Strategic Decision & Value Architecture

Analyse organisational context, stakeholders & system boundaries to support effective management systems

Ensure management systems are supported with sufficient people, time, budget, infrastructure & external support

Systematically identify, evaluate, treat & monitor risks and opportunities across management systems

Evaluate monitoring and measurement results, interpret trends and deviations, and summarise conclusions to support management decisions

Structure complex decisions, clarify objectives, evaluate trade-offs, and make defensible choices under uncertainty

Apply evidence-based audit reasoning, materiality-focused prioritisation & structured audit test planning

Design & govern risk-informed audit programmes, decide when audits should be combined or kept separate across standards, harmonise group-level structures, and structure programme-level reporting

Determine, review, agree & control customer requirements and related customer communications in line with ISO 9001

Systematically assess, treat & document information security risks with traceable decisions in line with ISO/IEC 27001

Assess AI impacts and harms, document findings, and connect them to risk decisions in an AI management system

Perform ISO 22301-aligned business impact analysis, identify critical activities, and define time-based recovery requirements

Evaluate continuity strategy options, design continuity solutions, and apply decision criteria aligned with ISO 22301 time-based requirements

Assess privacy risks, reason about impacts, and document DPIAs within an ISO/IEC 27701-aligned PIMS