A founding statement
Strategy is not execution. A new enterprise capability is required to assure the moments through which organisational intent becomes action.
Organisations have never had more strategy, policy, procedure, control, technology, data and transformation. None guarantees that the right thing actually happens when work gets done.
A policy can exist and still not be followed. A process can be designed and still be bypassed. An AI agent can execute a task perfectly—while executing the wrong task perfectly.
01
Between what should happen and what actually happens sits a blind spot formed by thousands of everyday decisions. The organisation becomes its strategy through those moments of execution. Those moments need assurance.
02
Policies, training, controls, audits and remediation remain important. Increasingly, they are not enough. Assurance must move closer to work: from periodic to continuous and from documenting failure to helping prevent it.
03
Information alone does not create behaviour change. Operational Assurance must ask how the operating environment makes the right behaviour easier, clearer and more likely at the moment it matters.
04
Inside the document, workflow, system, conversation, decision and approval. The aim is to introduce the right friction at the right moment—and remove unnecessary friction elsewhere.
05
AI increases the speed of execution and the speed at which mistakes can propagate. Agents need boundaries, context, checkpoints, escalation paths, evidence and assurance.
06
Interfaces, interventions and autonomy may differ. The underlying strategy, policies, controls, procedures and responsibilities should not.
07
Requirements become rules. Processes become observable workflows. Controls become checkpoints. Responsibilities become permissions and escalation paths.
08
Every intervention creates evidence about confusion, friction, behaviour and outcomes. Assurance can become an organisational learning system.
09
Visibility without agency has limits. Leaders need to understand behaviour, shape a proportionate intervention, observe the response and adapt.
10
Operational Assurance should strengthen the systems organisations already own. Process, technology or structural change should follow evidence, not serve as the default prescription.
11
The purpose is confidence: to move faster, delegate, automate and transform without abandoning control. Done correctly, control makes speed possible.
We believe
Governance should exist where work happens.
Assurance should prevent failures, not merely document them.
Behavioural science belongs inside enterprise assurance.
AI agents must be assured as rigorously as human employees.
Every intervention should generate learning.
Assurance should increase the speed at which organisations can safely operate.
Operational Assurance is the continuous process of ensuring that human and AI activity remains aligned with an organisation’s policies, processes, controls, responsibilities and strategic intent—during the execution of work, not merely after it.