GGF — Comply Once. Report Everywhere.

Approved policies across every function, AGO re-approval every 15 calendar months.

Named Accountable Governance Officer; written delegations; Owner/Approver on every control.

One methodology producing every regime’s classifier from a single assessment event.

Role-based training before access; 15-month refresh; AI-literacy coverage.

Management body approves measures, receives quarterly metrics, trained on personal liability.

One canonical register, all six unit types, each with a unique portable identifier — the [T] ID lives here.

One classification event, six outputs: H/M/L · SL-target · E/I · criticality class · AI risk class · maintenance criticality.

15-calendar-month review; 30-day re-check on triggering change; discrepancies to zero or formally risk-accepted.

Zones/conduits, perimeters, external connectivity, model data-flow maps.

Need-based authorization; quarterly verification; 24-hour revocation; MFA for interactive remote access.

Needed ports only; 35-day patch evaluation; malware protections.

BCSI-analog identification and protection; training-data governance for models.

Authorized baselines; 35-day deviation disposition; substantial modification triggers re-classification and re-conformity.

Zone/perimeter enforcement; documented permissions; vendor remote access individually terminable.

Event logging; 90-day retention; 15-day review cycle; INSM for high-impact zones.

15-month assessments; coordinated-disclosure intake; CRA-grade product vulnerability handling.

Maintenance status, model drift, field telemetry — degradation dispositioned.

E-ISAC / CISA / ENISA / PSIRT intake triaged against the register within SLA.

One IR plan spanning all six regimes’ incident definitions, with per-regime reportability criteria.

Determine reportability across all six regimes on every incident; notify each triggered recipient inside its deadline. The crown jewel.

15-month test cadence; the clock rehearsed in every exercise; lessons learned within 90 days.

Escalation tree plus the non-regulator notices: product users, deployers, interconnected entities, service recipients.

Plans per critical unit; verified backups; protected recovery information.

15-month test; multi-year full exercise cycle; lessons learned in 90 days.

Corrective-action machinery for in-service units: recall, withdrawal, suspension — the off-ramp begins here.

Sanitize, tear down access, retire the identifier with history preserved, produce the proof-of-elimination package. Prove-it’s-gone.

Supply-chain risk plan in every procurement: notification duties, SDL attestations, right-to-SBOM, EOS commitments.

Documented SDL for anything the organization builds — products, models, systems — proportionate to classification.

Machine-readable SBOM per product/system, kept current through change, feeding vulnerability watch.

Authenticity verified before install; signed updates; model provenance and data lineage recorded.

Vendor access as first-class access — attributable, time-bounded, terminable within SLA.

Every statutory registration — NERC, EU AI database, CE/DoC, NIS2 entity — as a projection of one internal register key.

The unit-appropriate path — RSAW-grade audit readiness, 62443 certification, CRA route by class, AI Act Art 43 route.

Evidence as a by-product of execution, never reconstructed; strictest retention floor wins (10 years CRA/AI Act).

All non-incident submissions on one owned calendar with proof-of-submission artifacts.

Attest-and-mark-gaps per unit per function; AGO signs the roll-up; attestation drives the maturity rating.