The Whole-Business Conversion Audit: An Executive Standard for Finding Where Market Opportunity Stops Becoming Value

Your teams can show campaigns, customer feedback, funded priorities and completed work. What may still be unclear is where that activity stops producing value for customers and the business. Trace the handoffs from a market need to the result before deciding what to fund, change or stop.

Use the Whole-Business Conversion Audit to follow one market opportunity through the organisation. Check how customer signals lead to decisions, work and results, and what the team learns from them. The output is a diagnosis with supporting evidence, a baseline plan and a decision about what to fund, change, test, defer or stop. It does not reduce an organisation to one universal percentage.

This is an Abrasim decision-support working methodology. It is not a statutory or financial audit, an internal-audit or assurance engagement, a compliance opinion, or legal or financial advice. Use appropriately qualified and authorised reviewers where those conclusions are required.

Executive decision card: complete before fieldwork

1. The Market Connection Context

Use this method when teams can account for their own activity but cannot explain the combined commercial or customer result. Leadership needs to see how the work connects before deciding where to spend money and attention.

Typical signs include:

• demand exists, but sales, fulfilment or retention evidence does not reconcile with the acquisition story;
• complaints, service requests, research and frontline knowledge exist, but material signals do not change priorities;
• a strategic decision was funded, but workflows, ownership or behaviour remain largely unchanged;
• an intervention works in one team, but its operating conditions are unknown and the result cannot be repeated safely;
• dashboards show activity, but leadership cannot identify the source, denominator, baseline or decision attached to a material measure;
• several growth, data, automation, transformation or product initiatives compete for funding without one cross-functional value logic.

Start with the people the organisation serves and the need it must meet. Depending on the business, those people may include prospective or existing customers, users, partners, communities or service recipients. Follow how the organisation responds to that need.

The six value paths

The audit tests six connected diagnostic paths. They are lenses, not six compulsory workstreams and not six numbers to multiply into a fictional company-wide score.

Use this causal chain for every material issue:

Recognisable market or leadership condition
→ break in a named value path
→ customer or operating consequence
→ potential economic exposure
→ evidence required to quantify it
→ dated leadership decision

The economic consequence may affect revenue, margin, cost, capacity, retention, service value, risk or investment efficiency. Those effects remain REQUIRES VALIDATION until organisational evidence establishes the baseline, affected population, period, mechanism and attribution limits. A plausible causal story is not a quantified business case.

The decision to make

Before evidence collection begins, leadership must complete this statement:

By [decision date], [named decision owner] will decide whether to [fund, change, test, defer, stop or scale] [bounded intervention or portfolio] to improve [named market, customer or business outcome], subject to [material constraints and guardrails].

The decision date is not a delivery estimate. It is the date by which the sponsor agrees to resolve the defined question, explicitly request further validation or record why the decision is deferred. If the sentence cannot be completed, the immediate task is decision framing rather than an audit.

When to use this method

Use the Whole-Business Conversion Audit when:

• the visible problem crosses at least two functions or one material handoff;
• leadership cannot reconcile market, customer, operating and commercial evidence;
• several interventions or investments need a common decision basis;
• the consequence of choosing the wrong intervention is material;
• incumbent teams or suppliers hold only part of the evidence or have a material conflict in the solution choice;
• a baseline and operating owner must be established before transformation or scale.

Do not use it when:

• a known urgent safety, security, legal, privacy or control failure requires immediate containment by a qualified authority;
• leadership wants an existing decision endorsed rather than independently examined;
• the issue is narrow, reversible and cheaper to test directly with an accountable owner;
• no sponsor will own evidence access or the final decision;
• the organisation cannot act on a material finding and has no legitimate reason to establish the baseline now;
• the required conclusion is a regulated assurance opinion outside the appointed team’s competence and authority.

Scope, exclusions and dependencies

The scope must name one decision, the relevant market or stakeholder group, the organisational boundary, the selected value paths, the evidence period and the material handoffs. It may cover one journey, business unit, market, product, workflow, investment portfolio or defined cross-functional outcome. Breadth is justified only where narrowing the boundary would hide a material dependency.

Material exclusions normally include statutory or financial audit opinions, legal advice, cyber-security certification, privacy compliance determinations, employment-law conclusions, product warranties, actuarial conclusions and guaranteed commercial outcomes. The audit may identify that specialist review is needed; it may not manufacture that review.

Dependencies normally include an executive sponsor, named evidence owners, access to authoritative sources, permission to observe work and customer interactions lawfully, finance participation in economic definitions, risk review where affected people or regulated data are involved, and capacity to make the decision.

Expected result

A completed audit should leave leadership with:

• an approved audit charter and responsibility map;
• a Market Connection Map covering the selected value paths;
• an evidence and uncertainty register with source, owner and limitations;
• a small set of decision-grade findings, each connected to a consequence and baseline need;
• credible alternatives, including retain, simplify, test, defer and stop routes;
• a prioritised intervention portfolio with dependencies and downside visible;
• an executive decision brief and decision register;
• a bounded proof or implementation plan where action is justified;
• an operating handover and topic-specific measurement contract;
• dated proceed, validate, change, defer, stop or scale gates.

These are decision and operating artefacts, not a promise that revenue, margin, capacity or retention will improve.

Specialist stop-and-handoff boundary

The audit is an umbrella diagnosis. Stop at the first material specialist decision and retain the evidence needed by its receiving authority:

Every handoff records the source decision ID, current authorised boundary, receiver, evidence transferred, unresolved condition, resource authority, decision granted and not granted, next gate and expiry or reopen trigger. This audit does not grant specialist, funding, implementation or scale authority by identifying a problem.

2. The Leadership vs. Delegation Boundary

The audit can be run internally. The deciding question is not whether the organisation is capable, but whether it can assemble the required authority, evidence, cross-functional time and independent challenge without allowing one function’s preferred explanation to become the diagnosis.

The six value paths cross functional budgets, evidence and ownership; diagnosis therefore needs cross-functional authority, access and independent challenge, whether led internally or externally.

