AI Adoption Stage Questionnaire

Instructions

In order to determine your organization’s AI Adoption Stage, please complete the steps below.

Each step will prompt you to evaluate six statements and determine if any of these statements reflect your organization. Each set of statements corresponds to different organizational dimensions, presented in a randomized order.

  • Business Impact
  • Governance
  • Deployment Model
  • Third-Party AI Use
  • Organizational Goals
  • Data Sensitivity and Criticality

Starting with Step 1, review the six statements to determine if, to the best of your knowledge, you believe one or more of those statements represents your organization’s stage of AI Adoption.

  • If at least one of the six statements aligns with your organization, select “Yes,” and stop. That is your organization’s current AI Adoption Stage.
  • If none of the statements aligns with your organization, select “No” and continue on to the next step; and repeat this exercise until you answer “Yes.”

Results: A “Yes” answer marks the conclusion of the Questionnaire and provides your organization’s AI Adoption Stage.

Note that the AI Adoption Stage Questionnaire and these instructions can also be found in the first 4 tabs of the RCM workbook.

The AI Adoption Stage Questionnaire

FS AI RMF Intake Form
  • Step 1
  • Step 2
  • Step 3
  • Step 4
  • Step 5
0% Complete
1 of 5
Statement
1. In my organization, AI systems are deeply integrated into critical business processes, transforming operations, and regularly handling sensitive and/or regulated data.
2. My organization has an extensive, enterprise-wide, AI-enabled governance program overseeing the use of AI systems, regularly assessed to align with risk and regulatory compliance requirements.
3. My organization deploys AI systems through a combination of vendor-managed platforms, internally hosted models, and custom-built solutions, fully integrated across the organization.
4. My organization extensively relies on third-party AI vendors for a wide range of functions and use cases, including chatbots, risk models, and other critical applications, with deep integration into internal systems and processes.
5. My organization's key goals in adopting AI are strategic differentiation, innovation, scalability, transformative business models, and ethical business practices, in addition to operational efficiency, customer experience, safety, and regulatory compliance.
6. My organization has deeply integrated AI into critical business functions, driving autonomous decision-making and data-driven insights, with enterprise-wide adoption.
(1) Do any of these statements reflect your organization?

Trusted Standards for Evolving Risks

Trusted Standards for Evolving Risks. The Cyber Risk Institute mission is to advance the development and harmonization of cybersecurity, technology, and AI risk management standards for the financial services industry.

As a not-for-profit standards development organization, CRI connects threats to mitigating controls and associated compliance to provide institutions with a comprehensive view of risk—from the server room to the boardroom.

We do this through our products – CRI Profile, Cloud Profile, and FS AI RMF – member engagement, and an ecosystem of globally known tool providers and consulting firms.