A framework for decisions that survive review

The Momentum Framework is a rehearsal device for organizations that will later be asked why a particular call was made while information was still incomplete. It is maintained by the Brandmomentum desk as an editorial method, not as a product.

Request the brief Read the record

Purpose

What the framework is for

It is for people who will have to explain an hour, not only repair a system.

The framework is written for directors, risk and communications leads, counsel, and continuity officers in large organizations, and for the attentive civic reader who wants to know what a serious hour of government looks like from the inside. It assumes a national-scale outage as the stress case: simultaneous strain on household functions, incomplete cause, and a public clock that will not wait for a seminar.

It is not a standard. It is not a certification. It does not replace the advice of engineers, lawyers or regulators retained for a particular organization. It does not score maturity, sell a badge, or rank operators. Where examples are used, they are illustrative composites and not a description of any single real event.

The five stages — Map, Mandate, Measure, Move, Mend — are meant to be rehearsed in ordinary weeks. A method that appears only after the incident is a press line. A method that can be run by the people who will actually be on call is a practice.

Five stages

Map, Mandate, Measure, Move, Mend

Map

Map the dependencies and the people they actually reach. A diagram of systems is not a map of harm if it cannot name the till, the clinic calendar, the platform, the emergency line and the small-business settlement that sit on those systems. The map should show what fails together, not only what is adjacent in an architecture drawing. It should be readable by a duty manager without a briefing. If a civilian function is discovered only when it fails, it was not mapped. The work of mapping is an ordinary-week task: walk the household hour, not the stack.

Mandate

Mandate is who may declare, who may decide a halt or a spend, and who may speak. Titles are not mandates if the person is not on call, or if they must collect courtesy permissions before they can use the right. Write the declaration right so that it can be exercised without a confirmed cause. Write the vendor language that may be used before a joint statement exists. Write the criterion for notifying a regulator. The board’s questions belong here too: they are questions of government, not of topology, and they should be known before hour two invents them.

Measure

Measure impact as people stranded, unpaid, uninformed or unsafe. Dashboard colours can be green while a city waits. Component percentages can each look modest while household functions fail together. A serious measure names the civilian clock: how long a person can be without a usable instruction, a working payment, or a way to reach a public line. Measure also includes the explanation clock. A restored rail with a false public sentence is not a recovered hour. What counts is what a later review could still defend as the lived day, not as the preferred graph.

Move

Move in reversible steps first, and log every call while it is being made. Incomplete information is the ordinary condition, not a special excuse. The minimum information rule asks what fact would change the next reversible action. If nothing would change it, further search is comfort and should be labelled as such. Irreversible calls — a stated cause, a public assignment of fault, a path destroyed for the day — require a higher bar and a named owner of the wait. Guessing and stalling are both failures of this stage; they usually occur as a pair.

Mend

Mend is the public account, the correction of that account in full when it is wrong, and the change of practice that can be shown in the next ordinary week. Reviews that produce only tone have not mended anything. Remedy includes a revised threshold or mandate, a rehearsal date, and a log that can still be read. Confidence returns when people believe the next unexplained hour will be governed in the same way the last one was later explained. That belief is built by repeatable method, not by a closing paragraph of regret.

Practice

The decision log

The log is filled in the hour, not reconstructed after it. Roles are named, not people. The rows below are an illustrative composite and do not describe any single organization or event.

Time	Decision	Known / unknown	Owner role	Reversible?
06:42 ET	Treat simultaneous payments and public-information failure as a national incident.	Known: two household functions down. Unknown: cause, duration.	Duty incident lead	Yes — declaration can be stood down if the event proves local.
06:51 ET	Issue a holding sentence with a civilian instruction and a 08:00 update time.	Known: tills and calendars unusable. Unknown: vendor’s internal state.	Communications lead on call	Yes — wording can be updated; the fact of speaking cannot be unsaid, only corrected.
07:10 ET	Open vendor bridge and authorize overflow staffing.	Known: operator cannot see the vendor’s layer. Unknown: restore path.	Operations director on call	Yes — spend and staffing can be released.
07:40 ET	Defer any public statement of technical cause until the 08:00 clock; do not guess.	Known: competing hypotheses. Unknown: which hypothesis will survive an hour.	Incident lead, with counsel advised	No — a guessed cause, once spoken, is not reversible in the public record.

