IMIA — the instrument for measuring sociotechnical maturity
The method’s rule number one —measure maturity before buying— is worthless if maturity cannot be measured. This chapter defines the instrument that makes it operable: the IMIA (AI Maturity Index), with which the paradigm measures the sociotechnical maturity of an organization before touching the technology. If small business and the public sector say whom the bridge serves, this chapter says by what rule one decides where AI pays off and where it only destroys value. The instrument comes out of the Mendoza FuturIA observatory.
Why it exists (the problem it attacks)
Most “AI maturity” diagnostics are marketing checklists: they return a single, optimistic, non-actionable number, and they treat governance as an optional appendix. In practice the opposite holds: governance is the variable that decides whether an organization moves from isolated pilots to value in production. What was needed was an instrument that (a) measured the actual organizational configuration, not declared intent, and (b) made governance a structural requirement, not an ornament.
IMIA is the operationalization of two ideas from the method:
- Measure maturity first is rule number one → The four links.
- Governance is the moat: what separates the bridge from a policy consultant is that here governance is operationalized as a hard, measurable, auditable constraint.
Theoretical foundation: readiness for AI is multidimensional —having technology is not enough; the organizational conditions to absorb it are required—, a finding the method takes from AI readiness research.1 The concrete dimensions with which IMIA measures it are defined below. → Authors and currents.
The architecture of the model: 7 dimensions × 6 levels
An organization is assessed across 7 dimensions, each on a 0–100 scale, and from these a global level 0–5 is derived.
The 7 dimensions
| # | Dimension | What it measures | Discipline of the method |
|---|---|---|---|
| D1 | Leadership | Explicit strategy, sponsorship, resource allocation, tolerance for learning | Sociology (power/incentives) |
| D2 | Data | Existence, quality, accessibility and contextual meaning of the data | Data engineering |
| D3 | Culture | Openness to change, literacy, relationship with error and evidence | Sociology |
| D4 | Capabilities | Talent, technical and management skills, absorptive capacity | Software / data engineering |
| D5 | Processes | Real processes mapped, standardized and amenable to improvement | Sociology / software engineering |
| D6 | Governance | AI use policies, risk management (privacy, security, bias, compliance), clear and auditable rules | AI architecture and governance |
| D7 | Automation potential | Volume of repeatable, clear-rule tasks that can be automated (latent opportunity) | AI architecture and governance |
D1–D6 measure configuration (what the organization is). D7 measures opportunity (what it could gain): that is why it informs but does not penalize the level — an immature organization may have very high potential, and that is a signal of priority, not a defect. But D7 distinguishes two classes of opportunity, because they demand different maturity: automating a fixed-rule task —a report, a data load— asks little of governance; adding agents that decide and execute on their own raises the bar of D6, because human judgment no longer filters each case but is shifted to the design and audit of the agent’s rules. High potential of an agentic component on top of low governance is not opportunity: it is risk.
The 6 levels (0 → 5)
The name of each level is aligned with the method’s arc from silo to architecture —and it is, strictly speaking, the adoption ladder turned into measurement: levels 0–2 are the silo, level 3 the first real but isolated value, levels 4–5 the governed architecture—:
| Level | Name | State of the organization |
|---|---|---|
| 0 | Denial | The relevance of AI is not acknowledged; management in spreadsheets and silos, decisions without evidence. |
| 1 | Exploration | Individual, informal and scattered use (shadow AI), with no strategy or data behind it. |
| 2 | Experimentation | Isolated pilots and proofs of concept; enthusiasm without sustained value in production. |
| 3 | Functional adoption | Real cases in production that deliver value, but isolated by area and without cross-cutting governance. |
| 4 | Governed integration | AI integrated into key processes with verifiable governance; risk is managed, not ignored. |
| 5 | Augmented organization | AI is a systemic capability; the human-AI loop is part of how the organization operates and decides. |
The key architecture decision: governance as a gate, not as an average
The global level is not an average of the dimensions. The scoring implements ceiling rules (gates) that prevent inflating the level with good marks on the easy parts:
| Gate | Rule | Why |
|---|---|---|
| Production | No Level ≥ 3 is assigned without real cases in production | Without real value there is no “functional adoption”; it cuts through the smoke of eternal pilots. It is Moore’s chasm turned into a rule: the pilot that excites the early adopters dies as it tries to cross into the majority, and the jump from level 2 to 3 is that crossing. |
| Governance | No Level ≥ 4 is assigned if D6 (Governance) < 40/100 | Without verifiable rules there is no sustainable integration. It is the moat. |
| Data | Level ≥ 4 requires D2 (Data) ≥ 50/100 | Without usable raw material, integration does not scale: you automate the data that lies. |
The governance gate is the central piece. An organization with excellent leadership, data and culture but with no AI use policies, no risk management and no clear rules is capped at Level 3. Governance stops being discourse and becomes a hard constraint of the model.
