Back to Assessments & Documents
Technology Governance and Strategy Active

Technology Workforce Readiness Maturity Assessment

A 56-question diagnostic across 9 domains that evaluates whether technology has the people, skills and coverage it needs now and for the next three years, including skills for AI-assisted work, without single points of f...

Start Assessment

Overview

A 56-question diagnostic across 9 domains that evaluates whether technology has the people, skills and coverage it needs now and for the next three years, including skills for AI-assisted work, without single points of failure. Written for the CIO and IT leadership team who need to answer: can we run and change our technology if key people leave, if demand shifts, or if AI changes the work?

Detailed Description

Many IT functions find out what skills they lack only when a project stalls or an outage drags on: one engineer knows the payment platform, contractors hold the only runbooks, certifications lapse in regulated roles, on-call falls on the same three people, and AI tools are rolled out with nobody checking whether engineers can still fix the work without them. This assessment follows the technology workforce from direction to results: the IT workforce strategy and standard, the IT and HR split and the people forum; the technology skills framework on SFIA 9 or e-CF, NICE work roles and the technical career track; the skills inventory, proficiency verification, gap analysis, emerging skills and the multi-year IT workforce plan; the mix of employees, contractors, managed services and automation and the controls on contract staff; learning paths, practice environments, certifications and development effectiveness; AI task impact, AI skills, agent supervision and human and agent capacity; coverage, single points of knowledge, cross-training, handover, coverage tests and on-call load; critical roles, successors, emergency cover, leadership pipeline, mobility and retention; and the scorecard, governance reporting, lessons, assurance and improvement. It is the workforce deep dive of the Technology Governance family. The hub, Technology Governance and Strategy, sets direction; the HR family (Hire to Retire, Learning, Skills and Capability, Total Rewards, Performance and Talent, Talent Acquisition, People Data, Privacy and AI in HR) keeps enterprise people processes, which this model uses as Inputs.

Assessment Details

Audience

CIO and IT leadership team. Secondary: HR business partner for technology, engineering and operations managers, IT learning lead, sourcing and vendor managers, CISO.

Purpose

Shows where skills records are self-rated, where gaps are found too late, where knowledge sits with one person or one supplier, where certifications lapse, where AI changes work without changing roles or checks, where on-call burns people out and where critical roles have no ready successor or emergency cover. Gives a prioritized path to a technology workforce that can deliver the strategy and survive losing anyone.

Effort

Initial assessment: 4 to 6 hours of facilitated sessions with the CIO team, the HR business partner, three or four engineering and operations managers, the IT learning lead and sourcing. Evidence gathering: workforce strategy, standard and plan, skills framework and inventory extracts, coverage matrix and dependency register, cross-training and test records, certification records, contractor files, critical role and succession records and the workforce scorecard.

Cadence

Yearly, aligned with the strategy and workforce planning cycle, and after a major incident with a people cause, a restructuring or outsourcing decision, a large AI rollout in IT, or the loss of a critical role holder.

Framework Alignment

COBIT 2019 SFIA 9 EN 16234-1:2019 NIST SP 800-181 Rev 1 ISO 30414:2025 ISO 30409:2016 ISO 10015:2019 ISO/TS 30421:2021 ISO 45003:2021 ISO/IEC 42001:2023 ISO/IEC 27001:2022 ISO/IEC 20000-1:2018 NIST AI RMF 1.0 Regulation (EU) 2024/1689 IIA Three Lines Model APQC PCF

KPIs

  • Critical Duties with Two Capable People - Share of critical systems and duties with two or more people signed off as capable. Target: 95% or more (model target).
  • Priority Skills Gaps Closed on Time - Share of priority gaps from the last cycle closed or reduced to tolerance by their target date. Target: 70% or more (model target).
  • Critical IT Roles with a Ready-Now Successor - Share of critical IT roles with at least one ready-now successor. Target: 70% or more (model target).
  • Critical Services Known Only to Supplier Staff - Share of critical services whose operating knowledge only supplier staff hold. Threshold: 5% or fewer (model target).
  • Regretted Loss of Scarce-Skill and Critical IT Staff - Rolling 12-month regretted leavers, rate by the ISO/TS 30421 method and regretted as defined in the IT Workforce Scorecard. Threshold: 8% or fewer (model target).

