Chapter 4: Strategic Maturity
The first wave is over. Now what?
There was a moment, somewhere in the last two years, when every boardroom in the country developed an AI strategy. Most of them looked identical. A ChatGPT enterprise licence. A handful of Midjourney seats. A pilot project someone in the team had run without telling anyone. A slide deck reassuring stakeholders that the business was "actively exploring" generative AI.
That was the first wave. It looked like transformation. Most of it was procurement.
The businesses that got through that phase and kept moving are now somewhere entirely different. The ones that stopped there - satisfied that they had ticked the AI box - are about to find out what they missed.
The Uncomfortable Audit
Here is a question worth asking in your next leadership meeting, and worth answering with genuine honesty rather than organisational optimism.
Not "are we using AI?" Almost everyone can say yes to that now. The real question is: have we designed anything with it?
Because there is a vast and consequential difference between a team that uses AI tools and an organisation that has built AI into how it actually operates. The first is a behaviour. The second is infrastructure. The first requires no strategy to sustain. The second compounds in value over time. And right now, most businesses are firmly in the first category while believing they are somewhere in the second.
McKinsey's 2025 State of AI report found that 88% of organisations report using AI in at least one business function. It also found that only 39% report any measurable EBIT impact at the enterprise level. That gap between use and value is not an AI problem. It is a strategy problem.
What Tool Sprawl Actually Costs
The default mode of AI adoption for most organisations is additive. A new tool appears, gets adopted by part of the team, generates enthusiasm, and accumulates into an ever-larger stack of subscriptions that no single person has full visibility over.
This has a name: Shadow AI. And the data around it is striking.
A 2025 survey of over 500 enterprise leaders found that 28% of organisations now use more than ten different AI applications. 70% have not moved beyond basic integration for any of them. Only 35% of those tools went through any formal approval process. And 31% of enterprises discover rogue AI tools being used by their teams every single month - without their knowledge, without governance, and without any understanding of what data is being shared with which external systems.
The financial exposure is real. IBM's 2025 Cost of a Data Breach report found that organisations with high levels of unmanaged AI activity suffer an average of $670,000 in additional breach costs compared to those with proper governance in place. That is not a theoretical risk figure. That is the measurable consequence of letting adoption outrun oversight.
And then there is the operational cost that rarely makes it onto any balance sheet: 78% of IT leaders reported unexpected SaaS charges due to AI pricing models in 2025. The subscriptions your team cannot live without - the ones nobody audited, the ones that duplicated each other, the ones that quietly renewed while the person who signed up for them moved on - those are the cost centres hiding inside what most leadership teams are calling their AI investment.
This is not a criticism of the teams doing the adopting. In most cases they were solving real problems with the tools available to them. The failure is in leadership not building the infrastructure within which those tools could be adopted intelligently.
The Illusion of Strategy
The boardroom AI strategy that amounts to an enterprise licence and a vague commitment to "exploring the space" is not unusual. It is, at this point, the norm.
But consider what it communicates about the organisation's understanding of what this technology actually is. A single enterprise chat subscription does not automate a workflow. It does not protect client data by architecture. It does not build brand-specific intelligence into your creative process. It does not compound in value. It does not give you any competitive differentiation, because the same subscription is available to every one of your competitors at identical cost.
It is a productivity tool dressed up as a strategy. Useful, yes. Transformative, no.
Real strategic maturity looks different. According to IMD's 2025 AI Maturity Index, the organisations genuinely pulling ahead are those that have aligned five forces simultaneously: committed leadership, responsible governance, cross-functional talent, deep ecosystem understanding, and outcome-focused scaling. They are not asking "what AI tools should we buy?" They are asking "what does our business need to do better, and how does AI infrastructure make that possible?"
The question is not the tool. The question is always the outcome.
The Four Signs of Strategic Maturity
A business that has moved beyond the first wave tends to show the same characteristics, regardless of sector or scale.
It knows what it is automating and why. There is a clear map of which processes have been redesigned around AI capability, what the measurable outcome of each is, and who owns the governance of each. Not a pilot. Not an experiment. A working, reviewed, maintained system.
It protects what matters. Data governance is not an afterthought applied to AI after the fact. It is built into the infrastructure from the start. The question "should this data leave our systems?" is asked before adoption, not after a breach. Client confidences, competitive intelligence, brand IP - these have explicit protections and the team understands what they are.
It has not pinned its capability to a single vendor. The organisations most exposed to disruption are those that have built their AI workflows entirely around one provider's tools. When that provider changes its model, its pricing, or its terms - and they will - the workflow breaks. Strategically mature businesses build model-agnostic infrastructure. The intelligence is in the design. The tools are interchangeable.
It is equipping its people, not just equipping itself with tools. The technology does not create the advantage. The people who understand how to direct it do. Organisations that are genuinely ahead have invested in building AI fluency across their teams - not by sending everyone on a two-hour workshop, but by making AI capability part of how the organisation learns and grows on an ongoing basis. The people who were skilled in their craft before AI are being helped to redirect that skill into directing AI rather than being quietly sidelined by it.
The S-Curve You Are Not Seeing
There is an innovation concept worth understanding here. Every transformative technology follows an S-curve - slow initial adoption, an inflection point where capability accelerates rapidly, and then a plateau as the technology becomes infrastructure. The question that matters for competitive strategy is always: where on that curve are you when you commit?
The organisations that moved in the early, slow phase of AI adoption looked like they were wasting time. In retrospect, they were building the infrastructure, the literacy, and the institutional understanding that allows them to move faster as the curve steepens. The organisations that waited for proof, that demanded ROI evidence before committing, that ran pilots indefinitely without scaling - they are now trying to catch up on a curve that is near-vertical, and every month of delay costs more than the month before.
The next two years will not be slower than the last two. They will be faster, and they will reward the organisations that have built real capability rather than the appearance of it.
The Honest Question
Strategic maturity is not a destination. It is not a state you arrive at and then defend. It is a discipline - the ongoing practice of asking whether your AI infrastructure is genuinely serving your competitive position, or whether it is just generating cost and noise while giving leadership the comfortable feeling of participation.
The honest version of that audit is uncomfortable for most organisations to conduct. It requires acknowledging the gap between what was announced and what was built. Between what was purchased and what is actually working. Between the AI narrative and the AI reality.
But it is the only version worth doing. Because the businesses that conduct it honestly, and act on what they find, are the ones that will be genuinely ahead by the time the next wave arrives.
And the next wave is already forming.
The Challenge
This week, ask for a full account of every AI tool being used across your organisation. Not just the ones IT approved. All of them. Understand what each one costs, what data it touches, what it is producing, and whether it could be replaced by something already in the stack.
Then ask the question that matters: of everything on that list, what is actually building capability that compounds over time - and what is just noise with a monthly invoice attached?
NAITIV exists to demystify the AI advantage and make it real for businesses ready to lead rather than follow. If this landed somewhere that stings a little, that is probably the most useful thing it can do. Share it with the person who owns your AI strategy - whoever that currently is.
