# AI Readiness Survey

- Link: https://thoughtsec.co/services/ai-readiness-survey/
- Published: 2026-05-22T16:16:58+01:00
- Author: markwilsonramsay

Score based on what actually happens today, not what you intend to do. If it is 
not written down, owned, or followed consistently, score 3 or below.

| **Score** | **Label** | **Meaning** | 
| 0 | Not on our radar | We have not really considered this. | 
| 1 | Aware | We know it matters, but nothing formal exists. | 
| 2 | Informal | We talk about it, but it depends on individuals. | 
| 3 | Basic | We have a basic approach, but it is inconsistent. | 
| 4 | Established | It is documented, owned, and usually followed. | 
| 5 | Evidenced | It is reviewed, improved, and supported by evidence. |

1. Do you have a clear view of which AI tools, assistants, and built-in AI features
your people use for work?0 - Not on our radar to 5 - Evidenced

2. Is there a named person or small group responsible for approving AI tools, setting
boundaries, and deciding which use cases are acceptable?0 - Not on our radar to 
5 - Evidenced

3. Do staff have simple written guidance on how to use AI safely, including when
to check outputs, stop, or ask for help?0 - Not on our radar to 5 - Evidenced

4. Do people know what customer, employee, commercial, or confidential information
must not be entered into AI tools?0 - Not on our radar to 5 - Evidenced

5. Before using an AI tool, do you check what the provider can do with your data,
including storage, sharing, retention, and model training?0 - Not on our radar to
5 - Evidenced

6. Do you know where your important business data lives, who owns it, and whether
it is accurate enough for AI to rely on?0 - Not on our radar to 5 - Evidenced

7. Are work AI tools used through approved business accounts, with sensible access
controls and MFA where available?0 - Not on our radar to 5 - Evidenced

8. If an AI tool caused a data leak, misleading advice, customer complaint, or reputational
issue tomorrow, would your team know what to do in the first hour?0 - Not on our
radar to 5 - Evidenced

9. If an AI tool caused a data leak, misleading advice, customer complaint, or reputational
issue tomorrow, would your team know what to do in the first hour?0 - Not on our
radar to 5 - Evidenced

10. Have you considered where AI could create unfair treatment, misleading advice,
over-reliance, bias, or reputational harm in your business?0 - Not on our radar 
to 5 - Evidenced