1. Write down this year's objectives
Three to five, in the words of your plan: grow revenue in a segment, protect margin, keep key customers, pass an audit.
Not from your tools.
Five steps, a one-page template, and one decision per objective: lead, lag or exit. Free, no form.
An AI strategy is the set of decisions about where AI will change what a business does and how it runs. Most versions are a plan for adopting AI: tools, use cases, data, skills. This page is the other kind: what AI is doing to the objectives already in your plan, and what you decide about it. Drova's free AI Disruption Index does the first pass in about ten minutes.
Where it goes wrong
Search for an AI strategy framework and the results agree: find the use cases, ready the data, build the skills, govern it, measure it. Every one says to align with business objectives. None starts there.
PwC asked 4,454 CEOs in January 2026: 56% have seen no significant financial benefit from AI. Its advice to directors is to govern AI like a transformation, not a tech initiative, and to decide where to lead, lag or exit. You can only decide that from the objectives.
Three to five, in the words of your plan: grow revenue in a segment, protect margin, keep key customers, pass an audit.
Two columns. Threat: has AI made this harder, cheaper to attack, or dependent on a supplier you did not choose? Opportunity: could AI move it faster than the plan assumed?
One call per objective. Lead where AI changes it most and you can move first. Lag where you choose to wait and watch. Exit where the objective no longer makes sense.
Every threat gets a safeguard and an owner, as a risk register entry does. Every lead decision gets an owner too.
Annual plans assume a year of stable ground. With AI, the entries that moved most need a quarterly look.
The template
One row per objective, seven columns:
A worked row. Protect margin on the core service. Threat: two critical suppliers run on AI models we have no contract with. Opportunity: quoting could run on AI. Decision: lead on quoting, lag on suppliers until renewal. Safeguard: each supplier confirms its AI vendors in writing. Owner: the COO. Review: December.
Copy the columns into any document. No download, no form. The Index fills the threat, safeguard and owner columns for you.
The decision
Most AI strategies make one call for the whole company: go all in, or wait. The plan does not work that way. A business can lead on AI in customer service, lag in credit decisions and exit a product AI has made unprofitable, all in the same year.
Some threats arrive unchosen. When three AI vendors went down on one evening in September, tools inside thousands of businesses went with them, in companies that had never contracted any of them. An AI roadmap comes after these decisions, not before.
How Drova helps
If you want the first pass done for you, Drova's AI Disruption Index starts from your objectives, maps the risks under each, scores how hard AI is driving them and drafts a safeguard for each. About ten minutes, free. The lead, lag or exit calls stay yours. It is ours, so test it on your own objectives; here is a sample report.
FAQs
The decisions about where AI will change what the business does and how it runs. This version starts from the objectives in the business plan, not from tools and use cases.
The strategy is the decisions, one per objective. The roadmap is the sequence of work that follows them.
Not for the five steps. They need the people who own the objectives. Consultancies earn their fee on the build that follows a lead decision.
No. Readiness assessments measure data, infrastructure, skills and model management. This framework measures what AI is doing to your objectives and what you will decide about it.
The risks under each objective, scored, with a safeguard drafted for every one. Free.
AI strategy and AI risk
The real risks of AI for a business
The AI risk series hub: what counts as an AI risk and where to start.
How to run an AI risk assessment
The five steps and what a complete entry needs.
AI governance, in plain English
Who owns AI decisions and how they are checked.
The AI policy your business actually needs
The full template, free on the page.
The AI risk register
What every entry carries, with worked examples.
What is AI disruption?
The term in plain English.
AI-powered GRC: use cases, governance and guardrails
Where AI genuinely helps run risk and compliance, and the guardrails that keep it accountable.
56% of CEOs are asking the wrong questions about AI
PwC's numbers and the question boards should ask instead.