When an internal team is sufficient

A capable internal team can lead when the sponsor can grant access across the selected boundary; a senior lead can challenge functional assumptions; evidence owners will reconcile definitions; affected teams can participate without fear of retaliation; and the audit lead is not commercially committed to one solution. Internal audit, strategy, finance, customer, operations, data or transformation functions may contribute valuable disciplines, but the sponsor must still distinguish this decision diagnostic from any formal assurance mandate.

Use the smallest competent team. A narrow conversion break may require a finance analyst, journey owner and sales or service lead, not an enterprise programme. If the problem is a known analytics implementation defect, a measurement specialist may be sufficient. If the issue is a process bottleneck with reliable evidence and one owner, direct process improvement may be better than a whole-business audit.

When an independent senior partner is justified

Independent leadership is justified when:

• the evidence and budget cross several executive owners;
• definitions or facts are materially disputed;
• an incumbent supplier would benefit from a particular diagnosis;
• the sponsor’s preferred intervention needs credible challenge;
• the issue carries material investment, customer, employee, operational or reputational downside;
• the internal team lacks temporary capacity to reconcile evidence and facilitate the decision;
• the work must leave a method and artefacts that another qualified team can operate.

Independence is never absolute. Record appointment, reporting line, prior involvement, implementation interests, access limits and any incentive that could bias the recommendation. If the diagnosing partner may sell implementation, disclose that interest, keep the client’s evidence and decision gates independent, and never let the partner self-certify assurance or its own controls. Established audit guidance treats evidence, fair presentation, confidentiality, due care and independence as important disciplines; this guide borrows those disciplines without claiming conformity to ISO 19011 or the IIA’s Global Internal Audit Standards (ISO 19011:2026, The IIA Global Internal Audit Standards).

If the decision crosses functions, depends on contested evidence or carries material investment risk, Abrasim can lead the assessment and leave the team with the evidence, artefacts and operating ownership. If the condition is narrow and the evidence is already trusted, internal execution or a focused specialist is likely to be more proportionate.

Stop conditions

Stop, contain or re-charter the work when:

• the sponsor withdraws authority or refuses decision-critical access;
• collection would breach a legal, contractual, privacy, security or ethical boundary;
• a material immediate harm requires qualified incident response rather than continued discovery;
• evidence shows the audit question is materially wrong or too broad;
• the decision owner has predetermined the outcome and will not consider contrary evidence;
• an undisclosed conflict makes impartial synthesis unreasonable;
• the organisation cannot name an operating owner for any plausible intervention;
• the likely cost and burden of further diagnosis exceed the value of the decision it could improve.

Stopping is a governed result. Record the reason, evidence, owner, protective action and conditions for restarting.

Decision and escalation route

Questions for evaluating a provider

1. Which specific decision will your method help us make, and what is excluded?
2. Which market, customer, operating and commercial evidence will you require?
3. What happens when evidence is unavailable, unreliable or contradictory?
4. How will you separate observed fact, interpretation, assumption and recommendation?
5. How will you disclose incentives, prior involvement and implementation conflicts?
6. Which parts will senior practitioners perform, and where does human judgement enter?
7. How will you protect personal, confidential and commercially sensitive evidence?
8. How will you test claims from interviews against observation and authoritative sources?
9. How are value, feasibility, risk, dependency and time to learning compared without hiding judgement in one score?
10. Which deliverables can another qualified team use without an undocumented explanation?
11. What would make you recommend a simpler intervention, a different specialist or no further work?
12. Which outcomes are decision artefacts, and which commercial effects still require a baseline and implementation evidence?

3. The Step-by-Step Execution Standard

Run the sequence against one bounded decision. Where the scope contains materially different decisions, create separate charters and connect their dependencies rather than forcing them into one score.

Step 01: Charter the decision

Purpose and decision served
Convert a broad concern into one dated decision that the audit can improve.

Accountable owner
Executive sponsor; the named decision owner approves the final wording.

Delegated lead and contributors
Audit lead facilitates. Finance, market/customer, operations, data, technology and risk owners contribute only where the selected decision requires them.

Preconditions, inputs and access
A recognisable leadership condition, a sponsor with authority, initial value-path hypothesis, known non-negotiables and the calendar of the forum that will make the decision.

Actions

1. Write the decision statement using the Section 1 pattern.
2. Name the affected market or stakeholder, outcome, selected value paths and potential economic lenses.
3. Define organisational boundary, evidence period, inclusions, exclusions and material dependencies.
4. Record the decision date, decision forum, expected artefacts and what happens if the decision is deferred.
5. Record conflicts, confidentiality, privacy, security and specialist-review requirements.
6. Agree audit acceptance criteria and a proportional limit on time, access burden and cost.

Evidence to retain
Sponsor-approved charter, initial decision statement, scope map, constraints, conflict declaration and approval record.

Decision or scoring rule
Proceed only when the charter contains one important decision, one owner, one date, a bounded subject and an explicit consequence. If any is absent, disposition is validate or stop.

Output and template
The Whole-Business Conversion Audit: An Executive Standard for Finding Where Market Opportunity Stops Becoming Value audit charter and a signed or otherwise traceable approval record.

Acceptance gate
Proceed if the decision owner confirms the charter can change a real choice; otherwise change, defer or stop.

Leadership checkpoint
The sponsor confirms that contrary findings will be considered and that access barriers will be escalated.

Human control point
A named executive approves the decision, risk appetite, exclusions and information boundaries. No tool or supplier approves its own mandate.

Failure modes and safeguards
Common failures are enterprise-wide scope, a technology-led question, an implied solution or no decision date. Safeguard with one-sentence decision framing and a written exclusion list.

Change, stop or escalation condition
Re-charter if new evidence changes the affected market, material consequence or decision. Stop if leadership wants validation theatre rather than a genuine choice.

Handoff to the next step
Pass the approved charter and decision date to the responsibility-design session.

Step 02: Assign authority and independent challenge

Purpose and decision served
Make decision rights, evidence obligations, challenge and escalation visible before functional interests shape the evidence.

Accountable owner
Executive sponsor.

Delegated lead and contributors
Audit lead drafts the map. Decision owner, evidence owners, operational representatives, finance and relevant risk authorities confirm their roles.

Preconditions, inputs and access
Approved charter, organisation structure, relevant governance forums, known suppliers and a list of owners for the selected value paths.

