The first batch of NDVO PPRs arrived in earlier than I thought - in late Dec. The new wave is likely held by security clearance (if anyone from your timelines had GCMS notes, we would know for sure). Security reports might come from partner agencies in groups, and then the officers move on to complete the assessments and reach a decision. This may not follow FIFO method because of different backgrounds (for instance, an adverse is traced for a person who shares the same name with an applicant. It's a coincidence, but the processing is delayed). As a tip of the iceberg an applicant gets PPR.