How and why decisions are made, and with what oversight, is essential to the fabric of every organisation yet rarely optimised. Internal requirements often introduce unnecessary bureaucracy and inefficiencies, going beyond what is needed to effectively manage risk.