G-SERIES GOVERNANCE FRAMEWORK

G-Series Governance Evidence Protocol

The G-Series Governance Evidence Protocol is IGSB’s evidence-structuring methodology for organising, mapping and classifying governance evidence relating to oversight, accountability, traceability and control.

It supports the application of the G-Series Governance Framework by providing a structured way to consider whether governance arrangements are evidenced in practice, not only documented in principle.

Purpose of the Protocol

The G-Series Governance Evidence Protocol has been developed to support structured review of governance evidence across written observation, readiness review, pre-assessment and assessment pathway activity.

Its purpose is to help organise submitted governance material into clear evidence categories, map that material to relevant G-Series expectations, and support consistent classification of evidence sufficiency.

The Protocol is designed to support evidence-led governance review. It does not replace professional judgement, legal assessment, audit, assurance, regulatory review, or organisational responsibility for governance arrangements.

Why the Protocol Exists

Governance arrangements are increasingly judged not only by whether policies, committees or controls exist, but by whether oversight, accountability, traceability and control can be evidenced in practice.

Many organisations operate within existing legal, regulatory, standards, assurance, risk or internal governance frameworks. The G-Series Governance Evidence Protocol does not replace those frameworks.

Existing frameworks show what should exist. The G-Series helps assess what can be evidenced.

The Protocol provides a structured format for considering the evidence that supports governance arrangements, including how responsibility is assigned, how decisions are overseen, how activity is monitored, how issues are escalated, and how governance actions can be traced.

G-SERIES EVIDENCE CATEGORIES

What the Protocol Structures

The Protocol may be used to organise governance evidence across a range of evidence categories. These categories support structured consideration of whether governance arrangements are visible, accountable, traceable and capable of review.

Governance ownership and accountable roles

Evidence showing who is responsible for governance oversight, decision-making, review activity and accountable ownership.

Board, committee or senior management oversight

Evidence showing how governance matters are reviewed, escalated or considered by appropriate oversight bodies.

Policies, procedures and control documentation

Evidence showing the documented governance arrangements, control expectations, procedures or internal standards in place.

System, process or operational visibility

Evidence showing how relevant systems, processes or operational activities are identified, understood and capable of review.

Monitoring, review and reporting arrangements

Evidence showing how governance activity, risks, controls, outputs or exceptions are monitored, reviewed and reported.

Escalation, challenge and intervention pathways

Evidence showing how issues, exceptions, concerns or governance failures can be challenged, escalated or acted upon.

Decision records, audit trails and traceability evidence

Evidence showing how decisions, approvals, reviews, actions or outputs can be traced to accountable roles or processes.

Third-party, supplier or vendor governance evidence

Evidence showing how external providers, systems, platforms or vendor arrangements are governed, reviewed and controlled.

Incident, exception or limitation records

Evidence showing how incidents, limitations, exceptions, failures or known issues are recorded, reviewed and escalated.

Assurance, audit, review or independent challenge evidence

Evidence showing whether governance arrangements have been subject to review, assurance, audit or independent challenge.

Evidence retention, version control and review status

Evidence showing how governance material is retained, version-controlled, reviewed and kept current over time.

G-SERIES EVIDENCE CLASSIFICATION

Evidence Classification

Under the G-Series Governance Evidence Protocol, submitted information may be classified using controlled evidence sufficiency language.

Not evidenced

The submitted information does not evidence the relevant governance expectation.

Partially evidenced

The submitted information provides some indication of the relevant governance expectation, but evidence is incomplete, unclear, limited or not sufficiently traceable.

Evidenced within submitted information

The submitted information provides evidence of the relevant governance expectation within the scope of review.

These classifications are limited to the submitted material and do not constitute certification, assurance, audit opinion, legal advice, regulatory approval or confirmation of compliance.

Relationship with the G-Series Architecture

The G-Series Governance Framework defines the evidence expectations.

The G-Series Governance Evidence Protocol supports how evidence is structured, categorised, mapped and classified.

Together, they provide the basis for IGSB’s evidence-led approach to written observation, readiness review, pre-assessment and assessment pathway activity.

The G-Series Governance Evidence Platform supports IGSB’s structured handling of submitted governance evidence. The Protocol defines the evidence structure. The Platform supports how submitted evidence is organised, mapped and reviewed.

The G-Series AI Governance Evidence Passport is a structured evidence record applying the Protocol to a specific AI-enabled system, vendor platform, internal AI use case or operational technology environment.

Important Limitations

The G-Series Governance Evidence Protocol is an IGSB evidence-structuring methodology.

It does not constitute legal advice, audit, assurance, technical system review, certification, regulatory approval, or confirmation of compliance with any legal, regulatory, contractual or statutory requirement.

Any written observation, readiness review, pre-assessment or assessment pathway output issued by IGSB is limited to the scope of review and the information submitted.

Organisations remain responsible for their own governance arrangements, legal obligations, regulatory duties, risk management, assurance activity and decision-making.

Request Further Information

Organisations wishing to understand how the G-Series Governance Evidence Protocol may apply to governance evidence, AI-enabled systems, third-party technology arrangements or readiness review activity may contact IGSB in writing.

All initial correspondence is conducted in writing.

Contact IGSB