The double mechanism (the elegance of the model). Governance acts twice: it weighs in the index (D6 is weighted) and it functions as a gate (it caps the level). Weighting it alone would make it negotiable —it could be offset with good marks on another dimension—; gating it alone would make it binary. The two together say: governance adds up when it is present, and blocks when it is missing.
How it is computed (scoring v1.0)
-
Each dimension = the average of its items (0–4 scale per item) rescaled to 0–100.
-
Global index = weighted sum of D1–D6. v1.0 weights (grounded, provisional):
D2 Data D1 Leadership D6 Governance D4 Capabilities D5 Processes D3 Culture 22% 20% 18% 14% 14% 12% Data and Leadership weigh more because they are the strongest theoretical predictors of successful adoption; Governance weighs high because it is the moat. D7 (Potential) informs, it does not enter the index.
-
Conversion to level 0–5 by applying the gates over the global index.
-
Leap potential = D2·0.5 + D1·0.3 + D4·0.2 → detects organizations that are immature but have an exploitable base: “high potential return”, the case where the bridge pays off fastest.
-
The v1.0 weights and cutoffs are provisional by design: they are recalibrated empirically (per-dimension reliability, factor analysis, regression on “cases in production”) and versioned as scoring v2.0. A discipline of versioning, not a fixed opinion.
The instrument behind the model. This chapter describes the model; beneath it there is an operational instrument —a bank of items per dimension, with anchors for what each point of the 0–4 scale means, and a calibration plan that takes scoring from v1.0 to a v2.0 validated with field data—. It is not reproduced here because it is application material, not exposition; what matters for the argument is that it exists, that it is v1.0 by design, and that its validation awaits the observatory’s first data —said without makeup: today the number of organizations measured is zero—.
The output: a profile that prioritizes (illustrative example, synthetic data)
Fictional data, only to show the output format. It does not correspond to any real organization: what is published is the method, not field data.
Maturity profile — Org. example (synthetic)
Leadership ███████░░░ 72
Data █████░░░░░ 48
Culture ██████░░░░ 60
Capabilities ████░░░░░░ 40
Processes █████░░░░░ 52
Governance ███░░░░░░░ 32 ← bottleneck
Automation pot. ████████░░ 80 (high latent opportunity)
IMIA global: 51/100 → Level 3 (Functional adoption)
Cap applied: governance gate prevents Level 4 (Governance 32 < 40)
Diagnosis: high leap potential, held back by governance and data.
Recommendation: before scaling AI, establish use policies and risk
management (D6) and improve data accessibility/quality (D2).
The actionable reading is not “they are at Level 3”, but “their bottleneck is Governance and Data, not Leadership; their value ceiling is high”. That is exactly what a governed adoption roadmap needs in order to prioritize: not a number, but what to unblock first.
How it ties to the bridge thesis
IMIA is not a neutral instrument: it is the bridge thesis turned into measurement.
- It is the deliverable of link 1 (the sociologist): the sociotechnical diagnosis made into an instrument. It measures real organizational configuration, not intent.
- It embodies from silo to architecture: levels 0–2 describe the silo; level 3 the first isolated value; levels 4–5 the architecture. The model says which rung you are on and which one is next.
