AI Readiness - A Practical Framework

Most conversations about AI readiness focus on capability, whether your organisation has the skills and tools to use AI effectively. That is an important question, but it is the second question, not the first. The first question is whether your organisation has the governance foundations that responsible AI adoption requires.

This guide offers a practical framework for assessing both - starting with governance, moving through data, and arriving at capability. The goal is not to produce a perfect compliance document. It is to give your leadership team a clear, honest picture of where you are, so you can make good decisions about where to go next.

Why Governance Comes First

When organisations adopt AI without adequate governance, three things tend to happen. Staff use tools in ways that create data protection risk, because there is no policy to guide them differently. The board makes decisions about AI without the information it needs to make them well, because there is no reporting mechanism. And when something goes wrong such as a data incident, an unanswered funder question, or a difficult press story there is no documented position to stand behind.

The Charity Governance Code, updated in November 2025, now explicitly states that boards should have a policy for the use of technology and AI tools. The Fundraising Regulator published AI guidance in December 2025 making clear that trustees are accountable for their organisation's AI use in fundraising and The Charity Commission has stated that trustees who fail to ensure human oversight of consequential AI decisions may not be meeting their duties.

How to Use This Framework

The most useful way to use this framework is as a structured conversation, not a scoring exercise. Take each dimension to your senior leadership team or board and work through the questions honestly. Where the answers are "we don't know," that is information. Where they are "we haven't thought about it," that is also information.

The output should be a clear picture of your current position across the four dimensions, and a prioritised list of the three to five things that would make the most material difference. In most organisations, those things cluster around governance and data - the foundations that everything else depends on.

A Note on Starting Small

AI readiness is not a destination. It is an ongoing process in a landscape that is changing faster than any governance framework can keep up with. The goal at this stage is not to build a comprehensive AI capability overnight, It is to build the foundations, the governance, the data hygiene and critical awareness that make it safe to start, and safe to learn from what you discover.

The organisations that navigate AI well in the next few years will not necessarily be the ones that moved fastest, they will be the ones that moved deliberately knowing what they were doing and why, with the governance to stand behind it.