Governance at Execution™ Review
Purpose. Assess whether AI systems remain governed at the point they take action, not just when they are approved.
Core question
Can the organisation prove that an AI system had valid authority to perform a specific action at the moment it occurred?
From £1,500
SME £1,500–£2,500 · Mid-Market £2,500–£5,000 · Enterprise £5,000+ · pilot programme available
Review scope
Six domains reviewed
Attributable Authority™
Review:
- Who authorised the AI system?
- Who approved deployment?
- Who owns the outcome?
- Who owns the risk?
- Is delegated authority documented?
Deliverable: Attributable Authority Assessment
Authority Validity Check (AVC)
Review:
- Is authority still valid?
- Has authority expired?
- Has ownership changed?
- Are approvals still current?
Assessment questions
- How frequently is authority reviewed?
- Is there a formal re-authorisation process?
- Can authority be revoked?
Deliverable: AVC Maturity Score
Execution Boundary Check (EBC)
Review:
- What actions is the AI allowed to perform?
- What actions require approval?
- What actions are prohibited?
Examples
- Financial approvals
- Customer communications
- System changes
- Sensitive data access
- Agent-to-agent decisions
Deliverable: Boundary Control Assessment
Conditional Delegation Rules (CDR)
Review: under what conditions can authority be exercised?
Examples
- Transaction thresholds
- Risk thresholds
- Human approval triggers
- Time-based restrictions
- Environment restrictions
Deliverable: Delegation Rules Review
Runtime Authority Monitoring (RAM)
Review: can the organisation determine:
- What actions were taken?
- Whether actions complied with authority?
- Whether boundaries were exceeded?
Evidence
- Logs
- Audit trails
- Monitoring reports
- Alerting mechanisms
Deliverable: Runtime Monitoring Score
Execution-Moment Evidence (EME)
Review: can evidence be produced showing:
- What happened?
- Why it happened?
- What authority existed?
- Who approved that authority?
- What controls were applied?
Deliverable: Evidence & Auditability Assessment
Scoring model
Six domains, scored 0–5
| Domain | Score |
|---|---|
| Attributable Authority | 0–5 |
| AVC | 0–5 |
| EBC | 0–5 |
| CDR | 0–5 |
| RAM | 0–5 |
| EME | 0–5 |
| Overall Governance at Execution™ Score | 0–30 |
Maturity levels
- Level 1Ad HocAuthority largely assumed.
- Level 2ControlledBasic governance controls exist.
- Level 3ManagedAuthority and boundaries documented.
- Level 4OperationalAuthority actively monitored.
- Level 5AssuredContinuous evidence and assurance available.
Deliverables
- Executive Dashboard
- Overall Score
- Maturity Level
- Top Risks
- Governance at Execution™ Heatmap
- Gap Analysis
- Recommended Controls
- 30 / 60 / 90 Day Action Plan
Where it sits
- Governance Architecture Design™
- Governance at Execution™ Review
- Governance Operations Programme™
Fees
Pricing options
SME (up to 50 staff)
£1,500 – £2,500
Includes:
- Attributable Authority™ review
- AVC assessment
- EBC assessment
- CDR assessment
- Gap analysis
- Executive summary
- 30/60/90 day action plan
Mid-Market
£2,500 – £5,000
Includes:
- Multiple AI systems
- Stakeholder interviews
- Governance documentation review
- Detailed maturity assessment
Enterprise
£5,000+
Discover your AI Governance Maturity Score
The Trestano AI Governance & Readiness Diagnostic™ measures where you stand across five dimensions — and gives you a prioritised plan for what to do next.
Book a Diagnostic