Actions

1. Name sponsor, decision owner, audit lead, domain owners, evidence owners, operating representatives and specialist reviewers.
2. Assign who decides, contributes, validates, must be consulted and must be informed for each gate.
3. Name an independent challenger who can test the sponsor’s and audit lead’s preferred explanations.
4. Declare prior involvement, supplier incentives, implementation interests and reporting-line conflicts.
5. Define escalation routes and response dates for missing evidence, disputes and risk concerns.
6. Confirm who will own benefits and operating performance if an intervention proceeds.

Evidence to retain
Responsibility map, conflict register, decision-rights matrix, escalation route and role acceptances.

Decision or scoring rule
No role is “the business” or “leadership”. Every decision-critical responsibility needs a named human or a documented vacancy that the sponsor resolves before the affected gate.

Output and template
Completed responsibility, independence and escalation fields in the The Whole-Business Conversion Audit: An Executive Standard for Finding Where Market Opportunity Stops Becoming Value audit charter, with the wider Leadership Audit Working Pack retained as supporting governance guidance.

Acceptance gate
Proceed only when sponsor, decision owner, audit lead, evidence owners, challenger and future operating owner are named; otherwise validate or defer.

Leadership checkpoint
The sponsor accepts the escalation route and any mitigation for impaired independence.

Human control point
The sponsor decides whether a conflict is tolerable, mitigated through challenge or requires recusal or replacement.

Failure modes and safeguards
Failures include role labels without people, audit lead becoming business owner, or incumbent suppliers validating their own solution. Safeguard with named acceptance and an independent challenge role.

Change, stop or escalation condition
Escalate an unfilled decision or risk authority immediately. Stop the affected work if no accountable human can lawfully approve it.

Handoff to the next step
Give each evidence owner the approved charter, role, access request format and escalation date.

Step 03: Design the evidence request and access controls

Purpose and decision served
Collect only evidence that can confirm, change or limit the decision while protecting people and sensitive information.

Accountable owner
Audit lead for method; executive sponsor for organisational access; relevant internal authorities for privacy, security, legal and contractual permissions.

Delegated lead and contributors
Evidence coordinator may administer requests. Source-system owners, finance, research, customer, operations, data, technology, procurement and risk contributors validate scope and access.

Preconditions, inputs and access
Charter, responsibility map, selected value paths, source-system inventory, retention requirements and authorised working environment.

Actions

1. Convert every decision assumption into an evidence question.
2. Request the smallest sufficient evidence period and fields for market, customer, commercial, workflow, decision, investment and outcome questions.
3. For every item, record owner, source, period, format, due date, access status, sensitivity and expected decision use.
4. Define where evidence will be accessed, who may see it, what may be copied, how extracts will be minimised and when working copies will be removed.
5. Where an external party may access personal information, obtain responsible-party or authorised privacy-owner approval and define secure handling, retention, disposal, incident response and appropriate operator contracting and security controls before access.
6. Identify authoritative sources, reconciliation sources and stakeholder testimony separately.
7. Classify unavailable, inaccessible, unreliable or out-of-period evidence as explicit gaps rather than silently substituting convenient data.

Evidence to retain
Evidence request, access approvals, source catalogue, data dictionary references, limitations, request history and a controlled reference to sensitive sources.

Decision or scoring rule
Request an item only if its possible answers would change a finding, confidence, option, priority, guardrail or gate. Do not collect personal or confidential data “in case it is useful”.

Output and template
Value-path evidence register.

Acceptance gate
Proceed when each material assumption has an owner and a lawful evidence route; change the method when only a safer or less granular source is permitted; stop prohibited collection.

Leadership checkpoint
The sponsor reviews material access refusals and accepts the resulting decision limitation or removes the barrier.

Human control point
Qualified internal authorities approve sensitive collection, use and disclosure. In South Africa, the responsible party and its authorised privacy or information-governance owner must determine the lawful route under the Protection of Personal Information Act before an external party receives personal information. That route should address minimisation, secure handling, retention, disposal and appropriate operator controls; a qualified reviewer must determine the exact obligations (Protection of Personal Information Act 4 of 2013, Information Regulator POPIA resources).

Failure modes and safeguards
Failures include unrestricted data dumps, screenshots without source context, interview claims treated as facts and uncontrolled local copies. Safeguard with minimisation, access logging, source references and evidence classifications.

Change, stop or escalation condition
Escalate any material gap by its effect on the decision, not by the seniority of the owner. Stop access that breaches an authority or exposes unnecessary personal, client or secret data.

Handoff to the next step
Turn the authorised evidence questions into an observation, interview and walkthrough plan.

Step 04: Observe the market connection and the work

Purpose and decision served
Establish what customers, users and operating teams actually experience, rather than relying on management description alone.

Accountable owner
Audit lead, with the relevant customer, research or operational owner accountable for safe access.

Delegated lead and contributors
Researchers, analysts and process specialists may lead fieldwork. Frontline staff, customers or users, sales, service, fulfilment and support teams contribute where authorised.

Preconditions, inputs and access
Approved research and observation plan, lawful recruitment or access, consistent core questions, selected journeys or workflows, and evidence-capture controls.

Actions

1. Identify the market need, behaviour, expectation or condition the organisation intends to serve.
2. Review existing research and behavioural evidence before asking people to repeat what is already known.
3. Observe selected journeys, handoffs, queues, decisions, exceptions and workarounds from the participant’s perspective.
4. Interview accountable owners and operational representatives using the same core decision questions.
5. Trace material statements to a source, observation or follow-up request.
6. Capture counter-evidence, affected groups and conditions under which the observed pattern does not hold.

Evidence to retain
Research plan, consent or authority record where applicable, observation notes, interview record, journey or workflow traces, source links and redacted evidence references.

Decision or scoring rule
An interview statement remains a single-source statement until corroborated. An observed instance proves that the event occurred, not its prevalence. Prevalence remains REQUIRES VALIDATION without an appropriate sample or operating data.

Output and template
Discovery record linked by evidence ID to the value-path evidence register.

Acceptance gate
Proceed when every selected path has direct external or operating evidence, or an explicit gap accepted by the decision owner; otherwise validate or narrow the conclusion.

