The workshop takes one of the firm’s own workflows across every box of the map. It ends with a marked map, the disagreements written down with a name against each, and a first step with owners and dates.
| Seat | Why the session needs it | If absent |
|---|---|---|
| The business owner who would sign the mandate | marks w3 and w6, and owns the first step | postpone: without the signatory the marks under the mandate are opinion |
| Operations lead for the workflow | volumes, referrals, the fallback, the customer | send the volumes in advance |
| The CRO or a second-line delegate | ceilings, the control standard, the challenge right | marks on e3, e4, w6 stay provisional |
| Compliance or the data protection officer | applicability of the law, the customer’s explanation | the law slide of part four is read, not decided |
| The CISO or the security architect | identity, the kill path, the platforms | p1 and p3 stay provisional |
| The platform or enterprise architect | where the check sits, the three joins | p4 and the joins stay provisional |
| Model risk and validation | the release, the evidence, the test before widening | w1 and p6 stay provisional |
| Finance, or the business sponsor | the business case, the cost of control | e6 is marked unknown |
| The knowledge function, or the senior source owner | the sources, their owners and versions, what the check reads at w2 | e2 and w2 stay provisional |
One process map of the workflow, one sample decision record, the current authority documentation (who may decide what today), basic volumes, and the name of the business owner. Whatever cannot be produced becomes a finding: it is recorded as unknown, not argued in the room.
| Time | Block | Material | Output |
|---|---|---|---|
| 09:00 – 09:25 | Scope and silent marks. Agree the scope card. Each participant marks every box alone, on paper, in round 1. | scope card; print map, one per person | the unit of assessment; nine sets of silent marks |
| 09:25 – 10:00 | The territory, briefly. The map from part one, then the room places its own act on it. | part one: the map, by altitude and essential, and the control plane strictly | shared terms |
| 10:00 – 10:50 | The dossier. In pairs, then together: what happens after the check said yes. | the decision dossier of the case nearest the room (motor claims, held payments, SME credit, corporate actions, collections, housing allowance, SME credit by a chain of agents); its answer guide for the facilitator; the situation cards if time allows | the room’s answers, compared with the guide |
| 10:50 – 11:05 | Break. The facilitator enters the round 1 marks in the explorer. | explorer, workshop mode | round 1 recorded |
| 11:05 – 12:05 | Their workflow. Box by box, starting where round 1 disagreed most. Evidence first, then the mark. Round 2 in the explorer. | print map; rights over authority; what the law asks (part four); the scale | round 2 marks, evidence notes, disputes with a name |
| 12:05 – 12:40 | From gaps to a first step. The three joins against their workflow; what stays “not yet”, with a date. | part four: how to start; the first-agent checklist | the first step, its owner, its date |
| 12:40 – 13:00 | Read-back and export. Read the summary aloud. Agree what the research extract may contain. | explorer: summary, export, print | the dossier for the sponsor; the extract, with consent |
One mark refers to one box, for the workflow, legal entity, and environment on the scope card. The same firm can mark a box evidenced for one workflow and not in place for another.
| Mark | Meaning | The test question |
|---|---|---|
| Not in place | nothing exists for this box today | Is there anything at all, even on paper? |
| Designed | written down or built, not yet running for this workflow | Does it act on this workflow’s decisions today? |
| Operating | running for this workflow | Could we show it working on last week’s decisions? |
| Evidenced | running, with evidence someone outside the team has checked against what it is offered to prove | Who outside the team has checked it, and when? |
| Unknown | nobody in the room can say | Who could? Their name goes in the note. |
| Disputed | the room disagrees | Who resolves it, and by when? Both views go in the note. |
| Not applicable | the box does not apply to this workflow | Why not? The reason goes in the note. |
Round 1, before discussion, is silent and on paper: each participant marks alone. The facilitator enters the mark most of the room chose, and notes in the evidence field when the room split. Round 2, after discussion, is the room’s adjudicated mark. The explorer keeps both, so the export shows what moved in discussion, and the research use can tell what the room believed from what it established.
Everyone reads the dossier of the chosen case, pages 1 to 4 (ten minutes). Then one route per seat, from the decks of the set.
| Seat | Route | Arrive ready to discuss |
|---|---|---|
| Business owner | Part one: every box, for people and for agents. Part two: the decision, the mandate, the check. Part four: rights over authority. | what she would sign, and what she does on the day it narrows |
| Operations lead | Part two: the decision, the loop. Part four: the people. | referral volumes, staff, and the exceptions that need a person |
| CRO | Part one: the control plane strictly. Part four: rights over authority, the three lines. Part three: narrow on a rule, widen on a signature. | one widening the second line would challenge |
| Compliance and data protection | Part two: one record, every reader. Part four: what the law asks. Part three: claims, and the record. | one customer outcome and its challenge route |
| CISO | Part three: it is never just the agent, the check. Part four: the estate. | one real identity chain and how it is revoked |
| Architect | Part two: between the permit and the act. Part three: the check, the three joins. Part four: the estate. | one target-system action and every route to it |
| Model risk | Part three: the agent, the record, the loop. Part two: the loop. | what a release contains, and one change that forces a new validation |
| Finance | Part two: the decision and its business case. Part four: the value. | a baseline and who owns the saving |
| Knowledge function | Chapter 05, whole. Part three: govern the claim. | one source, its owner, its version in force, and who the check calls at the act |
| Field | The room’s answer |
|---|---|
| The workflow | |
| The act the agent takes, or would take | |
| Legal entity and country | |
| Environment and deployment stage | |
| Who signs the mandate today | |
| Volumes: a year, a day, the share referred | |
| Seats in the room, and seats absent |