G2 — INSTITUTIONAL GOVERNANCE

Institutional Structures, Delegated Responsibility and Control Ownership

G2 provides a structured framework for examining the documentary evidence supporting institutional governance structures, delegated authority, control ownership, management oversight and organisational accountability. It focuses on whether governance responsibilities, operational controls, reporting arrangements, escalations and review activity can be evidenced within submitted information. G2 does not confirm legal compliance, organisational effectiveness, regulatory approval, audit assurance or certification.

The Institutional Governance Evidence Question

Organisations may have governance charts, policies, delegated authorities, control frameworks and reporting arrangements in place. The evidential question is whether those arrangements can be demonstrated through current records, attributable ownership, documented oversight, issue escalation, review activity and traceable follow-up. G2 provides a structured basis for examining that evidence within a defined institutional scope.

G2 — Governance Domains

Institutional Governance Evidence Domains

Governance Structure and Delegated Authority

G2 may examine evidence showing:

defined governance structures

delegated decision authority

approval thresholds

committee and management mandates

reporting relationships

escalation routes

exceptions to delegated authority

The presence of an organisational chart or delegation document does not by itself establish that authority is clearly understood or consistently applied.

Roles, Responsibilities and Accountability

G2 may examine whether institutional responsibilities are clearly defined and supported by documentary evidence. Relevant evidence may include:

role profiles

responsibility matrices

accountability statements

committee terms of reference

delegated-authority schedules

control-owner records

action ownership

documented follow-up

A named function or job title is not sufficient where accountability cannot be traced to decisions, controls, oversight or completed actions.

Control Ownership and Governance Operation

G2 may examine evidence relating to:

ownership of institutional controls

defined operating responsibilities

control review schedules

approval and exception records

evidence of control performance

unresolved control gaps

remediation ownership

oversight of material control failures

Documented control design does not establish that the control is consistently operated or effective in every context.

Risk, Issue and Escalation Governance

G2 may examine evidence of:

institutional risk ownership

issue identification

escalation thresholds

management review

exception handling

unresolved matters

risk acceptance

action tracking and closure

Evidence should allow the reader to trace what issue was identified, who became accountable, how it was escalated, what decision followed and whether further action was completed.

Oversight, Reporting and Review

G2 may examine documentary evidence supporting:

governance reporting

management oversight

review of material risks and controls

performance and exception reporting

internal challenge

follow-up activity

periodic governance review

escalation to board or committee level where required

The existence of routine reports does not establish that significant matters were identified, challenged or acted upon.

Institutional Change, Continuity and Learning

G2 may examine evidence relating to:

governance changes

organisational restructuring

changes in delegated authority

continuity of control ownership

lessons from incidents or control failures

review of recurring issues

governance updates following material change

transfer and retention of institutional knowledge

This domain examines whether institutional governance evidence remains traceable through change. It does not provide business-continuity certification or confirmation of organisational resilience.

Illustrative Documentary Evidence

Evidence relevant to G2 may include:

organisational and governance structure charts

delegation of authority documents

role profiles and responsibility matrices

policy and control frameworks

management reporting packs

risk registers and issue logs

control review and exception records

action trackers and escalation records

internal review or audit findings

records of organisational or governance change

handover and knowledge-transfer documentation

This list is illustrative rather than exhaustive.

The relevance and sufficiency of evidence depend on the defined scope and governance question being examined.

How G2 Evidence Positions Are Recorded

IGSB records evidence positions using four controlled classifications:

Not submitted

Information required for the defined evidence question has not been provided.

Not evidenced

Submitted information does not evidence the relevant governance requirement or control.

Partially evidenced

Submitted information provides some relevant evidence, but material elements remain incomplete, unclear or insufficiently traceable.

Evidenced within submitted information

The relevant governance requirement or control is evidenced within the material reviewed.

These classifications describe the documentary evidence position only.

They do not establish that institutional governance is legally sufficient, operationally effective, regulator-approved or certified.

How G2 Relates to G1 and G3

G2 considers institutional structures, delegated responsibilities, control ownership and organisational governance.

G1 considers board-level authority, oversight and accountability.

G3 considers the governance evidence surrounding technology, automated decision-making and AI-enabled systems.

A defined review may use G2 alone or combine it with G1 and G3 where institutional, board and technology-governance evidence are materially connected. Use of more than one G-Series standard does not imply that every domain is assessed.

View G1 Board GovernanceView G3 Technology & AI Governance

Applying G2 Through the Evidence Route

An organisation may raise a written enquiry concerning institutional-governance evidence within a defined organisational, decision-making or technology context.

Depending on scope and evidence position, the route may involve:

a written evidence request

an Evidence Gap Map

a Governance Evidence Passport

a readiness observation

a separately authorised controlled pre-assessment

IGSB determines the appropriate route after considering scope, submitted information, institutional capacity and applicable boundaries. Not every enquiry proceeds through every stage.

View the AI Governance Evidence Route

Current Boundaries

G2 does not provide:

legal advice

regulatory approval

confirmation of compliance

audit assurance

accreditation

certification

confirmation of institutional-effectiveness validation

validation of individual role holder performance

implementation consultancy

Any G2 observation or controlled pre-assessment remains limited to the agreed scope and the information submitted.

Responsibility for institutional governance, legal duties, regulatory obligations, decisions and ongoing oversight remains with the relevant organisation and accountable decision-makers.

WRITTEN ENQUIRY

Begin with an Institutional Governance Evidence Question

Organisations considering G2 should identify the relevant institutional structure, delegated authority or control arrangement and briefly explain the documentary evidence question they wish to examine. Do not send confidential, privileged, personal or operationally sensitive evidence at initial contact. IGSB will confirm any controlled submission route in writing.

Submit a Written Enquiry