Dependencies

Technology Governance and Strategy (v10.9.6): IT Strategy, Technology Policy Framework, Board Technology Report (1.1, 1.4, 3.3, 4.1, 9.2, 9.4). Hire to Retire (H2R) End-to-End HR (v9.9.6): HR Operating Model and Process Blueprint, Strategic Workforce Plan, Psychosocial Risk Assessment, HR Performance Reporting Pack (1.2, 3.5, 7.7, 9.1). Performance and Talent Management (v8.9.6): Talent Council Minutes, Talent and Performance Dashboard, Critical Role Register, Succession Plan, Talent Review and Decision Records (1.3, 2.5, 5.3, 8.1, 8.2, 8.3, 8.5, 8.6). IT Risk Management (v7.9.6): IT Issue and Exception Register, IT Risk Register, Critical Provider Exit Plans (1.4, 1.6, 4.5, 4.6, 7.2, 9.3). Learning, Skills and Capability (v5.9.6): Annual Learning Plan and Budget, Competency and Skills Dictionary, Employee Skills and Knowledge Inventory, Skills Assessment and Validation Standard, Learning Management System Records, Leadership Development and Coaching Framework (1.5, 2.1, 2.6, 3.1, 3.2, 5.1, 5.4, 5.5, 5.7, 6.5, 7.5, 8.4). Total Rewards and Compensation (v5.9.6): Job Architecture Catalog, Reward Reporting Pack (2.2, 2.3, 8.6). Security Operations Center Cyber and Incident Response (v8.9.6): SOC Workforce Plan (2.4, 3.5). Project Management (v7.9.6): Resource Capacity Plan (3.6, 3.7). Talent Acquisition and Onboarding (v7.9.6): Recruitment Supplier Register, Talent Acquisition Strategy (4.2, 6.6). IT Budget and Financial Management (v9.9.6): Supplier and Contract Register (4.3). Service Integration and Management (SIAM) (v6.9.6): Access Recertification Records (4.4). Knowledge Management (v10.9.6): Knowledge Community and Recognition Plan, Critical Knowledge Inventory (5.6, 7.5). People Data, Privacy and AI in HR (v5.9.6): AI Transition Case Tracker, AI Literacy Requirements Matrix (6.1, 6.2, 6.4). AI Governance (v11.9.6): AI Competency, Awareness and Communication Plan (6.3). Capacity Performance Management (v6.9.6): AI Capacity Plan, Enterprise Capacity Plan (6.4, 7.1). SRE, DevOps and ITSM Convergence (v4.9.6): Runbook Library (7.4). Incident Management (v9.9.6): Incident Staffing and On-Call Load Report (7.7). IT Performance Management (v6.9.6): KPI Catalog (9.1). Continual Service Improvement (v8.9.6): Continual Improvement Register (9.5).

Assessment Outline

(9 domains · 56 questions)
  1. 1

    1 IT Workforce Mandate and Strategy

    The IT workforce strategy, the IT and HR ownership split, the IT people forum, the technology workforce standard and its minimums, IT development funding and IT workforce risk

    • 1.1 IT Workforce Strategy (Bridge) 1 questions
    • 1.2 IT and HR Ownership Split (Bridge) 1 questions
    • 1.3 IT People Forum (Bridge) 1 questions
    • 1.4 Technology Workforce Standard (Bridge) 1 questions
    • 1.5 IT Development Funding and Allocation (Bridge) 1 questions
    • 1.6 IT Workforce Risk (Bridge) 1 questions
  2. 2

    2 Technology Job Architecture and Skills Framework

    The technology skills framework on SFIA 9 or e-CF, IT job families and levels, IT role profiles, cybersecurity work roles on NICE, the technical career track with promotion evidence and skills taxonomy currency

    • 2.1 Technology Skills Framework (Bridge) 1 questions
    • 2.2 IT Job Families and Levels (Bridge) 1 questions
    • 2.3 IT Role Profiles (Bridge) 1 questions
    • 2.4 Cybersecurity Work Role Mapping (Bridge) 1 questions
    • 2.5 Technical Career Track and Promotion Evidence (Bridge) 1 questions
    • 2.6 Technology Skills Taxonomy Currency (Bridge) 1 questions
  3. 3

    3 Skills Baseline and IT Workforce Planning

    The IT skills inventory, proficiency verification, roadmap skills gap analysis, the emerging skills radar, the multi-year IT workforce plan, staffing readiness checks for major initiatives and work time and capacity visibility

    • 3.1 IT Skills Inventory (Bridge) 1 questions
    • 3.2 Technical Proficiency Verification (Bridge) 1 questions
    • 3.3 Roadmap Skills Gap Analysis (Bridge) 1 questions
    • 3.4 Emerging Technology Skills Radar 1 questions
    • 3.5 IT Workforce Plan (Bridge) 1 questions
    • 3.6 Initiative Staffing Readiness Check (Bridge) 1 questions
    • 3.7 Work Time and Capacity Visibility (Bridge) 1 questions
  4. 4

