Strategic and operational planning

Making the board’s decisions stick.

A board agrees a direction. Six months later the work is being done exactly as it was before, to a standard that has never been written down. Closing that gap is a job in its own right, and it takes proper governance and a clear idea of what good work looks like.

01 / What I see

Why nothing changed.

Four things I keep running into with boards and the people below them. My own view from the work, not research, and it turns up in every sector and at every size of business.

01

The decision was minuted and that was the end of it

A direction is agreed and recorded. It is never converted into a named owner, a date and a change to how work is done, so six months later the operation is running exactly as it was.

02

Risk appetite exists as a sentence

The board has agreed it is cautious on safety and willing to take commercial risk. The people below them cannot act on that, because it was never turned into thresholds, or into the decisions that sit above each one.

03

Authority is clear until it is tested

Who can commit money, sign a contract, stop a job, or speak to a regulator. Written down in one place, assumed in another, and contradicted in a third. The gap shows up on the day it matters most.

04

Assurance arrives as a stack of documents

The board receives reports and has no way of telling which parts are evidenced, which are asserted by the people with an interest in the answer, and which were true two years ago.

02 / The work

Understanding comes first.

I start by working out what applies to you, what you are trying to do and how much risk you are prepared to accept, before I recommend anything. Where it goes after that depends on what I find. Some jobs stop there, because that was the whole question.

01

Understanding the position

What applies to you, what you are trying to achieve, and how much risk the board is genuinely prepared to accept in each area. Done by listening. No questionnaire goes out.

Regulatory exposure and the obligations that come with it
Objectives as the board states them, and as the operation understands them
Risk appetite turned into thresholds people can act on
An honest account of where the organisation stands today
02

Governance and authority

Who decides what, up to what limit, and what happens when the answer is above them. Settled on a quiet afternoon, long before anyone needs it.

Decision rights and delegated authority, written down and agreed
Escalation routes, including who deputises and what they may commit
Committee and meeting structure that earns the time it takes
Board reporting that separates what is known from what is assumed, and flags what is overdue
03

Operating framework and quality

The stage that decides whether anything changes. Processes documented and repeatable, with named owners and a definition of what good looks like, so the way of working and the standard both survive the people who agreed them.

An operating framework written around how the business actually runs
Named owners, so accountability survives staff turnover
An enterprise risk framework and a register the board will read
Quality objectives drawn from the business objectives, with measures behind them
Built so it still works when the business is twice the size
04

Assurance

What gives the board confidence, where that confidence comes from, and how much of it is independent of the people doing the work.

An assurance map, showing each obligation and what evidences it
Where you are relying on a team marking their own work
What the board should be asking for, and how often
Handover, so the organisation runs this without me
03 / Quality

Quality is a board matter.

Quality gets treated as something the delivery team owns, and it ends up meaning whatever each person thinks it means. At board level it is a straightforward question: what does good look like here, how would we know, and what happens when it slips.

Answering that properly is worth more than a certificate, and it is the work a certificate is meant to stand for. It belongs in the planning, whether or not you ever go near ISO 9001.

Defining good

Quality objectives that come from the business objectives, rather than from a template
Measures that tell you something before the customer does
An agreed standard for the work itself, written where the people doing it will see it
Supplier quality held to the same standard you hold yourselves to

What happens when it slips

Complaints and customer feedback treated as data rather than as bad news
Corrective action that reaches the cause and then closes
Improvement that is actually managed, with owners and dates against it
A route for people to say the standard is slipping, and evidence that it was acted on

Where you do want the certificate, this work is what an ISO 9001 system is built on. That route is set out on the ISO management systems page.

04 / Ways to work with me

How to bring me in.

Some boards have one question they want answered properly. Some have a change coming that needs designing and seeing through. Some want this capability in the room every month without adding a director to the payroll.

Advisory

One question, answered

A short piece of work against a specific question. What applies to us now. Whether our governance would survive scrutiny. What a buyer or a funder would find if they looked.

Scoped and quoted against the question, with a date on it
A written answer your board can act on
A recommendation, with my reasoning in the open
Engagement

A defined piece of work

Designing a change and seeing it through: a new structure, a move into a regulated market, growth that has outrun the way things are done. Scoped and quoted as a package.

Understanding, governance, operating framework and assurance
Implementation support while it beds in
Handover, because a way of working that needs me is a failure
Ongoing

Fractional director support

I hold this directly for a handful of organisations, a couple of days a month, across risk, safety, security, quality and compliance. In the room for the decisions, and doing the work between them.

Director-level input without a director-level salary
Board papers and risk reporting arrive without being chased
A limited number of these at any time, by design
05 / Where this comes from

Both ends of the scale.

In government, decisions about security, resilience and risk have consequences at a national level. I work equally with growing organisations that simply need things done properly.

That background spans security governance and leadership in Westminster, explosives safety and risk management across Defence estates, and periods holding delegated authority in Government. A large part of my work now is with organisations delivering into Defence and Government.

I bring that experience into every assignment, and leave the bureaucracy behind. Even if the scale changes, the standard does not.

06 / Who it suits
Boards who have agreed a direction and watched the operation stay where it was
Organisations going through structural change, acquisition or fast growth
Suppliers to Defence or Government finding the assurance demands heavier than they expected
Organisations whose regulatory exposure has moved and who are unsure what now applies
Organisations whose quality problems keep being treated as people problems
Organisations where one person holds the whole picture, and the rest of the business knows it

Tell me what the board is stuck on.

All conversations are treated as strictly confidential. Often the first useful thing is an outsider saying plainly what the position is.

Call 0333 335 6730 Email Ross
© 2026 Ross Macdonald Consultancy Ltd · Company No. SC848204
Home ISO management systems Business continuity Safety and security Privacy notice