Context Zero Diagnostic™

Seven days. Eight decisions your board can actually make.

Most AI assessments end in a deck that describes the problem you already knew you had. This one ends in eight artefacts, each one attached to a decision, an owner and a date.

Eight artefacts, not one deck.

Eight artefacts. Delivered on day seven, in a two hour executive session and as a written pack.

01

Decision Readiness Score

A board level score across seven areas, published with the sub-scores that produced it, so the number can be interrogated rather than believed. Its job is to turn a diffuse worry into a figure the board can track quarterly. You decide what an acceptable level looks like, and by when.

02

Context Gap Map

A single view of where operations, technology investment, cybersecurity and governance are pointing in different directions. It puts a cost on that misalignment in the currency executives feel first, which is delay. You decide which gap to close before anything else is funded.

03

AI Portfolio Verdict

Every AI initiative currently running, sorted into four columns: scale, redesign, pause, terminate. Each placement carries the reasoning behind it, so the verdict survives the meeting where it is challenged. You decide where the next euro of AI spend goes, and where it stops.

04

Decision Rights Matrix

Who decides what, who is consulted and who is accountable, by name and role, for AI adoption, spend and risk. Most organizations discover here that two people believe they own the same decision, or that nobody does. You decide the structure, and it becomes the one you can point to under scrutiny.

05

Regulatory Control Map

The obligations your AI estate creates across the EU AI Act, NIS2, DORA, the Cyber Resilience Act and GDPR. These are mapped to the controls that satisfy more than one of them at once, so you build a control set rather than five separate compliance projects. You decide the sequence and the owner for each control.

06

Evidence and Accountability Register

The record that shows what was decided, by whom, and on what basis. This is what auditors, insurers and regulators ask for, and what most organizations cannot produce when asked. You decide how it is maintained once we hand it over.

07

Ninety Day Installation Blueprint

A sequenced plan for a defined domain: what gets built, in what order, with what dependencies. It is explicit about what it needs from your people, because a plan that hides its cost is not a plan. You decide whether to run it, and with whom.

08

Executive Decision Memorandum

Ten pages for the board: the position, the options, the economics and the recommendation. It is written so a non technical director can act on it without a translator in the room. You decide, in one sitting, with the reasoning in front of you.

Seven days, structured from the first call.

Days 0 to 1

Qualification and access

A fifteen minute call to confirm fit, then a short document request and system read only access where relevant.

Days 1 to 4

Assessment

Structured interviews with six to ten people across operations, technology, security, finance and the executive team, plus review of your documents, contracts and current AI inventory.

Days 5 to 6

Synthesis

Scoring across seven maturity areas and thirty five sub-dimensions, control mapping, portfolio verdict, and drafting of the eight artefacts.

Day 7

Executive session

A two hour working session with the sponsor and, where appropriate, the board. You leave with the pack and a decision on whether to proceed.

The Diagnostic costs you something too.

  • An executive sponsor with authority across operations, technology and security.
  • Six to ten people available for forty five minutes each.
  • Access to your current AI inventory, relevant contracts and any existing governance documentation.
  • A named person to receive the pack and own the follow up.

If these are not available, the Diagnostic will produce a polite document instead of a useful one. We would rather say so before you pay than after.

What is inside the seven days, and what is not.

In scope

  • Assessment of governance, decision structure and AI portfolio.
  • Mapping of regulatory obligations to controls.
  • Identification of the constraint blocking scale.
  • A sequenced installation plan for a defined domain.

Not in scope

  • Legal advice or a legal opinion.
  • Statutory audit or certification.
  • Penetration testing or technical security assessment.
  • Implementation work, which is a separate engagement.

We are not a law firm, an auditor or a certification body. The Diagnostic produces the evidence base your counsel, auditors and regulators examine. It does not replace any of them, and no architecture makes an organization permanently compliant, because obligations change and so must the controls.

Three situations where seven days is the right length.

Private equity and venture

Investment validation before or shortly after capital goes in. Whether the AI thesis in the model is real, and what it would cost to make it real.

Founder led and mid-market

The CEO can sign, the organization is small enough to change, and AI spend has started to multiply without anyone owning it.

Enterprise sponsors

A business unit or function with a live AI estate, a board asking questions, and authority to align operations, technology and security.

If two or more of these describe you, the qualification call is worth fifteen minutes. If none do, we will say so on the call and you will have lost a quarter of an hour.

Seven days to a definitive picture.

Apply, then a fifteen minute qualification call, then the seven day Diagnostic, then your decision on what follows.

We take a limited number of Diagnostics each quarter. If the qualification call shows you are not ready, we tell you then.