Subscriber Library
Field evidence cases, methodology white papers, and operational playbooks from The Decision Layer — built for boards, C-suite executives, and senior risk leaders working inside regulated firms.
Quantum Cross-Domain Edition
Six teams measured the same harvest-now-decrypt-later exposure in incompatible ways. Time Horizon Separation Rule introduced: long-horizon stress scenarios never combined with current-period base case in a single aggregated figure.
Read casePharma Cross-Domain Edition
Five teams — Cyber, Regulatory, Vendor Risk, Legal/IP, Commercial — each measured the same Phase III clinical platform breach. Commercial figure: £312M. Actual current-period exposure: £18.7M. The gap is a base-case-vs-scenario problem.
Read caseAI Cross-Domain Edition
An AI vendor failure across cyber, model risk, regulatory, and operational domains. AI Technical Method introduced as a primary classification attribute. Resolution mechanics for AI risk types that don't fit adjacent categories.
Read caseWorkshops Cross-Domain Edition
An OT/IT convergence event measured five different ways across operations, supply chain, cyber, safety, and finance. Workshop-format walkthrough of the five-pile sort that separates governance event from mechanism from consequence.
Read caseCross-Domain Edition
Risk quantification without fantasy numbers. Three workshops covering taxonomy alignment, base-case-vs-scenario separation, and coverage testing across six systems — the canonical worked example for cross-domain measurement.
Read caseThe full articulation of the Decision Layer — what each layer carries, how they integrate, and why classification-only risk frameworks fail under board scrutiny.
A standard for audit opinions that survives Quality Assurance Review, regulatory inspection, and the test of a successor reading the file three years later. The conformance-or-fee-reversal principle in detail.
How the Senior Managers and Certification Regime (UK) and Senior Executive Accountability Regime (Ireland) map onto Decision Architecture. Authority lines, broken-arm scenarios, and the records regulators ask to see.
The Time Horizon Separation Rule. Why mixing long-horizon stress scenarios with current-period base case figures produces the wrong number — and what to do instead.
A practitioner's reading of the new Global Internal Audit Standards, with explicit mapping to Decision Architecture and Infrastructure requirements. For CAEs and ARC Chairs preparing for the next external assessment.
Three tests for a decision-ready taxonomy: interconnectedness mapping, emerging risk protocol, and appetite calibration. Run all three before the next ARC meeting.
Open playbookHow to test whether decision authority survives the absence of the named decision-maker. Six escalation patterns and the record format that makes succession real.
Open playbookA workshop format that separates governance event from mechanism, from current-period consequence, from scenario, from ambiguity. Resolves the "five labels, one event" pattern in any sector.
Open playbookTurn appetite statements into operational thresholds across four parameters: maximum residual exposure, maximum uncontrolled duration, decision authority, and evidence standard.
Open playbookA protocol for governing stress scenarios separately from the base case. Event-triggered scenario updates, dual-effect reporting, and the board paper format that keeps the two figures from collapsing into one.
Open playbook