The AI diagnostic, filled in.
The five steps from the walkthrough, as fields you fill in. Your answers stay in this browser as you type, so you can close the tab and come back. When you’re done, save the completed worksheet as a PDF.
The inventory
From expense reports and card statements, not memory. One per line: tool · owner · monthly cost.
From SSO logs, outbound traffic and the anonymous survey. What is in use that nobody approved?
CRM, helpdesk, analytics, office suite. Features you never bought deliberately.
Flag anything touching customer data, PII, health or financial records, or anything under a client contract.
Data readiness
Per function. Include the owner, and be honest about spreadsheets.
Rate each source. A source only one person can interpret is a dependency, not a dataset.
The sentence most diagnostics skip. Include how long the fix would take.
Opportunities, function by function
What work here is mostly reading, deciding by a rule, and producing a document? Put a number on each.
Same question. Interview the person doing the work, not their manager.
Include engineering only if you have engineers. If you don't, note what you'd need to hire.
Invoice matching, ticket triage, document extraction. These return faster than the impressive idea.
Rank, and kill things
Per opportunity: value · feasibility · data readiness · risk. Multiply, don't average.
Pick exactly one to start. Six parallel pilots is how pilot purgatory begins.
The list that proves the exercise was honest. Say why.
Governance and the plan
Per system: touches customer data? can act without a human? could a wrong output reach a customer or regulator?
SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, and the EU AI Act if you touch the EU market at all.
Approved tools, what may never be pasted into them, how to request something new.
A review body without a veto is decoration. Name the person.
The one project, its success number and date, the data fixes it depends on, and an owner per item.