Seven dimensions to assess
Treat each dimension as an evidence request. A green status should point to a named owner, a tested control, a current report, or a completed cleanup workflow rather than an aspiration.
- Use case: named users, decisions, consequences, and fallback path.
- Scope: spaces, pages, attachments, permissions, and source-of-truth boundaries.
- Content trust: stale, duplicate, contradictory, deprecated, and ownerless guidance.
- AI safety: untrusted content handling, output validation, budgets, and failure modes.
- Data handling: transient processing, persistence, retention, deletion, and subprocessors.
- Operations: audit cadence, incident response, support, and accountable owners.
- Remediation: evidence-backed tickets, completion tracking, and re-assessment.
A simple scoring method
Score each dimension from 0 to 3: unknown, documented, tested, or operating. Do not average away a critical red flag. A high-consequence space with unresolved contradictory guidance should remain a launch gate even when lower-risk dimensions score well.
The most useful output is a prioritized remediation list with evidence, owner, due date, and verification step. The numeric score is a communication aid, not proof that AI answers will be correct.
- 0 — unknown or no accountable owner.
- 1 — documented intent, but not tested on the actual scope.
- 2 — tested with findings and an active remediation plan.
- 3 — operating with evidence, monitoring, and re-assessment.
When to pause a rollout
Pause or narrow the rollout when permissions are not understood, high-consequence guidance is contradictory, nobody owns remediation, data-processing claims are unverified, or the team cannot observe and correct failures.
A narrow first space is often the fastest route forward. It creates a bounded proof point without pretending that the entire Confluence tenant is ready.
- Unresolved contradictory policies in a high-impact workflow.
- No named business owner for the retrieved knowledge.
- No review or escalation path for wrong answers.
- No clear statement of what content is processed and retained.