Tools

Board AI Readiness Scorecard

The Board AI Readiness Scorecard measures one thing most board packs never test: whether the board is governing the company's use of AI. Answer eighteen questions across four oversight domains (director fluency, governance structure, policy and risk appetite, and reporting visibility) and get a read on where your board can see, where it is blind, and the first move your board role calls for.

Questions

Common questions

What is the Board AI Readiness Scorecard?

A self-serve diagnostic that scores how well a board oversees its company's use of AI, across four domains: director fluency, governance structure and accountability, policy and risk appetite, and reporting and disclosure visibility. It returns a read on each domain, an overall oversight band, and the first move your board role calls for. It measures the boardroom, not the operating floor.

Who is this for?

Board members and the people who answer to them: chairs and independent directors setting oversight structure, sponsor-appointed directors reading AI risk across a portfolio, and CEOs or CFOs who sit on the board and want to know what their directors are not yet asking for. It is built for board-level oversight questions like accountability, risk appetite, reporting, and disclosure, not the operational controls a CISO or CTO runs day to day.

How is this different from the AI Governance Readiness Assessment?

They measure different things at different altitudes. The AI Governance Readiness Assessment is an organizational diagnostic: 65 questions scoring the actual controls running inside the business across data trust, model governance, agent autonomy, enterprise operations, and responsible AI. This scorecard sits one level up: it measures whether the board is governing that program across director fluency, oversight structure, risk-appetite policy, and reporting visibility. A company can run a strong control program its board barely oversees, or seat an engaged board above a thin program. Run this scorecard for the boardroom; run the AI Governance Readiness Assessment for the organization.

What are the four domains?

Board AI Fluency (whether directors can ask and challenge the right questions), Governance Structure and Accountability (whether AI oversight has a named owner, a charter mandate, and a cadence), Policy and Risk Appetite (whether the board has set the lines: an approved policy, defined risk appetite, human-sign-off thresholds, and escalation triggers), and Reporting and Disclosure Visibility (whether the board sees AI metrics, an inventory, incidents, and a defensible external posture). Structure and policy carry the heaviest weight because they are where accountability lives.

Is my board unusual if it scores low?

No. A low score is the common case, not the outlier. Only about 8% of boards rate their own AI expertise as strong, fewer than a quarter have approved an AI policy, and only around 15% receive AI-related metrics at all. The point of the scorecard is not to flag your board as behind; it is to show which of the four domains is your specific blind spot, so the fix is targeted rather than a wholesale program you do not need.

What happens after the scorecard?

The scorecard is the board-level intake read. Where it exposes an organizational gap (no AI inventory, thin controls, unquantified EU AI Act exposure), the next step is the AI Governance Readiness Assessment and the AI Governance Program that acts on it, building toward the Enterprise AI Control Plane as the target architecture. In a deal context, board AI oversight is one input to full PRISM technology diligence. The scorecard tells the board where it stands; those engagements close the distance between where it stands and what a regulator or buyer will expect.

Is the result free?

Yes. The headline oversight band shows immediately. Your name and work email open the four-domain breakdown and the blind-spot read, and Sujit will send a written read against your actual board on request. No pitch, no obligation.

Why does board involvement in AI matter beyond compliance?

In BCG research, nearly two-thirds of chief transformation officers say their boards are limited to passive status updates on transformation, not helping make the investment, risk, and pace calls. That blind spot is what this scorecard is built to surface: whether the board is equipped to govern AI as a value and risk topic, not just receive reports about it.