Hirst AcademyAI Strategy for Business Leaders
← Course overview
Module 4

AI Across the Organisation

Estimated time: 7–8 hours · Connects AI possibilities to the functional realities leaders own, making the course tangible and immediately applicable.

A ranked shortlist and a business case tell you what is worth doing. They don't tell you where AI will land first, who has to change how they work, or what has to be true before each deployment can go live. In this module you'll look at what AI does in practice in marketing, customer experience, operations, finance and HR, learn to choose applications from the jobs people are trying to get done rather than from the tools on offer, and redesign a process so AI and people each do what they do best. You'll then sequence deployment across an 18-month horizon and place your organisation on a published AI maturity model. You'll finish with a deployment roadmap built in the AI Function Deployment Planner, ready to share with function heads and a steering committee.

You'll follow Marcus Osei, AI Programme Director at Meridian Group, as he turns an approved shortlist into a function-by-function plan.

Interactive Tool

AI Function Deployment Planner

Map your prioritised AI use cases to business functions, assign owners, timelines and success metrics, and output a structured deployment roadmap.

Open the tool →
4.1

AI in Marketing and Customer Experience

Marketing and customer experience are where most leaders first meet AI, usually through a vendor demonstration. The demonstration shows what a tool can do. A better starting question is what job someone is trying to get done. Christensen, Hall, Dillon and Duncan's Harvard Business Review article "Know Your Customers' 'Jobs to Be Done'" (September 2016) argued that customers "hire" a product to make progress in a particular situation. The same lens works inside the firm: a marketer, a salesperson and a service agent each have jobs, and an AI tool earns its place only if it helps one of them get done faster or better.

Three families of job account for most of the value. Content and campaign production: generative AI drafts copy, variants and briefs, while predictive models decide which audience sees which version. Lead qualification and proposal drafting: predictive scoring ranks which prospects deserve a salesperson's time, and generative AI drafts the first version of a proposal. Service triage and agent assist: AI routes enquiries, answers the routine ones and gives human agents a suggested reply and the relevant policy for the rest. Amtrak's "Julie" is a long-running public example of the routine end: an automated assistant on the phone line and website that answers travel questions and passes callers to a person when they ask.

To see where each fits, this course uses its own five-stage customer journey: Discover, Decide, Buy, Use, Stay. Predictive AI tends to add most at Discover and Stay, where the questions are who to reach and who might leave. Generative AI helps most at Decide and Use, where customers need tailored explanations, proposals and answers. Agentic AI is emerging at Buy and Use, completing a booking or a change across several systems, and needs the tightest guardrails because it acts rather than advises.

Personalisation is the most common goal and the easiest to overdo. Segment-level personalisation tailors a message to a group; individual-level personalisation tailors it to one person's behaviour. Netflix and Spotify show the upside of individual recommendation at scale: the service becomes more useful the more it is used. The limit is the customer's sense of what you ought to know. Suggesting a next purchase from someone's own history feels helpful; revealing that you've inferred a life event they never told you about feels intrusive. A useful test: would the customer be comfortable if you explained how you knew?

For a professional services firm such as Meridian, the customer jobs sit mostly at Decide and Stay: choosing an adviser, and staying with one.

Learning ObjectiveMap AI applications to the jobs that customers, marketers, salespeople and service agents are trying to get done, and place each one on a five-stage customer journey.
Key ConceptsJobs-to-be-done (Christensen et al., 2016), customer jobs and employee jobs, content and campaign production, lead qualification and proposal drafting, service triage and agent assist, the five-stage journey (Discover, Decide, Buy, Use, Stay), predictive, generative and agentic AI at each stage, segment-level and individual personalisation, the line between helpful and intrusive.
Practical ExampleMeridian's business development team doesn't need "more emails"; its job is to send a prospective client a relevant, accurate follow-up while the meeting is still fresh, which is why the email drafting tool sits at the Decide stage and stays a copilot that a person checks before anything is sent.
ExerciseMap three AI use cases onto your own organisation's marketing or customer experience function (or Meridian's business development team if you don't have one), tie each to a named customer or employee job and a journey stage, and note its current readiness.
4.2

AI in Operations and Finance

Operations and finance are where AI returns are easiest to measure, because the work is high-volume, the data is structured and outcomes are recorded. They are also where the change challenge is most often underestimated: a more accurate forecast that nobody trusts changes nothing.

In operations, AI increasingly meets the physical world. Warehouse robots pick and move stock, drones and cameras inspect assets, and autonomous vehicles work on controlled sites such as yards and mines. The robot is rarely the hard part for a leader. The decision logic around it is: what the system may decide on its own, what happens when it is unsure, and who is accountable when it is wrong.

