CopilotForgeDraft

Catalogue › Programme Management › programme-health

Programme health

Assesses and reports AI programme health across outcomes, schedule, cost, capacity, risk, adoption, assurance, governance and stakeholder confidence, with defined RAG criteria, an evidence-based narrative, corrective actions with owners, and a recovery plan when health is red. Use when the board needs a monthly health report, when status reports are all green but the programme feels stuck, or when a programme needs a health check or recovery.

Department
Programme Management
Lifecycle
Deliver, Assure, Launch, Measure, Scale, Improve
Maturity
adopter, builder, scaler, ai-enterprise
Risk tiers
0, 1, 2, 3, 4
Platforms
platform-neutral
Editions
starter, scale, enterprise
Reviewers
none
Status
draft
Copilot Cowork
Programme Management plugin for Copilot Cowork, or this skill on its own: Download SKILL.md
Licence
CC BY 4.0, by Simon Foote

Purpose

Programme status reports drift towards green: each workstream reports what it did, and nobody reports whether the programme is still on course for its outcomes. This skill assesses health across a fixed set of dimensions with defined criteria for red, amber and green, writes a short evidence-based narrative, and turns each problem into a corrective action with an owner and a date. When health is red it produces a recovery plan. Health reporting goes wrong when RAG ratings are opinions, when activity is reported in place of outcomes, and when adoption and quality are left out because they are harder to measure than dates.

When to use

When not to use

Questions to ask first

  1. What outcomes, tolerances and closure criteria did the charter set, so health can be judged against them?
  2. Which measures already exist (plan, budget, risk log, adoption measures, evaluation results, reviewer outcomes), and how current are they?
  3. Who reads the report and what decisions do they need to take from it?
  4. Has the board agreed what red, amber and green mean for each dimension, or will this report propose definitions?
  5. Is this a routine report, an independent check, or a recovery?

Required inputs

Where a dimension has no data, rate it grey ("not measured") and say what is needed, rather than defaulting to green.

Decision framework

Rate each dimension against criteria agreed with the board. Starting criteria to adapt:

DimensionGreenAmberRed
OutcomesContribution measured and on trackMeasures in place, trend unclearNo baseline, or trend moving away
ScheduleCritical path within toleranceForecast within tolerance but slippingForecast beyond tolerance
CostForecast within toleranceConsumption or services trending upForecast beyond tolerance
CapacityScarce roles within declared timeOne role over-committed in the next quarterSeveral roles over-committed now
RiskNo risks above threshold without responseResponses late on some top risksThreshold risks without response, or issues unresolved
AdoptionUse and behaviour change on track by teamUneven across teamsStalled or declining
Quality and assuranceGates passed with evidence; no open blocking findings beyond planEvaluation or review delaysBlocking findings ignored or evidence missing
GovernanceDecisions taken on time and recordedDecision latency growingDecisions stalled or reopened
Stakeholder confidenceSponsor and owners engagedAttendance or engagement fallingSponsor disengaged or a key function opposed

Overall health is not an average. It is red if outcomes, quality and assurance, or two other dimensions are red; amber if any dimension is red or three are amber; otherwise green.

OverallResponse
GreenReport by exception
AmberCorrective actions with owners and dates, reviewed at the next board
RedRecovery plan to the sponsor within an agreed short period, with options including re-scope or pause

Practitioner approach

Agree the criteria first. Take the table above to the board and adapt it, so ratings are applied to agreed definitions and not to the reporter's mood. Publish the criteria with every report; it is the single most effective guard against optimism.

Gather evidence from the programme's own artefacts. Schedule from the baseline, cost from the budget report, risk from the log, adoption from the measures, quality from gate outcomes and evaluation results. Rate each dimension, then write two or three sentences of narrative: what the evidence shows, why, and what is being done. Where the evidence is missing, rate grey and say so; a missing measure is itself a finding.

Look for the patterns that recur in AI programmes. Milestones met while adoption stalls usually means the programme is delivering technology rather than change. Releases queuing at the gates usually means reviewer capacity was not planned. Growing consumption cost without a matching value measure usually means a solution was scaled before its scale-or-stop decision. Name the pattern when you see it; it helps the board act on causes rather than symptoms.

Turn every amber and red into an action. Each action has an owner by role, a date and the expected effect on the rating. Track actions from report to report and show which have worked. A health report whose actions are never followed up becomes theatre.

For an independent health check, add short structured conversations with the sponsor, two or three business owners, a reviewer and a workstream lead, and look for divergence between what people say and what the artefacts show. Report findings about the programme, never about individuals' performance.

When overall health is red, prepare a recovery plan: the cause, the options (re-sequence, reduce scope, add capacity through a supplier, pause a workstream, stop), the recommendation, the effect on outcomes and the decision required. Take it to the sponsor quickly; recovery options narrow with every week of delay. A well-evidenced pause or stop is a legitimate outcome.

Outputs

Microsoft platform considerations

Adoption and usage data from Microsoft reporting tools feed the adoption dimension at team or role level only; check what each report measures and how current it is against references/sources.md before relying on it. Platform changes that affect the plan appear through programme-management:dependency-management.

Adoption considerations

Adoption is a health dimension in its own right, not a footnote. Report it by team or role above the agreed minimum group size, and look for behaviour change and scenario use, not only active-user counts.

Knowledge considerations

Knowledge readiness often explains slipping agent milestones. Where it does, name it in the narrative and route the action to the knowledge owners, not the build team.

Security and privacy considerations

Health reports may contain security and supplier information; restrict access to the board and programme office. Never include individual usage data or names in adoption findings.

Responsible AI considerations

Report open responsible AI findings and pending risk acceptances under quality and assurance. A programme cannot be green while a tier 3 or 4 solution proceeds without its responsible-ai review.

Evaluation requirements

Not applicable to the report as an AI solution; it reads evaluation outcomes from evaluation-quality as evidence for the quality dimension and flags solutions whose evaluation evidence is missing.

Value measures

The health report's own measure is whether it changes decisions: the share of amber and red ratings with actions closed by their date, and the time from red to an agreed recovery decision. The AI Programme Manager owns the report; ratings describe the programme, never individuals.

Scale notes

Starter

A half-page monthly note to the sponsor covering outcomes, schedule, cost, adoption and risks, with three or four actions.

Scale

A monthly report on the template with agreed criteria for all dimensions, an action tracker and a recovery route.

Enterprise

Reports per tranche or business unit rolled up to programme and portfolio, periodic independent health checks, and consistent criteria across programmes.

Hand-offs

Reviewer gates

Not applicable, because the health report releases no solution; it reports outcomes from security-privacy, responsible-ai, evaluation-quality and design-authority exactly as those departments classified them.

Failure modes

Sources

references/sources.md in this skill lists the source records behind this skill, what each is authoritative for, how volatile it is and what you may do with it. Product availability, licensing, limits and preview status change often, so check the current source before stating them, and cite what you used.

Never

Source records for this skill

Microsoft Copilot adoption resources

ISO/IEC 42001 AI management system

NIST AI Risk Management Framework

Credit

This skill was created by Simon Foote as part of CopilotForge, licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Credit the author when you share or adapt it.