SPQR Knowledge

Decision Review vs programme assurance, audit and implementation consulting

Which form of independent scrutiny fits which executive question, and where mandates should remain deliberately separate.

CEO · Board · Executive SponsorPublished 24 August 2026 · Updated 24 August 2026Hanspeter Furrer · SPQR · Professional responsibility

Let the executive question define the mandate

Choosing a review format should begin with the decision, not a methodology label. Is the issue funding, go-live, reset, a regulatory finding or improvement of delivery? Only then can leaders determine the required independence, depth and evidence.

UK project-assurance guidance provides structured reviews and reporting across programmes. An SPQR Decision Review is narrower: it concentrates on the few claims and dependencies that change a specific Continue, Reset or Stop decision.

Programme assurance

Assurance usually operates across the lifecycle. It examines governance, maturity, delivery confidence, risk and readiness at several points. That is useful when a board needs recurring independent perspective. It may be too broad when one irreversible decision must be taken quickly.

Audit

Audit needs criteria: policies, controls, standards, contracts or regulatory requirements. It provides objective findings within that scope. A sound audit may still leave open which commercial option management should choose next. The IIA Three Lines Model distinguishes independent assurance from management accountability.

Implementation consulting

Implementation advisers design architecture, process, organisation or delivery plans and may deliver them. That creates detailed knowledge, but also a commercial interest in further work. If the same party assesses its own solution as the basis for continuation, the conflict must be explicit.

Warning signs that the format is wrong

An assurance programme with no decision, an audit without suitable criteria, a Decision Review that quietly assumes project management, or an implementer approving its own continuation all indicate a mandate that does not match the governance question.

Questions for management

Which decision is due, and when? Who owns it? Which criteria are binding? Who has a commercial interest in the outcome? Do we need a finding, recurring assurance, a decision basis or delivery capacity?

When a Critical Programme Decision Review fits

It fits when the executive question is specific, time-critical and consequential, and existing reporting does not provide a common defensible basis. It does not replace audit, assurance or implementation; it connects their relevant evidence to the option now being considered.

Sources and professional orientation

The management interpretation is SPQR judgement; external sources support only the identified professional principles.