Predictive maintenance shows that logic clearly. Scheduled maintenance services every vehicle at fixed intervals, whether it needs it or not. Condition-based maintenance uses sensor and operating data to service equipment when the data says failure is coming. Take Halden Freight, a fictional UK logistics operator whose lorries already send telematics data on braking, tyre pressure and temperature. A predictive model flags vehicles likely to suffer a brake or tyre failure. The leadership decision isn't about the algorithm; it is about two costs. A false alarm takes a lorry off the road for an unnecessary check. A miss means a roadside breakdown, a late delivery and a safety risk. Setting how sensitive the model should be is a business judgment about which error Halden would rather pay for.

In finance, three applications dominate. Financial close and reporting: AI reconciles accounts, flags exceptions and drafts variance commentary. Forecasting: predictive models combine sales, pipeline and external data into revenue and cash forecasts. Fraud and anomaly detection: models flag unusual payments, invoices or expense claims for review.

Before choosing any of these, put four questions to the process. Is it high-volume and repetitive? Is the data structured, digital and accessible, with a history of outcomes to learn from? Is there a clear right answer to measure the AI against? And what does an error cost, and can a person catch it before it lands?

If the process passes, redesign it as an AI-augmented workflow rather than bolting AI on. List the steps, give AI the ones that are repetitive and checkable, keep people on judgment, exceptions and sign-off, and mark the automation ceiling: the point beyond which errors are too costly, data too thin or rules too strict for AI to go further. In finance, sign-off on reported figures stays human; at Halden, so does the decision to send a flagged lorry back out.

Learning ObjectiveAssess whether an operations or finance process is suited to AI using a four-question checklist, and redesign it as an AI-augmented workflow with a clear automation ceiling.
Key ConceptsRobotics and autonomous systems, where physical automation meets AI decisions, predictive maintenance, scheduled versus condition-based maintenance, the cost of a false alarm versus the cost of a miss, financial close and reporting, forecasting, fraud and anomaly detection, the four-question suitability checklist, AI-augmented workflow, automation ceiling.
Practical ExampleHalden Freight, a fictional UK logistics operator, uses vehicle telematics to predict brake and tyre failures; its real decision is how many unnecessary workshop visits it will accept to avoid a roadside breakdown.
ExercisePick one operations or finance process in your own organisation that generates structured, repetitive data (or, if you don't have one, Meridian's financial reporting, the process its financial reporting assistant will support), run it through the four-question checklist, and sketch it as an AI-augmented workflow that marks which steps AI takes, which people keep, and where the automation ceiling sits.
4.3

AI in HR and the Support Functions

HR, finance and IT share a pattern: a high volume of rules-based requests from inside the organisation. Where is the parental leave policy? How do I get my laptop set up? Is this expense claim allowed? Each answer exists somewhere, but finding it costs time on both sides. These business support functions are often the best place for an organisation's first internal AI, because the questions repeat, the answers are documented and a wrong answer can usually be corrected.

Start, again, from the job. Before choosing a tool, interview a handful of employees and managers about the moments HR is failing them: getting a straight answer to a policy question, getting onboarded quickly enough to do useful work in the first week, booking leave without three emails. Ask what they were trying to do, what they tried and what got in the way. The pain points you hear will be more specific, and more persuasive to a sceptical HR team, than any vendor's feature list.

HR also holds some of the highest-stakes applications in any organisation. Candidate screening ranks applicants; performance analytics scores employees; workforce planning shapes who is hired, moved or let go. These affect livelihoods, can reproduce bias in historical data and are hard for the person affected to challenge. That is why the EU AI Act lists AI used for recruitment and selection, and for decisions on promotion, termination, task allocation and monitoring or evaluating performance, among its high-risk uses in Annex III. Those obligations were due to apply from 2 August 2026; the Digital Omnibus on AI (Regulation (EU) 2026/1744) moved the date for stand-alone Annex III systems to 2 December 2027. The delay buys preparation time; it doesn't remove the obligation. Module 5 will cover what high-risk status requires in detail.

So separate the two kinds of HR AI clearly. An onboarding chatbot that answers policy questions supports employees and decides nothing about them. A screening or evaluation tool makes, or shapes, a decision about a person. The first needs accurate content, a clear statement that the user is talking to an AI, and an easy route to a person. The second needs all of that, plus evidence that it doesn't disadvantage particular groups, an explanation the affected person can understand, and a named human who reviews every outcome and can override it.