Leadership checkpoint
The sponsor reviews material differences between executive narrative and observed customer or operating reality without asking the field team to remove dissent.

Human control point
A qualified human approves research interpretation, protects participants and decides whether sensitive observations may be quoted or only summarised.

Failure modes and safeguards
Failures include convenience-only participants, leading questions, normalising workarounds and treating one example as a rate. Safeguard with consistent questions, counter-evidence and explicit sampling limits.

Change, stop or escalation condition
Pause or redesign research if participation is unsafe, coercive, unlawful or unlikely to answer the decision. Escalate evidence of immediate harm through the approved incident route.

Handoff to the next step
Provide classified observations and source references for value-path mapping.

Step 05: Map the value paths and handoffs

Purpose and decision served
Show how the selected market opportunity should travel from signal to outcome, and locate the handoffs where value may be getting stuck.

Accountable owner
Decision owner; the audit lead owns mapping integrity.

Delegated lead and contributors
Audit lead or service/process architect facilitates. Market, sales, service, operations, finance, data, product and technology owners validate only the nodes they own.

Preconditions, inputs and access
Classified discovery evidence, approved scope, process and journey artefacts, decision records, metric definitions and source references.

Actions

1. Select only the value paths material to the chartered decision.
2. For each path, name entry condition, next state, accountable owner, required signal, governing decision, operating action, customer consequence and outcome evidence.
3. Draw the handoffs between functions, systems, suppliers and decision forums.
4. Mark queues, exceptions, rework, rejected demand, lost signals, delayed decisions and unowned outcomes.
5. Attach an evidence ID and confidence status to every material node and connection.
6. Mark dependencies on another path without assuming that correlation proves causation.

Evidence to retain
Versioned Market Connection Map, node definitions, handoff owners, evidence links, unresolved questions and participant validation record.

Decision or scoring rule
A break is map-ready when the expected transition, observed condition, affected party, owner and evidence status are explicit. A blank node is an evidence gap, not permission to infer the missing process.

Output and template
Market Connection Map using the six-path structure in Section 1 and the value-path evidence register.

Acceptance gate
Proceed when every material handoff has an owner, evidence status and observable next state; validate any link whose absence could reverse the diagnosis.

Leadership checkpoint
Each executive owner confirms source accuracy for their path; the decision owner resolves conflicting ownership rather than allowing duplicate accountability.

Human control point
The audit lead decides whether a connection is evidenced, inferred or unknown. Diagram neatness must never override evidence status.

Failure modes and safeguards
Failures include a marketing-only funnel, a systems architecture without customer consequence, or a “happy path” that hides exceptions. Safeguard by starting with the affected market and mapping actual exception routes.

Change, stop or escalation condition
Split the map if distinct markets or outcomes require materially different logic. Escalate unowned handoffs that prevent a valid decision.

Handoff to the next step
Pass the versioned map and evidence IDs into formal reconciliation.

Step 06: Reconcile evidence and uncertainty

Purpose and decision served
Create one decision record that exposes conflicting definitions, source limitations and uncertainty before diagnosis.

Accountable owner
Audit lead; source owners remain accountable for internal source accuracy.

Delegated lead and contributors
Analysts reconcile records. Finance, data, operational and domain owners validate definitions, periods and exclusions.

Preconditions, inputs and access
Evidence register, Market Connection Map, source extracts or controlled access, metric definitions, interview and observation records.

Actions

1. Classify each material item as observed fact, corroborated interpretation, single-source statement, assumption, evidence gap or constraint.
2. Apply public claim status separately: VERIFIED, INFERRED, PROPOSED or REQUIRES VALIDATION.
3. Reconcile names, periods, populations, denominators, exclusions, currencies and timing across sources.
4. Document transformations and manual adjustments needed to reproduce a material figure.
5. Retain both sides of a dispute and state which decisions each definition would support.
6. Create an uncertainty statement for every material conclusion, including evidence that could change it.

Evidence to retain
Reconciliation log, metric definitions, calculation references, disputed-source record, uncertainty statements and sign-offs from source owners.

Decision or scoring rule
Evidence confidence is not a popularity vote. Use the most authoritative, directly relevant and reproducible source; where sources remain irreconcilable, narrow the claim and mark the decision effect.

Output and template
Reconciled value-path evidence register plus a decision-critical evidence summary.

Acceptance gate
Proceed if no unresolved gap can reasonably reverse the selected diagnosis without being visible to the decision owner; otherwise validate, defer or stop.

Leadership checkpoint
The decision owner accepts the stated uncertainty and commissions further validation only where it can change the decision.

Human control point
A named analyst and source owner approve each material definition and calculation. Automated reconciliation may identify differences but cannot decide their business meaning.

Failure modes and safeguards
Failures include choosing the most convenient dashboard, merging incompatible periods and converting uncertainty into a false average. Safeguard with source lineage, denominator checks and preserved dissent.

Change, stop or escalation condition
Escalate disputed material definitions to the accountable business and technical owners. Stop quantification when the baseline or population cannot be defended.

Handoff to the next step
Supply only reconciled evidence and explicit gaps to finding development.

Step 07: Diagnose the material conversion breaks

Purpose and decision served
Turn evidence into a small set of causal findings that leadership can act on without confusing symptoms with causes.

Accountable owner
Audit lead for synthesis; decision owner for acceptance or dispute.

Delegated lead and contributors
Cross-functional analysis team develops findings. Affected owners and the independent challenger test the reasoning.

Preconditions, inputs and access
Accepted Market Connection Map, reconciled evidence, uncertainty record, scope and decision criteria.

Actions

1. Write each finding as condition, evidence, consequence, cause or constraint, decision and measure.
2. Separate the visible symptom from its supported root cause and competing explanations.
3. Trace the finding to one or more value-path breaks and affected customers, users or stakeholders.
4. State potential revenue, margin, cost, capacity, retention, risk or investment exposure conditionally.
5. Identify evidence required before any exposure can be quantified.
6. Ask the independent challenger to construct the strongest credible alternative explanation.
7. Remove duplicate findings that describe the same underlying constraint.

Evidence to retain
Finding cards, causal reasoning, counter-evidence, alternative explanations, evidence IDs, owner responses and confidence classification.

