Monitoring implementationKeep the change in control
A live model, not a one-off assessment.
Processes and data change every day. We keep the as-built model, the risk register and the control evidence in step with them, so decisions use what is true now.
The loopWhat happens each time something changes
The loop that never stops.
Each change in the business goes once around the loop, ending with the owner’s fix verified.
- 1Ingest the change
- 2Update the as-built map
- 3Re-score risks and red flags
- 4Alert the owner
- 5Verify the fix
- Drift, new variants and new hidden work are detected as they happen
- Controls are checked all the time, not only at audit time
Model and realityWhy a one-off assessment goes out of date
Always current, not ageing between reviews.
Illustrative. Gold: a live model stays matched to reality. Red: a one-off assessment matches on the day and drifts until the next review.
Illustrative
- Live model: always current
- One-off assessment: ages between reviews
- Review
AssuranceThe two checks that keep running
Live control, with a clear fix for every owner.
- Quality control
Checks on live evidence
Drift and new red flags surface as they happen, not at the next audit.
- Control assurance
Wrong work is stopped, with the fix
Work or data handled the wrong way is rejected, and its owner gets a clear instruction on what to do and how to fix it.