A short responsible AI policy for any HR application should answer three questions. How will you test for and monitor bias? What will employees and candidates be told, and when? Who can override the system, and how quickly?

Learning ObjectiveDiagnose HR pain points through employee jobs-to-be-done and recommend one HR AI application with a responsible AI policy proportionate to its risk.
Key ConceptsHR, finance and IT as business support functions, high-volume rules-based requests, jobs-to-be-done interviews with employees and managers, low-stakes and high-stakes HR applications, candidate screening, performance analytics, workforce planning, high-risk employment AI under the EU AI Act, bias, transparency, human override.
Practical ExampleMeridian's HR onboarding chatbot answers new joiners' policy and IT questions and decides nothing about anyone's employment, while the HR performance-evaluation tool stays parked because it would sit in the EU AI Act's high-risk category.
ExerciseWrite a one-page memo to your own organisation's Chief HR Officer (or, if you don't have one, to Meridian's HR team) recommending one HR AI application: the employee job it serves, the pain-point evidence, the expected benefit, and a one-paragraph responsible AI policy covering bias risk, transparency and human override.
4.4

Sequencing and the Deployment Roadmap

A shortlist ranked by score is not yet a deployment plan. The top two candidates may land on the same overstretched team, or the third may depend on data that won't be ready for a year. Function sequencing decides which functions go first and why, so the organisation learns as it goes rather than absorbing everything at once.

Run four tests on every shortlisted deployment. Data readiness: is the data the use case needs consolidated, clean, accessible and permitted, or is there work to do first? Change capacity: is the function already absorbing a system migration, a restructure or a peak season? A good tool launched into a team at its limit will be ignored. Executive sponsorship: is there a function head who wants it, will defend it and will own its measure? Interdependency: does this deployment need something else first, such as shared data, an integration or a governance decision, and will its success make the next one easier?

The tests sort the shortlist from Module 2 into three waves. Months 0–6 take the readiest quick wins: off-the-shelf tools, ready data, a willing sponsor and visible results. Months 6–12 extend to functions that need integration work or a cleaner data source. Months 12–18 carry deployments that depend on consolidated data or a redesigned workflow. Each wave ends with a go/no-go gate: did the previous wave's measures move, and is the next function ready?

Most delays come from four blockers, and all four are prerequisites you can schedule. Scattered data: records sit in several systems or spreadsheets and must be consolidated. Access permissions: assistants that search internal documents, such as Microsoft 365 Copilot, can surface anything the user is permitted to see, so loosely set permissions become an oversharing risk on day one. System integration: the tool must read from and write to the systems people already use. Unclear ownership: nobody is accountable for the content or data the AI relies on, so nobody fixes it when it is wrong. Start each prerequisite as early as its lead time demands, usually a wave before the deployment it serves.

Use the cost structure from Module 3 to allocate budget across waves. Early waves are mostly licences and change effort; later ones carry more data preparation and integration. Watch change fatigue too: spread launches so that no single team carries two at once.

The AI Function Deployment Planner captures each function's plan in one place: owner, data readiness, dates, success metric and change plan.

Learning ObjectiveDevelop a function sequencing plan that staggers deployment across months 0–6, 6–12 and 12–18, and identify the data and integration prerequisites that could block each wave.
Key ConceptsFunction sequencing, the four sequencing tests (data readiness, change capacity, executive sponsorship, interdependency), deployment phases and waves, data and integration prerequisites, common blockers (scattered data, access permissions, system integration, unclear ownership), lead times, change fatigue, allocating budget from the cost model, go/no-go gates between waves.
Practical ExampleMeridian's predictive client churn model runs only in months 12–18, but consolidating the client records it depends on starts in month 0, so the slowest prerequisite is never the reason the wave slips.
ExerciseAfter reading how Marcus sequences Meridian's waves in the worked example at the end of this module, use the AI Function Deployment Planner to produce a three-wave deployment roadmap for your own organisation or for Meridian Group, with an owner, a data-readiness rating, a success metric and a change plan for each function.
4.5

AI Maturity and the Transformation Roadmap

Individual deployments add up to something larger only if the organisation builds capability as it goes. A maturity model helps a leader see where the organisation stands and what the next step requires.

