Aug 2026 is not a deadline — it is the operational floor.

Gap analysis — For organizations with no formal AI governance posture — scopes the AIMS, the Annex III high-risk classification, and the third-party landscape in a single deliverable.

AIMS overlay — For organizations holding (or building) ISO 42001 — extends the existing AIMS into Article-by-Article conformity, with the five conceptual gaps overlaid as a continuous integrity layer.

Article 14 readiness — For high-risk AI teams shipping production models — interrogates who can interrogate the system, what "effective oversight" means in concrete terms, and how escalation actually fires.

Third-party diligence — For organizations deploying third-party or foundation-model AI — closes the diligence loop upstream where the Act places the conformity burden.

Annex III classifier ambiguity — does your classifier treat "biometric categorization" and "emotion recognition" as overlapping categories when the Act treats them as distinct obligations?

Data-governance provenance under Article 10 — when training data crosses jurisdictional boundaries, does your AIMS know what "relevant" and "representative" mean in each downstream context?

Effective human oversight under Article 14 — the Act assumes a reviewer who can interrogate the system; your AIMS must define what that interrogation looks like for non-technical oversight bodies.

Substantial-modification tracking — when does a model update constitute a "substantial modification" triggering re-conformity? The Act defines the trigger; your AIMS must define the detection.

Cross-Annex interoperability — a system may satisfy Annex III (high-risk) and Annex IV (technical documentation) simultaneously — the AIMS must broker what each Annex demands without fragmenting the operational view.

Conceptual inventory. Map the terms your AI systems actually rely on — "fairness," "ground truth," "drift," "oversight" — and the disagreements between teams over what those terms mean.

AIMS build. Construct the AI Management System as a living system: risk treatment register, competency framework, policy harmonization, and the conceptual commitments that bind them.

Annex III overlay. Map every high-risk obligation onto the AIMS as Article-indexed controls, with the five conceptual gaps inherited from across the project.

Article 14 hardening. Engineer the human-oversight pathway so a non-technical oversight body can actually interrogate the system — not checkbox, principle.

Audit rehearsal. Walk the conformity register against Annex IV documentation requirements and a notified-body-style challenge, before the August 2026 clock runs out.