Business reference model

Capability heatmap

What the regulator must be able to do across Plan, Monitor, Enforce and Engage, with current and target maturity. Gaps are where uplift goes; enablers name the products, agents and data that lift each capability.

1 Initial2 Repeatable3 Defined4 Managed5 Optimising

Plan

3 capabilities

  • C-01 Harm identification and outcome measurement

    Harm register live with indicators; series still quarterly.

    Enablers: Harm register, Outcome indicators

    3
    5
  • C-02 Scheme design and intervention mix

    Schemes documented; mix not yet tested against outcomes.

    Enablers: Scheme model, Consultation

    2
    4
  • C-03 Legislative alignment and product taxonomy

    Every product linked to its provision and rung.

    Enablers: Product catalogue, Delegations instrument

    4
    5

Monitor

3 capabilities

  • C-04 Signal intake and triage

    All sources triaged by agent within minutes; media source manual.

    Enablers: Triage agent, Telemetry feed, WIM data match

    4
    5
  • C-05 Risk assessment and prioritisation

    Likelihood x impact with history; predictive model not yet in use.

    Enablers: Assessment agent, Entity risk score

    3
    5
  • C-06 Planned and responsive inspection

    Mobile and offline capture in pilot on two sites.

    Enablers: Inspection product, Field capture

    3
    4

Enforce

3 capabilities

  • C-07 Proportionate decision-making

    Every decision records authority, reasons, conflicts and review rights.

    Enablers: Decision gate, Proportionality check

    4
    5
  • C-08 Investigation and prosecution

    Brief of evidence templates; disclosure management manual.

    Enablers: Investigation product, Evidence chain

    2
    4
  • C-09 Review, appeal and oversight

    Internal review live; Ombudsman read access to the chain being negotiated.

    Enablers: Review model, Audit chain

    3
    5

Engage

3 capabilities

  • C-10 Stakeholder engagement and consultation

    Consultations run; synthesis manual.

    Enablers: Consultation model

    2
    4
  • C-11 Public transparency

    Harm indicators not yet published on a schedule.

    Enablers: Published indicators

    2
    4
  • C-12 Continuous improvement (evaluate against harms)

    Risk-control problems reviewed quarterly; scheme reviews ad hoc.

    Enablers: Problem model, Scheme review

    2
    5