This course uses the MIT CISR Enterprise AI Maturity Model, set out by Peter Weill, Stephanie Woerner and Ina Sebastian in a research briefing published in December 2024. It describes four stages. Stage 1, Experiment and Prepare, is about education and policy: training the workforce, setting acceptable-use rules, making data accessible and deciding where humans stay in the loop. Stage 2, Build Pilots and Capabilities, is about business cases and pilots: simplifying and automating processes, creating use cases, sharing data and using large language models to augment work. Stage 3, Develop AI Ways of Working, is about scale: shared platforms and dashboards, wider process automation, test-and-learn practices and designing for reuse. Stage 4, Become AI Future Ready, embeds AI in decisions and processes and in what the firm sells.

The briefing's headline finding is that financial performance rose with each stage: firms in the first two stages performed below their industry average on growth and profit, and firms in stages 3 and 4 performed above it. Treat that with care. The stages come from a survey of 721 firms in October 2022, before generative AI spread, so the AI being measured was mainly analytical. And the finding is an association, not proof that maturity causes performance: stronger firms may simply invest more in AI.

The direction of travel is towards zero-touch processes, which run end to end without human handling except for exceptions. They make sense where volume is high, rules are clear and errors are cheap and reversible: routing an invoice, resetting a password, answering a standard policy question. They don't make sense where a mistake is costly, hard to reverse or affects someone's rights, which is why client advice and employment decisions stay with people. The goal is rarely zero-touch everywhere; it is knowing which processes should get there.

Moving up a stage also needs an operating model. A central AI team concentrates scarce skills and sets standards, but can become a bottleneck. Hub-and-spoke keeps platforms, standards and governance in a central hub while functions own their use cases. A federated model puts capability in each function with light central coordination, and suits organisations already well advanced. Many start central, move to hub-and-spoke as functions build confidence, and federate only when practice is mature.

To place your own organisation, collect evidence rather than impressions. Is there an AI policy? Have people been trained? Are pilots measured against shared metrics? Is any AI working at scale inside a process?

Learning ObjectivePlace an organisation on the MIT CISR Enterprise AI Maturity Model with evidence, judge how far towards zero-touch processes it should aim, and plan the capabilities it needs to reach the next stage.
Key ConceptsThe MIT CISR Enterprise AI Maturity Model (Weill, Woerner and Sebastian, 2024), its four stages, the financial-performance finding and its limits, what changes between stages, zero-touch processes, where zero-touch does and doesn't make sense, operating models (central team, hub-and-spoke, federated), the capabilities each stage requires.
Practical ExampleMarcus places Meridian at Stage 1, Experiment and Prepare: £180K of ad hoc tool spend, no AI policy and no shared metrics.
ExerciseUsing Marcus's placement at the end of the worked example as a model, place your own organisation (or Meridian Group if you don't have one) on the four-stage model, justify the placement with at least three pieces of evidence, and list the three capabilities it needs to reach the next stage within an 18-month programme.
Worked Example

Marcus Sequences Meridian's Deployment Roadmap

With the board's approval of Meridian Group's £2.5M, 18-month AI programme, Marcus Osei turns the shortlist into a deployment plan. He runs the four sequencing tests on the five scheduled use cases and records each function's plan in the AI Function Deployment Planner. Across the three waves, 340 of Meridian's 850 employees, 40% of the firm, will work with at least one new AI tool.

Months 0–6. The legal research assistant goes first: data readiness is high, the tool is bought off the shelf, partners will see the results, it tops the scorecard, and its business case is strong (£105K year-1 cost against £675K annual benefit). Its metric is research time per associate, from six hours a week towards 1.5. The business development email drafting tool runs alongside: low risk, an immediate productivity gain, and a copilot whose drafts a person checks. The two land on different teams, so neither carries two launches.

Months 6–12. The financial reporting assistant, built on Microsoft 365 Copilot, needs IT integration; the HR onboarding chatbot is low risk and uses structured FAQ content HR already holds. Marcus resolves three blockers before this wave proceeds. Integration: the connection to the finance systems is built during months 0–6, so it is ready at launch. Permissions: because Copilot can surface anything a user may open, IT reviews access to shared finance and client folders before switch-on. Ownership: HR names a policy owner accountable for keeping the chatbot's answers current, after onboarding interviews turn up two versions of the same leave policy.

Months 12–18. The predictive client churn model depends on consolidated client records. Consolidation starts in month 0 and needs at least four months of data preparation, so the slowest prerequisite can't hold up the wave. Each wave ends with a go/no-go gate: the previous wave's measure must be moving.

Finally, Marcus places Meridian on the MIT CISR model. It sits at Stage 1, Experiment and Prepare: £180K of ad hoc tool spend, no AI policy and no shared metrics. He sets the programme's aim as Stage 2, Build Pilots and Capabilities, firm-wide by month 18, with legal research the first area working at Stage 3. The three capabilities he plans for are an AI policy with literacy training, shared metrics for every pilot, and consolidated client data.

