FRAMEWORK

The AI Playbook

What an AI practice is actually made of: twenty capabilities, sorted by what you cannot operate without, what is expected of you, and what multiplies the rest.

20

Capabilities

3

Tiers

17

Instruments

1

Industry-agnostic

Most AI strategy decks describe a destination. This describes the organisation that gets you there: the capabilities a company has to actually stand up, in the order that survives contact with a budget cycle. It is anonymised and industry-agnostic, and it is tuned to work at the scale of a mid-market business and at the scale of an enterprise, because the sequence does not change, only the headcount against it.

Each capability carries its own maturity scale, so a leadership team can place itself rather than be told where it is. The seventeen instruments at the end are the working documents: assessments, rubrics, checklists and registries that get used in a room rather than read.

The twenty capabilities

The tiers are the argument. Everything in the first group is load-bearing, and an accelerator built on a missing critical capability is the most expensive mistake in this field.

Critical

You cannot operate without these.

  • 01 AI Strategy & Vision
  • 02 Center of Excellence
  • 03 Use Case Prioritization
  • 04 Governance & Policy
  • 05 Responsible AI
  • 06 Valuation & Measurement

Table stakes

Expected of a functioning AI practice.

  • 07 Product Lifecycle
  • 08 Build vs. Buy
  • 09 Operating Model
  • 10 Executive Alignment
  • 11 Change Management
  • 12 Talent & Hiring

Accelerators

Multiply the impact once the foundation holds.

  • 13 AI Literacy & Education
  • 14 Community of Practice
  • 15 Citizen Development
  • 16 Applied R&D
  • 17 Data & Agent Architecture
  • 18 Infrastructure & Automation
  • 19 Cybersecurity
  • 20 AI-Curated Data

The instruments

One working document per letter. These are the parts that get filled in, argued over and signed.

  • A The AI Readiness Assessment
  • B The Use Case Scoring Rubric
  • C The AI Registry
  • D The Responsible-AI Checklist
  • E The Valuation & Look-Back Instrument
  • F The Product Lifecycle Reference
  • G The Build vs. Buy Framework
  • H Executive Literacy & Education
  • I AI & the Workforce
  • J The Enterprise AI Adoption Hub
  • K The Citizen-Dev Guardrails Matrix
  • L The Citizen Development Portal
  • M AI Agent Reference Architecture
  • N The Workload Placement Matrix
  • O AI FinOps & Cost Management
  • P The AI Card
  • Q AI Laws, Regulations & Frameworks

What is not here

The contents. Every capability above sits behind panels of guidance, worked examples and the maturity scale that goes with it, and the instruments are working documents rather than titles. None of that is published, and this page is the structure on purpose: it is enough to judge whether the thinking is sound and not enough to run the programme from.

It is used in advisory engagements today. A hosted version you can work through yourself is being built.

Cookies and analytics

Status

Checking…

What Google Analytics collects

Two cookies, _ga and _ga_C1QMVN71V1, which last up to two years and let us tell a returning visitor from a new one. It records which pages you looked at, roughly where in the world you are, and which site sent you here. Google Signals and ad personalisation are switched off, so this is a count of reading, not an advertising audience.

If you turn it off

Both cookies are deleted immediately and nothing further is sent to Google. No script from googletagmanager.com is requested on any page you load after that. The site works the same either way. If your browser sends Global Privacy Control or Do Not Track, analytics is already off and we never asked.

What runs either way

Cloudflare, which serves this site, runs its own analytics beacon. It sets no cookies and does not identify you. We also log requests for pages that do not exist, with the page that linked to them, so broken links get found and fixed.

The contact form is separate

What you type into the contact form is emailed to us and used to answer you. It does not go to Google, to analytics, or to a marketing list.