Retained SGaaS: Continuous Adversarial Governance Challenge

What Arrives, and When

Three outputs run on the retainer, each on its own cadence.

Governance Pulse Reports. A written read of the governance environment between meetings, covering what has shifted since the last board pack, which risks are moving, and where the information reaching directors has gone stale. Delivered on a set rhythm, so the board is not relying on the meeting cycle to find out.

Board Challenge Memos. A written adversarial brief ahead of each significant decision, setting out the assumptions the decision rests on, the evidence behind each, and the conditions under which each fails. Directors record their own position privately before the memo is circulated, so it lands against views each director has already committed to on paper. The mechanics of that sequence are set out on the Adversarial Methodology page.

Pre-Mortem Diagnostics™ and Risk Simulation Labs™. Booked at defined intervals and ahead of strategic inflections. Because the principal already holds the institutional context, these run without the scoping period a cold engagement needs.

Working Alongside Your Existing Functions

The principal sits outside the reporting lines of the CRO, internal audit and compliance, and reads the same material they do. Board papers, risk reports, audit findings, committee minutes. The principal attends governance committee meetings as an observer, under a challenge mandate defined at the start of the engagement so the remit is settled before the first disagreement.

Nothing here duplicates the second and third lines. Those functions report on whether controls operate. The principal tests whether the architecture around them is producing the outcomes the board is relying on. In tone the relationship is collaborative; in function it is adversarial.

What the Board Holds at Year End

A retained year leaves a documented trail: the Pulse Reports, the Challenge Memos and the pre-deliberation records behind each material decision, plus the minuted committee exchanges they prompted.

That trail is what the regulatory asks draw on. An audit committee chair signing a Provision 29 declaration needs evidence the board tested control effectiveness through the year, not a statement assembled in February. A senior manager under SM&CR arguing reasonable steps needs a dated record of independent challenge they can point to. Both are built across twelve months or they are not built at all.

Why a Retainer

A project ends when the report lands, and the institutional knowledge leaves with the team that wrote it. A retainer keeps it in the building. The principal who read last quarter’s board pack reads this one and notices what changed, and the commercial incentive sits on whether governance is better in three years, not on how many deliverables were shipped this quarter.

Commercial Structure

Retained SGaaS is delivered on an annual retainer, structured to provide continuity across board cycles, with quarterly review points to recalibrate scope as the organisation’s risk profile evolves.

The Progression Path

For organisations where the governance challenge requires permanent, structurally embedded presence at board level, the natural evolution is Retained → Embedded SGaaS (T3). The trust and institutional knowledge accumulated through the Retained relationship is what makes Embedded effective. For PE portfolio companies approaching exit, the path is typically Retained → Pre-Exit SGaaS (T4), with full continuity of engagement.