Workflow decisions · 8 min read · Written with AI assistance; examples use synthetic data
Prepared · Sources checked
For: Small-business operators, marketers and agency implementers.
Describe The Job Before The Technology
Write the job as input, action and output. For example: take an invented enquiry, identify which service it asks about, and suggest an owner for review. That is testable. 'Use an agent to improve sales' has no clear finish line.
Use the response audit to find the failure. If enquiries have no owner, begin with assignment. If the right person is assigned but lacks a necessary detail, try a checklist. If the task involves varied language and a reviewer can judge the answer, drafting or classification may be worth testing.
NIST's framework describes four risk-management functions: Govern, Map, Measure and Manage. Our worksheet uses that broad approach to define a task and check its result. The selection gates are our own; NIST has not validated them.
Context: NIST: AI Risk Management Framework 1.0.
Compare The Smallest Workable Options
For each job, write down what you can already do without a new tool. A shared task list, a saved reply or a fixed condition may be enough. The useful question is whether an AI-assisted version handles cases your simpler option cannot handle acceptably.
The fictional table uses 20 invented cases per task. 'Needs judgement' means an authorised person must resolve something the sample rule cannot decide. It is not an error rate and does not mean the remaining cases are safe to run unattended. Counts describe only this made-up worksheet.
Table can scroll horizontally on a narrow screen.
| Task | Needs judgement / 20 | Simple alternative | Trial decision |
|---|---|---|---|
| Assign a known service category | 2 / 20 | Fixed routing rule + review queue | Test the rule first |
| Ask for a missing dimension | 4 / 20 | Required-detail checklist | Test a saved reply |
| Draft a varied enquiry reply | 7 / 20 | Checklist + human draft | AI draft trial, approval required |
| Set a bespoke project price | 12 / 20 | Human estimator | Keep with a person |
| Handle a complaint or refund | 15 / 20 | Named escalation owner | Keep with a person |
judgement_cases = {
"routing": 2, "missing_detail": 4, "reply_draft": 7,
"bespoke_price": 12, "complaint": 15,
}
for task, count in judgement_cases.items():
print(task, f"{100 * count / 20:.0f}%")
# routing 10%
# missing_detail 20%
# reply_draft 35%
# bespoke_price 60%
# complaint 75%Apply Gates Before Scoring Anything
A high convenience score cannot resolve a privacy or permission problem. Keep the test offline until a named person can check its replies and you have permission to use the data. Start with invented messages and no sending connection.
The reply-draft row is a reasonable offline candidate because a person can inspect the output before it leaves the system. That is a hypothesis about testability, not proof that AI is better than the manual baseline. The price and complaint rows stay with a person because this exercise has not defined the authority or acceptance rules needed to automate them.
- Permission: can the test use this data and tool without new accounts, unapproved spend or exposing personal information? If not, stop that path.
- Acceptance: can two reviewers describe a correct output and a failure using the same examples? If not, clarify the task.
- Control: can a person approve every external action and stop the workflow? If not, keep it offline.
- Reversibility: can you restore the prior process and inspect what happened? If not, reduce the scope.
Context: NIST: AI Risk Management Framework 1.0; NIST: Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile.
Write A Test Brief That Can Fail
A useful brief names one job, one reviewer, a fixed sample and a stop rule. For our fictional draft assistant: use the six enquiries in the next guide, require the necessary question or escalation in every answer, and reject any invented price or booking. Do not connect email, messaging, a CRM or payment software for this first pass.
Keep a human-written baseline and, where useful, a fixed-template baseline. Run the same cases through each. Count corrections and failed requirements. If you later time the work, include preparation, checking and rework; do not turn unmeasured convenience into a time-saving claim.
Before a later authorised vendor test, set a cost limit and check the plan's charges. Confirm how it stores data, where it is available and how to export your work. We have not checked paid plans or country availability for this guide.
Context: NIST: Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile.
Keep, Change Or Stop The Trial
Keep the candidate only if it meets the predefined requirements in the test and there is a realistic next validation step. Change it when a specific failure can be repaired. Stop when the task needs authority or reliable information the workflow does not have.
An offline pass is permission to investigate further, not permission to send customer replies automatically. A later operational trial needs an approved data path, tested recovery, an owner and a fresh review against more representative cases.
Worldwide English readers can use the same worksheet. US, UK, Australian and Canadian teams still need to check local data handling and a vendor's actual availability before using real enquiries. We have not established regional demand or willingness to pay from this exercise.
Questions Before You Try It
Should I Choose The Task With The Highest Volume?
Volume matters only after permission, acceptance and control are clear. A frequent task with an uncheckable output can be a poor first trial.
What If A Free Template Works?
Keep it. The goal is a reliable workflow. There is no requirement to add AI, a subscription or a new integration.
Can This Worksheet Pick An AI Vendor?
No. It defines the job and trial. Vendor selection requires current plan, feature, privacy, availability and hands-on evidence that this worksheet does not provide.
Sources And Method
We wrote the examples and calculations in these guides. The sources below explain the risk-management principles; they did not test our worksheets or any product.
- NIST: AI Risk Management Framework 1.0
Source publication: 2023-01-26 (framework release). Checked: 2026-10-16.
Govern, Map, Measure and Manage provide risk-management context. The five-task shortlist is original synthetic editorial material.
- NIST: Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile
Source publication: 2024-07-26. Checked: 2026-10-16.
NIST describes a cross-sectoral generative-AI risk-management companion covering design, use and evaluation. Our output checks and pass/stop criteria are original editorial choices, not a NIST certification.
The NIST AI RMF 1.0 pages stated that a revision is in progress when checked. We refer to the dated 1.0 framework and 2024 profile, not a later revision.
Review Your Enquiry Process
Reflect on ownership, replies and follow-up before choosing a workflow. Read the benchmark below for a separate offline test.
Try the free Sales Response Scorecard