People wait for permission.
Executives inherit routine detail without the local context needed to judge it.
Technology / Practice
Practice · after implementation
The work should continue without waiting for you.
Technology becomes practice when the people responsible for the work know what they may decide, what they must record, and when to ask for help.
See the decision route ↓From direction to workAuthority moves closer
Policy
What the organisation allowsPurpose, obligations and reserved decisions.
Standard
What must be trueControls, criteria and acceptable conditions.
Procedure
How the work proceedsActions, owners, records and known exceptions.
Practice
The task owner actsRoutine judgement happens close to the work.
Evidence returns for review ↺
A situation people recognise
A customer request falls outside the script.
The service agent can see the request, the customer is waiting, and the system is working. The procedure does not say who may make the judgement. The agent asks a supervisor. The supervisor asks a manager. Work has moved upward because authority was never designed into the route.
If every uncertainty returns to leadership, capability has not been transferred.
People know the boundary.
The task owner acts within a defined limit, records the choice and knows where a material exception goes.
The operating modelWhy / who What must hold How / when
Make the rule, the owner and the escalation point visible.
This is a practical way to read an organisation’s operating system. The exact roles and limits must be adapted to the business.
Three documents, three jobsThen the work
Policy
Sets intent, authority and boundaries.
Standard
Defines the minimum condition.
Procedure
Routes actions, records and exceptions.
Task ownerActs and records
Process ownerReviews the method
System ownerMaintains the service
Feedback returns to the owner who can change the rule, interface, training or system. The change is accepted, communicated and used again.
The control language01 · Policy 02 · Standard 03 · Procedure
Policy, standard and procedure answer different questions.
What is allowed?
Intent, authority and boundaries.
Without it, procedure becomes permission-seeking.What must be true?
Controls, criteria and acceptable conditions.
Without it, “done” changes by person.How does the work proceed?
Actions, owners, records and exceptions.
Without it, authority cannot move.Decision routing
Escalate by consequence, not by uncertainty alone.
Risk guidance supports identifying, evaluating, treating, monitoring and communicating risk. The thresholds still belong to the organisation.
Normal caseInside the rule
Owner
Task owner
Trace
Complete the work and keep the ordinary record.
Known exceptionInside an approved limit
Owner
Task owner or supervisor
Trace
Record the reason, action and outcome.
Repeated frictionThe method no longer fits
Owner
Process or policy owner
Trace
Assess, revise and communicate the method.
Material exposureNew, legal or consequential
Owner
Reserved authority
Trace
Pause where required and preserve evidence.
The five intelligence concerns
The “i”s become useful when they reach the work.
They are not five departments. They are five questions to ask when a method has to survive people, systems and changing conditions.
Strategic intelligence
Which direction and obligation set the boundary?
Governs intentBusiness intelligence
Which measures reveal drift or recurring exceptions?
Reads signalsInformation systems
Where do permissions, records and ownership live?
Embeds the routeArtificial intelligence
Who monitors use, incidents and changes?
Governs inferenceUI / UX
Can people see the rule, act and recover from error?
Makes control legibleKeep the method alive01 02 03 04 05
Practice is controlled work that can learn.
Notice what happens. Record enough context. Assess the consequence. Revise with authority. Put the method back into ordinary work.
Notice
Something differs.
Record
Context is preserved.
Assess
Drift meets judgement.
Revise
The authorised method changes.
Use again
Another person can continue it.
Sources and notes
Evidence is available without interrupting the story.
The operating model is an editorial synthesis. The sources support its ingredients, not the claim that this exact arrangement is universal.
- ISO 9001:2026 — quality systems are established, evaluated and improved.
- ISO 10013:2021 — documented information is developed and maintained for organisational need.
- ISO 31000:2018 — risk is identified, evaluated, treated, monitored and communicated.
- ISO 30401:2018 — organisational knowledge is maintained, reviewed and improved.
- ISO/IEC 20000-1:2018 — services are planned, delivered and improved within a management system.
- ISO/IEC 42001:2023 — AI use is managed through policies, objectives and processes.
- NIST AI RMF · Govern — roles, responsibilities and communication should be clear.
- EU AI Act — AI literacy and deployer duties depend on the system and role.