CARI — AI Readiness Index

CARI (CISO AI Readiness Index) measures how prepared a security function is to govern AI-enabled risk — and turns the answer into a plan you execute, a decision and a document. It opens with a guided assessment, not a dashboard. Seven questions, one per screen. For each, you choose the described operating state that matches your function today rather than guessing a number. The model then places you in one of four strategic zones and tells you which intervention comes next. THE ASSESSMENT • Six AI-literacy areas and one on technology effectiveness, each answered against a five-band rubric. • Every option carries a written descriptor, so a score asserts something specific and can be challenged on evidence. • A signed readiness index: obstructive tooling produces a negative result regardless of literacy, because capable people held back by their tools is a distinct failure state. • Estimated monthly process hours and time saved. AN IMPROVEMENT PLAN YOU EXECUTE • One tap builds a working plan from your own result: concrete actions for your three weakest literacy areas plus the moves your strategic zone calls for. • Check actions off as you complete them, remove ones that don't apply, and add your own. • Set a target score per area and see live what reaching them is worth — projected readiness index and process hours per month. • Schedule a reassessment reminder in 30, 60 or 90 days; delivered locally, like everything else. A REPORT YOU CAN TAKE INTO THE ROOM • Export any assessment as a three-page A4 PDF: result and strategic zone, the six areas with the rubric band each score falls in, and the recommended actions with their governance mapping. • Also exports as plain text, or your full history as CSV. UNDERSTAND EVERY SCORE • Open any of the six areas for a full reference screen: what it covers and why it matters to a security function. • The complete five-band rubric, from None to Expert, with a descriptor for each band. • Evidence questions to ask before you score, and concrete actions to raise it. TRACK PROGRESS OVER TIME • Save named, dated assessments, stored on your device. • Readiness and literacy plotted across every saved assessment. • Per-metric comparison against your previous measurement, with zone-change alerts. • Reopen any assessment, add notes, or load it back into the calculator to continue editing. DECIDE WHAT TO DO NEXT • A 2x2 strategic matrix placing your function in one of four quadrants, from Critical risk zone to Proactive defender. • A strategy playbook personalised to your zone, with priority guidance derived from your current inputs. • Your lowest-scoring literacy area surfaced for action. GOVERNANCE REFERENCE • Full reference screens for the EU AI Act, NIS2, ISO/IEC 42001, NIST AI RMF and ENISA ECSF. • Scope, key provisions and how CARI maps onto each, with links to the official sources. DESIGNED FOR IPAD • On iPad the sections are a sidebar with a detail column, not a stretched phone layout, and the guided assessment presents its reference material beside the questions. PRIVACY FIRST All calculations run locally on your device. Saved assessments stay in the app's own on-device storage. No account, no analytics, no advertising and no network requests. CARI is an assessment and strategy tool, not legal advice, and does not establish conformity with any framework it references.