An AI readiness assessment designed for SMEs, not enterprises

Two people reviewing a printed document across a meeting room table
TL;DR

An AI readiness assessment is a structured diagnostic that tells you whether your business has the data, processes, skills, and governance in place for an AI initiative to succeed. UK-focused frameworks run two to five days for a single use case, typically costing £2,000 to £5,000, and produce a costed action plan rather than a theoretical maturity score. The Innovate UK Business Connect toolkit offers a free starting point. Commission a full assessment before any AI spend above £10,000.

Key takeaways

- A UK-oriented AI readiness assessment checks data quality, processes, skills, and governance, and produces a short costed action plan rather than a theoretical maturity score. - Only 28% of organisations have the infrastructure to use AI effectively (Cisco, 2023), so readiness gaps are the norm, not the exception, in owner-managed businesses. - Commission a readiness assessment before any AI spend above £10,000, or after a pilot that did not deliver expected results. - The Innovate UK Business Connect AI Readiness Digital Toolkit is free and designed for owner-managed businesses as a practical starting point. - If you sell into the EU, the EU AI Act introduces compliance obligations for high-risk AI systems from August 2026, making governance a readiness requirement rather than an optional extra.

A vendor has pitched you an AI tool. It looks plausible in the demo, the price point is manageable, and the use case makes sense on paper. Three months later, the tool is barely used. The data is not in the right format, the team has not had time to get to grips with it, and the problem you bought it to solve is still sitting there.

That pattern comes up repeatedly in owner-managed businesses. An AI readiness assessment is the diagnostic designed to prevent it. Before you commit to any meaningful AI spend, it checks whether your business is actually set up to get something useful out of it.

What is an AI readiness assessment?

An AI readiness assessment is a structured diagnostic that checks whether your business has the data quality, processes, skills, and governance in place for an AI initiative to succeed. The right output, for an owner-managed business, is a short costed action plan: where you stand today, what is blocking you, and what it would take to move forward on a specific use case.

UK-oriented frameworks for owner-managed businesses typically cover four to seven dimensions. Common ones are strategic alignment, data quality and availability, technology infrastructure, people and skills, process readiness, and governance or compliance. The AI Consultancy’s seven-step framework, which maps to the government’s DSIT AI adoption pathway, aims to produce what it calls “a 7-line action plan, not a 70-page report.” Squared Lemons uses four pillars and targets a similar output: a gap analysis, an opportunity register, and a prioritised roadmap with budget ranges.

A good assessment is vendor-neutral, designed to tell you whether you are ready to work with any tool effectively on the problem you have in mind, rather than steering you towards a particular product.

Why does an AI readiness assessment matter for your business?

AI pilots in owner-managed businesses commonly fail because the business was not set up for the tool it bought. Cisco’s 2023 global AI readiness survey found that only 28% of organisations had the infrastructure to use AI effectively, and 60% were struggling to integrate data across different systems. The readiness gap is the norm, not the edge case.

Salesforce’s 2024 UK AI Readiness Index found that fragmented data and legacy IT systems were the main barriers to AI readiness for UK organisations, with smaller businesses particularly exposed. The AI Consultancy, which works directly with UK businesses, describes data quality and accessibility as “the single most common bottleneck” it encounters when helping businesses get AI off the ground.

A readiness assessment forces this diagnosis before you commit. It identifies specific data issues in your business, quantifies what it would take to resolve them, and checks whether your current processes and team skills are up to running the use case you have in mind. The alternative is finding out the hard way, after several months and several thousand pounds.

Where will you actually come across one?

Three routes for owner-managed businesses. Innovate UK Business Connect offers a free AI Readiness Digital Toolkit with practical prompts across use cases, data, skills, and processes. UK specialist consultancies, including The AI Consultancy, Squared Lemons, and Informed Solutions, offer paid assessments with prioritised action plans and budget ranges. Simam Digital also publishes a downloadable self-assessment checklist for businesses that want to carry out an internal diagnostic first.