Decision or scoring rule
A finding is decision-grade only when its condition and consequence are evidenced, its uncertainty is visible and it names a decision. A generic activity such as “improve analytics” or “use automation” is not a finding.

Output and template
Conversion finding ledger.

Acceptance gate
For each finding choose accept, validate, change, defer or reject; no unclassified finding enters prioritisation.

Leadership checkpoint
The decision owner reviews accepted and disputed findings, with dissent retained beside the evidence.

Human control point
The audit lead and independent challenger approve the causal wording. A model may summarise evidence but cannot declare causation or economic materiality.

Failure modes and safeguards
Failures include solution-shaped findings, inflated consequence, maturity scores without mechanism and too many priorities. Safeguard with the six-part finding card and counter-explanation review.

Change, stop or escalation condition
Return to evidence reconciliation if a material finding depends on incompatible sources. Stop a finding when its consequence is unsupported or outside scope.

Handoff to the next step
Use accepted findings to build intervention and no-action alternatives.

Step 08: Develop proportionate alternatives

Purpose and decision served
Give leadership credible choices instead of converting the audit into a sales path for one predetermined intervention.

Accountable owner
Decision owner.

Delegated lead and contributors
Audit lead coordinates. Process, policy, people, data, technology, procurement, finance and risk specialists contribute only to relevant options.

Preconditions, inputs and access
Accepted findings, material constraints, current capabilities, contracts, initiatives, risk appetite and baseline status.

Actions

1. Define the option to retain and monitor, including the exposure leadership accepts.
2. Test whether stopping, retiring or consolidating activity removes the constraint.
3. Test process, policy, role, training or decision-right changes before adding technology.
4. Consider configuration, integration, conventional software, automation, AI where intrinsic, a managed service or custom build only when justified.
5. Define a controlled proof for material uncertainty rather than disguising assumptions as an implementation plan.
6. For each option, record value mechanism, evidence strength, cost basis, time to learning, reversibility, dependencies, operating burden, risks and exit route.

Evidence to retain
Option cards, assumptions, source-backed cost inputs where available, dependency notes, risk review and reasons options were excluded.

Decision or scoring rule
Keep at least one credible no-build route unless evidence shows it cannot answer the decision. A technology option must explain why it is more appropriate than simplifying or stopping the work.

Output and template
Option comparison linked to the finding and priority ledger.

Acceptance gate
Proceed when each priority finding has at least two genuinely distinct routes or a documented reason only one lawful route remains; otherwise change or validate.

Leadership checkpoint
The sponsor confirms that retain, defer and stop are legitimate decisions and that sunk costs do not automatically determine the next investment.

Human control point
Relevant legal, security, privacy, employment, procurement and architecture authorities approve only the risk conclusions within their remit.

Failure modes and safeguards
Failures include vendor-led option sets, precise ROI without baseline, “do nothing” framed as absurd and hidden operating cost. Safeguard with normalised comparison fields and explicit attribution limits.

Change, stop or escalation condition
Escalate an option that transfers unacceptable harm or risk. Stop option development where the underlying finding has not passed its gate.

Handoff to the next step
Provide normalised options, risks and evidence confidence for prioritisation.

Step 09: Prioritise value, evidence, feasibility and risk

Purpose and decision served
Choose the smallest coherent portfolio that can address the most material breaks and produce useful evidence.

Accountable owner
Decision owner, with finance and affected benefit owners accountable for their definitions.

Delegated lead and contributors
Audit lead facilitates prioritisation. Finance, delivery, operations, data, technology and risk contributors validate dependencies and constraints.

Preconditions, inputs and access
Accepted findings, option cards, available baselines, dependency map, risk appetite, operating capacity and current portfolio commitments.

Actions

1. Assess market/customer value, business value, evidence strength, feasibility, time to learning, dependency readiness and risk on a clearly defined ordinal scale.
2. Record the evidence and judgement behind every rating.
3. Apply veto conditions for unlawful, unsafe, unowned or materially unmeasurable options.
4. Identify shared dependencies and sequence enabling work before dependent interventions.
5. Compare the proposed portfolio with retain, reduce-scope and stop scenarios.
6. Test whether the organisation has the operating capacity to deliver and own the selected work.
7. Record opportunity cost: which current or proposed work must be displaced.

Evidence to retain
Completed priority ledger, rating rationale, veto decisions, dependency map, capacity assumptions, finance review and dissent.

Use the controlled ordinal scale in the conversion finding ledger for every criterion: 0 = no usable evidence or not feasible, 1 = materially weak, 2 = limited, 3 = adequate for a bounded next gate, 4 = strong within the stated boundary, 5 = strong and independently corroborated. Record scale version ORD-1.0, criterion-specific anchor, rater, evidence IDs and approval authority in the rating-rationale field, using the Conversion Rating Scale Register. Ratings are non-compensating: a failed critical control or unresolved material guardrail blocks the option regardless of the total.

Decision or scoring rule
Do not add ratings into an automatic winner. Use the scale to expose trade-offs. A high-value option cannot outrank an unresolved material guardrail through arithmetic.

Output and template
Prioritised intervention portfolio in the conversion finding ledger.

Acceptance gate
Each option receives fund, test, enable first, defer, stop or retain and monitor, with named rationale and owner.

Leadership checkpoint
The decision owner accepts the portfolio, displaced work, dependency sequence and unresolved exposure before proof planning.

Human control point
Executives make the trade-off. The scoring method organises evidence; it does not possess investment authority.

Failure modes and safeguards
Failures include hidden weighting, priority inflation, ignoring capacity and selecting an attractive pilot with no production path. Safeguard with vetoes, dependency sequencing and explicit displaced work.

Change, stop or escalation condition
Re-score only when evidence or constraints change, not to produce a preferred ranking. Escalate material capacity, capital or risk conflicts to the authorised forum.

Handoff to the next step
Convert funded or test dispositions into bounded proof or implementation plans.

Step 10: Design the controlled proof or implementation plan

Purpose and decision served
Define the smallest responsible action that can test the causal mechanism or implement a sufficiently evidenced change.

Accountable owner
Named intervention owner; the executive sponsor owns the investment gate.

Delegated lead and contributors
Delivery lead coordinates. Customer, operations, finance, data, technology, security, privacy, legal and change contributors participate as required by the option.

