Choose the next AI investment by diagnosing the constraint holding the business back, then earn the right to scale more ambitious work.
I disagree with a common way companies build an AI strategy: start with a long list of use cases, score each one, and fund the most exciting candidates.
The scoring may be careful. The ideas may be credible. Yet the portfolio can still be wrong because it assumes every organization is ready to pursue the same kind of value. One company needs dependable data access before it needs an autonomous agent. Another has good infrastructure but no agreement about workflow ownership. A third can safely automate routine work but cannot explain whether the result improved the business.
In each case, the most strategic investment is different.
Strategy is not a property of a technology. It is a choice about what deserves attention under current constraints. That makes sequence as important as ambition. If leaders try to create transformation on top of unstable services, unclear data, fragmented workflows, or missing accountability, the glamorous project inherits those weaknesses. The organization spends more and trusts technology less.
The useful question is therefore not, “Which AI use case is most advanced?” It is, “Which constraint prevents us from converting technology into a dependable business result?”
This framework is not a maturity score and it is not a staircase every company must climb in order. It is a constraint map. A large organization may occupy several states at once: customer support may be ready to redesign work with AI while finance is still repairing data controls. A security incident may also move a mature product back toward stabilization overnight.
| Operating state | Dominant constraint | Strategic work now | Evidence that permits the next move |
|---|---|---|---|
| Recover | Essential work is failing or dangerously manual | Restore service, create safe fallbacks, define owners | Critical workflows run within agreed limits |
| Stabilize | Results vary and risk is poorly controlled | Test, monitor, secure, document, and rehearse recovery | Reliability and risk measures hold in real use |
| Connect | Data and workflow handoffs break end-to-end value | Fix definitions, interfaces, identity, lineage, and handoffs | A complete outcome can be traced across systems |
| Simplify | Duplication and local variation consume capacity | Standardize shared components and retire avoidable complexity | Teams reuse the platform without losing necessary context |
| Transform | The operating foundation can support workflow change | Redesign decisions, roles, measures, and customer value | Outcomes improve without exporting hidden cost or risk |
The labels matter less than the diagnosis. The framework asks leaders to identify the dominant constraint, invest enough to change it, and require evidence before increasing the system’s reach or authority.
That is a different discipline from declaring the organization “level four” or “AI mature.” A label describes the organization. A constraint gives the organization something to do.
Leaders often reserve the word strategic for new revenue, customer-facing innovation, or large transformation programs. Keeping a brittle workflow alive sounds operational by comparison.
But imagine a company whose pricing data is refreshed through an undocumented spreadsheet and one employee’s local script. Or a service team whose knowledge assistant cannot reliably enforce document permissions. The strategic priority is not to add more agent capabilities. It is to remove the immediate threat to an essential outcome.
Recovery work may include establishing a manual fallback, reducing the blast radius, naming a service owner, restoring access, reconciling corrupted data, or documenting how an essential decision is made. These actions are not a complete long-term design. They create enough safety and visibility to make one possible.
This is also where leaders should separate urgency from permanent architecture. A temporary manual review can be appropriate during recovery. It becomes a liability when nobody defines the conditions for removing it. A fast workaround can protect customers today, but it should produce an owner, a record of the failure, and a decision about what must change next.
The test is simple: can the business complete the essential work, and can it recover when the technical path fails? Until the answer is yes, claims about transformation are premature.
Once essential work runs, the next constraint is often variation. The system works in a demonstration but behaves differently with real users, changing inputs, provider updates, permission combinations, or unusual cases.
For an AI system, stability includes more than availability. It includes whether retrieval finds the right evidence, structured output remains valid, tool calls stay within authority, latency is tolerable, costs remain bounded, and people know when to intervene. A model endpoint can have excellent uptime while the business workflow remains unreliable.
This is why stability work needs an evaluation set, production monitoring, incident ownership, rollback paths, access control, and a review cadence. The relevant measures depend on consequence. A drafting assistant may tolerate an obvious error that a claims-processing agent cannot. A system that recommends an action needs different controls from one allowed to execute it.
The NIST AI Risk Management Framework Core treats risk management as continuous across the AI lifecycle and organizes it around governing, mapping, measuring, and managing. NIST explicitly says these functions are not a fixed checklist or ordered series. That supports the right operating posture: controls should respond to context and keep changing as the system, users, and risks change.
Reliability work can feel slower than launching features because much of it is invisible when successful. Yet it is the work that allows authority to increase safely. Before an assistant becomes an agent, and before an agent receives broader permissions, leaders should be able to show how failures are detected, contained, reviewed, and learned from. Protecting reliability while shipping AI is not a pause in strategy; it is how strategy survives contact with production.
A stable collection of tools can still produce a broken customer or employee experience. Data is re-entered. Definitions disagree. Approval moves through email. One system has the correct identity while another has the current status. AI makes these seams easier to hide because it can turn inconsistent inputs into fluent output.
The connecting state is therefore about an end-to-end outcome, not connecting everything to everything.
Take an internal support assistant. Its useful path might cross identity, an approved knowledge base, ticket history, escalation rules, and feedback. Integration succeeds when an authorized employee can ask a question, receive evidence appropriate to their access, escalate uncertainty, and improve the source after a failure. Having five connectors installed is not the outcome.
