Worked examples

We tell you what your data can and cannot support.

Working simulations built on synthetic data, each one a method you can watch run. No client is named in any of them, and no client data is in any of them.

8Open now
0In design
0Client records used
What a number is actually made of
One estate, four readings
Count everything asserted or stale: 100 per cent100As a governance tool usually reports it: 87 per cent87Evidence only, over what was assessed: 54 per cent54Evidence only, over the whole estate: 39 per cent39
COV-001Open

What is your compliance score made of?

One control estate of 164 controls, read four defensible ways. All four are arguably correct and they are 61 points apart. The gap is the point.

164 controls · fixed seed · 4 readings
Read it →Name and email to open
Floor, measured, ceiling
FLOORFloor. Only what has actually been assessed. Everything else counted as zero.MEASUREDMeasured. The assessed subset, always stated with its own coverage.Ceiling. Unassessed scenarios imputed from like for like peers. Directional, and never added to the floor.hatched is imputed, not counted
RSK-002Open

Floor, measured, ceiling

A loss scenario register that refuses to add a ceiling to a floor and present the result as one number. What was never assessed stays visible instead of counting as zero.

6 business units · 14 scenarios · fixed seed
Read it →Name and email to open
Dimension availability
spend, owned by Finance: 97 per cent availablespendcritical, owned by the service owner: 62 per cent availablecriticalsensitive, owned by Privacy: 55 per cent availablesensitiveaccess, owned by IT: 44 per cent availableaccessregulatory, owned by Compliance: 31 per cent availableregulatorysubstitute, owned by nobody: 22 per cent availablesubstitute
SUP-003Open

A tier is a claim about your data

Supplier tiering across six dimensions, where availability tracks who owns the data rather than what matters. Spend is 97 per cent complete because Finance holds it. Substitutability is 22 per cent because nobody owns it at all.

400 suppliers · 6 dimensions · fixed seed
Read it →Name and email to open
Date vs consequence
10 by date. The top ten by days remaining. This is the list an expiry report produces.10 by date10 by consequence. The top ten by what stops working when it lapses. None of these is close to expiring.10 by consequence0 appear in both
EOL-004Open

What expires, and what it opens

An estate of 240 things that expire, ordered by date and ordered by what stops working when they lapse. The top ten of each share nothing at all.

240 assets · fixed seed · 0 shared in the top ten
Read it →Name and email to open
Six definitions
unlinked, owned by no person record behind the login: 45 per cent availableunlinkedidle 90d, owned by the default in most tools: 27 per cent availableidle 90dno owner, owned by nobody is accountable for it: 27 per cent availableno owneridle 180d, owned by the same rule, retuned: 18 per cent availableidle 180dunneeded, owned by idle and nothing depends on it: 15 per cent availableunneededleft, owned by the named owner is no longer employed: 14 per cent availableleft
IAM-005Open

Accounts nobody owns

Six defensible definitions of orphaned, run against the same 1,400 accounts. The answer moves from 203 to 632 depending only on which sentence you meant.

1,400 accounts · 6 definitions · fixed seed
Read it →Name and email to open
What each audience sees
Sees every risk, ordered by money. Five of them carry half the exposure.: 100 per cent100Sees every risk, ordered by controls remaining. Money is absent entirely.: 100 per cent100Sees only stale reviews, absent owners and missing dates. Size of risk is absent.: 73 per cent73Sees reportable domains only, and counts accepted risks as open.: 36 per cent36
BRD-006Open

One dataset, four audiences

One risk register rendered for a board, an auditor, an engineer and a regulator. Each is correct, each is lossy, and their priority lists barely overlap.

64 risks · 4 renderings · fixed seed
Read it →Name and email to open
From engagements, shown with permission and identity removed
Signal against threshold
thresholdWeek 7. The signal crosses the intervention threshold. The term is not over, and the outcome effectively is.wk 1wk 12
EIS-001Open

Catching a student before the term does

Early intervention signals across a synthetic cohort. Education on the surface, and the shape is any early warning problem where acting late costs more than acting wrong.

184 students · 12 weeks · fixed seed
Read it →Name and email to open
Cases against the clock
61 comfortable. More than 30 days to the statutory date.61 comfortable38 close. Between 15 and 30 days. The band where intervention still works.38 close11 late. Past the statutory date.11 lateThe queue is not the constraint. The clock is.
VAMS-002Open

Casework with a deadline attached

Admissions and visa casework sorted by time to statutory date rather than by arrival. A queue ordered by age answers the wrong question.

110 cases · statutory clock · fixed seed
Read it →Name and email to open
Access is granted per person.

Each simulation opens behind a gate and carries a watermark with the name of whoever opened it. Tell us which one is relevant and we will open it for you.

Ask for access →