Proceed / hold gates
Every gate must be Yes before the scorecard recommends investment beyond focused issue resolution.
Accountable business ownerA named owner is accountable for the outcome, workflow change, and ongoing operation.
Permitted and lawful useThe intended use is permitted under applicable law, regulation, policy, and risk appetite.
Data rights and accessThere is a credible path to authorized, appropriate, representative data or knowledge.
No unresolved critical blockerNo known consumer, security, privacy, compliance, safety, or operational issue makes further work unacceptable.
Sponsor and delivery capacityA sponsor can fund the next stage and qualified teams can perform the work.
Weighted prioritization criteria
Score current evidence from 1 (very weak) to 5 (very strong). Higher always means more attractive and more ready.
Business Value
Strategic alignment
10% weightStrategic alignment
1 — Peripheral to stated priorities5 — Directly advances a funded enterprise or business priority
Business Value
Insurance outcome potential
10% weightInsurance outcome potential
1 — Outcome is vague or weakly connected to performance5 — Material improvement to claims, underwriting, service, distribution, risk, or operations
Business Value
Economic value
10% weightEconomic value
1 — Benefit is small, speculative, or difficult to measure5 — Large measurable value with a credible baseline and benefit path
Business Value
Reach and repeatability
10% weightReach and repeatability
1 — Narrow, infrequent, or highly bespoke use5 — High-volume or reusable across products, teams, jurisdictions, or workflows
Feasibility and Readiness
Data and knowledge readiness
10% weightData and knowledge readiness
1 — Sources are unavailable, low quality, ungoverned, or unrepresentative5 — Fit-for-purpose sources are accessible, governed, representative, and testable
Feasibility and Readiness
Technical integration readiness
8% weightTechnical integration readiness
1 — Major architecture, integration, identity, or platform obstacles5 — Proven architecture and secure integration path with manageable dependencies
Feasibility and Readiness
Workflow and adoption readiness
7% weightWorkflow and adoption readiness
1 — Workflow, users, decision rights, or change needs are poorly understood5 — Target workflow and users are engaged with clear operating change and ownership
Feasibility and Readiness
Time to evidence
5% weightTime to evidence
1 — Long, uncertain path before meaningful evidence can be produced5 — A bounded test can produce decision-quality evidence quickly
Risk and Control Readiness
Consumer and regulatory manageability
10% weightConsumer and regulatory manageability
1 — Material impacts are unclear or controls and explanations are not credible5 — Impacts are understood and proportionate controls, records, and recourse are feasible
Risk and Control Readiness
Security, privacy, and third-party manageability
10% weightSecurity, privacy, and third-party manageability
1 — Sensitive access, dependencies, or data terms create unresolved exposure5 — Security, privacy, vendor, continuity, and exit requirements are achievable
Risk and Control Readiness
Human oversight and operational resilience
10% weightHuman oversight and operational resilience
1 — Human authority, monitoring, fallback, containment, or recovery is unclear5 — Oversight, monitoring, fallback, traceability, and incident response are practical