Introducing the Record of Assurance

The regulatory landscape has changed, as I have been writing about for almost a decade.

For a long time, compliance asked one thing of an organization: that procedures were in place, and that there was evidence they had been followed. That's procedural compliance, and it's well served.

A certificate or an audit gives you exactly that — confirmation of procedural integrity. It's useful, honest work, and it isn't going away.

But increasingly, boards, stakeholders and regulators want more.

They want to know that obligations are being met continuously, reliably, and with assurance — not only that procedures exist, but that the organization has the capabilities and capacity to keep its promises. That is what is called operational compliance.

While we can certify for procedural compliance, up until now we have not had something similar for operational compliance.

That gap is what I've been working on, and it's why we developed the Golden Thread of Assurance.

The idea is straightforward: trace an unbroken line from the obligations that organizations own, through the promises that put capabilities into practice, to the evidence those promises are being kept — and keep that line unbroken as things change, so that nothing falls through the cracks.

What it gives you is confidence not merely that a program functions — that its parts are in place and operating — but that it is effective: that your program is capable of delivering the benefits of compliance.

The Record of Assurance is the "certificate" of verified assurance capabilities — assurance that is engineered: designed in on purpose, not assumed or asserted.

Where a conformance certificate confirms your procedures, the Record of Assurance confirms your capacity to continuously meet your obligations — not something you display, but capability you can trust.

None of this replaces procedural certification. It adds what was missing. Procedural compliance has long had its certificate; operational compliance now has something of its own.

If program assurance matters to your mission success, start with a Golden Thread Diagnostic: a fixed-scope assessment of one program — in safety, security, quality, environmental, or AI governance that has to be trusted — against the six properties of the Golden Thread of Assurance. It identifies where each property is met, where the gaps are, and the roadmap to a Record of Assurance.

Message us to scope one