Why This Diagnostic
Your free assessment showed you the gaps. This tells you why they exist and what to do about them.
The C6 Expert Diagnostic is a facilitated, expert-guided analysis of your AI Risk & Controls maturity. Gerald West – with 27+ years of SAP security experience and deep expertise in AI governance, Context Engineering, and the Bloom-Hegel Cognitive Dialectic Framework – personally reviews your responses, enriches them with industry benchmarking and pattern recognition, and delivers a prioritised report with a live review call.
This is not another AI readiness survey. It is a diagnostic consultation that examines governance, capability, and cognitive discipline – the three domains that determine whether your organisation will use AI responsibly or accumulate risk invisibly.
What You Get
- Evidence-Based Maturity Scoring – Weighted, multi-dimensional scoring across your selected process area(s). A defensible maturity rating you can present to stakeholders.
- Root-Cause Gap Analysis – Identification of the specific capability gaps holding your maturity back, with analysis of why they exist – not just what is missing, but what is causing it.
- Industry Benchmarking – Comparison of your maturity against organisations of similar size, sector, and complexity.
- Prioritised Roadmap – A sequenced set of recommendations ranked by impact and feasibility, so you know exactly what to tackle first.
- Investment Case for Stakeholders – A clear articulation of the business case for each recommendation – ready to present upward to secure budget.
- 60-Minute Expert Review Call – A live session to walk through findings, answer questions, and agree priorities.
How It Works
Step 1: Choose Your Scope Select a single process area (e.g., Institutionalise Cognitive Discipline) or the full AIRC domain covering all five processes. Not sure which? Your free assessment results show your process-level scores – start with your lowest-scoring area.
Step 2: Complete the Enhanced Questionnaire You receive a structured, expert-level questionnaire that goes deeper than the free assessment. This takes 30–45 minutes for a single process, or 60–90 minutes for the full domain. Complete it in your own time.
Step 3: Expert Analysis & Report We analyse your responses using CaroKahn's proprietary Context Engineering methodology, enriching your data with industry benchmarking and 27+ years of pattern recognition. We may follow up with you on specific points if needed.
Step 4: Receive Your Diagnostic Report A branded PDF report (15–20 pages for a single process, 25–35 pages for full domain) as well as summary artefacts, delivered within 5–7 working days.
Step 5: Live Expert Review Call A 60-minute video call where Gerald walks through the findings, answers your questions, and discusses what to prioritise. Every call ends with clarity on your next move.
Choose Your Process Area
Each process area can be purchased individually (£1,500 + VAT) or as the full AIRC Domain Diagnostic covering all five (£6,000 + VAT).
AIRC-P1: Establish AI Governance & Policy Framework – How you define, communicate, and enforce the rules for AI use across your organisation. Covers acceptable use policies, responsible AI frameworks, risk appetite definition, board-level accountability, and AI strategy alignment.
AIRC-P2: Assure Regulatory Compliance & Audit Readiness – How you demonstrate compliance with the EU AI Act, ISO 42001, and emerging regulatory requirements. Covers AI risk registers, impact assessments, evidence management, audit trail integrity, and regulatory horizon scanning.
AIRC-P3: Build AI Capability & Workforce Readiness – How you equip your people to use AI effectively and responsibly. Covers AI literacy programmes, role-based competency frameworks, prompt engineering standards, training governance, and change management for AI adoption.
AIRC-P4: Operationalise AI Data, Technology & Value – How you govern the technical infrastructure and data foundations that AI depends on. Covers AI platform governance, data quality for AI, model validation, integration architecture, and value realisation measurement.
AIRC-P5: Institutionalise Cognitive Discipline – How you maintain meaningful human oversight in an AI-augmented workplace. Covers the Evaluate-First protocol, cognitive health metrics (HOTS ratio, dialectic density), AI-free deep work practices, override rate monitoring, and decision integrity controls.
Not sure which to choose? Take a free C6 Maturity Assessment for AIRC at carokahn.com/assessments – your process-level scores will show you exactly where your biggest gaps are.
Who This Is For
- Chief AI Officers, Heads of Data & Analytics, and AI Programme Leads responsible for governing AI adoption across the enterprise and demonstrating responsible use to the board.
- CISOs and IT Directors who need to extend their security and controls frameworks to cover AI tools, agents, and embedded intelligence – particularly as SAP introduces Joule across its platform.
- Compliance Officers and DPOs preparing for EU AI Act enforcement (2026), including Article 14 human oversight requirements and high-risk AI system obligations.
- Organisations deploying or planning SAP BTP, Joule, or third-party AI tools who need governance frameworks before scale – not after an incident.
- Internal Audit teams seeking a structured, evidence-based framework for assessing AI controls – beyond the superficial checklists currently available.
- Boards and executive teams concerned about cognitive erosion, shadow AI proliferation, and the organisational risks of ungoverned AI adoption.
Frequently Asked Questions
How long does the whole process take?
From purchase to receiving your report: typically 2–3 weeks, depending on how quickly you complete the questionnaire. The expert review call is scheduled within 10 working days of report delivery.
I have already completed the free assessment. Do I need to answer questions again?
The Expert Diagnostic questionnaire is deeper and more detailed than the free assessment, but we use your free assessment results as a starting point so you are not repeating yourself. Think of the free assessment as the GP check-up and this as the specialist consultation.
Can I start with one process area and add more later?
Absolutely. Many clients start with their lowest-scoring process area from the free assessment, then expand to additional processes or the full domain. If you purchase additional process areas within 90 days, we credit the per-process price against the full domain price.
What format is the report?
A branded PDF document, professionally formatted and board-ready. Typically 15–20 pages for a single process area or 25–35 pages for the full domain. You own this document and can share it internally as needed.
Is this suitable for organisations currently migrating to S/4HANA?
Particularly so. The diagnostic assesses your current-state maturity and identifies specific access governance risks and opportunities relevant to your transformation. Many clients use the findings to shape their S/4HANA security workstream.
Can my organisation pay by invoice or purchase order?
Yes. For organisations that require a purchase order or prefer to pay by invoice rather than card payment, please email assessments@carokahn.com with your requirements. We will issue a formal quotation and can accommodate payment by bank transfer on standard net-30 terms. VAT-registered organisations will receive a proper VAT invoice.
Will I receive a VAT invoice?
Yes. All purchases include a VAT receipt. For card payments through the store, Payhip (as merchant of record) issues the VAT receipt automatically. For invoice payments arranged directly with CaroKahn, we issue a VAT invoice via QuickBooks.
What if I am not satisfied?
If the diagnostic does not meet your expectations, email assessments@carokahn.com within 7 days of receiving your report. We will discuss your concerns and offer a partial or full refund on a case-by-case basis.
How does this relate to the other C6 diagnostics (AAG, CCM, DPS)?
AIRC focuses specifically on AI governance, capability, and cognitive oversight. The other three diagnostics cover access governance (AAG), controls monitoring (CCM), and data protection (DPS). They are complementary – in fact, the C6 Convergence Framework shows how AI controls amplify value across all three domains. Organisations with mature AIRC practices see 1.8–3.8x multiplied value from their AAG, CCM, and DPS investments. You can purchase diagnostics in any combination.
Can I get a diagnostic for other domains (AAG, CCM, DPS)?
Yes. The C6 Expert Diagnostic is available across all four C6 Maturity Model domains: AAG, CCM, DPS, and AIRC. Visit the Get Expert Guidance collection to explore all available diagnostics.