What is an AI governance readiness score?
Checked October 27, 2026 by Accred Consulting
An AI governance readiness score is an advisory signal of how far an organization has implemented the controls it needs before rolling out AI tools such as Microsoft 365 Copilot, Claude, or ChatGPT. In Accred Assess, implemented controls count fully, in-progress controls count half, not-applicable controls are excluded, and controls not started or not assessed count as zero.
A readiness score is not a compliance determination, legal assurance, or certification. It reflects your team’s recorded decisions.
How the score is calculated
| Control decision | Counts as |
|---|---|
| Implemented | 1 |
| In progress | 0.5 |
| Not started | 0 |
| Not assessed | 0 |
| Not applicable (documented) | Excluded from the total |
Readiness is the points earned divided by the number of applicable controls, as a percentage. Every applicable control has equal weight.
A worked example
Ten controls: 4 implemented, 2 in progress, 1 not started, 1 not assessed, and 2 not applicable. Eight controls are applicable. Points earned are 4 + 1 = 5. Readiness is 5 ÷ 8 = 62.5%, shown as 63%.
Why tenant discovery does not change the score
Assess can read Microsoft 365 settings with read-only discovery. What it observes is shown next to each control as evidence, but it never raises the score: only your assessors’ decisions do, and missing evidence never counts as a pass. That keeps the score defensible when someone asks who decided a control was done.
Score, frameworks, and security posture
The readiness score covers 67 implementation controls. Framework views, such as SOC 2, ISO 27001, NIST CSF 2.0, CMMC, HIPAA, and the NIST AI RMF, map those same decisions to each framework’s requirements; see compliance readiness. A separate security posture view grades 118 checks.
Questions
Do in-progress controls count toward AI readiness?
Yes, at half weight. Implemented controls count fully.
Do not-applicable controls lower the readiness score?
No. Documented not-applicable controls are excluded from the total, so they neither raise nor lower the score.
Is an AI readiness score the same as compliance?
No. It is an advisory implementation-readiness signal from recorded decisions, not a compliance determination or certification.
Start with the free Accred Assess assessment.
No account or card needed. Results are advisory readiness, not certification.