Governance & Strategic Framing

Use management systems to drive performance, risk control and organisational credibility beyond certification

Apply executive judgement to turn management systems into drivers of reliability, trust and strategic performance

Analyse organisational context, stakeholders and system boundaries to support effective management systems

Define clear policy direction and accountability through effective leadership responsibilities in management systems

Design coherent, auditable policy frameworks that align with strategy, scale across entities, and stay current without excess bureaucracy

Build the decision rights, governance meetings, escalation paths and evidence trails that make management systems work in practice

Ensure management systems are supported with sufficient people, time, budget, infrastructure and external support

Define and govern management system objectives and KPIs with clarity and consistency

Design, document and maintain usable processes with clear boundaries, flows, handovers, controls and evidence

Plan and ensure competence, awareness and communication for people within the scope of a management system

Manage suppliers and outsourced processes across requirements, selection, onboarding, oversight, change and exit

Plan, perform and use internal audits effectively to support governance and improvement

Conduct effective management reviews with structured inputs, clear decisions and audit-ready evidence

Define clear ISO/IEC 27001 ISMS scope and boundaries and maintain a defensible Statement of Applicability (SoA)

Core AI concepts, AI system types, AI agents, and the technical building blocks behind modern AI-enabled products and services

AI uncertainty, limitations and common failure modes across predictive and generative AI systems

Define AI system scope, set lifecycle boundaries, and maintain an AI system inventory aligned with ISO/IEC 42001

Privacy roles, obligations and controls in organisations, aligned with common national and international data protection requirements

Define PII processing context, determine controller and processor roles, and set practical PIMS scope boundaries under ISO/IEC 27701

Identify environmental aspects, evaluate impacts and significance, and maintain the assessment over time in an ISO 14001 context

Assess whether organisational context, interested parties, scope and system boundaries credibly reflect how the organisation operates

Assess whether leadership commitment, policy direction and governance structures credibly steer the management system

Assess whether management review credibly steers organisational priorities, risks and improvement