Preconditions, inputs and access
Approved disposition, finding, baseline plan, target population, operating owner, material risks, dependencies and available capacity.

Actions

1. State the assumption, mechanism or operating change the intervention must prove.
2. Define scope, participants, exclusions, duration driver and evidence window without inventing a delivery promise.
3. Establish baseline, comparison method where appropriate, source, owner and known attribution limits.
4. Define delivery, adoption, operating, commercial-outcome and guardrail measures separately.
5. Set explicit proceed, change and stop thresholds before action begins; where a number is not yet defensible, make baseline establishment the first gate.
6. Define human approvals, exception routes, rollback or containment, support and evidence retention.
7. Specify acceptance artefacts, knowledge transfer and the next funding decision.

Evidence to retain
Proof or implementation charter, baseline, measurement contract, risk review, acceptance tests, rollback plan, owner acceptances and approval record.

Decision or scoring rule
Use a proof when a material assumption remains unresolved and can be tested safely. Implement only when evidence is sufficient for the risk and the operating owner accepts the change.

Output and template
Bounded action plan linked to the executive decision register.

Acceptance gate
Proceed only when baseline or baseline gate, owner, evidence source, acceptance test, guardrail, rollback and next decision are explicit; otherwise change, defer or stop.

Leadership checkpoint
The sponsor approves the maximum commitment and the evidence required before further funding or scale.

Human control point
Named authorities approve consequential customer, employee, financial, legal, privacy, security and production actions.

Failure modes and safeguards
Failures include demonstration theatre, success criteria set after results, a pilot with no owner and uncontrolled scope growth. Safeguard with pre-registered gates and bounded commitment.

Change, stop or escalation condition
Stop or contain when a guardrail is breached. Re-charter when the intervention changes the affected population, risk, cost basis or causal claim.

Handoff to the next step
Package the recommendation, alternatives, evidence and controlled plan for executive decision.

Step 11: Make and record the executive decision

Purpose and decision served
Turn the audit into an accountable choice rather than a presentation or unowned recommendation.

Accountable owner
Named decision owner.

Delegated lead and contributors
Audit lead facilitates the decision forum. Sponsor, finance, benefit owners, operating owners, risk authorities and dissenting owners attend where material.

Preconditions, inputs and access
Pre-read containing charter, accepted facts, disputed facts, findings, options, priorities, controlled plan, measurement contract and decision request.

Actions

1. Circulate the evidence summary early enough for fact correction, without reopening settled scope informally.
2. Resolve which facts are accepted, disputed or require further validation.
3. Compare the recommended route with no-action, lower-scope and stop alternatives.
4. Decide what to fund, change, test, defer, stop or scale.
5. Name the owner, resources, dependencies, guardrails and next review date for each approved action.
6. Record rejected options, dissent, conditions, assumptions and what evidence could reopen the decision.
7. Confirm the disposition of every material finding and current initiative affected by the decision.

Evidence to retain
Decision brief, attendance, source corrections, signed or otherwise traceable decision, dissent, conditions, owner acceptances and next gate.

Decision or scoring rule
Every recommendation receives one explicit disposition: proceed, validate, change, defer or stop. Silence and “noted” are not decisions.

Output and template
Executive decision register.

Acceptance gate
The audit decision is complete only when the decision owner records the disposition, reason, owner, evidence condition and review date.

Leadership checkpoint
This step is the leadership checkpoint: the authorised forum makes the decision and owns its consequences.

Human control point
Only the authorised human decision owner can accept risk, commit resources, stop work or approve scale.

Failure modes and safeguards
Failures include a polished presentation with no recorded choice, informal approval, missing dissent and automatic follow-on scope. Safeguard with the decision register completed during the forum.

Change, stop or escalation condition
Defer rather than imply approval when a material authority is absent. Escalate decisions beyond the forum’s mandate.

Handoff to the next step
Transfer each approved, deferred or stopped disposition and its evidence obligations to a named operating owner.

Step 12: Transfer operating ownership

Purpose and decision served
Make the organisation able to act, procure, monitor or stop without dependence on undocumented knowledge held by the audit team.

Accountable owner
Named operating owner for each disposition; sponsor remains accountable for unresolved cross-functional dependencies.

Delegated lead and contributors
Audit lead prepares the handover. Delivery, operations, finance, data, technology, risk, procurement and knowledge owners accept relevant artefacts.

Preconditions, inputs and access
Recorded executive decision, approved action plan, complete evidence references, measurement contract, owner list and controlled repository.

Actions

1. Assemble the charter, responsibility map, Market Connection Map, evidence register, findings, options, priority ledger, decision record and action plan.
2. Remove unnecessary working copies and transfer controlled source references, not uncontrolled sensitive payloads.
3. Walk operating owners through assumptions, unresolved gaps, failure modes, guardrails and escalation.
4. Confirm access, capability, support, budget authority and decision cadence needed to operate the next phase.
5. Record which knowledge has transferred, which specialist support remains temporary and what exit looks like.
6. Test whether another qualified person can reproduce the reasoning and locate each material source.

Evidence to retain
Handover index, artefact versions, access and retention record, owner acceptances, capability gaps, support boundaries and knowledge-transfer evidence.

Decision or scoring rule
Handover is accepted only when each approved action and measure has a business owner, source owner, next action, gate and escalation route.

Output and template
Executable audit pack plus the executive decision register.

Acceptance gate
Accept when operating owners can execute and explain the next gate; change when artefacts or access are incomplete; defer an action with no owner; stop unsupported scope.

Leadership checkpoint
The sponsor accepts any capability or dependency gap that remains after transfer and assigns its resolution.

Human control point
Operating owners personally accept accountability; an email distribution list or shared folder cannot accept ownership.

Failure modes and safeguards
Failures include report-only delivery, broken links, inaccessible sources, dependency on the auditor’s memory and ongoing supplier access without need. Safeguard with a handover test and least-privilege closure.

Change, stop or escalation condition
Do not close the audit while decision-critical artefacts, owners or access are missing. Escalate orphaned approved actions to the sponsor.

Handoff to the next step
Move accepted measures and gates into the organisation’s existing operating review cadence.

