All Pillars
1

STEER

What should we build and why?

Strategic governance that determines which AI initiatives to pursue, in what order, with what expected outcomes, and who is accountable. This is the boardroom function that most organizations skip entirely, jumping straight to building agents without first deciding whether they should.

9 controlsExecutive Sponsor: CEO or Board-level designee

Assessment Controls (9)

Every AI initiative that passes through this pillar must satisfy these controls. The maturity model measures how consistently the organization enforces them.

1

AI Governance Steering Committee

Does the organization have a steering committee or equivalent governance body for AI initiatives?

2

AI Initiative Portfolio Management

Is there a portfolio view of all proposed and active AI agent initiatives?

3

AI Investment Criteria & Scoring

Are there defined investment criteria? (What problem does this solve? What is the expected ROI? What is the risk if it fails? What is the risk if it succeeds and scales without governance?)

4

Pre-Deployment Success Metrics

Are success metrics established before deployment, not after?

5

Portfolio Review Cadence

Is there a regular review cadence for the AI portfolio?

6

Initiative Approval Authority

Who has authority to approve new agent initiatives? Is it documented?

7

Initiative Termination Criteria

Are there criteria for killing or redirecting underperforming initiatives?

8

Cross-Functional Governance Representation

Is the steering function cross-functional (operations, finance, IT, compliance) or siloed in IT?

9

Initiative Change Management & Value Definition

Does the initiative approval package include a change management plan, enablement requirements, and measurable ROI targets?

Governance Tracks

Employee Use [EU]: Does the steering committee address employee AI tool usage policies?
Internal Build [IB]: Is there a formal intake process for proposed internal AI/agent projects?
Vendor Platform [VP]: Is there a process for evaluating AI features in vendor tools before they are enabled?