01
Portfolio strategy & prioritization
Choosing what to pursue: strategic fit, expected value, evidence requirements, risk, capacity to deliver, interdependencies between programmes, real options and the governance that decides.
Portfolio decisions commit regulated capability years ahead of need. A programme approved without the quality, regulatory and manufacturing capacity to support it does not fail at approval — it fails during scale-up, when the alternatives have expired.
HOW IT FAILS
- Portfolio capacity is assessed in research and commercial terms while quality, regulatory and validation capacity are assumed available.
- Interdependencies are unmapped, so two programmes are approved that need the same scarce facility in the same window.
- Sunk cost keeps a programme alive past the evidence, because stopping requires a decision nobody is incentivised to make.
WHAT CONTAINS IT
- Capacity assessment spanning quality, regulatory and validation resources, not only research and commercial.
- Interdependency mapping across programmes for shared facilities, people and regulatory bandwidth.
- Pre-agreed stop criteria with a decision forum empowered to apply them.
EVIDENCE IT OPERATES
- Portfolio reviews with capacity and interdependency analysis.
- Stage-gate decisions against pre-set criteria including stops.
- Programme-level risk assessments covering regulated capability.
02
Business cases & investment decisions
The case for a specific investment: the need, alternatives considered, benefits, costs, risk, timing, stated assumptions, approval gates and who owns delivering the promised outcome.
A business case is a set of assumptions that become commitments. Where quality and regulatory assumptions are optimistic — a shorter qualification, a lighter validation, an easier variation — the shortfall is absorbed later by the functions that were not consulted.
HOW IT FAILS
- Quality, validation and regulatory effort are estimated by the project rather than by the functions that will perform it.
- Assumptions are recorded in the case and never revisited when reality diverges during delivery.
- Benefit ownership transfers to nobody at approval, so realisation is never assessed.
WHAT CONTAINS IT
- Quality, validation and regulatory estimates provided and owned by those functions.
- Assumptions registered explicitly and reviewed at each gate against what has actually happened.
- A named benefit owner accountable after implementation, not only an approver before it.
EVIDENCE IT OPERATES
- Business cases with assumptions, alternatives and functional estimates.
- Gate reviews assessing assumptions against emerging reality.
- Post-implementation benefit reviews with named ownership.
03
Capital planning & project economics
Funding physical and digital capability: capital allocation, estimating, contingency, cash flow, the value of schedule, project controls and whether benefits were realised.
Capital decisions fix the operating cost and the control burden of an asset for its whole life. Contingency cut at approval reappears as scope reduction during execution, and the scope reduced is usually the part that was hardest to justify — often qualification and spares.
HOW IT FAILS
- Contingency is trimmed to secure approval, so the first significant issue consumes the remainder.
- Qualification, spares and commissioning are treated as discretionary scope when the budget tightens.
- Benefits are claimed at handover rather than measured after a period of operation.
WHAT CONTAINS IT
- Contingency justified by risk analysis and protected from approval-stage optimism.
- Qualification and commissioning scope treated as non-discretionary, with changes requiring quality assessment.
- Benefits measured after a defined operating period, against the original case.
EVIDENCE IT OPERATES
- Capital approvals with estimate basis and contingency rationale.
- Scope change records including quality assessment of reductions.
- Post-implementation benefit measurement against the approved case.
04
Operating economics & cost structure
What it costs to operate: labour, materials, conversion cost, yield, capacity utilisation, reliability, inventory, overhead and the constraints that set throughput.
Operating economics and quality performance are the same data read two ways. Poor yield, rework and investigation time are quality outcomes and cost outcomes simultaneously — which is the argument that reaches finance when a compliance argument does not.
HOW IT FAILS
- Investigation and rework time is absorbed into overhead, so the cost of poor quality is invisible in the operating model.
- Utilisation targets are set so high that there is no capacity for deviation handling, guaranteeing schedule pressure.
- Yield is tracked at product level rather than by cause, so improvement effort is untargeted.
WHAT CONTAINS IT
- Quality-driven cost — rework, investigation, scrap, delay — visible as a distinct line rather than in overhead.
- Utilisation planning that reserves capacity for the deviation and maintenance load actually observed.
- Yield loss attributed to cause so improvement can be prioritised by value.
EVIDENCE IT OPERATES
- Operating cost models separating quality-driven cost.
- Utilisation and capacity plans including reserved non-routine time.
- Yield loss analysis by cause with improvement prioritisation.
05
Cost of quality & failure economics
The economics of getting it wrong: prevention and appraisal spend, internal and external failure cost, recurrence, delay, waste and the cost avoided by controls that worked.
Quality is usually argued as obligation and budgeted as cost. Cost-of-quality reframes it as an investment decision — prevention against failure — which is the only framing in which increasing quality spend can be justified on its own terms.
HOW IT FAILS
- Only appraisal cost is measured, because testing has a budget line and failure does not.
- External failure cost omits the parts that dominate it: market action, supply interruption and remediation.
- Avoided cost is never estimated, so effective prevention appears as pure expense.
WHAT CONTAINS IT
- A defined cost-of-quality model covering all four categories with agreed measurement rules.
- External failure cost including recall execution, supply interruption and regulatory remediation.
- Stated, bounded estimates of avoided cost, labelled as estimates rather than presented as measured.
EVIDENCE IT OPERATES
- Cost-of-quality model with category definitions and data sources.