The log is written in the hour because memory under load is loyal to the story that protects the room. A later reconstruction will be more fluent and less accurate. Fluency is not an archive. Time, the call, the unknowns, the owner by role, and reversibility are the five fields that still allow a board or a regulator to inspect government rather than character. A log that is “someone’s extra job” will stop at the first ugly interval, which is the interval a review will later need.

Friction

Where organizations usually stall

Hope as a threshold. The room waits for the event to remain local because a national declaration is expensive. Hope is not a criterion. If civilian functions have already failed together, the declaration is late even if the graphs still look modest.
Permission in place of mandate. The person who can see the evidence is not the person who may declare or speak. The first hour becomes a search for courtesy, which looks, from outside, like silence.
One clock staffed, the other abandoned. Restoration consumes every capable person. The explanation clock is left to whoever is least busy. The public then writes the account, and the later technical paper cannot catch it.
Review as tone. After the week, language is refined and no threshold, mandate or rehearsal date changes. The organization has published a feeling. It has not mended a practice.

Questions

Questions the desk is asked

Is this framework tied to a particular standard?

No. It is an editorial method published by Brandmomentum for discussion. It does not implement, replace or certify against any named continuity, security or management standard. Organizations that already work to a standard can still use the five stages as a rehearsal lens. They should not treat this site as a substitute for that work, or as a claim that a standard has been met.

Who should own the decision log?

Someone whose primary job in the hour is not restoring the most fragile system. The log is part of the explanation clock. If it is assigned as an extra task to the person holding the restore path, it will stop when the hour turns ugly. A communications lead, a continuity officer, or a designated scribe reporting to the incident lead can own it, provided they are in the room and may interrupt to capture the call.

How do you brief the public when the cause is unknown?

With four clauses: what civilian function is failing, what a person should do now, what you do not yet know, and when you will speak again. That sentence does not require a root cause. It requires a mandate to speak and the courage to leave a blank where a cause would be invented. False precision is more damaging later than an honest unknown that was time-stamped.

At what point does an internal issue become a public one?

When a household function is affected, or when a public clock has already started because people have noticed. Waiting for a regional percentage to trip while tills, calendars or civic lines are already unusable is a private preference, not a public threshold. Write the criterion in an ordinary week. “We were still hoping it was local” is not a criterion.

Does apologising early increase legal exposure?

This desk does not give legal advice. As pattern, a later proven falsehood is also exposure, and households remember false precision longer than they remember caution. Whether an apology, a holding sentence, or a statement of unknown cause is wise in a particular matter is a question for retained counsel, argued in ordinary weeks with examples, not invented at minute fifty under load.

How do you separate the vendor's failure from your own?

You often cannot, in the household hour, and you should not spend that hour trying to empty yourself. Separate the shares in the log: what the operator could see, what it could say, what it could halt, and what only the vendor could restore. The public-facing sentence can name a stacked service without pretending the operator was a spectator. Contracts that forbid any description until a joint statement exists are a first-hour risk and should be negotiated when everyone is calm.

What belongs in the first customer message?

A civilian instruction, a statement of the unknown, and a next-update time. Not a cause. Not a mood dressed as caution. Not a reassurance that contradicts a till that has already stopped. If you cannot offer a workaround, say so, and say what you are doing instead. Length is not sincerity. Four honest clauses outperform a page that is still green.

How often should this be rehearsed?

Often enough that the people who will actually be on call have spoken a holding sentence and filled a log without a lawyer standing over the handbook. For most large organizations, a short drill each quarter is more useful than an annual theatre with slides. The drill can be generic. It does not need a scandal. It needs a simultaneous-failure threshold, a declaration, two reversible actions, and a public sentence with a clock.

The desk

Walk the framework against your own hour

If you want the fortnightly record, a briefing, or a conversation about how the method reads in your setting, write to the desk. There is no paid placement and no certification for sale.

Request the brief Read the dispatches

The desk

Get the fortnightly record

You receive a short analytical note on continuity, accountability and decision quality. There is no promotional mail, no product list and no request for a meeting unless you ask for one.

We reply within one business day, Monday to Friday.