On price, there is a meaningful range. Squared Lemons reports that a mini-assessment focused on one use case typically takes two to five days and costs £2,000 to £5,000, producing a clear go/no-go decision and concrete next steps. A broader assessment covering data, processes, skills, and infrastructure commonly runs £2,500 to £10,000 with UK consultancies.

For businesses operating in or near the public sector, comparable assessments appear on the Digital Marketplace under G-Cloud, with vendors offering vendor-neutral discovery phases and guidance aligned to cloud strategy and AI governance requirements.

For many owner-managed businesses starting from scratch, the Innovate UK toolkit is a practical first pass. It surfaces the key questions quickly and costs nothing, though it will not replace a structured assessment for larger investment decisions.

When should you commission one, and when can you skip it?

Commission a readiness assessment when planning AI spend above £10,000, or after a pilot that underdelivered. Squared Lemons recommends the same trigger points and adds that businesses starting with a new AI vendor benefit from an independent check before signing. Below those thresholds, a self-assessment through the Innovate UK toolkit is usually enough to give you a steer.

In regulated sectors, the calculation shifts. Financial services firms face FCA expectations on AI governance, model risk management, and Consumer Duty obligations, as set out in the FCA’s 2023 feedback statement on AI in financial services. Healthcare providers using AI face CQC and MHRA requirements for clinical safety. In those sectors, a readiness assessment is a baseline for responsible deployment rather than an optional step.

Where you can reasonably skip a formal assessment: if you are experimenting with AI tools that handle no personal data, touch no customer-facing decisions, and sit entirely outside your core operations. Generating a first-pass marketing brief or summarising internal meeting notes carries a different risk profile from using AI to score customer leads or process financial records.

The DSIT nine-stage AI adoption pathway, published alongside the UK government’s AI regulation white paper, is a useful free reference for understanding where your business sits on the readiness curve without commissioning anything.

What else will an assessment surface?

A good assessment surfaces three things that need attention in their own right. DPIAs are legally required under UK GDPR when an AI application poses high risk to individuals. AI governance covers how you oversee and document AI outputs over time. For businesses with EU customers, the EU AI Act introduces compliance obligations for high-risk AI systems from August 2026.

The ICO’s guidance on AI and UK GDPR is the practical starting point on DPIAs and lawful basis for processing. It sets out when a DPIA is required, how to carry one out, and what regulators expect to see. The NCSC has published separate guidance on securing AI systems, treating them as critical digital infrastructure requiring access controls, supply chain reviews, and active monitoring, guidance that applies to owner-managed businesses as much as to large organisations.

On skills, the DSIT-led work on AI skills for the UK workforce identifies AI literacy across the team as a core readiness gap, distinct from specialist data skills. Understanding what AI can do, where it makes errors, and when not to use it turns out to be as important as data quality for getting a pilot to land.

Those three areas, governance, data protection, and skills, are where many owner-managed businesses underestimate the work required. A readiness assessment makes them visible before they derail a pilot.


If you have not done any kind of readiness check, the Innovate UK toolkit is a practical starting point and costs nothing. If you are planning serious AI spend, or have already tried and not seen the results you expected, a focused mini-assessment from a UK specialist is worth the investment. Squared Lemons puts the typical cost at £2,000 to £5,000 for a single use case. The diagnostic is consistently cheaper than another failed pilot.

