Strategic Decision & Value Architecture

Analyse organisational context, stakeholders and system boundaries to support effective management systems

Ensure management systems are supported with sufficient people, time, budget, infrastructure and external support

Build the capability to surface, structure and act on risk while action is still possible

Evaluate monitoring and measurement results, interpret trends and deviations, and summarise conclusions to support management decisions

Structure complex decisions, clarify objectives, evaluate trade-offs, and make defensible choices under uncertainty

Apply evidence-based audit reasoning, materiality-focused prioritisation and structured audit test planning

Design and govern risk-informed audit programmes across standards, group structures and programme-level reporting

Determine, review, agree and control customer requirements and related customer communications in line with ISO 9001

Systematically assess, treat and document information security risks with traceable decisions in line with ISO/IEC 27001

Assess AI impacts and harms, document findings, and connect them to risk decisions in an AI management system

Perform ISO 22301-aligned business impact analysis, identify critical activities, and define time-based recovery requirements

Evaluate continuity strategy options, design continuity solutions, and apply decision criteria aligned with ISO 22301 time-based requirements

Assess privacy risks, reason about impacts, and document DPIAs within an ISO/IEC 27701-aligned PIMS