Target: Level 4 Before August 2026 Most organisations in early 2026 are between Level 1 and Level 2. The gap to Level 4 requires governance establishment, classification completion, infrastructure build-out, AISDP preparation, conformity assessment, and PMM activation. Organisations that defer investment and attempt last-minute compliance sprints will find higher costs, lower quality, and greater enforcement risk. Key outputs
- Current state assessment (most organisations L1–L2)
- Gap to Level 4 identified
- Deferral risk acknowledged