Ideally in Q2 2026 with a gap assessment, then policy and system updates in Q3, a disclosure dry-run in Q4, and a close-ready evidence pack before audit fieldwork begins.