Architecture Lab · Management systems

One management system. Different decision lenses.

Enterprise risk, projects, operations, management systems and executive reporting should not create separate versions of reality. Different views are useful. Different facts are not.

Reference architecture · Illustrative structure · Not a client system

Information fragmentation becomes decision fragmentation.

A mature organization can have good individual systems and still have weak management visibility if those systems meet only in presentation slides. Consider one material issue touching an operating process, a capital project, budget, HSE exposure and a strategic objective. Each function may describe it correctly and still leave management without one coherent decision.

The architecture should support different lenses without creating different realities.

What has to stay connected

The technology can vary. What matters is that authority, management information, operating domains, workflow, data and AI support do not drift into separate versions of the same issue.

Authority

Governance and decision rights

Board, executive and delegated authorities; escalation rules; approvals; tolerances; acceptance and commitment records.

Management view

Management information

Forecasts, KPI and KRI logic, thresholds, scenarios, exceptions and decisions due.

Domains

Management domains

Enterprise risk, portfolios and projects, operations, finance, HSE, IMS, actions and management review.

Workflow

Workflow and control

Ownership, states, approvals, evidence requirements, escalation, closure criteria and follow-up.

Data & access

Shared records, controlled access

Shared dimensions, source records, classifications, role scope and permitted actions.

AI support

AI-assisted interpretation

Synthesis, exception detection and review support inside explicit human accountability.

One issue through the system · Synthetic scenario

A pump problem does not stay a maintenance problem for long.

A critical pump begins showing repeated vibration excursions. Operations sees reliability pressure. The project team sees a commissioning dependency. Risk sees increased exposure. Finance sees a possible outage cost. None of those descriptions is wrong; the management problem begins when they cannot be reconciled into one decision.

Evidence: repeated vibration excursions; inspection due.

Management consequence: commissioning window and production reliability may collide.

Decision due: inspect now, defer, or change the operating/project plan.

Authority: named accountable owner with an explicit latest useful decision date.

The useful test is not whether every function has logged the issue. It is whether management can see the same issue, understand what changed, know who can decide, and later verify whether the decision worked.

Illustrative decision record

Decision: inspect during the protected window; move the dependent commissioning activity rather than carry an unverified reliability assumption into start-up.

Why now: the inspection window closes before the next routine review. Waiting preserves the schedule on paper while reducing the time left to respond.

Reopen if: condition-monitoring evidence materially improves, the inspection scope changes, or the dependency can be removed without transferring the exposure elsewhere.

Next evidence: inspection finding, revised commissioning forecast, residual reliability exposure and confirmation that displaced work has an accountable owner.

Integration is not a larger dashboard. It is one decision that can be traced backward to evidence and forward to commitment and result.

The enterprise risk layer

Risk should not be a standalone register attached to the side of the management system. A useful enterprise risk architecture connects exposure to objectives, controls, evidence, indicators, decision rights, actions and review points.

  • Exposure: what could materially affect an objective, asset, project or operating process, and through which drivers.
  • Control: what is intended to change likelihood, consequence or detectability, with evidence of effectiveness.
  • Signal: indicators, forecasts, events and exceptions that change confidence in the current position.
  • Decision: who can accept, mitigate, transfer, escalate or tolerate the exposure, and under what conditions.
  • Commitment: action, owner, due date, evidence requirement and review trigger tied to the decision.

Role-based lenses

A common model does not mean one dashboard for everybody. It means each role receives the depth it needs while the underlying records remain governed and traceable.

Board

Strategic exposure and commitments

Major commitments, decision exceptions, portfolio pressure and unresolved management actions.

Executives

Cross-functional management position

Forecast confidence, enterprise risk movement, decisions due and management-review outcomes.

Functions & assets

Operating evidence and local action

Operational process, control effectiveness, project interfaces, local actions and evidence behind executive signals.

PMO, risk & analysts

Traceability underneath the summary

Source records, data quality, workflow state, dependencies, assumptions and classifications.

Access is part of the architecture

A credible system distinguishes what a user may see and what they may do.

Access = role × organizational scope × data classification × allowed action.

This can drive page access, row-level security, object or field restrictions, and permissions such as view, comment, create, edit, assign, approve, escalate and close.

Questions I would use in review

I would not start by asking whether every module is complete. I would take one important issue and follow it through the system. Where the trail breaks is usually more informative than another maturity score.

  • Can an executive signal be traced to the operational, risk or project evidence that supports it?
  • Can a material exposure be tied to a decision owner, decision date and explicit management commitment?
  • Can control effectiveness be supported by evidence instead of a status label alone?
  • Can management see whether an action changed the exposure, not merely whether the task was completed?
  • Can different roles see the right depth without breaking the common model underneath?

Where AI fits

AI can compare review cycles, summarize evidence, detect inconsistent signals, prepare management-review drafts and surface overdue decisions. It becomes useful after definitions, data ownership, workflow and decision rights are clear.

Otherwise it produces polished ambiguity faster.