Capability and Readiness Audit

Can your leadership team govern AI? This track assesses whether directors have the literacy, oversight skills, and regulatory awareness to discharge their governance duties.

• AI literacy and regulatory awareness
• Strategic assessment capability
• Oversight and accountability structures
• EU AI Act Article 4 readiness

Has the organisation built what it needs? This track assesses whether the structures, policies, and culture are in place to support responsible AI adoption.

• AI visibility and inventory
• Policy and governance structures
• Data stewardship capability
• Cultural readiness and change

1. Download the Capability and Readiness Audit Template:The Word document contains both tracks with all assessment questions, a No / Sometimes / Yes scoring guide, and space to record evidence and agreed actions. Print one copy per participant or use a shared screen.
2. Complete Track 1 first - Director and Board Capability: Work through the five director capability domains together. For each question, agree a score before moving on. If directors give different answers, explore why, the divergence is data.
3. Complete Track 2 - Organisational Readiness: Work through the six organisational readiness domains. Where a question asks for a named document, a named person, or a recent date, and you cannot answer, record that directly. Absence of an artefact is a gap.
4. Transfer scores to the Excel Workbook: Enter your scores in the Capability & Readiness Tracker. The workbook calculates your maturity stage per domain, produces a gap map, and flags the highest-priority actions based on impact and current maturity.
5. Agree actions and owners: Use the Action Plan tab to assign a named owner and timeline to each priority gap. The Facilitation Guide (included with the Audit Template) provides suggested next steps per domain.
6. Review quarterly: Re-run the assessment every quarter, or when a significant AI development occurs in your organisation. Track maturity progression over time using the tracker's built-in comparison.

The EU AI Act Article 4 AI Literacy Obligation (in force since February 2025) notes that: Organisations that deploy AI systems must ensure a sufficient level of AI literacy among staff and others dealing with AI, including directors and board members who receive AI-generated outputs or oversee AI-enabled functions. This is a binding obligation, not a recommendation. The Capability and Readiness Audit provides a structured way to demonstrate compliance with Article 4.

Regulation of Artificial Intelligence Bill 2026, Enforcement from August 2026: Ireland's AI Office (Oifig Intleachta Shaorga na hÉireann) must be operational by 1 August 2026. The enforcement architecture covers 13 sectoral regulators. Penalties for serious violations reach 7% of worldwide turnover. Directors of deploying organisations carry personal governance exposure. The window to build capability before enforcement is now.

Director and Officer Liability: AI governance has become a personal liability issue. Where AI systems mediate compliance, safety, or customer decisions, boards must demonstrate that adequate oversight structures exist, not merely that AI was delegated to management. Delegation does not dilute fiduciary duty. The audit helps directors evidence that they have discharged their oversight obligations.

Track progress across both leading and lagging measures. The goal is not a high score - it is honest diagnosis followed by targeted improvement.

• Leading (30 days): Audit completed by leadership team; all eleven domains scored; priority gaps identified and agreed. Assessment completed in a facilitated session, not individually. All domains have a score.
• Lagging (quarterly): Maturity stage progression per domain; priority gap actions completed; regulatory compliance steps taken. At least one domain moved from Ad Hoc to Emerging; named owners on all priority actions.
• Reporting metric: Capability & Readiness Audit: Director capability at [stage]; Organisational readiness at [stage]; [N] priority actions with named owners; next review [date].

Position As: A diagnostic, not a test. The goal is an honest picture of where you are, not a high score. Frame it as the starting point for better governance, not an assessment of past performance.

Involve: Complete as a leadership team, not individually. Include both executive and non-executive directors where both are present. Disagreement between participants is itself useful data, don't smooth it over.

Common Resistance: 'We already have governance in place.' Counter by explaining that governance theatre, structures that exist on paper but don't function, is the most common finding in AI governance assessments. The audit tests substance, not form.

Quick Win: After the first session, pick the single highest-impact gap and assign a named owner with a four-week deadline. Completing one concrete action closes the loop and builds momentum for the broader improvement plan.