Tools

Board AI Readiness Scorecard

The Board AI Readiness Scorecard measures one thing: whether the board is governing the company's use of AI. Most board packs never test it. You answer eighteen questions across four oversight domains (director fluency, governance structure, policy and risk appetite, and reporting visibility). The result shows where your board has visibility, where it has none, and the first move your board role calls for.

Questions

Frequently asked questions

What is the Board AI Readiness Scorecard?

It is a self-serve diagnostic that scores how well a board oversees its company's use of AI, across four domains: director fluency, governance structure and accountability, policy and risk appetite, and reporting and disclosure visibility. It returns a read on each domain, an overall oversight band, and the first move your board role calls for. It measures the board's oversight rather than the company's operational controls.

Who is this for?

It is for board members and the executives who report to them. That includes chairs and independent directors setting oversight structure, and sponsor-appointed directors reading AI risk across a portfolio. It also includes CEOs or CFOs who sit on the board and want to know what their directors are not yet asking for. The questions cover board-level oversight: accountability, risk appetite, reporting, and disclosure. The scorecard does not cover the operational controls a CISO or CTO runs day to day.

How is this different from the AI Governance Readiness Assessment?

The AI Governance Readiness Assessment is an organizational diagnostic. Its 65 questions score the controls running inside the business across data trust, model governance, agent autonomy, enterprise operations, and responsible AI. This scorecard measures one level up: whether the board is governing that program, across director fluency, oversight structure, risk-appetite policy, and reporting visibility. A company can run a strong control program that its board barely oversees. It can also have an engaged board above a weak program. Use this scorecard for the board, and the AI Governance Readiness Assessment for the organization.

What are the four domains?

Board AI Fluency (whether directors can ask and challenge the right questions), Governance Structure and Accountability (whether AI oversight has a named owner, a charter mandate, and a cadence), Policy and Risk Appetite (whether the board has set the lines: an approved policy, defined risk appetite, human-sign-off thresholds, and escalation triggers), and Reporting and Disclosure Visibility (whether the board sees AI metrics, an inventory, incidents, and a defensible external posture). Structure and policy receive the heaviest weight in the score, because accountability for AI is defined in those domains.

Is my board unusual if it scores low?

No. Most boards score low. Only about 8% of boards rate their own AI expertise as strong, fewer than a quarter have approved an AI policy, and McKinsey reported in December 2025 that only around 15% receive AI-related metrics at all. The scorecard shows which of the four domains is your board's specific gap. The fix can then target that domain instead of a wholesale program you do not need.

What happens after the scorecard?

The scorecard is the first, board-level read. Where it exposes an organizational gap (no AI inventory, thin controls, unquantified EU AI Act exposure), the next step is the AI Governance Readiness Assessment. The AI Governance Program then acts on its findings, with the Enterprise AI Control Plane as the target architecture. In a deal context, board AI oversight is one input to full PRISM technology diligence. The scorecard shows the board where it stands. Those engagements close the gap between that position and what a regulator or buyer will expect.

Is the result free?

Yes. The headline oversight band shows immediately. Your name and work email open the four-domain breakdown and the blind-spot read, and Sujit will send a written read against your actual board on request. There is no sales pitch and no obligation.

Why does board involvement in AI matter beyond compliance?

In BCG research, nearly two-thirds of chief transformation officers say their boards are limited to passive status updates on transformation. Those boards do not help make the investment, risk, and pace calls. This scorecard tests whether your board is equipped to govern AI as a value and risk topic, beyond receiving reports about it.