Three kinds of date govern a multi-framework programme and only one is yours. Where each comes from, and the Cyber Essentials trap that shortens your year.
At two hundred people the evidence lives in four teams and nobody can say who confirmed the last review. Build the operating model before an auditor asks.
An acquisition, a contract with its own scope or a second market leaves you running one standard twice. What that costs, and how to stop the copies drifting.
.png)
