| Current-state assessment | Estate, workloads, integrations, costs, controls, skills, issues, and constraints | Assessment report and evidence register | Assess | Inventories, interviews, documents, usage and cost data | Dataconsultant with client SMEs |
| Platform capability map | Required capabilities across ingestion, storage, transformation, governance, access, analytics, AI, security, and operations | Capability model | Assess and design | Business priorities and workload requirements | Joint design team |
| Target-state principles | Architecture, data-product, integration, control, residency, resilience, and operating principles | Decision paper | Design | Risk appetite, policies, strategic constraints | Client approvers |
| Option assessment | Evaluation criteria, shortlisted patterns, trade-offs, dependencies, commercial assumptions, and decision record | Comparison matrix and recommendation | Design | Vendor, procurement, security, and financial inputs | Dataconsultant and procurement |
| Delivery roadmap | Prioritised waves, dependencies, decision gates, owners, acceptance criteria, and timing factors | Roadmap and wave plans | Mobilise | Capacity, programme dependencies, funding routes | Programme sponsor |
| Operating and governance model | Decision rights, platform ownership, data-product roles, service management, assurance, and escalation | RACI and operating model | Design and mobilise | Organisation structure and role constraints | Client leadership |
| Risk and control register | Security, privacy, quality, residency, resilience, third-party, migration, and delivery risks | Risk register and control map | Across engagement | Policies, findings, obligations, control owners | Joint risk owners |
| KPI and mobilisation pack | Measures, baselines, reporting cadence, first actions, backlog, and governance calendar | KPI catalogue and action plan | Mobilise | Baseline data and nominated owners | Programme management |