Is Your Business AI Ready? Free Self-Assessment | Perth

0 of 8 answered

1.Does your business have a policy covering which AI tools staff can use and how?

No policy - staff use whatever AI tools they like, however they like.An informal understanding exists, but nothing is written down.A written policy exists covering approved tools and acceptable use.A written policy exists, is enforced, and is reviewed as new tools emerge.

2.Do staff know what data can and can't be pasted into tools like ChatGPT?

No guidance - client data, financials, and personal info get pasted in freely.Most staff have a rough sense, but it's never been formally addressed.Staff are trained on what's off-limits for public AI tools.Sensitive data handling is trained, documented, and technically enforced where possible.

3.Does IT know which AI tools are actually in use across the business?

No visibility - staff sign up for AI tools with personal or work email as they please.IT is aware of a few tools but hasn't actively looked into it.IT maintains a list of approved AI tools and periodically checks for others.AI tool usage is actively monitored, with a clear process to request new tools.

4.How are AI tool accounts set up for your business?

Staff sign up individually with personal accounts and personal payment details.A mix of personal and business accounts, with no consistent approach.Business accounts with MFA are used for the main AI tools in use.AI tools are provisioned via SSO with MFA, and access is reviewed regularly.

5.If you enabled an AI assistant like Microsoft Copilot today, how confident are you in your file permissions?

Not confident - years of oversharing on SharePoint/OneDrive have likely never been reviewed.Not sure - it hasn't been checked recently.Reasonably confident - permissions have been reviewed in the last year or so.Confident - least-privilege access is enforced and reviewed on a regular schedule.

6.When the SaaS tools you already use roll out new AI features, what happens?

They're switched on by default and nobody checks what data they process.Someone notices eventually, but there's no formal review.New AI features are reviewed for data handling before being left enabled.AI features go through a documented review of data processing and privacy impact.

7.Have staff been trained on AI-specific risks like deepfake scams or AI-written phishing emails?

No - training hasn't been updated to cover AI-related threats.It's been mentioned informally, but there's no real training.AI-related risks are included in regular security awareness training.Staff are trained and tested on AI-specific threats, with content kept current.

8.How is your business approaching AI adoption itself, beyond just risk?

There's no plan - AI use is entirely ad hoc, driven by individual staff.There's interest, but no one has mapped out where AI could actually help.A few practical use cases have been identified and rolled out deliberately.There's a clear roadmap for where AI fits, reviewed as part of ongoing IT strategy.

Answer all 8 questions to see your estimated result.

Why AI Readiness Matters

Staff at most Perth businesses are already using AI tools - whether or not there's a policy in place. The risk isn't AI itself, it's ungoverned AI use: client data pasted into personal ChatGPT accounts, Copilot surfacing files that were never meant to be shared, or AI-written phishing emails staff haven't been trained to spot.

Getting AI ready doesn't mean buying more tools. For most businesses it means fixing the basics first - tightening file permissions, putting a simple usage policy in writing, and moving staff from personal accounts to managed, business ones with MFA enabled.

Once those foundations are in place, AI tools like Copilot become a genuine productivity gain instead of an unmanaged risk.

FAQs

What does 'AI ready' actually mean?

It means your business has the governance, data permissions, and identity controls in place to let staff use AI tools - like ChatGPT or Microsoft Copilot - without creating unmanaged risk. It's less about the AI tools themselves and more about the basics being in order first: who can access what, what data is off-limits, and whether staff know the rules.

Is this self-assessment accurate?

It's a quick way to estimate roughly where your business sits, based on your own answers. It's a useful starting point, but it isn't a verified result - a proper review looks at your actual file permissions, identity setup, and policies to confirm your real exposure.

How long does it take?

About 2 minutes. There are 8 questions covering policy, data handling, identity, and staff awareness, with plain-English answer options.

We don't have an official AI policy - does that mean staff aren't using AI?

Almost certainly not. Staff are generally using AI tools whether there's a policy or not - the question is whether it's happening safely, with business accounts and MFA, or informally with personal logins and no visibility into what data is being shared.

Is my information saved or sent anywhere?

No. This self-assessment runs entirely in your browser - your answers and results aren't recorded, stored, or sent to us unless you choose to contact us afterwards.

Is Your Business AI Ready?