Indicative operating state
A first charter is signed. A basic risk register exists. One or two pilots are running with explicit scope. Sponsorship is named but informal. Measurement is partial; ROAI not yet baselined.
How this band operates
Operational is the first defensible position. The risk is plateauing here: the early wins satisfy the board but the operating model never matures.
Recommended next steps
- →Formalise the Defensible AI Operating Manual (GOV-01)
- →Baseline ROAI for active pilots (USE-05)
- →Build the AI Risk Register (COR-03)
- →Map vendor sub-processors
- →Run an Executive Diagnostic to set a 90-day roadmap