INTERACTIVE WORKSHEET / NO ACCOUNT
Make the pilotspecific. Define one workflow, the evidence you need and the conditions that would stop the test. Export your brief for review with the people accountable for it.
Four checkpoints Days 1–7
Days 8–14
Days 15–21
Days 22–30
These are suggested calendar-day checkpoints, not a promise that every approval or pilot will fit in a month. Extend or stop when the work requires it.
Need help defining success? → Your pilot brief Download Markdown brief Review this draft with the appropriate owners before granting access or starting the pilot.
Source notes This is an original planning aid, not a NIST checklist or certification. NIST describes four connected functions, Govern, Map, Measure and Manage, and emphasizes ongoing risk management. The 30-day sequence and worksheets here are editorial suggestions, not NIST requirements.
NIST AI Risk Management Framework · NIST AI RMF Core · NIST AI RMF Playbook Practical resources for bounded AI experiments, with a separate speaker directory and organizer guide. “30X” is a brand, not a performance promise. A 30-day pilot may end with a decision to stop.
No accounts or form submissions. Cookieless usage measurement is described below. The planner runs in your browser; saving is optional and local to this browser. Hosting providers may process ordinary request logs. Do not enter confidential information.
Educational guidance, not legal, security or compliance certification. Updated November 2, 2026.
Privacy and usage measurement Microsoft Clarity helps improve this site using page interactions, heatmaps and session replay. Analytics and advertising storage are denied before its script loads, so this configuration does not use Clarity cookies. It still sends device and behavioral data to Microsoft; cookieless does not mean anonymous.
Global Privacy Control, Do Not Track and a saved opt-out prevent the Clarity script from loading. Form fields and generated brief text are masked. Do not enter confidential information. Your preference is stored locally when the browser allows it. If that fails, the off control reloads with an analytics=off address flag; keep that flag on links you open to maintain the choice. Ordinary hosting still processes requests. Without persistent cookies, reported users and sessions can be fragmented across page views and are not a reliable count of distinct people.
Microsoft privacy statement · Clarity consent controls
Turn usage measurement off Allow cookieless measurement
