Programme Governance
for Environments
Where Failure Has Consequences

ITIL — the Information Technology Infrastructure Library — is the world's most widely adopted IT service management framework, used by organisations across government, defence, healthcare, financial services, and critical infrastructure. Originally developed by the UK Government's Cabinet Office, it provides a structured, end-to-end approach to designing, transitioning, and operating IT services. Certification at practitioner level demonstrates command of the full service lifecycle: strategy, design, transition, operations, and continuous improvement. Over three million professionals worldwide hold ITIL certification, and it is a prerequisite qualification for senior IT service roles across regulated sectors.

ISO/IEC 27001 is the international standard governing how organisations protect information assets through an Information Security Management System (ISMS). Lead Auditor is the highest practitioner qualification within the framework — requiring demonstrated ability to plan, conduct, manage, and report on formal third-party ISMS audits. Achieving Lead Auditor status requires not only examination success but verified audit experience and professional assessment. The qualification is in demand across critical sectors including finance, healthcare, and national infrastructure, where cyber security governance is a regulatory obligation rather than a best-practice aspiration.

PRINCE2 — PRojects IN Controlled Environments — is the structured project management methodology developed by the UK Government and now used by major organisations in over 150 countries. It is mandated across UK central government and widely adopted in financial services, defence, and regulated industries. The Practitioner qualification demonstrates the ability to apply PRINCE2 in complex, real-world environments: tailoring its seven principles, themes, and processes to project scale and risk. Unlike generic project management approaches, PRINCE2 provides a framework of explicit governance controls — business justification, risk registers, change authority, product-based planning — that create a structured audit trail throughout the project lifecycle.

MSP — Managing Successful Programmes — is the UK Government's programme management framework, now recognised globally and recently adopted by PeopleCert as PRINCE2 Programme Management. Where PRINCE2 governs individual projects, MSP governs the full programme: aligning multiple interdependent workstreams to strategic business outcomes, managing benefits realisation, and maintaining governance coherence across a landscape that would otherwise fragment. MSP is the architecture for running strategic technology change — it provides the Vision, Blueprint, and Benefits Realisation Plan that translate programme objectives into delivered outcomes. It is widely used across central government, NHS, defence, and major infrastructure programmes.

ISO/IEC 20000 is the international standard for IT Service Management Systems — the formal specification against which organisations certify that their service delivery meets internationally recognised requirements. Where ITIL provides the practice guidance, ISO 20000 provides the auditable requirements. As a consultant-level practitioner, this means understanding how service requirements cascade from client to primary supplier to sub-supplier — where the accountability gaps emerge across complex multi-vendor supply chains, and how to close them before they become incidents. ISO 20000 is used as a supplier qualification criterion by large public and private sector organisations, and is often a contractual requirement in government and healthcare procurement.

Credentials provide the framework; experience provides the judgement. Two decades of technology transition leadership in the UK's most governance-intensive environments — from NHS Digital infrastructure programmes to Critical National Infrastructure security transitions, pharmaceutical ERP migrations to Financial Services ITSM transformations. The sectors, the regulatory regimes, the vendor landscapes, and the governance requirements have all been encountered in live programmes — not in classroom exercises.