Technology Capability Model: AI-Ready Edition

This Technology Capability Model is for CIOs, architects and transformation leads deciding where AI goes inside IT itself: engineering, operations, service management and the running of the function. It describes technology in 10 L1, 82 L2 and 396 L3 capabilities, independent of the tools and teams that deliver them today. Every L2 capability has an AI profile with a target AI mode, a human oversight level and a risk tier, and a prioritization model ranks all 82 against weights you set. A 40-question readiness assessment tests what has to be in place first.

About the IT Management Capabilities Map

IT is often the function that maps everyone else and rarely maps itself. This model describes technology as 10 level 1 areas, 82 level 2 capabilities and 396 level 3 capabilities, each defined, with 328 KPIs at L2, covering infrastructure and platforms as well as delivery and service. Incident management (TC-7.4) is one L2 capability, with an ID that stays the same whether incidents are handled by an internal service desk, an outsourced provider or both.

Each L2 capability carries a full AI profile: opportunities, what stays human, candidate agents, data, KPIs, AI measures, prerequisites, risks and workforce impact. Each L3 is rated for work pattern, target AI mode, AI fit and risk tier. The incident management sample shows how this reads in practice: AI records an incident from a support contact or a correlated event, classifies it and proposes a priority with the reason shown, while the Incident Manager declares a major incident after hearing the reliability and infrastructure operations leads, and leads the response.

With 82 capabilities at L2, the ranking matters more than in a smaller function. The prioritization model gives each a risk-adjusted score and rank from your ratings and weights, the AI heatmap shows where fit and risk cluster across the model, and the 40-question weighted readiness assessment checks the foundations. The ratings describe a typical large enterprise and are a starting point for your own.

Why It Matters

Technology teams are usually organized by tower, platform or product team, and their work is described in the vocabulary of the tools that run it. AI has come into IT faster than into most functions, through coding assistants, operations tools that correlate alerts and service desk bots, each adopted by the team that owns the tool.

That makes simple questions hard to answer: which capabilities AI already supports, where it acts without a person, and whether the highest-value work is getting attention or only the easiest. The model gives one structure to rate, rank and govern AI inside IT, and the same structure serves application rationalization, sourcing and operating model work.

What's Inside

• 10 L1, 82 L2 and 396 L3 technology capabilities, with definitions to L3 and 328 KPIs at L2
• A full AI profile for every L2 capability: opportunities, what stays human, agents, data, KPIs, AI measures, prerequisites, risks and workforce impact
• AI ratings for every L3: work pattern, target AI mode, AI fit and risk tier
• A prioritization model with a risk-adjusted score and rank for every L2 capability, using your own ratings and weights
• An AI heatmap of the whole model
• A 40-question weighted AI readiness assessment
• A Welcome document, the capability map deck, standalone capability definitions and KPIs documents, the Excel workbook, the user guide
• Bonus files: a technology glossary, A Practical Guide to Business Architecture, a capability modeling overview, an AI-ready capability profile template and capability relationship mapping templates
• Free corrections, and new versions free for 180 days

Every file names your organization and carries your license ID. Ratings describe a typical large enterprise and are a starting point for your own.

Where It Is Used

AI opportunity assessment inside IT. Rate the 82 L2 capabilities and rank them to find where AI adds the most value at acceptable risk. The heatmap shows whether the best candidates sit in operations or in planning, architecture and the management of the function.

Setting oversight for automated operations. Use the target AI mode and oversight on each profile to decide where AI may act on production systems, where it proposes and a person approves, and where a person decides, as in declaring a major incident.

IT tool portfolio rationalization. Map service management, monitoring, engineering and planning tools to capabilities to find overlap and gaps, and give a consolidation or replacement decision its structure.

Sourcing and managed service scoping. Describe what a provider will deliver as a set of capabilities with KPIs, so contracts, handoffs and measures line up with the model rather than with a provider's service catalog.

IT operating model redesign. Use the capability definitions when moving between tower, product or platform team structures, so every capability has an owner after the change and none is dropped.

Baseline for IT performance. Choose KPIs from the 328 at L2 to measure capabilities before and after an AI change, and report results by capability to the CIO's leadership team.

Who Works With It

Enterprise and business architects. Use the model as the reference for the technology function, tailor it, and map applications, teams and providers to it.

CIO and IT leadership team. Read the ranking, heatmap and readiness results to set priorities for AI inside IT and explain them to the rest of the business.

Heads of infrastructure, operations and service management. Review the oversight levels and risk tiers for operational capabilities, and confirm where a person must stay in control.

