Excellence Gateways

The connected organisation

One organisation. See the connections.

Explore a company launching a new customer service. Change the view, select a team and see how one decision reaches the rest of the organisation.

Fictional demonstration · not a client assessment

Our example company

A new customer service

This view stays inside the demonstration. Your website division is unchanged.

Digital Transformation

Systems & data

What you notice

The service portal and the operations system store different versions of the same customer record.

Follow a connection

Select a team above to inspect its situation.Explore this division’s services

Digital Transformation

Customer experience

Customers repeat the same request by phone and email because they cannot see its status.

Give each request one reference and a visible status, starting with a single service.

Operations can work from one queue. Customer-facing teams need a shared explanation of each status.

Operations

A request moves between three spreadsheets before anyone confirms who owns it.

Map the handoffs and test a shared workflow with an owner for every step.

The customer can receive a consistent update. Systems need to pass the same request identifier between steps.

Systems & data

The service portal and the operations system store different versions of the same customer record.

Agree the authoritative record, its owner and the rules for synchronising changes.

Operations can reconcile fewer conflicting records. Staff need to know where corrections should be made.

People & leadership

Teams keep their own workarounds because no one has explained how the new service changes their role.

Co-design the new workflow with the people who will use it, then rehearse real tasks.

System feedback becomes more useful. Customers hear the same explanation whichever team they contact.

Risk and Governance

Customer experience

Customers upload sensitive documents, but the service does not explain who can access them or for how long.

Define the purpose, access and retention rules with the accountable owners before collecting documents.

Operations need a disposal routine. Customer-facing teams need an accurate explanation of document handling.

Operations

The same person can approve and close a request without a second review.

Define approval limits and an independent review for exceptions, then check the evidence.

Systems must enforce the agreed permissions. Customers need to understand when an exception takes longer.

Systems & data

A former team member still has access to the shared service account.

Assign individual access and test the joiner, mover and leaver process with the system owner.

People teams must communicate role changes. Operations need a tested way to work during an access incident.

People & leadership

Staff know something has gone wrong, but disagree about who should escalate it.

Name the incident owner and rehearse escalation with a short, realistic scenario.

System incidents reach the right owner. Customers can receive timely updates with an agreed message.

Training and Learning

Customer experience

New service advisers can follow the script but struggle when a customer asks an unfamiliar question.

Practise varied customer conversations and give specific feedback after each one.

Operations can learn from recurring questions. Team leaders need time to observe and coach advisers.

Operations

Only one experienced colleague knows how to resolve an exception in the service workflow.

Turn the exception into a supervised exercise, then check that another colleague can complete it.

Customer requests depend less on one person. The system guide needs to reflect what actually works.

Systems & data

Staff have completed the software introduction but still cannot interpret the service dashboard.

Use sample service data to practise a decision, explain the reasoning and review the result.

Operations receive more useful questions about performance. Managers can coach decisions using the same evidence.

People & leadership

Training attendance is recorded, but no one checks whether the new skill is used at work.

Agree one observable task with the learner and manager, then schedule a follow-up in the workplace.

Customer conversations provide evidence of learning. System tasks reveal where further support is needed.

Built around your organisation's next useful step.

Digital Transformation

Digital progress with a clear purpose

Our Digital Transformation division connects business priorities to technology decisions. We work with process owners to understand how a service operates, where information is delayed and what people need from a change. The aim is a workable improvement plan with clear ownership and a way to measure its effect.

About this division

Where we can help

Improve the way services are delivered, decisions are made and information moves through your organisation.

Digital strategy and delivery

Choose the digital changes that solve a real operating problem, then build a roadmap your teams can deliver.

ISO 9001

Quality Management Systems

Build quality controls into daily operations and make improvement decisions from reliable process evidence.

COBIT 2019 · ISO/IEC 20000-1

IT Governance & Service Management

Clarify technology decisions and make service responsibilities visible to the people who depend on them.

Your next step

Start with the question you need to answer

01 / Your goal

Choose your goal and starting point. See a recommendation without sharing contact details.

Where should we start?Discuss your priorities and agree an initial assessment.How are our controls working?Define an audit question and the evidence needed to answer it.What does our team need to learn?Connect a learning need to a practical programme.

Browse all services

How the work takes shape

Agree the scope together and make the responsibilities visible from the start.

Map the service before selecting the technology

Understand the current situation and the outcome that matters.

Agree decision rights and data responsibilities

Document the decisions and who is responsible for them.

Test improvements with the people who use them

Use evidence and feedback to adjust the next step.

Work in your sector's context

Banking & Financial Services

Regulated institutions carrying both a supervisor's expectations and a customer's money.

Professional services

Dependable delivery for organisations built around expertise, client information and team capacity.

Government & Public Sector

Ministries, agencies and semi-government entities with public accountability for the data they hold.

Telecommunications & Technology

Operators and technology companies whose service availability is the product.

Oil, Gas & Energy

Operations where an information security failure and a safety failure are not separate categories.

Healthcare

Providers holding patient records, where confidentiality and availability pull in opposite directions.

Ideas to use in your next discussion

18 September 2026

A practical way to map controls to obligations

A shared control can support several requirements, provided its purpose, scope and evidence are clear.

18 September 2026

Turn risk appetite into a decision rule

A risk appetite statement becomes useful when a team knows when to act, escalate or seek approval.

18 September 2026

Make audit evidence traceable

A finding should let another reviewer understand what was examined and how the conclusion was reached.

Before we start

How long does an ISO/IEC 27001 implementation take?

Between four and nine months for most organisations, and the range is mostly about how much documentation already exists and how quickly risk owners can be got into a room.

Where does EG work?

Iraq, the wider Middle East and internationally, on site and remotely.

Is a management system worth it for a small organisation?

The scope should match the organisation. A twenty-person company does not need a hundred documents; it needs the handful that describe how it actually decides things, and an auditor will say the same.

Can an audit be carried out remotely?

Parts of it. Document review and interviews work remotely; walkthroughs of a physical environment and observation of practice do not, and an audit report should say which evidence was gathered which way.

What would useful progress look like for you?

Share the outcome you want, the constraints you face and the people who need to be involved.

Discuss your priorities

Make digital change work in practice

One organisation. See the connections.

Systems & data

Digital progress with a clear purpose

Where we can help

Digital strategy and delivery

Quality Management Systems

IT Governance & Service Management

Start with the question you need to answer

How the work takes shape

Map the service before selecting the technology

Agree decision rights and data responsibilities

Test improvements with the people who use them

Build the skills needed to maintain the change

Work in your sector's context

Banking & Financial Services

Professional services

Government & Public Sector

Telecommunications & Technology

Oil, Gas & Energy

Healthcare

Ideas to use in your next discussion

A practical way to map controls to obligations

Turn risk appetite into a decision rule

Make audit evidence traceable

Before we start

What would useful progress look like for you?

Excellence Gateways Consulting & Development

Make digital change work in practice

One organisation. See the connections.

Systems & data

Digital progress with a clear purpose

Where we can help

Digital strategy and delivery

Quality Management Systems

IT Governance & Service Management

Start with the question you need to answer

How the work takes shape

Map the service before selecting the technology

Agree decision rights and data responsibilities

Test improvements with the people who use them

Build the skills needed to maintain the change

Work in your sector's context

Banking & Financial Services

Professional services

Government & Public Sector

Telecommunications & Technology

Oil, Gas & Energy

Healthcare

Ideas to use in your next discussion

A practical way to map controls to obligations

Turn risk appetite into a decision rule

Make audit evidence traceable

Before we start

What would useful progress look like for you?