Knowledge Check

  1. Why should an AI application in marketing or customer experience be chosen from a job-to-be-done rather than from a vendor's list of features?
    A job describes the progress a customer or employee is trying to make, so it tells you what "better" looks like and how to measure it; starting from features produces tools that impress in a demonstration but solve no one's actual problem.
  2. A personalisation idea uses a client's own purchase history to suggest a next service. Another infers a personal life event the client never shared. Why might the first feel helpful and the second intrusive?
    Customers judge personalisation by whether you are using what they knowingly gave you; the test is whether they would be comfortable if you explained how you knew, and an inference about something they never disclosed fails it.
  3. In Halden Freight's predictive maintenance case, why is setting the model's sensitivity a business decision rather than a technical one?
    Every setting trades false alarms (lorries taken off the road unnecessarily) against misses (roadside breakdowns, late deliveries and safety risk), and only managers can judge which error the business would rather pay for.
  4. Why does an HR onboarding chatbot need much lighter controls than a candidate-screening tool?
    The chatbot answers policy questions and decides nothing about anyone's employment, whereas screening shapes decisions about people, can reproduce bias and is listed as high-risk employment AI in Annex III of the EU AI Act, with obligations now applying from 2 December 2027.
  5. In Module 2, Meridian's predictive client churn model shared the top strategic value score but scored 2 for data readiness. How does the deployment roadmap act on that low score, and why does consolidating its client data start in month 0 when the model only runs in months 12–18?
    The low readiness score names the prerequisite rather than rejecting the model: the roadmap turns it into scheduled data work, and because consolidation is the slowest prerequisite, needing at least four months of preparation, starting it in month 0 means the wave waits on nothing when its turn comes; sequencing schedules prerequisites, not just launches.
  6. The MIT CISR briefing found that firms in stages 3 and 4 outperformed their industry. Why shouldn't a leader treat that as proof that moving up a stage will raise profits?
    The finding is an association from a 2022 survey of 721 firms using mainly analytical AI, before generative AI spread, so stronger firms may simply invest more in AI; it shows direction of travel, not a guaranteed return.

Resources & Further Practice

  • MIT CISR Enterprise AI Maturity Model: Weill, P., Woerner, S.L. and Sebastian, I.M. (2024) 'Building Enterprise AI Maturity', MIT CISR Research Briefing, December 2024, at cisr.mit.edu — the four stages, the capabilities at each, and the financial-performance finding (based on a 2022 survey of 721 firms).
  • MIT CISR maturity update: Woerner, S.L., Sebastian, I.M., Weill, P. and Kaganer, E. (2025) 'Grow Enterprise AI Maturity for Bottom-Line Impact', MIT CISR Research Briefing, August 2025, at cisr.mit.edu — a follow-up on where the move between stages pays off most.
  • Jobs to be done: Christensen, C.M., Hall, T., Dillon, K. and Duncan, D.S. (2016) 'Know your customers' "jobs to be done"', Harvard Business Review, September 2016 — the original case for choosing what to build from the progress customers are trying to make.
  • Competing Against Luck: Christensen, C.M., Hall, T., Dillon, K. and Duncan, D.S. (2016) Competing Against Luck: The Story of Innovation and Customer Choice. New York: HarperBusiness — the book-length version of the jobs-to-be-done method, including how to interview for jobs.
  • EU AI Act, Annex III: Regulation (EU) 2024/1689 (the AI Act), on EUR-Lex — point 4 of Annex III lists the employment and worker-management uses treated as high-risk; read it alongside the Digital Omnibus on AI, Regulation (EU) 2026/1744, which moved their application date to 2 December 2027.
  • Preparing data access for AI assistants: Microsoft Learn, 'Get ready for Microsoft Copilot with SharePoint Advanced Management', at learn.microsoft.com — free vendor guidance on reviewing permissions before switching on an assistant that searches internal documents; useful whichever tool you choose.
  • Further practice: complete the AI Function Deployment Planner for at least three functions in your own organisation, one per wave, and keep it as the deployment timeline for Module 8 strategy one-pager.
Checkpoint

Reflect on Your Deployment Roadmap

  • What I did: name the function in your first wave, the blocker you scheduled earliest, and the maturity stage you placed your organisation at.
  • What I learned: note what surprised you about where the automation ceiling sat in the process you redesigned, or why a deployment you expected to go early belonged in a later wave.
  • What I'll change: write the one prerequisite you will start this quarter, and who you will ask to own it.