- It makes governance the moat, which turns it into a positioning bet and not mere discourse.
Empirical grounding (why this model and not another)
- Why measuring the gap is the real problem. In Latin America, AI penetration is below 4% (against more than 20% in Europe); in Brazil 41% of large firms use AI versus 11% of small businesses.2 The large↔small distance is as wide as the inter-regional one: measuring maturity is the tool to close it, not to certify those who already arrived.
- Why the bottleneck is organizational, not technological. The national survey of AI adoption in small businesses by nadIA: 41.6% already use some AI, but concentrated in basic tools (text/code generation 77.9%; ML/data only 24.1%) and with very low governance and internal capability indicators.3 It confirms empirically that what is missing is not the technology, but the organizational conditions —exactly what IMIA measures.
- Why 7 dimensions and not a single score. Readiness for AI is multidimensional: AI readiness research identifies 18 factors across 5 categories —strategic alignment, resources, knowledge, culture and data—, which the IMIA model adapts and extends with Processes and Governance as explicit dimensions.1 Academic scaffolding, not an invented model.
- Why the governance gate. Dimension D6 maps to recognized frameworks: the Govern function of the NIST AI RMF 1.0 (cross-cutting by design)4 and the EU AI Act (Regulation (EU) 2024/1689, binding).5 Governance first is not opinion: it is the architecture of the global standards.
- Why the production gate and the weight of Capabilities/Culture. AI without human judgment to filter it widens inequalities —the Kenya experiment showed it helped high performers (around +15%) and harmed low performers (around −8%)—:6 enthusiasm without capability destroys value.
The origin: Mendoza. The model is born from the Mendoza FuturIA observatory, in a province with a real and heterogeneous productive structure —winemaking (the bulk of national production), agribusiness, energy— and an emerging AI ecosystem (Polo TIC Mendoza; the AI Micro-master’s and the “AI for governance” program of UNCuyo with the Province). There is no AI maturity measurement of the Mendoza small-business fabric: that void —treated as a hypothesis, not as a fact— is the reason for being of the observatory and of IMIA.
Honesty (guardrail)
What is published of IMIA is the model, the scoring and the methodology —design artifacts of one’s own and defensible. No field organization data appears: the example profile is illustrative and synthetic, and is labeled as such. Where a weight is a design decision and not hard data, it is said. The brand is rigor, not hype.
See also: Concepts of our own · The bridge applied to small business · The bridge applied to the public sector · Authors and currents · Bibliography
Footnotes
-
Jöhnk, J., Weißert, M. & Wyrtki, K. (2021). “Ready or Not, AI Comes.” Business & Information Systems Engineering 63(1), 5–20. 18 factors of AI readiness across 5 categories —strategic alignment, resources, knowledge, culture and data—. ↩ ↩2
-
CEPAL (2024). AI penetration in Latin America below 4% versus more than 20% in Europe; in Brazil, 41% of large firms use AI versus 11% of small businesses (cf. Jung, J. & Katz, R., 2024/2025, “Impacto económico de la inteligencia artificial en América Latina”, CEPAL). ↩
-
nodo nadIA (CEPE-UTDT + Fundar) (2025). National survey of AI adoption in Argentine small businesses (n=402): 41.6% use at least one AI, mostly basic tools (text/code generation 77.9%; ML/data 24.1%), with very low governance and internal capability indicators. ↩
-
NIST (2023). AI Risk Management Framework (AI RMF 1.0). Four functions —Govern, Map, Measure, Manage—, with Govern cross-cutting by design. ↩
-
Regulation (EU) 2024/1689 (EU AI Act). In force since 1 August 2024, with staggered application; binding, with sanctions. ↩
-
Otis, N., Clarke, R., Delecourt, S., Holtz, D. & Koning, R. (2024). The Uneven Impact of Generative AI on Entrepreneurial Performance. Working paper, Harvard Business School / UC Berkeley Haas (SSRN 4671369). 640 entrepreneurs in Kenya: high performers around +15%, low performers around −8%. ↩