Capability domain
Strategic Decision & Value Architecture
Structure complex decisions under uncertainty and make transparent trade-offs between alternatives
Overview
The Halderstone Capability Framework defines six core capabilities required to design, operate, and improve management systems.
Overview
The Halderstone Capability Framework defines six core capabilities required to design, operate, and improve management systems.
This capability domain focuses on structuring complex decisions and clarifying the value logic that underpins organisational choices. It covers methods for defining objectives, evaluating alternatives, analysing trade-offs, and reasoning about uncertainty in strategic and operational decisions. Topics include decision analysis, objective hierarchies, value trade-offs, and structured approaches to recommendation development. The aim is to make decision logic transparent and defensible so that governance choices, control strategies, and improvement initiatives are aligned with organisational priorities.
Halderstone Advisory
Advisory services in decision analysis
Halderstone Advisory
Advisory services in decision analysis
Audit
Supporting audit services
Audit
Supporting audit services
Halderstone Academy
Training modules in decision analysis
Halderstone Academy
Training modules in decision analysis
HAM-AG-C-01
System Framing
Analyse organisational context, stakeholders and system boundaries to support effective management systems
View module
HAM-AG-C-05
Resource Management
Ensure management systems are supported with sufficient people, time, budget, infrastructure and external support
View module
HAM-AG-C-07
Risk Management
Build the capability to surface, structure and act on risk while action is still possible
View module
HAM-AG-C-14
Performance Evaluation
Evaluate monitoring and measurement results, interpret trends and deviations, and summarise conclusions to support management decisions
View module
HAM-AG-MC-01
Decision Analysis
Structure complex decisions, clarify objectives, evaluate trade-offs, and make defensible choices under uncertainty
View module
HAM-AG-AC-01
Audit Principles
Apply evidence-based audit reasoning, materiality-focused prioritisation and structured audit test planning
View module
HAM-AG-AC-04
Audit Programme Management
Design and govern risk-informed audit programmes across standards, group structures and programme-level reporting
View module
HAM-QM-S-01
Customer Requirements & Communication
Determine, review, agree and control customer requirements and related customer communications in line with ISO 9001
View module
HAM-IS-S-02
Information Security Risk Management
Build the capability to make the organisation's information security risk position visible, owned and defensible
View module
HAM-AI-S-02
AI Risk Management
Assess AI risks across use context, affected parties, GenAI and agency, then turn findings into treatment, monitoring and residual risk
View module
HAM-BC-S-01
Business Impact Analysis
Perform ISO 22301-aligned business impact analysis, identify critical activities, and define time-based recovery requirements
View module
HAM-BC-S-02
Business Continuity Strategies & Solutions
Evaluate continuity strategy options, design continuity solutions, and apply decision criteria aligned with ISO 22301 time-based requirements
View module
HAM-DP-S-02
Privacy Risk & Impact Assessment (DPIA)
Assess privacy risks, reason about impacts, and document DPIAs within an ISO/IEC 27701-aligned PIMS
View module
HAM-AG-C-01
System Framing
Analyse organisational context, stakeholders and system boundaries to support effective management systems
View module
HAM-AG-C-05
Resource Management
Ensure management systems are supported with sufficient people, time, budget, infrastructure and external support
View module
HAM-AG-C-07
Risk Management
Build the capability to surface, structure and act on risk while action is still possible
View module
HAM-AG-C-14
Performance Evaluation
Evaluate monitoring and measurement results, interpret trends and deviations, and summarise conclusions to support management decisions
View module
HAM-AG-MC-01
Decision Analysis
Structure complex decisions, clarify objectives, evaluate trade-offs, and make defensible choices under uncertainty
View module
HAM-AG-AC-01
Audit Principles
Apply evidence-based audit reasoning, materiality-focused prioritisation and structured audit test planning
View module
HAM-AG-AC-04
Audit Programme Management
Design and govern risk-informed audit programmes across standards, group structures and programme-level reporting
View module
HAM-QM-S-01
Customer Requirements & Communication
Determine, review, agree and control customer requirements and related customer communications in line with ISO 9001
View module
HAM-IS-S-02
Information Security Risk Management
Build the capability to make the organisation's information security risk position visible, owned and defensible
View module
HAM-AI-S-02
AI Risk Management
Assess AI risks across use context, affected parties, GenAI and agency, then turn findings into treatment, monitoring and residual risk
View module
HAM-BC-S-01
Business Impact Analysis
Perform ISO 22301-aligned business impact analysis, identify critical activities, and define time-based recovery requirements
View module
HAM-BC-S-02
Business Continuity Strategies & Solutions
Evaluate continuity strategy options, design continuity solutions, and apply decision criteria aligned with ISO 22301 time-based requirements
View module
HAM-DP-S-02
Privacy Risk & Impact Assessment (DPIA)
Assess privacy risks, reason about impacts, and document DPIAs within an ISO/IEC 27701-aligned PIMS
View module
HAM-AG-C-01
System Framing
Analyse organisational context, stakeholders and system boundaries to support effective management systems
View module
HAM-AG-C-05
Resource Management
Ensure management systems are supported with sufficient people, time, budget, infrastructure and external support
View module
HAM-AG-C-07
Risk Management
Build the capability to surface, structure and act on risk while action is still possible
View module
HAM-AG-C-14
Performance Evaluation
Evaluate monitoring and measurement results, interpret trends and deviations, and summarise conclusions to support management decisions
View module
HAM-AG-MC-01
Decision Analysis
Structure complex decisions, clarify objectives, evaluate trade-offs, and make defensible choices under uncertainty
View module
HAM-AG-AC-01
Audit Principles
Apply evidence-based audit reasoning, materiality-focused prioritisation and structured audit test planning
View module
HAM-AG-AC-04
Audit Programme Management
Design and govern risk-informed audit programmes across standards, group structures and programme-level reporting
View module
HAM-QM-S-01
Customer Requirements & Communication
Determine, review, agree and control customer requirements and related customer communications in line with ISO 9001
View module
HAM-IS-S-02
Information Security Risk Management
Build the capability to make the organisation's information security risk position visible, owned and defensible
View module
HAM-AI-S-02
AI Risk Management
Assess AI risks across use context, affected parties, GenAI and agency, then turn findings into treatment, monitoring and residual risk
View module
HAM-BC-S-01
Business Impact Analysis
Perform ISO 22301-aligned business impact analysis, identify critical activities, and define time-based recovery requirements
View module
HAM-BC-S-02
Business Continuity Strategies & Solutions
Evaluate continuity strategy options, design continuity solutions, and apply decision criteria aligned with ISO 22301 time-based requirements
View module
HAM-DP-S-02
Privacy Risk & Impact Assessment (DPIA)
Assess privacy risks, reason about impacts, and document DPIAs within an ISO/IEC 27701-aligned PIMS
View module

Ready to improve your management systems?
We support continuous improvement by embedding ISO requirements into everyday practice and daily operations.

Ready to improve your management systems?
We support continuous improvement by embedding ISO requirements into everyday practice and daily operations.

Ready to improve your management systems?
We support continuous improvement by embedding ISO requirements into everyday practice and daily operations.