Leaders should trace one important unit of work from demand to result:
This exposes a crucial distinction. Technical interoperability moves information. Operational integration preserves meaning and responsibility as the information moves. An API can transfer a customer status correctly while two departments still interpret that status differently.
The evidence for leaving this state is not the number of integrations delivered. It is the ability to trace the outcome, its data, its decisions, and its exceptions across the workflow.
After teams connect workflows, repeated solutions become visible: several model gateways, evaluation tools, prompt stores, vector databases, observability patterns, or approval components doing similar jobs. Supporting the variation consumes time that could improve the product.
This is the moment for simplification—but it is easy to standardize too early.
A central platform should absorb problems that are genuinely shared: identity, secret handling, approved model access, logging, cost allocation, common evaluation infrastructure, deployment paths, and baseline security controls. Business teams should keep decisions that depend on local meaning: acceptable error, authoritative sources, escalation rules, outcome measures, and which actions require human approval.
Google Cloud’s 2025 DORA research on AI-assisted software development describes successful AI adoption as a systems problem and identifies foundational organizational capabilities that amplify AI’s effect. Its public summary also connects high-quality internal platforms with an organization’s ability to unlock value from AI. The important implication is not “buy a platform.” It is that local speed becomes organizational performance only when the surrounding delivery system can absorb it.
Standardization has earned its place when teams can reuse a supported path more easily than inventing a private one—and when that path still lets them express the constraints of their workflow. If the standard creates months of delay or ignores local risk, people will route around it. If every local preference becomes a platform feature, the shared path collapses under complexity.
The goal is a paved road with exits, not a single vehicle for every journey.
Transformation is not the final installation in a technology program. It is a change in how the business creates an outcome.
An AI support system is not transformative because it answers questions. It becomes strategically interesting when the organization redesigns how knowledge is maintained, how cases are routed, what people handle, how quality is measured, and how repeated failures change the product. An AI coding tool is not transformative because it produces code. The deeper change appears when teams redesign review, testing, documentation, platform support, and the allocation of engineering attention.
Microsoft’s 2026 Work Trend Index reports a gap between individual AI capability and organizational readiness. In its survey, only 26% of AI users said leadership was clearly and consistently aligned on AI, while organizational factors such as culture, manager support, and talent practices were more strongly associated with reported AI impact than individual factors. This is survey evidence rather than proof of causation, but it captures the sequencing problem: access to capable tools does not automatically redesign work.
Transformation requires leaders to change incentives, roles, measures, and decision rights. It may also require removing old steps. If AI drafts a report but the organization still produces, circulates, and approves the old report in parallel forever, capacity has not been released. A new layer has been added.
That is why scaling internal AI should depend on team readiness. The foundation is not ready because a central team says it is. It is ready when a receiving team can own the changed workflow, operate its controls, measure the outcome, and improve it after launch.
Leaders do not need a six-month maturity assessment to use this framework. A focused session with business, product, technology, data, risk, and frontline representation can reveal the dominant constraint.
Bring one proposed AI investment and ask five questions:
Record the weakest answer. Then test whether it represents a minor gap or the constraint that will dominate the investment. A missing dashboard should not automatically stop a low-risk experiment. Missing ownership for an agent that can change customer records should.
The decision record should state:
This prevents “strategic” from becoming a synonym for whatever has the strongest sponsor. It also gives foundational work a business explanation. A data quality project is no longer presented as cleanup in the abstract; it is the constraint preventing reliable pricing decisions. Observability is not technical polish; it is the evidence required before an agent receives more authority.
The framework should not become a new bureaucracy. Organizations are uneven by nature.
A mature digital product team may be simplifying its AI platform while a recently acquired business unit is recovering basic service ownership. A low-risk writing assistant may move quickly into workflow redesign while a high-impact decision system remains in stabilization. Even one product can occupy different states: its model quality may be stable while its cost allocation and escalation process are not.
Portfolio leaders should therefore avoid one enterprise-wide maturity label. Use minimum controls across the organization, then diagnose constraints at the level where work and consequences are owned. Shared standards can accelerate a team in recovery, but only if they solve its immediate problem. Forcing advanced platform conventions onto a struggling workflow can increase delay without reducing its most important risk.
In my teaching, I see a smaller version of the same sequencing mistake: learners sometimes reach for a more advanced library when the real constraint is an unclear data definition or a program they cannot yet test. More technology increases the surface area but does not remove the blockage. Teams face the same temptation at a larger and more expensive scale.
Good leadership makes the next constraint visible and keeps ambition attached to evidence.
There is no universal list of strategic AI projects. The right move depends on what the business is trying to achieve, what currently prevents that outcome, and what evidence the operating system can support.
Sometimes the strategic move is a new AI-enabled service. Sometimes it is an evaluation harness, an identity boundary, a shared data definition, an incident drill, or the retirement of three duplicate tools. The less glamorous investment may create more future options because it makes later work safer and faster.
Leaders should still pursue experiments while foundations improve. The point is not to finish every lower-level task before learning anything new. The point is to contain experiments, name their assumptions, and avoid confusing a successful prototype with organizational readiness.
An AI strategy becomes credible when people can explain why this work comes now, which constraint it removes, what evidence will count, and what becomes possible afterward. That is how technology stops competing for the label “strategic” and starts earning it through sequence.