Testing whether security decision rights actually work at Kestrelvale Insurance Group on the decision rights matrix board: eight real decisions, from accepting a risk to funding the fix, drawn across the propose, recommend, decide, consent and informed roles, each tile showing the role holder the charter names against who actually acted — teal where they match, rose where they do not, dashed where nobody acted — with mismatches thinning out down the board. Alongside, RA-2026-014, a £600,000 risk accepted by the delivery lead who could only propose it, followed by a £1.08m loss, and the entitled-role rate rising from 52 to 85 per cent against a 95 per cent target owned by the board.

CY-EXPERT-087Expert Level · Governance

Governance Decision Rights Challenge

An expert-level governance course on testing whether security decision rights actually work - whether the people who accept risk, approve exceptions, stop releases, spend on remediation, declare incidents and overrule controls are the people entitled to. Work down the Decision Rights Matrix Board - eight rows, one per chapter: decision rights as a control rather than an org chart; the RACI that says one thing and the email trail that says another; thresholds by value, duration and impact; the unowned decision and the decision owned twice; escalation that works at 3am and at quarter end; conflicts of interest and committees that decide rather than notice; evidencing decisions so they can be re-performed and sampling them against the charter; and reporting the gap to a board that owns the fix.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Treat decision rights as a control, trace a decision through its chartered roles, and measure a baseline by sampling with a criterion fixed in advance.
Reconcile a charter, a RACI, local guidance and the email trail into one decision rights register with a precedence rule and a decision evidence standard.
Set value, duration and impact thresholds for each decision type, test for split approvals, and design written, bounded and time-boxed delegation.
Map every decision point through its lifecycle, find unowned and double-owned decisions, and give each one decider, a tie-break and a safe default.

Price:৳12,000