Days 1–15 — Inventory
Identify systems, uses, stakeholders and priorities within the agreed scope.
BEXTIO
90-day AI governance program
Establish a governance capability and transfer it to institutional teams.
Days 16–30 — Classify and secure
Classify risks and data; define priority safeguards.
Days 31–45 — Establish governance
Clarify responsibilities, authorization rules and decision-making bodies.
Days 46–60 — Control and produce evidence
Verify selected controls and document their results within the pilot scope.
Days 61–75 — Train and simulate
Train stakeholders and practise responses to risk situations.
Days 76–90 — Monitor and transfer
Review results, decide adjustments and hand over the framework to its owners.
Main intended outcomes by day 90
- AI scope identified and priorities documented.
- Responsibilities and use rules established.
- Priority controls verified and results documented.
- Teams trained and exercises completed.
- Governance monitoring and a roadmap for improvement.
Scope and deliverables are agreed during scoping. This timeline presents the public approach; detailed implementation procedures remain engagement assets.