The 50-Point HR AI Activation Readiness Checklist

Pillar 1 — Data quality (10 points)

• 99%+ active workers with location populated
• 99%+ active workers with manager populated
• 99%+ active workers with job profile populated
• Every active position rolls up to a valid parent org
• No supervisory orgs reporting to terminated managers
• Every job profile has at least 3 skills mapped
• No worker records with missing start date
• No duplicate national identifiers (Oracle) / national IDs (SF) / Government IDs (Workday)
• All MDF objects in Active state (no draft records)
• Cost centres assigned to every legal entity

Pillar 2 — Role and skill structure (10 points)

• Skill taxonomy adopted across all job families
• Proficiency levels defined for top 100 skills
• Career framework mapped to job profiles
• Competency model linked to performance rating scale
• No orphan job profiles (no worker assigned)
• Job profiles version-controlled with effective dates
• Manager hierarchy depth ≤ 8 levels
• Position-to-job-profile mapping is 1:1
• Custom roles documented with owners
• Annual job architecture review completed

Pillar 3 — Process and routing health (10 points)

• No business processes routing to terminated workers
• Every critical BP has an exception/escalation path
• BP condition rules reference only active objects
• No BPs with > 7 day average completion time
• Approval chains documented per material transaction
• Business processes mapped to SOX controls
• BP definitions reviewed annually
• Auto-routing rules tested in Preview before promotion
• Manager-on-leave delegation configured
• Audit trail enabled on every approval step

Pillar 4 — Security and data exposure (10 points)

• No unconstrained security groups on PII domains
• Role-based groups outnumber user-based 4:1
• All ISUs have 'Do Not Allow UI Sessions' enabled
• ISU domain access right-sized in last 12 months
• MFA enforced on all admin accounts
• OAuth 2.0 used for all API integrations
• SoD matrix mapped to security groups
• Quarterly privileged access review evidence retained
• Termination → account deactivation < 24 hours
• Security policy changes peer-reviewed

Pillar 5 — Integration trust (10 points)

• Every active integration has an alert subscriber
• Alert subscriber list includes a shared mailbox
• Integration credentials rotated in last 12 months
• No personal-account ISUs
• Integration mappings reviewed pre-release
• Failed runs trigger paging within 1 hour
• Integration Audit report reviewed weekly
• OAuth token refresh monitored
• No deprecated field mappings in production
• Documented runbook per critical integration

Score yourself

Tally your checks. Below 30 means you are not ready for any AI agent in production. 30–40 means you can run a controlled POC. 40–50 means you can activate select agents. Above 45 means you are ready for broad rollout. Run a free Yoetz.ai scan to get the same 50 points scored automatically.

Continue reading

• AI Activation Readiness Guide
• Illuminate Readiness
• SAP Joule Readiness
• Get the automated score (free)