Skip to content

APPLICATIONS

Which decision will you need to explain later?

Epistemis supports liability-exposed enterprise decisions whose basis may later be reviewed or challenged by authorized internal or external reviewers. These examples show what becomes clear before a decision and what remains traceable afterwards.

Illustrative decision situations, not customer references. The roles shown are examples of how responsibilities may be assigned.

A SEAL Evidence Pack presents the preserved decision state through a view authorized for the reader’s role and review purpose.

01

Approve an AI system for a specific use

The decision

Should this model version be deployed under the proposed conditions in a liability-exposed enterprise process?

Accountable in this example

The designated approval body, with preparation by the business function, AI leads and Compliance.

What makes the decision difficult

Evaluation results, operating limits and human-oversight requirements sit in different records. It remains unclear whether they concern the same model version and intended use.

Before the decision

Epistemis makes missing evaluations and conflicting assumptions about the intended use visible. Accountable people can see which regulatory and internal requirements remain open and which alternatives were examined.

When the state is recorded

SEAL binds the model version, operating limits, evidence and accountable approval to the decision state.

An evaluation defined as necessary but still missing prevents the state from being recorded as final within Epistemis.

During a later review

Internal Audit or authorized external reviewers can use the Evidence Pack to examine:

Which evaluations covered this model version, which limitations were known and who approved its use?

02

Close the treatment of an identified IT risk

The decision

Can treatment of this risk be closed, and what remaining risk is explicitly being taken on?

Accountable in this example

The risk owner, together with the review and approval roles designated by the organization.

What makes the decision difficult

A status field says “closed”, while tests, controls and open dependencies are documented separately. Remediation can then be confused with acceptance of residual risk.

Before the decision

Epistemis shows which test evidence is missing, which controls remain unverified and which dependencies are still open. This includes DORA requirements where they have been identified as relevant to this decision space.

When the state is recorded

SEAL records the reasoned closure decision with its tests, controls and residual risk. Remediation, mitigation and risk acceptance permitted by the defined rules remain distinguishable.

Changing a status does not substitute for a required review.

During a later review

Internal Audit or an authorized supervisory body can examine the Evidence Pack to establish:

Which tests supported closure, and who accepted any remaining risk?

03

Decide how to escalate and report a cyber incident

The decision

How should the incident be escalated on the information currently available, and what reporting decision is being made?

Accountable in this example

The designated incident leadership, with input from Information Security, Legal and Compliance.

What makes the decision difficult

New findings continually change the assessment. Later, it becomes difficult to distinguish information already known from findings that emerged only after the decision.

Before the decision

Epistemis relates known facts, assumptions and conflicting assessments to the relevant decision point. Open questions about the escalation and reporting requirements being applied remain visible.

When the state is recorded

SEAL preserves the reviewed information, timing and reasoned decision. Later findings are not retrospectively presented as knowledge available at that time.

Missing required inputs block the SEAL. Operational escalation and reporting are not made conditional on a SEAL.

During a later review

Authorized external counsel or a cyber insurer with review rights can use the Evidence Pack to examine:

What information was available when the reporting decision was made, and how was the escalation approach justified at that time?

04

Decide on an exception to an internal risk limit

The decision

Should a time-limited exception to an internal risk limit be approved under defined conditions?

Accountable in this example

The responsible decision-making body, with preparation by Risk Management and Legal.

What makes the decision difficult

The request, risk assessment and objections are held separately. The resolution alone does not make the exception’s limits and review conditions clear.

Before the decision

Epistemis brings the relevant rule, examined alternatives and open objections into the decision space. Missing authority assignments or required approvals become visible.

When the state is recorded

SEAL records the exception’s precise scope, rationale, conditions and accountable approvals. Dissenting views remain visible even where the defined rules permit a final record.

A missing required approval remains a blocker.

During a later review

The relevant oversight body or authorized external reviewers can use the Evidence Pack to challenge:

What exception was approved, on which conditions and with which known objections?

05

Approve a business acquisition

The decision

Should the acquisition be approved on the basis of the due diligence completed and the open issues documented?

Accountable in this example

The designated decision-making body, with preparation by M&A, Finance and Legal.

What makes the decision difficult

Valuation, due-diligence findings and open questions sit in different records. After the transaction, deliberately addressed gaps can be difficult to distinguish from overlooked ones.

Before the decision

Epistemis makes missing evidence, conflicting valuation assumptions and open decision conditions visible. Accountable people can see which alternatives were examined and which questions still need attention.

When the state is recorded

SEAL binds the approved valuation basis to the due-diligence scope, alternatives, addressed gaps and accountable approval.

Documented residual uncertainty remains distinguishable from a missing requirement for a final record.

During a later review

Internal Audit or authorized external counsel can use the Evidence Pack to review:

Which due-diligence gap was known, how was it assessed and who took responsibility for what remained unresolved?

06

Approve a product change for use

The decision

Can this specific product version be approved for the intended operating conditions?

Accountable in this example

The designated release authority, with preparation by Engineering, Quality and Product Safety.

What makes the decision difficult

Test reports, deviations and approvals refer to different versions. It is not immediately clear which evidence covers the specific change.

Before the decision

Epistemis makes gaps between the product version, test evidence and defined release requirements visible. Accountable people can see which deviations still need to be addressed.

When the state is recorded

SEAL links the approved configuration to test results, applicable requirements and the reasoned treatment of deviations.

A missing required test or unresolved required approval blocks a final record within Epistemis.

During a later review

Internal quality reviewers or authorized external technical experts can use the Evidence Pack to examine:

Which version was approved, which tests applied to it and how were deviations addressed?

07

Continue working with a critical supplier

The decision

Should the relationship continue despite a known dependency, and on what conditions?

Accountable in this example

The responsible procurement or business leader, with preparation by Procurement, Risk Management and Legal.

What makes the decision difficult

Supplier assessments, contractual conditions and exit options are held separately. Continuing the relationship does not by itself show whether its dependencies were deliberately examined.

Before the decision

Epistemis makes missing assessment evidence, unresolved alternatives and open control requirements visible. Accountable people can see which residual dependency requires explicit attention in the decision space.

When the state is recorded

SEAL binds the alternatives considered, contractual conditions and accepted residual dependency to the decision to continue.

A missing required control record cannot be replaced by blanket risk acceptance.

During a later review

Internal Audit or authorized external reviewers can use the Evidence Pack to challenge:

Which dependency was known, which alternatives were examined and who accepted the remaining risk?

YOUR USE CASE

Which liability-exposed enterprise decision would you like to structure with Epistemis?

These examples are not exhaustive. The Enterprise Pilot configures Epistemis for your specific decision space.