Sources

- DSIT (2023). AI Regulation: A Pro-Innovation Approach. Sets out the government's nine-stage AI adoption pathway, explicitly addressing SME needs across awareness, skills, and data maturity. https://www.gov.uk/government/publications/ai-regulation-a-pro-innovation-approach/white-paper - Innovate UK Business Connect (2023). AI Readiness Digital Toolkit. Practical prompts across use cases, data, skills, and processes, designed for owner-managed businesses and sector networks. https://iuk-business-connect.org.uk/wp-content/uploads/2023/08/AI_Readiness_digital_toolkit.pdf - ICO (2023). Guidance on AI and data protection. Covers lawful basis, DPIAs, purpose limitation, and UK GDPR requirements for organisations deploying AI. https://ico.org.uk/for-organisations/ai/ - ICO. Data Protection Impact Assessments (DPIAs). Sets out when a DPIA is legally required, how to carry one out, and what regulators expect to see. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-impact-assessments-dpias/ - FCA (2023). Artificial Intelligence in Financial Services: Feedback Statement FS23/4. Confirms FCA expectations on AI governance, model risk, data quality, and Consumer Duty obligations for regulated firms of all sizes. https://www.fca.org.uk/publications/feedback-statements/fs23-4-artificial-intelligence-financial-services - NCSC (2023). Guidelines for Securing AI Systems. Guidance on access controls, supply chain security, and monitoring for AI deployments, applicable to organisations of all sizes. https://www.ncsc.gov.uk/guidance/guidelines-for-securing-ai - EU (2024). Regulation (EU) 2024/1689 (AI Act). Introduces risk-based obligations for high-risk AI systems; UK businesses with EU-facing AI products face provisions from August 2026. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689 - Cisco (2023). AI Readiness Index. Finds 28% of organisations have adequate AI infrastructure and 60% struggle to integrate data across systems, a pattern The AI Consultancy applies directly to UK owner-managed businesses. https://www.cisco.com/c/en/us/solutions/executive-perspectives/annual-cybersecurity-report/ai-readiness.html - Salesforce (2024). UK AI Readiness Index. Identifies fragmented data and legacy IT as the main barriers to AI readiness for UK organisations, with smaller businesses particularly exposed. https://www.salesforce.com/uk/news/wp-content/uploads/sites/5/2024/12/Salesforce-UK-AI-Readiness-Index.pdf - Squared Lemons (2024). AI Readiness Assessment: An SME Guide. Sets out the four-pillar framework, mini-assessment cost and duration, and structured output format for owner-managed businesses. https://www.squaredlemons.com/articles/ai-readiness-assessment-sme-guide/

Frequently asked questions

What does an AI readiness assessment cover for an owner-managed business?

UK-oriented frameworks typically cover five to seven dimensions: strategic alignment, data quality and availability, technology infrastructure, people and skills, process readiness, and governance or compliance. The output is a short costed action plan rather than a lengthy report, identifying your current position, the gaps, and what it will take to deploy a specific AI use case effectively. Some frameworks also include a risk register and an opportunity register alongside the roadmap.

How much does an AI readiness assessment cost in the UK?

Cost depends on scope. A focused mini-assessment for a single use case typically takes two to five days and costs £2,000 to £5,000, according to Squared Lemons. A broader assessment covering data, processes, skills, and infrastructure commonly runs £2,500 to £10,000 with UK consultancies. Innovate UK Business Connect also offers a free AI Readiness Digital Toolkit that owner-managers can use to carry out an initial self-assessment at no cost before committing to paid work.

Do I need a data protection impact assessment alongside an AI readiness assessment?

A DPIA is a legal requirement under UK GDPR when an AI application is likely to pose high risk to individuals, for example where it involves automated profiling or processes special-category data. The ICO's guidance on AI and UK GDPR sets out when a DPIA is required and how to carry one out. A thorough readiness assessment will flag DPIA obligations as part of its governance dimension, so the two commonly run in parallel for higher-risk use cases.

This post is general information and education only, not legal, regulatory, financial, or other professional advice. Regulations evolve, fee benchmarks shift, and every situation is different, so please take qualified professional advice before acting on anything you read here. See the Terms of Use for the full position.

Ready to talk it through?

Book a free 30 minute conversation. No pitch, no pressure, just a useful chat about where AI fits in your business.

Book a conversation

Related reading

If any of this sounds familiar, let's talk.

The next step is a conversation. No pitch, no pressure. Just an honest discussion about where you are and whether I can help.

Book a conversation