# What should your team complete in the next seven days?

Use this proposed steering-committee checklist:

- [ ] **CRO:** Approve the risk aggregation and override scenario for supplier demonstrations.
- [ ] **Procurement:** Obtain written definitions for every quoted licence or consumption unit.
- [ ] **Programme lead:** Assign administration, integration-monitoring and training responsibilities.
- [ ] **Compliance:** Decide whether to contribute to the third-party guidance consultation.
- [ ] **Internal audit:** Define which decision histories must remain independently retrievable.

**The purchasing rule:** Do not award evaluation points for an untested claim. Mark it **demonstrated**, **partially demonstrated**, **not demonstrated** or **future capability**.

**Reply prompt:** Which is least clear in your current GRC proposal: the pricing unit, the migration boundary or the post-launch owner?

*doja Enterprise GRC Platforms Research — helping buyers choose platforms they can implement, operate and afford.*

---

# Draft 2 — Monthly digest

**Subject:** October GRC digest: read the migration exclusions before the AI roadmap

**Preheader:** What October’s announcements and implementation documents mean for scope, evidence and three-year cost.

**Edition:** October 2026, through 28 October