Operating Model & Delivery ยท OPM-02
Build, buy or configure approach
A consistent, documented method decides for each use of AI whether to configure tools already owned, procure, build, or wait, and the reasons are recorded.
Why it matters
AI capability is increasingly built into products the organisation already pays for, so building or buying something new is often unnecessary. A consistent method weighs cost, speed, control, skills and lock-in, and avoids choices driven by habit or by whichever supplier asked first.
Levels
| 0 Absent | Confirmed absent: the evidence shows nothing is in place. Not known is recorded as insufficient evidence, not 0. |
|---|---|
| 1 Initial | Sourcing choices are made case by case, usually by whoever starts the work. |
| 2 Developing | Some guidance exists, but it is not used consistently or does not consider configuring existing tools or waiting. |
| 3 Defined | A documented sourcing method with set criteria decides whether to configure, procure, build or wait for every use of AI, and each decision is recorded. |
| 4 Managed | Sourcing decisions are reviewed against actual cost, delivery time and supportability, and departures from the method are explained and approved. |
| 5 Optimising | The method's criteria are updated from the outcomes of past decisions and changes in the market. |
Level 3 criteria
Level 3 is met when every applicable criterion is met. Criteria marked with an overlay apply only to organisations with that characteristic (overlays).
- OPM-02.1 A documented sourcing method covers the options to configure existing tools, procure, build or wait.
- OPM-02.2 The method sets decision criteria, such as cost, speed, control, skills, lock-in and environmental footprint.
- OPM-02.3 The method is applied to every use of AI and each sourcing decision is recorded.
- OPM-02.4 Reuse of existing and openly available models is considered before any new model is trained. BLD
Assessment questions
- How was the sourcing route chosen for your most recent use of AI?
- Is configuring tools you already own considered before buying or building?
- Have past sourcing choices turned out as expected on cost and support?
- The sourcing method or decision guide
- Recorded sourcing decisions for a sample of uses
How to reach Level 3
- Write a short decision method with four routes: configure tools already owned, procure, build, or wait.
- Set criteria for choosing between them, covering cost, speed, control, skills, lock-in and environmental footprint.
- Require teams to check whether an existing or openly available model can be reused before proposing to train a new one.
- Apply the method to every proposed use and record the route chosen and the reasons, for example in the pipeline register (POR-03).
Common pitfalls
- Skipping the configure and wait options because a supplier is already pitching a new product.
- Recording the decision but not the reasons, so it cannot be reviewed later.
Starter artefacts
- Sourcing decision guide
- Sourcing decision record template
Ownership and sequence
- Accountable
- delivery lead
- Contributors
- business owner, security lead, ai governance lead
- Depends on
- OPM-01
- Roadmap step
- 3
- Lifecycle
- design, acquire_build
Cross-references
| Algorithmic Transparency Recording Standard | Tier 2 Description and rationale partial |
|---|---|
| GDS AI Playbook | P6 direct |
| JSP 936 Part 1 | para 28 partial |
| NIST AI 600-1 | R5 partial |
| NIST AI RMF 1.0 | MEASURE 2.12 partial; MANAGE 2.1 partial |
| UK Data and AI Ethics Framework | Transparency 1 partial; Environmental sustainability 1 direct; Environmental sustainability 2 direct; SAT 1.16 direct; SAT 2.11 partial; SAT 2.12 partial; SAT 3.7 partial |
direct: this control at Level 3 meets the item. partial: it covers part of it.