Decision authority
Whether the named decision-maker can actually make the decision the model assigns.
BIDE™ — the validation layer
BIDE tests whether the organization's executive decision-governance model works in practice.
BIDE is the validation layer of the Cybantage governance model. It puts the documented model in front of the executives who must use it, under pressure, and shows exactly where it holds and where it fails.
The validation layer
Validation of the governance model — not a tabletop exercise service
BIDE validates the executive decision-governance model the Cybantage process produces. It does not test whether people know a plan; it tests whether the model itself supports a defensible decision when facts are incomplete and obligations compete.
A BIDE is grounded in the organization's own authority records, requirements, participants, and BIM Playbook — and what it reveals feeds back into the governance process.
A governance model that has never been exercised is a hypothesis. BIDE is how the hypothesis is tested.
What BIDE validates
Seven things, tested in practice
Each element of the decision-governance model is exercised against the organization's real decisions and real constraints.
Alternate authority
Whether decision rights hold when the primary executive is unavailable.
Requirement alignment
Whether insurance, legal, regulatory, contractual, and internal requirements support the decision instead of colliding.
Escalation
Whether paths into executive and board governance work when scope or stakes change.
Documentation
Whether the decision and its rationale are captured the way the model requires.
Evidence
Whether what was known, assumed, and unknown at decision time is preserved and attributable.
BIM Playbook usability
Whether the Playbook itself is usable under pressure—findable, current, and sufficient to govern a real decision.
The decisions
Not technical tasks. Business decisions.
Who has authority to shut down a revenue-producing operation?
Can the company notify customers before legal and insurer review?
What happens if the insurer has not approved the preferred response vendor?
Who determines materiality, and when does the board need to be briefed?
How are assumptions distinguished from verified facts?
What evidence supports a decision to continue, suspend, disclose, pay, notify, or restore?
What happens when AI, communications, a key supplier, or a core system is unavailable?
Comparison
Traditional tabletop versus BIDE
A conventional tabletop tests response activity against a plan. BIDE validates the decision-governance model itself — a different purpose, not a more elaborate version of the same exercise.
| Dimension | Traditional tabletop | BIDE |
|---|---|---|
| Primary question | Do technical teams know their tasks? | Can leadership make and govern consequential business decisions? |
| Participants | IT, security, and recovery teams | CEO, COO, CFO, GC, CIO/CISO, communications, HR, and the board liaison |
| Scenario source | Generic threat narratives | The organization's own contracts, insurance, obligations, and dependencies |
| Measure of success | Steps executed, plan followed | Whether leadership can decide, name the accountable position, state the rationale, and leave a usable record |
| Handling of uncertainty | Facts supplied by the facilitator | Incomplete and contested facts, with assumptions tracked explicitly |
| Output | An exercise report | Decision records, exercise observations, and a written closeout summary |
How it runs
Information arrives in sequence. Leadership must still decide.
Each information release adds a fact, obligation, or pressure. The record keeps the decision, rationale, accountable position, evidence, assumptions, and unknowns together.
Information release
The carrier has not yet consented to the preferred forensic vendor.
Information release
A customer contract requires notice within 24 hours of a suspected event.
Information release
Forensics cannot confirm scope for at least five days.
Real-world decision governance
Show the decision, the rationale, and the evidence behind it — months after the event.
Information release · 14:20
Forensics cannot confirm scope for at least five days.
Decision
Suspend external file transfer
Accountable position
Chief Operating Officer
Status
Recorded
Question
Does the customer contract require notice today?
Assumption
No regulated personal data in the affected share
Observation
Carrier consent not yet obtained for preferred vendor
Available now · Evolving
Clear capability. Clear boundaries.
Available now
Organization-grounded scenarios, sequential information releases, participants, decision capture, rationale, accountable positions, questions, assumptions, observations, exercise history, and written closeout for human review.
Evolving
BIDE does not currently score Leadership Decision Readiness, deterministically judge decision quality, or automatically write closeout findings into governed knowledge or the Playbook. Findings require human evaluation.
Documents
The BIDE toolkit for executives and facilitators
How the exercise is designed, facilitated, and recorded—plus what a completed decision record looks like.
Next step
Validate the governance model before the event is real.
Discuss a BIDE grounded in your organization's authority, obligations, participants, and BIM Playbook.