Step 13: Measure, review and decide whether to change, stop or scale

Purpose and decision served
Test whether the chosen action changed the named value-path transition without crossing its guardrails, and decide the next commitment.

Accountable owner
Benefit owner for the outcome; operating owner for delivery and adoption; source owner for measurement integrity.

Delegated lead and contributors
Analyst or measurement lead prepares the evidence. Finance, customer, operations, data, technology and risk owners interpret within their remit.

Preconditions, inputs and access
Approved measurement contract, established or scheduled baseline, intervention record, decision log, authoritative sources, guardrails and review forum.

Actions

1. Collect the agreed measures at the stated cadence with period, denominator, exclusions and data-quality status.
2. Separate delivery completion, operating adoption, customer or commercial outcome and guardrail evidence.
3. Compare with the baseline and any valid comparator; state confounders, time lag and attribution limits.
4. Review exceptions, affected groups, unintended consequences and operating burden.
5. Decide whether the causal mechanism is supported, contradicted or still unresolved.
6. Record continue, change, hold, stop or scale and the evidence needed for the next gate.
7. Update the Market Connection Map, finding and operating standard with validated learning.

Evidence to retain
Source extracts or controlled references, calculation record, review pack, data-quality notes, incidents, participant feedback, decision and updated assumptions.

Decision or scoring rule
Scale only when the intended outcome is observed with acceptable evidence, guardrails hold, operating ownership works and the conditions that produced the result can be reproduced. Delivery alone does not pass an outcome gate.

Output and template
Completed measurement contract and updated executive decision register.

Acceptance gate
At each review choose continue, change, hold, stop or scale; record the evidence, owner and next date.

Leadership checkpoint
The benefit owner and authorised investment forum approve further commitment or scale.

Human control point
Named leaders interpret commercial meaning and accept remaining uncertainty. Automated reports may calculate agreed measures but cannot approve continuation or scale.

Failure modes and safeguards
Failures include declaring success at launch, changing definitions after results, ignoring affected groups and scaling beyond validated conditions. Safeguard with stable metric contracts, guardrails and cohort or context boundaries.

Change, stop or escalation condition
Stop or contain on a material guardrail breach. Change the intervention if adoption exists without outcome. Revalidate if the market, process, data or operating conditions materially change.

Handoff to the next step
Close the audit when the decision has entered an owned cadence; feed validated learning into the next Assess, Transform, Operate or Scale gate as appropriate.

4. The Evidence & Measurement Checklist

Copy this checklist into the audit control record. Replace role labels with named people before execution. Review fields in the working assets are planning prompts rather than a default cadence: the actual review date must follow the decision, evidence window, risk and natural time to value.

Preflight and authority

• The audit charter contains one important decision, one named decision owner and one decision date. Evidence: approved audit charter. Owner: executive sponsor.
• The affected market or stakeholder and selected value paths are explicitly defined. Evidence: scope and value-path statement. Owner: decision owner.
• Scope, evidence period, exclusions, dependencies and acceptance criteria are approved. Evidence: approved audit charter. Owner: executive sponsor.
• Sponsor, audit lead, independent challenger, evidence owners and future operating owners are named. Evidence: responsibility map. Owner: executive sponsor.
• Conflicts, prior involvement and implementation interests are declared and mitigated. Evidence: conflict register and mitigation decision. Owner: executive sponsor.
• The final decision forum has authority to fund, change, test, defer, stop or scale the scoped work. Evidence: terms of reference or authority record. Owner: decision owner.

Evidence access and quality

• Every material assumption has an evidence question, owner, source and due date. Evidence: value-path evidence register. Owner: audit lead.
• Every requested item can change a finding, confidence, option, priority, guardrail or gate. Evidence: evidence-use field in the request. Owner: audit lead.
• Sensitive evidence has an approved access, minimisation, retention and disposal route. Evidence: access approval and handling record. Owner: information authority.
• Source period, population, denominator, exclusions and limitations are recorded for every material measure. Evidence: metric definition and source record. Owner: source owner.
• Interview statements and observed instances are not presented as prevalence without appropriate evidence. Evidence: evidence classification register. Owner: audit lead.
• Material source conflicts have a reconciliation record or an explicit unresolved disposition. Evidence: reconciliation log. Owner: business and source-system owners.
• Every public material claim is marked VERIFIED, INFERRED, PROPOSED or REQUIRES VALIDATION. Evidence: claim and proof review. Owner: proof owner.

Method execution

• Direct market, customer, user or stakeholder evidence is represented for every selected path or marked as a gap. Evidence: discovery record and Market Connection Map. Owner: research or customer owner.
• Actual workflows, handoffs, queues and exceptions have been observed or the observation limit is explicit. Evidence: observation record. Owner: operational owner.
• Every material map node has an owner, evidence status and observable next state. Evidence: versioned Market Connection Map. Owner: audit lead.
• Every finding states condition, evidence, consequence, cause or constraint, decision and measure. Evidence: finding cards. Owner: audit lead.
• Each material finding has been tested against a credible alternative explanation. Evidence: challenge record. Owner: independent challenger.
• Each priority issue includes retain, simplify, no-build or stop alternatives where lawful and credible. Evidence: option comparison. Owner: decision owner.
• Prioritisation records value, evidence, feasibility, learning speed, dependencies and risk without an automatic total score. Evidence: finding and priority ledger. Owner: decision owner.
• A controlled proof is used where a material causal assumption remains unresolved. Evidence: proof or implementation charter. Owner: intervention owner.

Governance, privacy, security and risk

• Legal, privacy, security, employment, financial and regulatory questions are routed to qualified authorities. Evidence: specialist review record. Owner: executive sponsor.
• The audit pack contains controlled references rather than unnecessary copies of personal, client or secret data. Evidence: information-handling review. Owner: information authority.
• Material risks have an owner, mitigation, guardrail, escalation route and decision date. Evidence: risk and dependency record. Owner: risk owner.
• No supplier or audit lead approves its own conflict, exception, legal conclusion or investment. Evidence: approval record. Owner: executive sponsor.
• Research and observation involving people have the required authority and protection. Evidence: approved research protocol and participation record. Owner: research owner.
• Immediate harm or control failure has been contained through the appropriate incident route. Evidence: controlled incident reference and containment decision. Owner: operational risk owner.
• Proof or implementation work has rollback, containment or exit conditions proportionate to the consequence of failure. Evidence: controlled action plan. Owner: intervention owner.

