1. Start from the objective, not the tool
Which objective is this meant to move: win customers, protect margin, cut a cycle time? If nobody can name it, the pilot has no finish line. The objectives-first framework is the wider version of this step.
The sequence matters more than the tool.
Where adoption starts, the five steps in order, and the risk each one puts on your register. Free, no form.
AI adoption is the work of putting AI into how a business runs: choosing where it goes, who uses it, and what changes as a result. Buying the tools is the easy half. The harder half is that every adoption decision moves something on the risk register, and it moves before the benefit shows up. Adoption and risk are the same project, run in the right order. An AI adoption strategy is that order written down: which use cases, in what sequence, with what safeguards. Drova's free AI Disruption Index does the risk half from your objectives in about ten minutes.
Which objective is this meant to move: win customers, protect margin, cut a cycle time? If nobody can name it, the pilot has no finish line. The objectives-first framework is the wider version of this step.
One use case, one measure, one owner. Breadth is what makes adoption look busy and read as nothing. The use-case page lists the common ones and what each brings with it.
Before go-live, write down the decisions the AI does not make and the data it never sees. That sentence is your first safeguard, and it is what the AI policy exists to hold.
Every use case adds an entry: what could go wrong, who owns it, what the safeguard is. A register entry written before go-live costs minutes. Written after an incident, it costs a great deal more.
Scaling multiplies the exposure as fast as the benefit. Set the review date at go-live, not when someone asks for it.
Where it starts
The usual first move when implementing AI is a list of tools and a pilot in whichever team volunteers. It produces activity, and often nothing measurable. PwC's January 2026 survey of 4,454 chief executives found 56% had seen no significant financial benefit from AI. The businesses seeing both cost and revenue gains were two to three times more likely to have embedded AI across the work, and PwC notes that foundations matter as much as scale.
The cost
Every step adds something to the register. A drafting tool adds output nobody checked and data going somewhere new. A customer-facing use adds a promise your business has to honour. An agent adds actions nobody watched.
The same EY survey found 36% of large US companies had already had an AI incident with a materially negative impact. The register entry is cheaper than the incident.
Sequence
An AI roadmap written before step one is a list of tools looking for a reason. Written after, it is the sequence of use cases you have decided are worth the risk, with review dates attached.
Pilots are the same. A pilot with no named objective and no register entry tells you the technology works, which was never the question. Ban neither; order both.
FAQs
Putting AI into how a business runs: choosing where it goes, who uses it and what changes as a result. The buying is the easy half; the sequencing is what decides whether it works.
Start from an objective, pick one use case, decide what the AI may not do, put the new risk on the register, then review before scaling. In that order.
A framework sets the order of decisions. The five steps on this page are one, written so an AI implementation puts the risk work at go-live rather than after an incident.
A pilot with a named objective, an owner and a register entry answers a business question. One without those only proves the technology runs, which was never in doubt.
The risks under each objective, scored, with a safeguard drafted for every one. Free.
AI strategy and AI risk
An AI strategy that starts from your objectives
The series hub: five steps, a one-page template, and one decision per objective.
AI maturity: where you actually are
Five levels of governance maturity and four questions to place your business.
AI use cases, and the risk each one brings
What businesses use AI for, and what each use puts on the register.
The AI policy your business actually needs
The full template, free on the page.
The AI risk register
What every entry carries, with worked examples.
How to run an AI risk assessment
The five steps and what a complete entry needs.
The real risks of AI for a business
The AI risk series hub.