The Four-Tier Architecture
SGaaS is delivered through a four-tier architecture — Diagnostic, Retained, Embedded and Pre-Exit — matched to an organisation's governance maturity. This chapter describes each tier, what it provides, and how boards enter and progress through the model.
SGaaS operates through four tiers, each serving a different organisational entry point and building toward a natural progression path. The delivery architecture is integral to the governance proposition.
The structural defects this paper has identified cannot be addressed by a methodology alone. They require a delivery model that ensures the methodology is applied continuously, that institutional knowledge accumulates over time, and that the engagement deepens as the organisation’s governance maturity develops.
The four tiers (Diagnostic, Retained, Embedded, and Pre-Exit) provide structured entry points for different organisational needs and a natural progression path from initial assessment to deep, board-level governance partnership.
Tier 1: Diagnostic GaaS
Diagnostic GaaS Purpose: A structured adversarial assessment of the organisation’s governance architecture, identifying structural defects, value gaps, and capability shortfalls.
Duration: Typically 4–8 weeks.
Entry point: The low-risk starting point for organisations that recognise the governance gap but want evidence before committing to ongoing engagement.
Who it serves. The Diagnostic tier is designed for organisations at a governance inflection point. Typical clients include a new chair or CEO seeking to understand the governance environment they have inherited, a board responding to a near-miss or regulatory finding, a private equity sponsor assessing governance readiness across a portfolio, and an audit committee that senses a gap between what it receives and what it needs.
What it delivers. The Diagnostic produces a Governance Architecture Assessment, a structured, adversarial evaluation of the organisation’s governance framework. It examines the quality and independence of board-level decision-making, the effectiveness of the Three Lines Model as operationally implemented, the organisation’s capacity for institutionalised challenge, and the gap between governance aspiration and governance reality.
The assessment is deliberately adversarial. Unlike a conventional governance review, which typically evaluates compliance with a code or framework, the Diagnostic asks whether this governance architecture is capable of surfacing the information the board needs to prevent catastrophic failure. If not, where are the structural weaknesses, and what would it take to address them?
How it integrates. The Diagnostic operates alongside existing governance functions. It does not replicate internal audit’s work or duplicate the risk function’s assessments. It assesses the architecture within which those functions operate, asking whether the board is receiving what it needs, whether the lines are coordinated, whether challenge is present or absent, and whether the governance framework is designed for the risks the organisation actually faces.
Commercial structure. The Diagnostic is delivered on a fixed-fee basis. It is designed to be commercially accessible, with a defined scope, a defined timeline, and a defined deliverable. For the client, it is an investment in governance intelligence. For the SGaaS practice, it is the foundation of the institutional knowledge that makes retained engagement valuable.
Tier 2: Retained GaaS
Retained GaaS Purpose: Continuous, adversarial governance challenge delivered on a retained basis across board cycles.
Duration: Ongoing; typically engaged on annual retainer with quarterly review points.
Entry point: The core SGaaS offering for organisations committed to closing the governance value gap on a sustained basis.
Who it serves. The Retained tier serves organisations where governance is a strategic priority and the cost of failure is consequential. Typical clients include regulated financial institutions, mid-market companies with complex risk profiles, organisations navigating strategic transformation, and boards that have completed a Diagnostic and want to act on its findings.
What it delivers. The Retained tier provides three categories of output, delivered on a continuous cycle:
Governance Pulse Reports: periodic assessments of the governance environment, identifying emerging risks, shifting dynamics, and areas where the board’s information may be incomplete or stale. These reports provide the continuous governance intelligence that bridges the gap between board meetings.
Board Challenge Memos: structured adversarial briefs prepared ahead of significant board decisions, delivered through the forced deliberation protocol described in Section 9. Before the memo is presented, each director independently submits an anonymous pre-deliberation assessment, recording their confidence in the decision’s key assumptions and the risks they consider most material. The principal then presents the Challenge Memo alongside the aggregated director assessments, revealing where prior confidence aligns with the adversarial findings and where it diverges. This protocol ensures that directors engage cognitively with the decision before receiving the adversarial analysis, preventing the passive consumption that would undermine the decision hygiene the methodology depends on.
