Governance & Strategic Framing

Use management systems to drive performance, risk control & organisational credibility beyond certification

Apply executive judgement to turn management systems into drivers of reliability, trust & strategic performance

Analyse organisational context, stakeholders & system boundaries to support effective management systems

Define clear policy direction and accountability through effective leadership responsibilities in management systems

Design coherent, auditable policy frameworks that align with strategy, scale across entities, and stay current without excess bureaucracy

Define clear roles, decision rights, governance mechanisms & escalation paths in management systems

Ensure management systems are supported with sufficient people, time, budget, infrastructure & external support

Define & govern management system objectives and KPIs with clarity and consistency

Design, document & maintain usable processes with clear boundaries, flows, handovers, controls & evidence

Plan and ensure competence, awareness & communication for people within the scope of a management system

Select, qualify & control suppliers and outsourced processes across their lifecycle

Plan, perform and use internal audits effectively to support governance and improvement

Conduct effective management reviews with structured inputs, clear decisions & audit-ready evidence

Define clear ISO/IEC 27001 ISMS scope and boundaries and maintain a defensible Statement of Applicability (SoA)

Core AI concepts, AI system types, AI agents, and the technical building blocks behind modern AI-enabled products and services

AI uncertainty, limitations & common failure modes across predictive and generative AI systems

Define AI system scope, set lifecycle boundaries, and maintain an AI system inventory aligned with ISO/IEC 42001

Privacy roles, obligations & controls in organisations, aligned with common national and international data protection requirements

Define PII processing context, determine controller and processor roles, and set practical PIMS scope boundaries under ISO/IEC 27701

Identify environmental aspects, evaluate impacts and significance, and maintain the assessment over time in an ISO 14001 context

Assess whether organisational context, interested parties, scope and system boundaries credibly reflect how the organisation operates

Assess whether leadership commitment, policy direction & governance structures credibly steer the management system

Assess whether management review credibly steers organisational priorities, risks & improvement