Indicative operating state
Policy is in force across pillars. Vendor scoring is operational. ROAI is baselined and tracked quarterly. The AI Risk Register breathes. Multiple use cases run through the stage-gated portfolio. Cross-functional working groups are operational.
How this band operates
Integrated organisations operate AI as a programme, not as a portfolio of pilots. The risk is governance theatre: policy without evidence.
Recommended next steps
- →Mature the Defensibility Posture Statement
- →Deepen ROAI to per-use-case attribution
- →Establish quarterly board reporting on AI
- →Build vendor exit + sub-processor governance
- →Run a Programme Design engagement to optimise the operating model