Pre-Mortem Diagnostics and Risk Simulation Labs: deployed at defined intervals or ahead of strategic inflections, as described in Section 9. The retained relationship ensures that these exercises are calibrated to the organisation’s specific context, informed by cumulative institutional knowledge, and connected to the ongoing governance narrative rather than conducted as isolated events.
How it integrates. The SGaaS principal operates alongside the CRO, head of internal audit, and compliance leadership. The principal attends governance committee meetings as an observer with a defined challenge mandate. They have access to board papers, risk reports, and audit findings, not to duplicate the work of internal functions, but to assess whether the governance architecture is producing the outcomes those functions are designed to deliver. The relationship is collaborative in tone and adversarial in function.
Commercial structure. The Retained tier is delivered on an annual retainer, structured to provide continuity across board cycles. The retainer model is essential to the governance proposition. It eliminates the episodic engagement problem that characterises project-based advisory and aligns the commercial incentive with sustained governance improvement rather than with discrete project deliverables.
For senior managers operating under SM&CR or equivalent personal accountability regimes, the Retained tier provides documented, continuous, independent governance challenge, the evidence of “reasonable steps” that strengthens their personal defence. For boards facing Provision 29’s declaration requirement, it provides the ongoing evidence base to support annual statements on control effectiveness.
Tier 3: Embedded GaaS
Embedded GaaS Purpose: Permanent integration of the SGaaS principal into the organisation’s governance architecture as an Independent Board Observer or Mandated Advisor, with contractual authority to challenge.
Duration: Ongoing; typically multi-year commitment.
Entry point: For organisations where the governance challenge function requires the permanence, visibility, and access that comes with a standing board-level presence.
Who it serves. The Embedded tier serves organisations where the governance challenge is significant enough to require a permanent, structurally embedded function with defined access and contractual challenge authority. Typical contexts include organisations navigating major transformation (merger integration, business model pivot, regulatory remediation); firms with heightened regulatory scrutiny requiring demonstrable, continuous, board-level governance; and complex organisations where the governance architecture spans multiple entities, jurisdictions, or regulatory regimes.
What it delivers. The Embedded tier provides everything in the Retained tier, plus permanent board-level presence. The SGaaS principal attends board and committee meetings as a contracted Independent Board Observer with a defined adversarial mandate. They provide real-time challenge during board deliberations, contribute to agenda-setting to ensure that governance-critical issues are not omitted, and serve as a standing adversarial voice in the room.
How it integrates. The Embedded tier preserves the SGaaS principal’s independence from fiduciary liability by design. The principal does not take a formal directorial appointment. This is a deliberate architectural choice. Under corporate law in mature jurisdictions, fiduciary duties are holistic, collective, and non-delegable. A director cannot ring-fence liability to an adversarial function without assuming full responsibility for the board’s strategic decisions. Formal appointment would compromise the independence that makes the function valuable.
Instead, the Embedded tier operates through one of two structures:
Independent Board Observer with contractual challenge authority. The SGaaS principal holds a permanent, contracted observer role with board and committee access, the right to speak, the right to table challenge papers, and the right to require management response to findings. The principal does not vote and owes no fiduciary duties to the company. This is the default structure for Embedded engagements.
Mandated Advisor to the Risk or Audit Committee. The principal serves as a standing advisor to the relevant board committee, with a defined reporting line to the committee chair and, through the committee, to the full board. This structure provides institutional standing and a formal governance channel without creating direct fiduciary exposure.
Both structures cleanly separate the SGaaS principal from directorial liability while preserving the access, authority, and permanence that make the Embedded tier effective. The principal does not make governance decisions; they provide the adversarial intelligence that the actual fiduciaries need to discharge their duties under frameworks such as the Caremark doctrine or the UK Corporate Governance Code. A board that has embedded a continuous, independent, adversarial governance function through this structure demonstrates a level of oversight commitment that strengthens its position in any future Caremark analysis.
Commercial structure. The Embedded tier is delivered on a multi-year retainer, reflecting the depth of integration and the commitment required from both parties. The commercial structure reflects the premium value of board-level presence and the principal’s investment in deep institutional knowledge.
Tier 4: Pre-Exit GaaS
Pre-Exit GaaS Purpose: Governance uplift and exit-readiness assessment for private equity portfolio companies approaching a sale, IPO, or other liquidity event.
