The StackUp AI Maturity Assessment scores your organisation on a 0–100 scale across the four questions every executive asks. Here's exactly how the score is calculated, what each band means, and how the AI Risk Rating is derived.
Every scoring question is rated against the same 5-level rubric. Level 3 is intentionally the most common reality — "we have it, but it's not really being used." Levels 4 and 5 always involve some combination of governance, frequency, accountability, and visibility.
37 scoring questions grouped under the four questions every executive asks. Plus 6 context questions that inform the AI CTO and the report narrative without rolling into the score.
Each pillar score is calculated on a 0–100 scale that maps level 1 → 0, level 3 → 50, and level 5 → 100. The overall AI Maturity Score is the simple average of the four pillar scores.
pillar_score = sum((level - 1) × weight) / sum(4 × weight) × 100 overall_score = average(pillar_scores)
"Is it actually working?" carries fewer scoring questions than the capability-heavy "Can we keep up?" or "What could go wrong?". That's deliberate — each outcomes question naturally carries more weight in its pillar score, reinforcing that actual outcomes matter more than process maturity.
Two upfront filter questions adjust which questions you see:
Skipped questions are excluded from both the numerator and denominator, so they don't drag the score down. Same for "Not applicable" answers on department questions — the department is simply not scored.
Every scoring question includes a "Don't know" option. This is deliberately distinct from "Not applicable":
We score "Don't know" as a gap because maturity assessments measure demonstrable capability - absence of evidence is treated the same way auditors treat unproven SOC 2 or ISO controls. Excluding them would create a loophole where respondents could dodge hard questions to inflate their score. If a "Don't know" is really a visibility gap rather than a capability gap, invite the right colleague to firm it up and re-take the assessment.
Your overall score maps to one of four named levels.
The AI Risk Rating is a secondary callout — not co-headline with the maturity score. It's the average rubric level (1–5) across these seven risk-flavoured questions:
The average rubric subscore maps to a band:
Six function-specific questions (Marketing, Sales, Finance, HR, Operations, Technology) score each department on the same 5-level rubric. Department scores are not rolled into the overall AI Maturity Score — they're a parallel diagnostic cut. Choose "Not applicable" for any function your organisation doesn't have, and that department is excluded from the heatmap entirely.