Start with the harm. Not the system.
A regulator should not begin with a platform, a process map or a list of functions. Start with the harm or outcome, understand the duty and risk, choose the regulatory response, then design the organisation and technology needed to support it.
Harm & Outcome
What harm, risk, behaviour or public outcome needs to change? How will we know if it does?
Duties & Duty Holders
Who holds the duty? What must they do? What behaviour, capability or compliance problem sits behind the risk?
Regulatory Response
What combination of information, engagement, education, monitoring, incentives, compliance and enforcement is proportionate to the problem?
Operating Model
Who does what? Where are decisions made? What skills, governance, workflows, controls and escalation are required?
Information
What does the regulator need to know about risk, duty holders, behaviour, interventions and outcomes? Where will that information come from?
Technology
What systems, data, integration, workflow, case management, decision support and reporting are needed to make the model work?
Performance
Did the intervention change the harm, risk or behaviour? What should stop, change or be intensified?
Activity is not the outcome.
A regulator can process more cases, conduct more inspections and send more communications without materially changing the problem it exists to address.
We design measures that connect regulatory activity to changes in harm, risk, behaviour, compliance and public value. That evidence should then change where effort and investment go next.
Design before procurement.
If the operating model, decisions, information and workflows are unclear, technology procurement simply hard-codes the ambiguity at considerable cost.
Calm Agency defines the regulatory and operating model first, then the technology required to support it.