What you get

• AISM Maturity Scorecard. A 0-100 composite Health Score across the five G.A.A.R.E. pillars, with sub-scores for People, Process, and Policy.
• Regulator Gap Brief. A side-by-side against the EU AI Act, NIST AI RMF, ISO 42001, and Canada’s PIPEDA and 2023 Voluntary Code on responsible generative AI. The lines you sit on the right side of, the lines you do not.
• Top-3 Risk Register. The three exposures with the highest probability and impact. The owner. The control. The decision the board needs to make.
• 90-Day Roadmap. Sequenced. Resourced. Tied to the AISM Health Score lift the work will produce.
• Executive Readout. A 45-minute session with the leadership team. The slides are yours to keep.

Who it is for

• Boards under regulator pressure. The board has been asked to demonstrate AI governance, and the answer needs to be on the page in the next quarter.
• CIOs and CISOs inheriting AI risk. AI is on the risk register. The control framework is not.
• Heads of AI and Heads of Data. The pilots are running. The discipline that ties them into a portfolio is missing.

What happens after the Sprint

The Sprint is the cleanest entry point into the practice. Most clients move on to the AISM Pilot or the AISM Success Partner retainer. The Sprint is also a complete deliverable on its own. The roadmap is yours. The Health Score is yours. The Boxwood team is on call for questions for thirty days at no charge.

Investment and timeline

Ready to start?

A 30-minute call confirms fit, timing, and the right starting point.