SUSTAIN

So the operating model stays alive, and compliance does not gather dust.

Two variants. Operating Model SUSTAIN protects the operating model from drift. Compliance SUSTAIN, the audit-readiness subscription, turns the annual audit into a quiet event.

Book a scoping call Back to services →
Two variants

One model. Two shapes.

Which shape you need depends on what you want to keep alive, operating model or compliance readiness.

Variant

Operating Model Custodianship

After TRANSFORM or SCALE · rolling annual agreement.

You have a new operating model: redesigned processes, clear roles, documented decision rights. Now comes the part most consulting engagements skip: keeping the whole thing load-bearing in day-to-day operations.

We watch how the model is actually lived, adjust where it rubs, and keep the documentation from decaying within six months. The goal: in twelve months your team carries the model on its own.

What you get
  • Quarterly process reviews comparing documented model vs. reality
  • Living process and role documentation
  • Friction log with prioritised recommendations
  • Defined sparring allowance for operational questions
Variant

Compliance Custodianship

Ongoing compliance programme (ISO, SOC 2, NIS2, DORA, FINMA) · rolling annual agreement.

Between audits, discipline fades. A few months before the audit, panic sets in. We keep your readiness posture at level year-round, structured reviews, continuous evidence curation, clear escalation points when something slips.

You don't need prior work with us. We also take on custodianship of programmes someone else set up, provided the foundation is solid.

What you get
  • Quarterly readiness reviews against your framework
  • Evidence curation, maintained continuously, not scrambled for retroactively
  • Deviation and remediation register
  • Audit accompaniment including findings tracking
Monthly rhythm

Four weeks. One complete cycle.

Not a retainer in case something happens. A predictable rhythm that keeps the map alive.

W1

Check-in

  • Changes since last month
  • New roles, tools, risks
W2

Update

  • Revise process maps
  • Refresh evidence
W3

Review

  • With process owners
  • Obtain sign-off
W4

Publish

  • Changelog to stakeholders
  • Control board updated
Scope

What is in. What is not.

INCLUDED
  • Keep process maps current
  • Adjust RACI on reorgs
  • Refresh evidence pack annually
  • Update control board monthly
  • Absorb new tools and vendors
  • One shadow day per quarter
NOT INCLUDED
  • Project work (QUALIFY, TRANSFORM, SCALE, separately)
  • Tool implementation
  • Round-the-clock incident response
  • Interim management or a line role
Deliverables

Alive. Not archived.

Two artefacts produced every month, not as box-ticking, but as working material for your team.

Monthly changelog

What changed in the operating model or compliance posture this month, traceable for stakeholders, auditors, and the board.

Current process maps

The map your team actually uses, not the PDF in the project folder. Revised monthly, signed off quarterly.

What comes next

What typically follows

SUSTAIN runs as an annual agreement. After twelve months we decide together what's next.

Renew or end

After twelve months: end the agreement because your team carries the model. Or renew, because you still want the outside perspective.

Shift into SCALE

If the custodianship year surfaces a bigger rebuild, a Foundation sprint, a remediation programme, an integration.

To SCALE →

Add Fractional CIO

When technology decisions move front-of-stage: ERP, cloud migration, AI roadmap, vendor governance.

To Fractional CIO →

Does this sound like your situation?

A 30-minute scoping call tells you whether we're the right fit, and if we are, what the first step looks like.

Book a scoping call Or browse our proof of work first →