Every technology executive will face a moment where the existing playbook stops working.
The market shifts, the economics change, the team contracts, and the product that earned accolades yesterday becomes a liability tomorrow.
For those of us in games and entertainment, that moment arrived with generative AI. It was an inflection point that demanded a wholesale rethinking of how content gets made.
This is a framework. A set of principles I used to lead a technology organization through an AI-first transformation while the ground was still shifting underfoot.
The framework draws on the same operational excellence disciplines that most CIOs already practice:
- Maturity modeling
- Risk management
- Cost optimization
- Change management.
The insight is that these disciplines become more essential when AI enters the picture.
Start With a Maturity Baseline
Before introducing any AI initiative, the first question is not “Which model should we use?”
The first question is, “Where does our organization actually sit on the maturity curve, and do we have the foundation to support the change we are about to introduce?“
Most CIOs are familiar with maturity models. Frameworks like the CIS Controls, CMMC 2.0, and CMMI provide well-established rubrics for measuring organizational progression from ad hoc operations to continuous optimization.
The relevance to AI transformation is direct. An organization with no documented processes, no repeatability, and no institutional learning lacks the discipline to absorb a major technology shift.
Introducing generative AI into an environment where basic change management and cost tracking are undisciplined will amplify existing dysfunction rather than resolve it. Conversely, an organization with standardized, measured processes has the muscle memory to evaluate, integrate, and govern new technology methodically.
In my own practice, I inherited a reactive and undocumented IT organization and spent 18 months building it into one that could measure, refine, and adapt.
The work was unglamorous but essential.
I established governance, risk, and compliance policies, documented processes that had never been written down, defined service levels, and automated helpdesk functions. Only after that foundation was solid did the organization have the capacity to absorb a fundamental shift in production methodology.
The maturity baseline told me when the team was ready. Without it, the AI pivot would have been premature.
Build the Foundation: Risk, Tenets, and Runway
With a maturity baseline established, three disciplines work in concert to prepare the organization for transformation:
- Objective-aligned risk management
- Codified decision-making tenets
- Cost optimization that creates room to invest
Objective-Aligned Risk Management
Traditional IT risk assessment tends to be asset based. Organizations enumerate every system, evaluate threats, and map controls. This approach is thorough but unfocused.
A security objective based approach reverses the process and begins with strategic business objectives, then assesses risks through that lens. This concentrates resources on risks that matter and surfaces nontechnical threats that asset based assessments often miss entirely.
When preparing for an AI transformation, the risk register must expand to include new categories such as model reliability, data provenance, intellectual property risk for AI generated content, and production continuity when outputs lack traceability.
The underlying process, however, remains familiar.
Teams identify risks, assess them, treat them, and monitor them.
I refreshed the risk assessment every 90 days. That cadence proved critical during the transformation because the risk landscape was changing faster than any annual review cycle could capture.
Codified Decision-Making Tenets
Alongside risk management, every technology organization needs a concise set of tenets. These are principles that guide decisions when priorities conflict.
The tenets I operated under fell into two domains.
On the IT side, the focus was enabling communication, enabling business value, and enabling operational excellence.
On the security side, the focus was ensuring confidentiality, integrity, and availability.
During the AI pivot, these tenets became the rubric for every build versus buy decision, every vendor evaluation, and every architecture tradeoff. When stakeholders pushed back on a technology decision, I could point to the tenets and demonstrate alignment.
Tenets transform individual decisions into a coherent strategy.
Cost Optimization That Creates Room to Invest
Finally, cost optimization must precede AI adoption, not follow it.
Many executives view AI as the cost reduction tool and expect the technology itself to generate savings. In practice, organizations that adopt AI without first optimizing their existing cost structure simply layer new expenses onto old inefficiencies.
Through systematic auditing and tool consolidation, I reduced monthly IT spend by 88% over two years.
The savings came from disciplined and repeatable cross department auditing that evaluated each tool against the tenets and asked whether the replacement still served our objectives.
The runway this created was essential because AI transformation requires investment in experimentation. Organizations that are hemorrhaging money on legacy infrastructure cannot afford to let experiments fail.
Trusted insights for technology leaders
Our readers are CIOs, CTOs, and senior IT executives who rely on The National CIO Review for smart, curated takes on the trends shaping the enterprise, from GenAI to cybersecurity and beyond.
Subscribe to our 4x a week newsletter to keep up with the insights that matter.
The Pivot: Ontology Before Model
With the organizational foundation in place, the AI transformation itself became surprisingly tractable.
The key insight, and the one I believe is most transferable to other CIOs, is straightforward:
The critical work of AI adoption is not selecting the right model. It is building the right data layer.
Generative AI models can produce remarkable outputs. However, producing a single impressive artifact is categorically different from producing at scale with consistency, traceability, and quality control.
In games and entertainment, a model that generates a beautiful frame is solving the wrong problem if there is no system to track that frame through a production pipeline, maintain continuity across scenes, manage asset provenance, and enable iteration without losing traceability.
This is where the CIO’s infrastructure instinct becomes the organization’s greatest asset. The same disciplines that govern IT infrastructure apply directly to AI production infrastructure. These include standardized processes, documented configurations, monitored performance, and auditable state.
The difference is that the infrastructure is an ontology. It is a structured representation of the domain’s entities, relationships, and workflows.
In our case, that ontology drew on decades of established media production standards, including shots, scenes, sequences, characters, locations, composition, and editorial decisions.
These concepts existed long before AI, and they will persist long after any particular model is deprecated.
The model became interchangeable. The data layer was the durable asset.
I often summarize this principle in a simple way. Show me a great AI agent and I will show you a strong data model and ontology.
Organizations that invest in their data architecture before investing in model selection will outperform those that chase the latest frontier model without a foundation to build upon.
The CIO’s Moment
There is a narrative in the market that AI transformation requires a new kind of leader, someone steeped in machine learning and fluent in the language of transformers and diffusion models.
I respectfully disagree.
The leaders best positioned to guide organizations through AI transformation are those who have already done the hard and unglamorous work of building mature technology organizations.
- The CIO who has raised an IT department from reactive and undocumented to standardized and repeatable understands change management at a visceral level.
- The executive who has reduced technology spend through disciplined auditing understands how to create capacity for investment.
- The practitioner who has built a risk management program from scratch understands how to evaluate new categories of risk without succumbing to paralysis or recklessness.
AI is next domain to which operational excellence must be applied.
The frameworks are not new. They are proven.
The opportunity for CIOs is to recognize that the skills we have been honing for decades are precisely the skills this moment demands. The work starts with knowing where you stand and owning where you go from there.