Deliverables and acceptance

• The audit charter and decision statement match the final scope. Evidence: version-controlled charter. Owner: audit lead.
• The Market Connection Map can be traced to evidence IDs and named owners. Evidence: map and value-path evidence register. Owner: audit lead.
• Accepted, disputed, deferred and rejected findings remain visible. Evidence: finding and priority ledger. Owner: decision owner.
• Option comparisons show assumptions, dependencies, operating burden, reversibility and material risk. Evidence: option cards. Owner: audit lead.
• The decision brief names the decision requested and does not imply unsupported outcomes. Evidence: proof-reviewed decision brief. Owner: proof owner.
• Another qualified person can reproduce the material reasoning and locate the controlled sources. Evidence: cold-reader handover test. Owner: operating owner.
• Every referenced template and download exists at its approved route. Evidence: route and asset check. Owner: editorial owner.

Measurement

• Each selected measure has a stable name, formula, unit, denominator and exclusions. Evidence: measurement contract. Owner: business and source owners.
• Each selected measure has a baseline and period or a dated baseline-establishment gate. Evidence: baseline record. Owner: benefit owner.
• Delivery, adoption, operating, commercial-outcome and guardrail evidence are reviewed separately. Evidence: review pack. Owner: benefit owner.
• Each measure names an authoritative source, business owner, technical owner where relevant and review cadence. Evidence: measurement contract. Owner: measurement lead.
• Proceed, change and stop thresholds were approved before the intervention produced results. Evidence: dated measurement contract approval. Owner: decision owner.
• Attribution limits, time lag, confounders and affected populations are stated. Evidence: measurement interpretation note. Owner: analyst and benefit owner.
• Metric-definition changes are versioned and do not silently rewrite the baseline. Evidence: metric change log. Owner: source owner.

Decision and handover

• Every material recommendation has a proceed, validate, change, defer or stop disposition. Evidence: decision register. Owner: decision owner.
• Every approved action has an operating owner, next action, resource authority and review date. Evidence: executive decision register. Owner: executive sponsor.
• Rejected options, dissent and conditions that could reopen the decision are retained. Evidence: decision record. Owner: decision owner.
• Sensitive working copies have been removed or transferred under an approved retention rule. Evidence: handover and disposal record. Owner: information authority.
• Operating owners have accepted artefacts, access, measures, guardrails and escalation routes. Evidence: handover acceptance. Owner: operating owner.
• Temporary specialist access and support have an explicit end or renewal decision. Evidence: access and support register. Owner: operating owner.

Review, change and stop controls

• Every approved intervention has a dated continue, change, hold, stop or scale review. Evidence: executive decision register. Owner: benefit owner.
• A material guardrail breach triggers containment and human review. Evidence: incident and decision record. Owner: risk owner.
• Market, customer, workflow, data or operating changes trigger revalidation when they affect the causal claim. Evidence: change assessment. Owner: operating owner.
• Scale is conditional on outcome, guardrail, operability and repeatability evidence. Evidence: scale-gate decision. Owner: investment forum.
• Stopped and deferred work records its reason, accepted exposure and restart condition. Evidence: decision register. Owner: decision owner.
• Validated learning has been transferred into the map, metric definitions and operating method. Evidence: version history and review record. Owner: knowledge owner.
• The audit has a named review owner and review date even when no intervention proceeds. Evidence: guide and engagement review record. Owner: editorial or audit owner.

Topic-specific measurement contract

Do not attempt to calculate one universal “whole-business conversion rate”. Select the smallest set of measures that can answer the chartered decision. Define the named transition and its denominator before collecting post-intervention results.

Measure A: Decision-grade evidence coverage

Measure B: Material signal-to-decision elapsed time

Measure C: Approved intervention gate completion

Measure D: Operating adoption in the scoped work

Measure E: Named value-path transition rate

Measure F: Material guardrail breach count

Evidence classifications used in this guide

For engagement evidence, retain the more specific working classes: observed fact, corroborated interpretation, single-source statement, assumption, evidence gap and constraint. The public claim classification and the engagement-evidence class answer different questions; store both where material.

Sources and further reading

• Abrasim Whole-Business Conversion Rate: APPROVED Abrasim strategy under AOS-GOV-DEC-003. Applying its six value paths as the diagnostic method in this guide is PROPOSED / REQUIRES VALIDATION. Neither status is external evidence that a universal rate exists or proof of commercial outcome.
• ISO 19011:2026: Guidelines for auditing management systems: VERIFIED current official source. It informs the disciplines of evidence, fair presentation, confidentiality, due care, independence and risk-based auditing. This business diagnostic does not claim ISO conformity.
• The IIA: Global Internal Audit Standards: VERIFIED current professional source. It informs governance, evidence and independence thinking. This guide is not a replacement for an organisation’s internal-audit mandate and does not claim IIA conformance.
• IAASB: ISAE 3000 (Revised): VERIFIED professional standard source. It is included to make the boundary visible: this decision-support audit is not represented as an assurance engagement under that standard.
• GOV.UK Service Manual: How the discovery phase works: VERIFIED public guidance. It supports understanding the problem, users, constraints, alternatives and stop route before build. Its public-service context must be adapted rather than treated as a universal mandate.
• GOV.UK Service Manual: Measuring the benefits of your service: VERIFIED public guidance. It supports early baselining and explicit benefits logic. Organisational finance owners must approve the definitions used here.
• Protection of Personal Information Act 4 of 2013: VERIFIED official South African statutory source. Application to a specific evidence plan requires the organisation’s information officer or qualified legal/privacy reviewer.
• Information Regulator: POPIA resources: VERIFIED official regulatory resource. Consult the current regulator material and qualified organisational authority before granting external access to personal information.

The Leadership Audit Working Pack remains the shared governance layer. The Whole-Business Conversion Audit: An Executive Standard for Finding Where Market Opportunity Stops Becoming Value downloads add the value-path, finding, decision and measurement fields needed for this whole-business method.