Advisory, Architecture, Solutions and Assurance.
Four forms of work across the public and private sectors, with Governance Architecture at the core. Most engagements draw on more than one.
Advisory
What is happening, what matters, and what should we do?
Clarity on complex systemic problems and the events that expose them, from incidents and crises to capital events: what is happening, what matters and what to do, ending in decisions the accountable people own.
Decisions taken on evidence, by the people accountable for them.
- COSO ERM
- ISO 31000
- COBIT 2019
- Board and Committee Advisory
- Operating Audits and Structural Diligence
- Investigation and Diagnosis
Architecture
How should this work?
A defined design: the structures, processes, responsibilities, controls, information and technology through which a company or institution operates coherently. Governance Architecture is HIBS's distinctive discipline, applied with the other disciplines the problem requires.
A design ready to be put into operation, with governance that works in practice and holds as people and circumstances change.
- COSO ERM
- COBIT 2019
- ISO 31000
- ISO/IEC 27001
- ISO 9001
- ISO 22301
- DORA
- NIS2
- EU AI Act
Governance
- Governance Structures
- Responsibility and Accountability
- Management Mechanisms
- Transformation Governance
Operating Structures
- Operating-Model Design
- Structural Simplification
- Process Design
- Operational Standardisation
- Service Delivery Structures
- Service Design and Improvement
- Integration, Separation and Post-Integration Stabilisation
- HR Structures and Policies
Risk, Control and Compliance
- Enterprise Risk Management
- Controls
- Management Systems and Policies
- Third-Party Risk and Operational Resilience
- Regulatory Obligations
- Compliance Programmes
- Governance and Compliance Office Design
- Technology and Operational Controls
Information and Technology
- Technology Governance
- Technology Operating Models
- Information Security Governance
- AI Governance
Solutions
How do we make this available and work in practice?
Designs put into operation: technology, operating change and interim mandates, purpose-built for a client and handed over.
The solution in operation, implemented and handed over to the client.
- ITIL 4
- ISO/IEC 20000-1
- ISO 9001
- ISO/IEC 42001
Client Solutions
- Implementation and Transformation
- Technology Solutions
- Operational Excellence
- Turnaround and Performance Recovery
- Remediation Under Scrutiny
Interim Mandates
- Interim Operating Mandates
Assurance
Does this meet the relevant criteria, and what evidence supports that conclusion?
Independent findings and assurance conclusions on whether governance, controls and operating structures meet their design, their documentation and the standards they are meant to meet.
An independent opinion that management, boards, investors and regulators can rely on, because it rests on evidence.
- ISO/IEC 27001
- SOC 2
- ISO 9001
- ISO 22301
- ISO/IEC 42001
- Independent Audit
- Assurance Readiness
- Internal Audit and Control Testing
Many engagements begin before anything is under pressure.
Governance review before investment or exit
An evidence-based view of how the company is governed and run, before investors or acquirers examine it.
AdvisoryOperating-model design for scale
Responsibilities, management mechanisms and structures designed for the next stage, not the last one.
ArchitectureReadiness for audit or due diligence
Governance, controls and evidence prepared before an auditor, regulator or enterprise customer reviews them.
AssuranceIndependent governance review for the board
An opinion that rests on evidence, reported to the board or committee, on work HIBS did not design or implement.
AssuranceTechnology and AI governance before scale
Accountability, controls and oversight for technology and AI, set up before growth makes them harder to change.
Architecture
A broad perimeter, a strict standard.
Systems thinking does not confer specialist authority. The disciplines an engagement involves are each held to their own professional standard.
- 01A complex systemic problem
- 02The expertise to understand it
- 03A credible basis to intervene responsibly, to HIBS's professional standards
Everything an engagement requires, in one practice.
- Governance
- Risk and Compliance
- Information Security
- Operations
- Technology
- Human Resources
Every discipline the work requires is integrated into a single design, so that the problem is addressed as a whole rather than discipline by discipline. The structures, documentation and evidence remain with the client.
Standards institutionalise good governance.
HIBS draws on the standards and frameworks below where they substantively support the work, but does not organise its work around any single standard.
Approach- 01Accountability
- 02Repeatability
- 03Evidence
HIBS exists to solve complex systemic problems.
An engagement can start with any of the four forms of work and draws only on those it needs. The first conversation establishes which.