Duration: Typically 12–24 months before the anticipated exit event.
Entry point: For PE sponsors and portfolio company boards seeking to maximise governance-driven exit value.
Who it serves. The Pre-Exit tier serves private equity portfolio companies in the final phase of value creation before exit. Governance quality is a recognised factor in M&A diligence. Buyers assess financial performance alongside the maturity, resilience, and independence of the governance architecture that produced it. A portfolio company with demonstrably strong governance, one that can show continuous, independent, adversarial challenge at board level, presents a lower-risk acquisition target and a smoother diligence process.
What it delivers. The Pre-Exit tier combines the Diagnostic’s assessment capability with the Retained tier’s continuous challenge, focused specifically on exit readiness. The principal conducts a governance maturity assessment benchmarked against buyer expectations, identifies and remediates governance gaps that could create diligence friction, and provides an independent governance opinion that the seller can present to prospective buyers as evidence of governance quality.
The Pre-Exit tier provides the PE sponsor with a rigorous, adversarial assessment of how the portfolio company’s capital allocation and risk governance will perform under intense buy-side due diligence and ensures that the evidence base supporting the existing competitive advantage period (CAP) is mathematically and operationally bulletproof [1]. This protects the seller from buy-side model compression, where acquirers exploit unstructured risk reporting to underwrite a rapid, aggressive fade rate (f) to chip the transaction price during exclusivity.
How it integrates. The Pre-Exit principal works alongside the portfolio company’s management team, the PE sponsor’s value creation team, and any other advisors involved in exit preparation. The function is specifically designed to be independent of the management team preparing the business for sale, providing the buyer with confidence that the governance assessment was not self-serving.
Commercial structure. The Pre-Exit tier is delivered on a structured retainer basis across the 12–24 month engagement period. Commercial terms reflect the defined scope of governance assessment, remediation, and exit-readiness work, and are agreed in detail during the initial scoping conversation.
The Progression Logic
The tiers are designed as a progression, rather than a menu.
| Diagnostic | Retained | Embedded | Pre-Exit | |
|---|---|---|---|---|
| Duration | 4–8 weeks | Annual retainer, ongoing | Multi-year, ongoing | 12–24 months pre-exit |
| Depth | Assessment and architecture mapping | Continuous challenge; ongoing governance intelligence | Board-level presence; real-time challenge authority | Exit-focused assessment, remediation, and opinion |
| Primary tools | Red Team Protocol (architecture assessment) | All three tools on continuous/periodic cycle | All three tools with direct board application | Diagnostic + Retained tools, exit-focused |
| Integration | Alongside existing functions; observer access | Governance committee observer; access to board papers and risk reports | Permanent Board Observer or Mandated Advisor; contractual challenge authority | Works with management, PE sponsor, and deal advisors |
| Commercial model | Fixed fee | Annual retainer | Multi-year retainer | Structured retainer |
The natural progression for most organisations is Diagnostic → Retained → Embedded. The Diagnostic builds the institutional knowledge and establishes the trust that makes the Retained tier valuable. The Retained tier deepens the relationship and demonstrates the value of continuous challenge, creating the conditions under which Embedded becomes a natural evolution. For PE portfolio companies, the path is typically Diagnostic → Pre-Exit, or Retained → Pre-Exit where the retained relationship pre-dates the exit timeline.
This progression logic is what distinguishes the SGaaS architecture from project-based advisory. Each tier is a stage in an evolving governance partnership, where cumulative institutional knowledge makes each subsequent tier more valuable than it could be as a standalone engagement.
The flywheel. The four-tier architecture creates a governance flywheel. The Diagnostic builds knowledge that makes the Retained tier effective; the Retained tier builds trust and institutional depth that makes the Embedded tier a natural evolution; and the Pre-Exit tier converts governance maturity into measurable exit value. Each tier feeds the next. The result is a commercial architecture that is structurally aligned with the governance proposition, delivering continuity, progression, and cumulative challenge.
Section 11 makes the economic case.
References
- Michael J. Mauboussin & Dan Callahan. (2026). Competitive Advantage Period: The Neglected Value Driver. Counterpoint Global Insights, Morgan Stanley.