- Failure cost analyses including full external cost.
- Prevention investment cases with the failure cost they address.
06
Quality maturity & enterprise value
How quality maturity shows up in enterprise value: supply reliability, speed to market, right-first-time, risk reduction, resilience, reputation and the strategic capability to change safely.
Regulators have begun to treat maturity as something worth measuring rather than only compliance, and the operational case is the same one: a mature organisation changes faster because it can assess change reliably. That is a competitive property, not a compliance one.
HOW IT FAILS
- Maturity is claimed from a self-assessment with no observable evidence behind the score.
- The value case rests on avoided regulatory action, which is unfalsifiable and therefore unpersuasive.
- Improvement is justified on maturity level rather than on the operating outcome the level is supposed to produce.
WHAT CONTAINS IT
- Maturity assessed against observable behaviours and evidence, not self-rating.
- Value argued through operational outcomes — reliability, speed, rework — rather than through avoided enforcement.
- Improvement targeted at the outcome, with the maturity level treated as an indicator rather than the goal.
EVIDENCE IT OPERATES
- Maturity assessments with the observable evidence behind each rating.
- Operational outcome trends alongside maturity movement.
- Improvement cases stated in outcome terms.
07
Demand, capacity & scenario planning
Matching supply to demand under uncertainty: forecasts, utilisation, bottlenecks, service levels, inventory policy, how the network responds to a shock, and scenario planning.
Forecast error becomes either shortage or write-off, and in regulated supply the shortage side carries patient harm. Inventory is the buffer that absorbs variability, and it is also the first thing optimised away.
HOW IT FAILS
- Inventory targets are set on service level in aggregate, so a low-volume product with no alternative is buffered like a commodity.
- Bottleneck analysis covers production and omits quality control, which is frequently the real constraint on release.
- Scenarios model demand upside and rarely model the loss of a site, supplier or qualified batch.
WHAT CONTAINS IT
- Inventory policy differentiated by criticality and substitutability, not by volume or value alone.
- Constraint analysis spanning production, laboratory and release, since release is where the queue often sits.
- Scenario planning that includes supply-side loss, with the mitigation actually rehearsed.
EVIDENCE IT OPERATES
- Forecast accuracy tracking and inventory policy by product criticality.
- Constraint analyses including quality control and release.
- Scenario analyses covering supply-side disruption and the responses planned.
08
Quality and regulatory diligence
Quality and regulatory diligence in transactions: licensing, investment, acquisition, partnership — assessing liabilities, gathering evidence, pricing remediation and planning integration.
Quality liabilities transfer with the asset and are frequently discovered after closing. An outstanding warning letter, an unremediated data-integrity finding or a lapsed registration is a cost the transaction should have priced and usually did not.
HOW IT FAILS
- Diligence reviews documents supplied by the seller without site visits or independent verification.
- Remediation cost is estimated by finance from a summary rather than by quality from the findings.
- Integration assumes two quality systems can be harmonised on a timeline nobody with operational experience set.
WHAT CONTAINS IT
- Quality diligence with site access and independent verification, not document review alone.
- Remediation scoped and costed by the function that will perform it.
- Integration planning that treats quality-system harmonisation as a programme with its own risk.
EVIDENCE IT OPERATES
- Diligence reports covering inspection history, findings and open commitments.
- Remediation plans with cost and ownership.
- Integration plans with quality-system harmonisation milestones.
09
Insurance, liability & financial risk transfer
Transferring financial risk: coverage and its exclusions, claims exposure, product liability, cyber cover, business interruption and the control evidence insurers increasingly require.
Insurance is a control with conditions attached. Cover that excludes the failure mode most likely to occur, or is voided by a control the organisation did not maintain, transfers nothing — and that is discovered at claim time.
HOW IT FAILS
- Exclusions are not reconciled against the organisation’s actual risk register, so the largest exposure is uninsured.
- Cyber cover assumes controls the organisation asserted at underwriting and has not maintained since.
- Business interruption limits are based on a recovery time the organisation has never demonstrated.
WHAT CONTAINS IT
- Coverage reconciled against the risk register, with uninsured exposures explicitly accepted.
- Underwriting representations tracked as commitments and verified periodically.
- Interruption limits based on demonstrated recovery time, not on plan assumptions.
EVIDENCE IT OPERATES
- Coverage mapped to the risk register with gaps identified.
- Underwriting representations and evidence of continued compliance.
- Recovery time evidence supporting interruption assumptions.
10
Executive and board decision intelligence
What reaches the board: material risks, trends, options, honest uncertainty, leading indicators, decisions taken and whether they were followed through.
Executives are accountable for risks they can only see through reporting. Reporting designed to reassure removes the information that would have prompted intervention while it was still cheap.
HOW IT FAILS
- Aggregation to board level removes the specific signal, leaving a green status that averages a serious local problem away.
- Uncertainty is stripped out because ranges look indecisive, so a fragile estimate is read as a firm one.
- Decisions are recorded without follow-through, so the same risk is presented again unchanged.
WHAT CONTAINS IT
- Reporting that surfaces material exceptions rather than only aggregates, with the threshold agreed in advance.
- Uncertainty presented explicitly, including what would change the assessment.
- Decision follow-through tracked and reported at the next occurrence.
EVIDENCE IT OPERATES
- Board and executive reporting packs with exception reporting.
- Risk reporting including uncertainty and leading indicators.
- Decision logs with follow-through status.