IT strategy, portfolio and sourcing leads. Use capabilities as the unit for investment cases, provider scopes and tool decisions.

Engineering and platform leads. Use the AI profiles and prerequisites to plan the data, tooling and skills AI in delivery depends on.

A Blank Slate, Consultants, or a Reference Model

A technology capability model covers a large and fast-changing function, so it has to be detailed enough to map tools and providers, stable enough to report against, and rated for AI if it is going to guide decisions.

• Building it from a blank slate. Architects pull together tower and team leads, draft a structure and reconcile how each group describes its own work. With this many capabilities, keeping levels and definitions consistent takes many review cycles, and AI ratings across the whole model are a large extra effort.
• Hiring consultants to build it. A consulting team can facilitate and draft quickly, often from its own reference material. You still pay for generic structure that applies to any technology function, and the output may not come with ratings, a scoring model or files your repository can import.
• Starting from this model. Structure, definitions, KPIs and AI profiles arrive consistent with one another. Your architects spend their time adjusting the model to your sourcing, team structure and tooling, and re-rating where your environment differs.

Advisers and senior engineers are most useful where the model meets your environment: which capabilities you run, buy or share, and how much autonomy AI should have in production. That work starts sooner from a complete draft.

First Steps

1. Read the Welcome document and the user guide.
2. Walk the capability map with IT leadership and tower or team leads, and mark what to rename, merge or remove.
3. Re-rate the capabilities you are considering for AI, starting with operations and service management, and set your weights.
4. Run the 40-question readiness assessment with owners of IT data, tooling and risk.
5. Take the top of the ranking into a pilot shortlist and agree the oversight for each with the accountable lead.
6. Map applications, teams and providers to the capabilities in your architecture repository.

Read the Public Sample

The sample follows one thread through the package, incident management, and is 0.61% of the content. From the Incident Management (TC-7.4) AI profile:

• Work patterns: Coordination & orchestration, Analysis & insight, Rules-based decision
• Target AI mode: Augment
• Human oversight: Human-in-the-loop
• AI fit / Value / Feasibility / Data readiness: 4 / 5 / 3 / 3 (1–5)
• Risk tier: High
• Roadmap wave: Wave 2
• AI opportunity: Record an incident from a support contact or a correlated event, classify it and propose its priority under the incident priority rules, with the reason for the priority shown
• What stays human: The Incident Manager declares a major incident on the Service Desk Analyst's preparation, after hearing the Service Reliability Lead and the Infrastructure Operations Lead, and leads the response

Upgrade Credit

Start here and move up later: the full price of this edition counts toward the AI Transformation Blueprint for Technology if you upgrade within 90 days. Email support@ciopages.com with your order number for a one-time checkout code.

Frequently Asked Questions

What is the difference between the two editions?

The AI-Ready Capability Model covers the capability map, an AI profile for every L2 capability, prioritization, the heatmap and the readiness assessment. The AI Transformation Blueprint adds value streams redesigned for AI, the business data model, agent specifications, use cases, responsible AI principles and controls, the operating model and the roadmap, a leadership presentation template, and bonus files on roles, operating model archetypes and transformation.

Can I upgrade from the Capability Model to the Blueprint later?

Yes. The full price you paid for the Capability Model counts toward the Blueprint if you upgrade within 90 days. Email support@ciopages.com with your order number for a one-time checkout code.

What happens after 180 days?

Your license to use the files does not end. Corrections are free for as long as you use the files. New versions released within 180 days of purchase are free: we email you a new download link when one is released. There is no renewal after that: you can buy a new version at 25% off its price.

Can I load the content into our own AI tools?

Yes, within the license. The Enterprise license allows internal tools, including your own assistants and agents. Neither license allows training, fine-tuning or prompting AI systems for third parties.

Does the package cover AI laws and regulations?

No, by design. It is business architecture: capabilities, value streams, data and the AI layer describe what the technology function does and how AI fits, and they hold whichever laws apply where you operate. The risk tiers, principles and controls are durable practices your compliance team maps to your own jurisdictions.

Why not just ask ChatGPT or another AI assistant?

IT teams often ask an AI assistant first, and for a quick outline of what a technology function does, it works. The output is not stable from one run to the next, nothing checks that capabilities, ratings and readiness questions refer to each other, and its suggestions about automating operations come without an oversight level or risk tier. When the question is whether AI may act on production systems, you need something a review board can examine. This package gives you a fixed model with stable IDs, validated cross-references, a rated AI profile for each of the 82 L2 capabilities, a risk tier on each, and a prioritization model weighted by your own priorities. Keep the assistant for drafting and exploring on top of it.