Pillar 01

Independence

The Bureau assesses. It does not fix what it assesses, and it is never paid more for a better score. Everything on this page is a constraint on the Bureau, published so a counterparty can check it rather than take its word for it.

May

What the Bureau does.

  • Assess a property and issue a TIA Score, grade, and layer breakdown.
  • State findings and deficiencies against the published model — what is missing, which layer it belongs to, what it costs in score terms, and in what order it matters.
  • Re-score, monitor continuously, and publish score history and trend.
  • Publish the model, its weightings, its sector profiles, and its version history.
  • Publish generic guidance on what raises a score, available to everyone equally, including people who never buy anything.
  • Train, examine, and certify operators.
  • Benchmark, rank, and issue portfolio and peer-percentile reporting.
  • Produce an insurance posture report as advisory output only.
May not

What the Bureau does not do.

  • Design, specify, select, procure, install, configure, or project-manage security measures at a property it scores.
  • Recommend a named vendor, product, or installer for a scored property.
  • Accept compensation contingent on a score, a score change, a certification outcome, or a policy written against its output.
  • Accept compensation from a carrier, broker, or MGA in connection with a property it scores.
  • Score a property in which AIA or any principal holds an ownership or financial interest.
Comparison

Where the line falls, precisely.

The Bureau describes what is missing against the model. It does not tell a property what to install, who to hire, or how to wire it. The same finding can be phrased as assessment output or as consultancy — only the first is the Bureau’s job.

Permitted — assessment outputProhibited — consultancy
Perimeter lighting fails the model at 4 of 11 measured points; this is the largest single recoverable deficiency, worth about 6 points.Install this fixture at these coordinates; here is the wiring plan.
Access control at the north entrance is unmonitored between 22:00 and 06:00.Use this vendor's system; we will manage the installation.
Addressing these three items in this order recovers the most score per dollar.We will design and deliver the programme, priced at X.
Compensation firewall

How the Bureau is paid.

The only way the boundary holds is if the money cannot push through it. Four commitments, published.

Fixed fee, published

Never contingent, never a success fee, never indexed to score movement; monitoring priced identically regardless of score, so a score going up must not cost the customer more and a score going down must not cost the Bureau anything.

No assessor is paid on outcomes

No salary, bonus, or equity tied to scores issued, score improvements, or revenue from an assessed party; no assessor negotiates commercially with a party whose property they will score.

Recusal and cooling-off

An assessor may not score a property they've advised or where a household member has a financial interest; where AIA has done remediation consultancy on a property, the Bureau does not score it for two years from completion; personal relationships with an assessed party are declared and reassigned.

Disclosure on the report

Every issued score carries the model version, the assessor of record, and the data-confidence state; disclosure of commercial relationships over the preceding 24 months is a committed-but-not-yet-built item.

Precedent

Not invented here.

The boundary the Bureau publishes is the boundary several frameworks already require of bodies in analogous positions. The table maps each one to the constraint the Bureau has adopted from it.

Recognised frameworkBoundary the Bureau has adopted
ISO/IEC 17020Inspection bodies — independent inspection conditioned on not undertaking activities that compromise judgement.
ISO/IEC 17065Certification bodies barred from consultancy on what they certify.
ISO/IEC 17021-1Cooling-off period between consultancy and certifying the same client — source of the two-year bar.
Sarbanes-Oxley §201Prohibits, not just discloses, defined non-audit services to audit clients.
SEC rating-agency rulesSeparate analytical from commercial functions, bar analyst comp tied to rated-party fees.
LEEDSeparates standard-setting from certification.
Made with AI in Macaly