Foundation
Set the purpose, boundaries and accountability for the business. Establish who can approve investment, grant access, make commitments and accept risk.
Who has the authority to decide and the responsibility to answer for it?
Look for evidence such as:
- Named accountable owners
- Decision and escalation rules
- Approved operating boundaries
Record what is known, what needs checking and who will follow up. An empty answer is more useful than false certainty.