    4 Sourcing Mix and Contract Workforce

    The target mix of employees, contractors, managed services and automation, contract workforce requirements, contractor role and deliverable definition, agreement and access reviews, knowledge held by suppliers and exit handover

    • 4.1 Workforce Sourcing Mix (Bridge) 1 questions
    • 4.2 Contract Workforce Requirements (Bridge) 1 questions
    • 4.3 Contractor Role and Deliverable Definition (Bridge) 1 questions
    • 4.4 Contractor Agreement and Access Review (Bridge) 1 questions
    • 4.5 Supplier-Held Knowledge Dependency (Bridge) 1 questions
    • 4.6 Contractor and Provider Exit Handover (Bridge) 1 questions
  5. 5

    5 Technical Development and Certification

    Technical learning paths, hands-on practice environments, certification requirements for critical and regulated roles, certification renewal, training content currency, engineering knowledge sharing and development effectiveness

    • 5.1 Technical Learning Paths (Bridge) 1 questions
    • 5.2 Hands-On Practice Environments 1 questions
    • 5.3 Certification Requirements for Critical and Regulated Roles (Bridge) 1 questions
    • 5.4 Certification Currency and Renewal (Bridge) 1 questions
    • 5.5 Technical Training Content Currency (Bridge) 1 questions
    • 5.6 Engineering Knowledge Sharing (Bridge) 1 questions
    • 5.7 Technical Development Effectiveness (Bridge) 1 questions
  6. 6

    6 AI-Era Skills and Human-AI Teaming

    AI task impact on IT roles, AI literacy and AI-assisted engineering skills, supervision of AI agents, human and agent capacity, proficiency checks when work is AI-assisted and the entry-level pipeline with core skill retention

    • 6.1 AI Task Impact on IT Roles (Bridge) 1 questions
    • 6.2 AI Literacy and AI-Assisted Engineering Skills (Bridge) 1 questions
    • 6.3 AI Agent Supervision Roles (Bridge) 1 questions
    • 6.4 Human and Agent Capacity Mix (Bridge) 1 questions
    • 6.5 Proficiency Checks for AI-Assisted Work (Bridge) 1 questions
    • 6.6 Entry-Level Pipeline and Core Skill Retention (Bridge) 1 questions
  7. 7

    7 Key-Person Resilience and Knowledge Continuity

    The skills coverage matrix, single points of knowledge, cross-training, supervised sign-off, departure knowledge handover, coverage testing with key individual leave and on-call load

    • 7.1 Skills Coverage Matrix (Bridge) 1 questions
    • 7.2 Single Points of Knowledge (Bridge) 1 questions
    • 7.3 Cross-Training Plan 1 questions
    • 7.4 Supervised Sign-Off (Bridge) 1 questions
    • 7.5 Departure Knowledge Handover (Bridge) 1 questions
    • 7.6 Coverage Testing and Key Individual Leave 1 questions
    • 7.7 On-Call Load and Sustainable Operations (Bridge) 1 questions
  8. 8

    8 IT Careers, Succession and Retention

    Critical IT roles, successor readiness and development, emergency cover with delegated technical authority, the IT leadership pipeline, internal mobility and rotations and scarce skills retention

    • 8.1 Critical IT Roles (Bridge) 1 questions
    • 8.2 IT Successor Readiness and Development (Bridge) 1 questions
    • 8.3 Emergency Cover and Delegated Technical Authority (Bridge) 1 questions
    • 8.4 IT Leadership Pipeline (Bridge) 1 questions
    • 8.5 IT Internal Mobility and Rotations (Bridge) 1 questions
    • 8.6 Scarce Skills Retention (Bridge) 1 questions
  9. 9

    9 Measurement and Improvement

    The IT workforce scorecard, workforce readiness reporting to the technology governance body, lessons from skills and coverage failures, independent assurance of workforce controls and workforce improvement

    • 9.1 IT Workforce Scorecard (Bridge) 1 questions
    • 9.2 Workforce Readiness Reporting to Governance (Bridge) 1 questions
    • 9.3 Lessons from Skills and Coverage Failures (Bridge) 1 questions
    • 9.4 Workforce Control Assurance (Bridge) 1 questions
    • 9.5 IT Workforce Improvement (Bridge) 1 questions

At a Glance

Category Technology Governance and Strategy
Type Free
Roles 6
Domains 9
Questions 56
Start Assessment

Still have questions? Get in touch

ITSGovernance
  • Twitter

Contact us

ITSGovernance