Choose one answer for each of 12 questions: A = 0, B = 1, C = 2 points. Total possible score is 24. Unknown is A; partial evidence is B. Do not infer readiness from company size or an impressive demo.
Hard blockers: an A on question 3 (rights), 5 (protected test), 10 (accountable owner) or 12 (risk/processing review) means Blocked for commissioning, regardless of total. A B on any of those questions means Conditional until the gap is resolved. For an external data transfer or operational pilot, all four must reach C and any project-specific legal/security approval must be complete.