Paul Miles — Practice Build Plan (Phase 1 + Phase 2 Tools, Daily Routine, Knowledge Base Domains)

Tag: S-2026-03-17-paul-practice-build-plan Type: own-writing Author(s): Paul Miles (Red Strata) Date of source: 2026-03-17 Date ingested: 2026-05-17 Authority weight: own-writing. Raw file: Open Brain corpus snapshot at /_raw_sources/open-brain-2026-05-17-corpus.md.

What it claims

A bundled set of seven notes captured on 17 March 2026 setting out the build plan for Paul’s Governance & Assurance Specialist practice.

Phase 1 Priority Tools (universal, build first):

  1. Client Discovery Questionnaire (Word, 1–2 pages — universal across all four service lines).
  2. Data Governance Maturity Assessment Tool (Excel, 5-level scale × 8 dimensions: ownership, policy, quality, lineage, metadata, tooling, culture, operating model; scoring + heat map).
  3. AI Governance Maturity Assessment Tool (Excel, aligned to EU AI Act and SS1/23 / SR 11-7; dimensions: risk classification, model inventory, lifecycle controls, 1LoD/2LoD coverage, explainability, incident management).
  4. Governance Assurance Report Template (Word — executive summary, scope and methodology, findings register (risk-rated), recommendations, management response, appendices).
  5. Regulatory Requirements Mapping Template (Excel — BCBS 239 / EU AI Act / DORA → controls, evidence status, gap rating, remediation owner).

Phase 2 Tools (service-specific, after Phase 1):

Daily Knowledge-Building Routine (15–20 minutes):

  • Morning scan (10 min) — rotate through EBA, FCA, BIS, EU AI Office, LinkedIn / practitioner communities.
  • Capture one insight (2 min) using the “REGULATORY INSIGHT [date]” template ending in service-line tags.
  • Weekly synthesis note (20 min, Friday) — “This week in governance: 3 bullets on what moved, what’s new, what to watch.”
  • Consistent tags: #regulatory-intelligence, #market-intelligence, #AI-governance, #data-governance, #framework-development, #tool-development, #client-ready.

Five Knowledge Base Domains:

  1. Regulatory Intelligence — EU AI Act, BCBS 239, DORA, model risk governance (SR 11-7 / SS1/23), FCA / PRA AI guidance, EBA internal governance.
  2. (Implicit — service lines + tools, covered in Phase 1 / Phase 2 above).
  3. Assessment & Diagnostic Tools — data governance maturity, AI governance maturity, regulatory readiness gap analysis, programme governance health check.
  4. Regulatory Evidence & Assurance Packs — BCBS 239 / EU AI Act / DORA evidence templates; assurance report template; second-line review templates; board and ExCo reporting.
  5. Market & Competitive Intelligence — regulatory pipeline; Big 4 positioning; CDO / CRO pain points; emerging topics (agentic AI governance, GenAI risk, data mesh governance, ESG data governance).

Four-week build plan.

  • Week 1 Foundation: start daily capture; build Client Discovery Questionnaire; draft AI Governance Maturity Assessment.
  • Week 2 Core Tools: Data Governance Maturity Tool; complete AI Governance Maturity Tool; Governance Assurance Report.
  • Week 3 Regulatory Readiness: Regulatory Requirements Mapping; BCBS 239 evidence pack structure; EU AI Act compliance checklist.
  • Week 4 Programme Governance: Programme Governance Framework; Health Check Scorecard; Phase 1 tool review.
  • Ongoing: daily capture; weekly synthesis; 5 names/week from network to activate.

Notable quotes

  • “Consistency over completeness — even one capture a day adds up to 250+ insights per year” — Paul, daily routine note.

What’s speculative vs. asserted

  • Asserted (as plan): the full Phase 1 / Phase 2 tool list, the daily routine, the five domains, the four-week sequence.
  • Speculative (as completion): as of last capture (10 May 2026), the corpus does not record which Phase 1 or Phase 2 tools have actually been completed. The daily routine is clearly being executed (the corpus itself is the evidence).

Topics this feeds

Open questions raised

  • Build status of each Phase 1 and Phase 2 tool — corpus does not record completion against the four-week plan.

Ingestion note

Consolidates seven Open Brain task-type thoughts dated 17 March 2026 covering: Phase 1 priority tools; Phase 2 service-specific tools; daily routine; knowledge base domains 1, 3, 4, 5; four-week priority task list. Plus three duplicate thoughts of the same “develop a plan” action.