Nordvik Region and Hansa Mutual: Conclusions for Two Organisations

All courses / AI Blue / Module 6 / Chapter 27

Learning objectives

After the lesson the participant can:

• Summarise the conclusion each organisation gives to its governing body and the constraint that shapes its plan
• Explain why Hansa Mutual's measure H1 is written as a gate with two keys
• Compare the two organisations by source of leverage, where the limit sits and how quality is shown
• Draft a plan of at most six measures ordered by reversibility with at most three decisions for the management body

Key concepts

Gate with two keys

Hansa Mutual's measure H1: a closure class moves to Level 3 Bounded only on the class's own evidence, no escape in its sample and seeded catch at or above 0.85 for two quarters, with review quality as a second condition.

Ordering by reversibility

Measures that are cheap and reversible run first; commitments that are hard to undo come last and are conditional. Nordvik Region starts with hunts and re-tests before larger commitments.

Three open decisions

At most three decisions go to the management body. It is never asked to decide what a record has already decided, and its accountability under NIS 2 Article 20 or DORA Article 5 cannot pass to a tool or a provider.

What to stop doing

A plan that adds without retiring turns into what it was meant to prevent. Examples are treating a provider's closure rate as evidence of coverage and counting drafts as progress.

Five general conclusions

Delegation set by class and reversibility and recorded; the stop outside the system it stops; judgement measured by what speed cannot buy; the craft kept by design; and measures about people agreed with representatives first.

Interactive exercises

Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.

Teaching plan

Discussion

1. Nordvik Region's plan adds no agent team and no Mode 5 agent. What is the value of writing down what a plan deliberately leaves out?
2. Hansa Mutual has the platform, the engineering and the agents, and needs the discipline not to widen what it cannot yet show it can supervise. What usually breaks that discipline in a large organisation?
3. Nordvik's first decision asks the committee to accept a re-tender or a change of provider if annex MS-2 is refused. What makes a management body willing to accept a consequence of that size?

Written exercise

Self-test

Choose an answer to see whether it is right, or open the answer below each question.

1. What is Nordvik Region's conclusion for its regional director, recorded in AIDR-0713?

   1. That the unit should become a 24/7 SOC with its own agent team
   2. That a large in-house SOC can let agents act at night if every stop is drilled and review is measured
   3. That a small hybrid team transforms by owning the few things that decide its quality and making the rest visible by contract
   4. That the provider's AI should be granted Level 4 Autonomous for low-severity alerts out of hours
   Show the answer

   C. That a small hybrid team transforms by owning the few things that decide its quality and making the rest visible by contract
   The Region owns detection content, the sample, the stop and the entry rung, and makes the rest visible through its contract. The second option is Hansa Mutual's conclusion in AIDR-0767.

2. What must a closure class's own record show before Hansa Mutual extends Level 3 Bounded to it under measure H1?

   1. A closure rate above the group average for one month
   2. No escape in its own sample and a seeded catch of at least 0.85 for two quarters
   3. A recommendation from the supplier of the triage agent's model
   4. A median time to close below 30 seconds with a reopen rate of zero for a full quarter
   Show the answer

   B. No escape in its own sample and a seeded catch of at least 0.85 for two quarters
   H1 is a gate with two keys: the class's own sample and seeds, and review quality in the oversight report as a second condition. Below 0.80 the class returns to Level 2.

3. According to the comparison table, what is the source of leverage for each organisation?

   1. Nordvik Region: the contract and the rules it owns; Hansa Mutual: the platform and the agent team
   2. Nordvik Region: a large pyramid of analysts; Hansa Mutual: a single managed provider's AI
   3. Nordvik Region: its group AI governance board; Hansa Mutual: public procurement law
   4. Nordvik Region: seven legal regimes; Hansa Mutual: one jurisdiction and public law
   Show the answer

   A. Nordvik Region: the contract and the rules it owns; Hansa Mutual: the platform and the agent team
   Nordvik has the contract and Hansa has the platform. They share a method and differ in the instrument, which explains the order of each plan.