockets. No governance, no inventory, no controls. Top risk: an unauthorised AI use case becomes a public incident. Next move: stand up a basic AI inventory and acceptable-use policy within 30 days.
02
Developing
Score 17 to 24Organisation has a few production models and some controls but inconsistent across the portfolio. Top risk: governance theatre that does not survive audit. Next move: build the unified model risk taxonomy and control catalogue, then map existing models to it.
03
Operating
Score 25 to 32Governance exists, controls are operational, internal audit is satisfied. Top risk: bottleneck on the model review board slowing deployment. Next move: codify pre-approved control templates so low-risk models move faster.
04
Optimising
Score 33 to 40Mature programme with measurement, continuous improvement, and a generative-AI track running. Top risk: complacency on emerging frontier-model and agentic-AI risks. Next move: invest in red-team programme and incident-response simulations.
Methodology
How we built this assessment
Designed by Arvind Gautam (Founder, CISM, TOGAF 9, AWS ML Specialty) and the Magnis AI senior team. Methodology references NIST AI Risk Management Framework (RMF), ISO 42001 AI Management System, and MAS FEAT principles. Calibrated against patterns from 60+ enterprise engagements across BFSI, insurance, healthcare, and government.
Last updated: 14 June 2026. About the team.
Related services
Enterprise AI Consulting
Three integrated pillars under one practice: AI Governance and Compliance, Generative AI and LLM Consulting, and Intelligent Process Automation. Designed for banks, insurers, healthcare, government, and large operators that need AI to stand up to regulators and to the board.
ExploreAI Automation
Most SMBs lose 15 to 30 hours per week per role to repetitive work. Magnis AI builds automation that removes the work, not the team, using LLM agents, n8n, Zapier, OpenAI, and bespoke integrations with your stack.
ExploreAI Chatbot Development
Custom chatbots grounded in your own knowledge base, integrated with your CRM and helpdesk, and tuned to your tone of voice. For websites, WhatsApp, Telegram, Instagram, and voice.
ExploreFrequently asked questions
What does the AI Maturity Assessment measure?
Eight dimensions across strategy, governance, model risk management, data, engineering, regulatory compliance, accountability, and operations. Each dimension is scored from 1 (foundational) to 5 (optimising). Total scores place you in one of four maturity bands with tailored next steps.
How long does the assessment take?
Five to seven minutes. The eight questions are designed to be answerable by anyone with a working knowledge of your AI portfolio and operating model.
What do I get at the end?
Your maturity score, your maturity band (Foundational, Developing, Operating, or Optimising), a brief description of what that means, and three recommended next steps tailored to your band. You can take the result into an internal review or book a free 45-minute consultation to discuss specifics.
Is the assessment a regulatory audit?
No. It is a self-assessment, designed to give you a fast view of where to focus. It is not a substitute for formal model risk validation, regulatory gap assessment, or independent audit. Those are services Magnis AI delivers separately.
How do you calculate the maturity score?
Each question has four options weighted from 1 to 5. Your total score is the sum across eight questions, giving a range of 8 to 40. Bands are Foundational (8 to 16), Developing (17 to 24), Operating (25 to 32), and Optimising (33 to 40).
Is my data stored or shared?
Your individual answers are not stored. Aggregate event telemetry is captured for product improvement and audience analytics. No personally identifiable information is collected through the assessment.
Want a deeper, consultant-led assessment?
The 5-minute calculator is a starting point. For a full diagnostic with regulator mapping, custom evaluation, and a costed roadmap, book a 45-minute consultation.