IN DEPTH · THE DELIVERY SYSTEM

Inside the system.

Mobilise once; then deliver and govern in parallel. The sequence, the six gates, the golden-source workbook in its third generation — and the integrations that plug into what your bank already runs.

Aerial view of the City of London
BUILT TO SIT INSIDE WHAT YOUR BANK ALREADY RUNS · IMAGE: UNSPLASH

The sequence

The system is a sequence, and the sequence is the point: mobilise first, properly, once — then run delivery and governance side by side to close. It is the exact inverse of building-while-delivering.

MOBILISATION
WEEKS 1–3
DELIVERY WEEK 4 → CLOSE
PMO TWO-WEEK SPRINTS, ALONGSIDE

Mobilisation — weeks 1–3. The stage that sets up every stage after it. Run personally by ACON’s sixteen-year process-design specialist, mobilisation is not “setup admin” — it is where the entire programme’s groundwork is laid: the governance model and delegated authorities, the organisation structure and named owners, the comms architecture and distribution lists, and the full project planning baseline. Requirements are documented and locked inside two weeks; the programme workbook is generated, tested and live by week three. Everything built here feeds the two toolkits that run the programme: the plan and workbook flow into Delivery; the governance, comms and org structure flow into the PMO. Three weeks that replace two years of building under fire.

Delivery — week 4 to close. Executes from the plan mobilisation built. The programme runs day to day off the golden-source plan; when priorities shift, the plan absorbs the change — it doesn’t restart.

PMO — two-week sprints, alongside. The governance, comms and SOPs laid down in weeks 1–3 are kept ahead of the programme — briefed before change lands, refreshed every cycle, never allowed to rot. That forward maintenance is what makes pivoting cheap.

Two stages, six gates

A Section 166 has two jobs: respond to the review, then fix what it finds. ACON structures each as three phases. Every phase ends at a hard exit gate — defined deliverables, named sign-offs. No gate, no progress. And because Stage 2 begins with formal, signed business-unit acceptance, there is no handover cliff: no acceptance means no handover, only silent risk transfer — which ACON does not allow.

PHASE I
Scoping & Mobilisation. Requirements, governance stand-up, workbook generation, integration.
PHASE II
Information Gathering & Fieldwork. RFIs under SLA, interviews, evidence packs from the golden source.
PHASE III
Reporting & Remediation Planning. Factual accuracy windows, findings-mapped remediation plan.
PHASE IV
Handover & Mobilisation. Gated handover with named BAU owners and signed acceptance.
PHASE V
Remediation Delivery. Oversight, QA and validation against the findings map.
PHASE VI
BAU Integration & Close. Acceptance evidence signed; toolkit, SOPs and trained team left behind.

The golden-source workbook — Suite v3

One workbook is the single source of truth for the whole programme — every phase reads from it and writes to it, so plans, evidence, reporting and comms never drift apart. The suite is now in its third generation, refined against a live reference programme.

THE PROGRAMME MASTER WORKBOOK
Dashboard & scorecard — exception-and-trend view for the board
POAP & execution master plan — with central PMO plan
8-week look-ahead — push-pull, capacity-aware
Live critical path — same-day breach detection
Workflow status & findings heat map — fed by the trackers
Risk register, budget & burn-down — pre-loaded
Audit log — authority-trailed record of every action; every report reading from one golden source
SIX PLUG-AND-PLAY WORKFLOW TRACKERS
RFIs INTERVIEWS & WORKSHOPS CASE BUILDS SAMPLE TESTING FINDINGS — BU CHECKS REPORT RESPONSES
SIX SLA-TIMED STEPS — EVERY ITEM, EVERY TRACKER
BU
10 days
QA
5 days
COMPLIANCE
5 days
LEGAL
5 days
ADVISORY
3 days
PRE-SUBMISSION
2 days
Return-to-BU loops at every step — automatic due dates throughout
ON TRACK DUE OVERDUE — RAG TURNS SAME DAY

Draft and final rounds run side by side where the regulator demands both — the double round is built into the tracker, not bolted on.

One refresh, every report. The workflow files feed the master workbook; a single refresh updates the dashboard, heat map and scorecard. When the programme pivots, the reporting pivots with it — no re-keying, no reconciliation weekend.

Regenerable by design. The entire suite is script-generated from a build specification: restructuring for a change in scope — or rebranding for a new client — means changing the config and regenerating eleven fresh, interconnected files in minutes. Even the toolkit itself can pivot.

Progressive disclosure

Behind the system sits a full end-to-end design, built from the independently verified requirements of all six stakeholder groups an S166 must satisfy. Complexity is revealed progressively — same source, different shell. Structure without weight.

THE CASE HANDLER
sees a three-field queue — what’s mine, what’s due, what’s next.
THE PROGRAMME DIRECTOR
sees six phases, the critical path and the exceptions.
INTERNAL AUDIT
sees everything — read-only, version-trailed.

Back-end integrations

One golden source. Six plug-ins. No re-keying.AGOLDEN-SOURCEWORKBOOKSUITE V3 · EVERY PHASE READS + WRITESSHAREPOINT LISTSPOWER QUERY · NATIVEPOWER BIAUTO-SYNC ~HOURLYTABLEAUEXTRACT / REFRESHGRC / RISKOPENPAGES · ARCHERFCA SUBMISSIONSAS-SENT REPOSITORYBANK SYSTEMSSSO · EXISTING ESTATENOTHING BESPOKE TO LEARN — THE SUITE PLUGS INTO THE ESTATE YOU ALREADY GOVERN
THE SYSTEM AND ITS BACK-END PLUG-INS — ONE SOURCE, SIX CONNECTIONS
SHAREPOINT LISTS
Native, via Microsoft’s Power Query connector.
POWER BI
Connects to the workbook on SharePoint and syncs automatically, roughly hourly.
TABLEAU
Supported for Excel and SharePoint lists — extract/refresh connections, stated plainly.
GRC / RISK
Feeds your designated platform — bank-internal systems, or IBM OpenPages, Archer, ServiceNow IRM, MetricStream, Riskonnect, Protecht, SAI360 — via structured CSV/API exchange. Where GRC-side field changes are needed, ACON prepares the requirements for the vendor’s sprint cycle, flagged early in mobilisation.
MS PROJECT / PPM
Two-way CSV interoperability if you run both — complementary, not competing. Baseline snapshots and dependency-cascade scheduling are on the ACON 2.0 roadmap (macro-free); algorithmic resource levelling remains MSP’s edge, mitigated by ACON’s capacity heat-maps or an optional MSP round-trip.
ACON — AGILE CONTROLS · BANK-SIDE S166 DELIVERY
ACON CONSULTING IS THE TRADING NAME OF CAITLIN TAYLOR LIMITED · REGISTERED IN ENGLAND & WALES · COMPANY NO. 12681104 · REGISTERED OFFICE: 103 CEDAR WAY, GUILDFORD, GU1 1JE