MSAI Lab · self-assessment

How ready is your organisation, honestly?

Twenty questions, tick what's genuinely true. Your score updates below and maps you onto the maturity scale — and tells you what to fix first. Nothing you tick leaves this page.

Identity & security — the gate for everything

MFA is enforced for every account, no exceptions We have 4 or fewer Global Admins, none used for daily work We know who holds delegated-admin (partner/MSP) rights on our tenant We could list every external guest with access, and when they last used it Legacy authentication is disabled

Information estate — the gate for Copilot

SharePoint — not personal OneDrive — is the system of record for shared documents A new hire could find the latest version of any key document without asking anyone "Anyone" sharing links are disabled or restricted by default If we asked Copilot "what documents mention salaries?" from a standard account, we're confident nothing inappropriate would surface Confidential areas (board, HR, deals) have named-group access, not inherited permissions

Data — the gate for answering from data, and for agents

We could name our five most business-critical spreadsheets and their owners Each of those has exactly one authoritative copy Finance data lives in a finance system — not an export-to-spreadsheet culture Recurring reports get assembled from systems, not by copy-paste Each core entity (client, project, asset) has one agreed system of record

People & governance — the gate for adoption

There's a written AI acceptable-use policy people have actually been trained on We know which AI tools staff already use — including personal accounts Everyone has had basic AI literacy training: strengths, failure modes, data rules A named owner is accountable for AI — incidents, tool approval, policy We measure whether licensed AI tools are actually used