Who assures your organisation?
You assure your assets, your safety and your finances. The organisation itself is the one thing nobody is looking at.
Most regulated organisations have assurance frameworks for everything that matters. Safety. Finance. Engineering. Three lines of defence.
But the system making decisions about all of those, the accountability structure, the governance design, the operating model, is left to assumption.
When Royal Commissions and regulator inquiries unpick failures, the finding is almost never that a process was wrong. It's that accountability was unclear. A signal didn't escalate. A decision sat with the wrong forum for six months.
That's what goes unassured. And it's where most of the risk actually lives

