The framework

Four arcs.

Twelve panes.

Insight you must see.

Action you take.

Wave 0 on Steady.

Four arcs.
Twelve panes.

Each pane answers one question with Insight you must see and Action you take. Owners, illustrative signals, and standards bridges sit underneath. The window exists so boards, CISOs, CFOs, and adoption leads share one picture instead of framework sprawl.

Start path: Wave 0 on Steady panes (Security → GRC → Cost and Value) then Licence and Adoption. SEE may run thin in parallel. GROW deepens once the base holds. Open the start sequence or assemble a roadmap.

Studio window · knolled panes
Three lenses: Risk, Cost, and Value.
Lenses · Risk · Cost · Value
Twelve-pane window motif in paper, ink, and signal red, oblique editorial view.
Window motif · twelve panes, one shared picture
Four arcs SEE STEADY MOVE GROW as aligned editorial blocks with Steady emphasised.
Four arcs · Wave 0 sits on Steady

Under the glass

Artefacts the panes produce

AI register template GRC pane · systems, owners, DPIA triggers
Overshare remediation list Security pane · hotspots and due dates
Idle-seat reclaim runbook Licence pane · 30/60/90 rhythm
Frozen value case Cost and Value pane · reconcile line
Literacy plan Adoption / Learning · cohort 1
Board narrative draft Narrative pane · one story

SEE

Understanding

Look out and in: readiness, business, horizon.

How you enter: Thin pass beside Wave 0. Informs priority. Does not delay Steady.

01

You

Where are we really — readiness, culture, shadow AI, capability?

Insight · Maturity radar across people, process, tech, data, and trust

Action · Run a baseline assessment; name an executive sponsor and AI product owner

 02

Business

Where is the business — strategy, value chains, constraints, outcomes that matter?

Insight · Value hypotheses tied to real drivers (time, cost, risk, revenue, experience)

Action · Publish a short AI value case; freeze assumptions

 03

Horizon

Where are technology and the wider world — models, agents, regulation, competitors?

Insight · Regulatory map (UK GDPR, EU AI Act roles, sector regs)

Action · Classify deployer versus provider duties per system

STEADY

Foundations

Load-bearing walls: security, GRC, cost and value.

How you enter: Wave 0 critical path. Owners, register, frozen value case.

04

Security

Can we let AI see and act without leaking, escalating, or being hijacked?

Insight · Overshare hotspots, sensitivity label coverage, agent permissions, Conditional Access posture

Action · Harden the data foundation before broad Copilot; apply least privilege for makers

 05

GRC

Who owns AI risk, and can we evidence responsible use?

Insight · AI and agent register (purpose, owner, risk tier, grounding data, EU exposure)

Action · Stand up a register, DPIA triggers, and a literacy programme

 06

Cost & Value

What are we spending, forecasting, and actually realising?

Insight · Fully loaded cost stack (seats, prerequisites, enablement, consumption credits)

Action · Set forecast and budget guardrails; define chargeback dimensions

MOVE

Adoption & work

Seats become behaviour. Work is redesigned.

How you enter: Licence reclaim and adoption cohorts after Steady holds.

07

Licence

Are seats and credits working, or sitting on the shelf?

Insight · Licensed versus weekly-active; dormant seats; unlicensed Chat candidates

Action · Run 30/60/90 reclaim and reassign; keep a waitlist; renew on evidence not volume

 08

Adoption

Are people changing how they work — sustainably?

Insight · Adoption by department, role, and workload; champions; friction themes

Action · Use wave-based rollout, clinics, and a champion network; stop spraying seats

 09

Work & Skills

How does work actually get done — and how should humans and AI share it?

Insight · Task maps for priority roles (what is done, how often, how critical)

Action · Score each task: automate / augment / human-only; rebundle roles

GROW

Learning & frontier

Narrative, reflection, bounded play.

How you enter: Board story, learning loops, frontier with kill criteria.

10

Narrative

Does the organisation share one clear story — board, staff, regulators?

Insight · Stakeholder map and message gaps

Action · Set a board pack rhythm; staff literacy narrative; transparency notes for users

 11

Learning

Are we getting smarter each cycle?

Insight · After-action reviews; clinic learnings; incident lessons

Action · Run retrospectives tied to panes 4–9; update playbooks

 12

Frontier

Where do we explore safely — and keep the human spark?

Insight · Lab portfolio: experiments, time-boxes, kill criteria

Action · Sandbox agents and models; run design sprints; celebrate useful play

Wave 0

Steady base first

Security → GRC → Cost and Value → Licence → Adoption. Thin SEE may run in parallel. Read the start sequence or the journey post Wave 0 as a 100-day path.

Wave 0 flow: Security to GRC to Cost and Value to Licence to Adoption.
Wave 0 · steady base sequence

Operating rhythm

Cadence across the window

Weekly

Licence dormancy, security hotspots, adoption blockers (4, 7, 8)

Monthly

Cost/value reconcile; register hygiene; clinic themes (6, 5, 11)

Quarterly

Horizon and disruption review; skills remap; frontier kill/scale (3, 9, 12)

Annually

Full 12-pane maturity; strategy reset (1–2); board narrative (10)

DIGITAL SKILL WORKS LTD / 12 PANES