Tier 1 deliverables
Tier 1 (2–4 weeks): Discovery and evidence baseline
This page describes typical output structure. Exact deliverables depend on scope, facts, and available data sources.
Outcomes
- - Validate likely unmanaged AI usage with evidence where available
- - Establish a minimum evidence baseline (what exists vs what is missing)
- - Provide an execution-ready next-step plan for governance and operations
Typical deliverables (illustrative)
Executive briefing
A concise summary of findings, key drivers, and immediate decisions required.
Discovery summary (directional)
Where unmanaged AI usage is likely occurring, how widespread it may be, and what to validate next.
Evidence-readiness baseline
What proof exists today (logs, workflows, approvals) and the minimum cadence required to sustain governance.
Operating plan (30–90 days)
Sequenced actions: validate first, then implement durable workflows and control ownership.
What Tier 1 is not
- - A legal determination or compliance certification
- - A guarantee of specific risk reduction outcomes
- - A substitute for assurance judgment
Related pages
Next step
Use PenCal for triage, then validate with evidence. Choose your experience: