Fragmentation
Every function optimises its own scope, without sufficient cross-cutting continuity.
Complementary positioning, modular architecture, security, universality and value for large-scale events.
01 / 19Major events already run on capable solutions. The break sits between them: divergent versions, invisible dependencies, late arbitration and scattered evidence.
Every function optimises its own scope, without sufficient cross-cutting continuity.
Cross-impacts surface once the cost of correction has already grown.
A readiness statement stays hard to explain, source and audit.
SoReady connects the useful objects without replacing their systems of authority.
The functions of a major event are generally well equipped: finance, planning, accreditation, sport, security, logistics or documentation. Yet none of them alone carries the decisive question: can the whole thing work, on the planned date, with confirmed means and the required evidence? SoReady addresses this horizontal discontinuity. It makes visible the dependencies between domains, the contradictory information and the decisions left without an owner.
SoReady sits above transactional and specialist systems, below executive decision-making: a layer of governance, readiness and correlation.
Bottom to top: from specialist and transactional systems to programme-level executive decision-making. Horizontal position is illustrative only, with no defined axis.
SoReady's positioning rests on one discipline: not reproducing the depth of specialist tools. The financial system stays authoritative for commitments; planning for dates; document management for documents; sport solutions for their own objects. SoReady assembles the reading management needs: obligations, states, impacts, reservations, evidence and decisions. This complementarity reduces migration risk and allows progressive adoption.
Value appears when the chain preserves the authority of the source, exposes the relationships and places arbitration at the right level.
An isolated piece of data does not produce a reliable decision. It must be qualified, linked to an object and checked against applicable rules. The SoReady chain preserves the path from source to evidence: who supplied the information, which version was valid, what calculation ran, and who arbitrated. This continuity makes it possible to explain a decision after the fact and to revisit it when its context changes.
Modules are organised in layers: governance, reference data, planning and resources, then event operations.
Identities, roles, policies, audit, configuration, supervision and built-in user assistance.
Document reading, controlled extraction, provenance, validation and reference data.
Dependencies, capacities, costs, means, calculations and readiness by object.
Observation, event correlation, assisted summaries and traced decisions.
The order of the modules reflects an order of trust. Governance and security define first who can see, modify or validate. The knowledge layer turns documents and reference data into sourced facts. Preparation connects planning, infrastructure, FoP, resources, budget, BOM, VIK and risk. Finally, the EOS and the Event Data Fabric support operations. Modules can be activated separately, but they share the same grammar of objects and evidence.
The breakdown distinguishes functional modules, cross-cutting services and the technology foundation.
| Order | Capability | Role in the chain |
|---|---|---|
| 01 | Governance / security | Rights, responsibilities, policies, evidence |
| 02 | Document management / OCR | Documents into sourced, validatable facts |
| 03 | Reference data / external flows | Authorities, versions, mappings, quality |
| 04 | Infrastructure / calculation engines | Venues, spaces, capacities, scenarios |
| 05 | FoP / materials / consumables | Needs, configurations, turnover, availability |
| 06 | Planning / contention | Dependencies, transitions, collisions, capacities |
| 07 | Budget / BOM / VIK / workforce | Costs, contributions, resources and arbitration |
| 08 | Risk Assessment / readiness | Exposure, treatment, evidence, gates |
| 09 | EOS / EDF | Event state and operational correlations |
| 10 | AI-assisted reporting | Sourced summaries, files, decisions |
| 11 | Cross-checked AIs | Extraction, contradiction, simulation, explanation |
| 12 | User assistance | Integrated, governed contextual help |
| 13 | Administration | Business CRUD, operations, RBAC/MAC by criticality |
The breakdown does not describe thirteen juxtaposed applications. It exposes the capabilities needed to move from a documentary obligation to an opening condition, then to a live situation. Budget, BOM, VIK and workforce give substance to the means; planning and contention verify their availability; Risk Assessment measures exposure; EOS/EDF observes the signals. Reporting and cross-checked AIs make this information readable, without modifying certified data on their own.
Document management/OCR does not silently fill the system. It proposes facts, keeps the evidence and organises their validation.
OCR is only the first step. SoReady must distinguish detected text, proposed fact and validated information. A requirement extracted from a regulation is matched to a discipline, a venue, a date and an owner; the original excerpt stays accessible. When a version changes, the system identifies the affected objects instead of silently overwriting the previous knowledge. Automated population thus becomes a controlled accelerator, not a source of opacity.
The contention engine cross-references calendar, spaces, resources, capacities, turnover and dependencies. Budget and BOM give substance to arbitration.
Milestones, sequences, changeover times and critical paths.
Conflicts across venues, teams, assets, transport and suppliers.
Equipment, consumables, configurations and availability.
Costs, in-kind contributions, resources, pooling and decisions.
Contention appears when the same resource is promised to several incompatible sequences: space, team, equipment, transport, power or turnover time. The engine cross-references calendars with real capacities and dependencies. It does not stop at flagging a collision; it prepares arbitration options with their effects on budget, VIK, workforce and readiness. Management can then decide before the conflict reaches operations.
The EOS carries the operational state; the EDF admits heterogeneous signals, qualifies them and enables cross-domain correlation without erasing the authority of the sources.
The EOS provides an operational representation of the event; the EDF feeds it qualified events from heterogeneous domains. Between the source and the business state, a governed exchange zone checks the identity, form, authority, sensitivity and timing of the signal. Accepted events stay attached to their evidence and can be distributed, replayed or isolated. Correlation then surfaces a situation that no single source, taken alone, could reveal.
Its role covers the full lifecycle of a signal: admission, qualification, evidence, distribution, replay, correlation and operational control of flows.
Source identity, authority, sensitivity, limits, format controls and independent shutdown.
Original or probative reference, timestamping, version, status and visible handling of rejects.
Independent consumers, recovery after interruption, store-and-forward and reconciliation.
Comparable events, versioned rules, contextualised impacts and EOS feed.
The EDF industrialises the lifecycle of a signal. It records the flow's contract and its owner, controls admission, keeps a proof or a probative reference, quarantines non-conforming messages and distributes accepted events to independent consumers. Deduplication, replay, recovery after an outage and store-and-forward protect continuity. A canonical contract then enables explainable correlations without overwriting the authoritative source. The module evolves source by source without destabilising the EOS.
The design base covers several dozen flow families, ten major operational domains and multi-domain correlation scenarios. This scope is extensible and is not a fixed promise.
Programme, session status, timing and associated evidence.
Forecasts, alerts, transport, traffic and arrivals.
Access, density, incidents and response capacity.
Power, network, equipment, services and turnover.
Sport, results, weather, mobility, crowd, medical, security, OT, IT, logistics and media evolve at different rhythms. The value of the EDF is to preserve this diversity while giving it a common timeline. The demonstration scope covers several dozen flow families and multi-domain scenarios; it remains extensible. The value lies less in the number of connectors than in the ability to qualify the freshness, confidence and operational impact of each signal.
ISO 20121 addresses responsible event management; it is not a cybersecurity standard. SoReady aligns with a portfolio of complementary frameworks, without claiming certification.
| Reference | Contribution | SoReady coverage |
|---|---|---|
| ISO 20121:2024 | Responsible event management | Objectives, stakeholders, improvement |
| ISO 31000:2018 | Risk management principles | Risk Assessment, treatments, escalation |
| ISO 22301:2019 | Business continuity | Scenarios, recovery, exercises, evidence |
| ISO/IEC 27001:2022 | Information security management | Identities, IT risks, audit, controls |
| ISO/IEC 42001:2023 | AI management systems | AI roles, risks, monitoring, accountability |
| OWASP / NIST AI RMF | Application and AI risks | Threats, tests, technical governance |
| WCAG 2.2 / W3C PROV-O | Accessibility and provenance | Usable interfaces, traceable facts |
Security runs through the product: identity, rights, confidentiality, integrity, availability, continuity and audit. ISO 20121 structures responsible event management but does not on its own cover cybersecurity. ISO/IEC 27001, ISO 22301 and the OWASP frameworks therefore complete the approach; ISO/IEC 42001 addresses AI governance. SoReady can support the evidence and controls of a programme, without turning this alignment into a certification claim.
The deployment level depends on sensitivity, latency, connectivity and sovereignty requirements.
Authorised data, minimisation, governed gateway, low-sensitivity uses.
Routing by data class; private models for sensitive content; interchangeable specialised services.
Local or isolated engines, on-site context, offline continuity and reinforced operational control.
The choice between external, hybrid or sovereign AI depends on the data and the context, not on an abstract technology preference. Public or low-sensitivity content can use a controlled service. Contractual, financial or operational data can be routed to a private environment. Critical functions or those with strong continuity requirements can run locally. An MCP-type tool gateway can preserve common access contracts. In all three cases: minimal context, visible sources, bounded actions and human validation.
SoReady is universal because it models the invariants of a major event, then adapts taxonomies, evidence, authorities and workflows.
Commitments, requirements, deliverables, rules and decisions.
Spaces, milestones, transitions, capacities and dependencies.
Owners, workforce, budget, assets, suppliers and BOM.
Scenarios, signals, treatments, tests and evidence.
All complex events share invariants: programme, venues, sequences, owners, resources, rules, risks and evidence. SoReady stabilises this grammar, then configures the vocabulary and obligations of the context. An international competition emphasises disciplines and FoP; a summit, delegations and protocol; a festival, stages and permits. Universality therefore comes from a coherent core and explicit contextualisation, not from an impoverished generic model.
Acceptance of external flows is controlled. Functional administration configures the business; technical administration operates the platform; security runs through both.
Configuration per event, disciplines, venues, functions and evidence levels.
Operations, supervision, version management, continuity and performance.
Access controls, logging, human validation and incident handling.
Openness to the outside is only reliable if the boundaries are administrable. Functional administration configures taxonomies, workflows, gates and responsibilities. Technical administration operates connectors, performance, backups and observability. Security enforces identities, separation of duties and integrity controls. This organisation makes it possible to accept external flows without delegating authority over the programme's objects to them.
Value is demonstrated on a precise scope, then extends without forcing a wholesale replacement of existing tools.
A useful deployment starts with a management question, for example the readiness of a cluster or the turnover of several disciplines on one venue. The first thirty days align objects, owners and sources; the next connect documents, dependencies and rules; the final step demonstrates a gate with evidence and arbitration. This pilot produces verifiable value and reveals data gaps before extending to all functions.
The product strengthens control. It does not replace authorities, certified systems or the LOC's responsibilities.
Connect, control, explain, trace, assist and prepare.
No standard, regulatory compliance or approval is claimed without a dedicated audit.
Detailed models, calculations, rules, thresholds, routing and configurations stay confidential.
Sensitive actions remain subject to rights, validations and competent authorities.
The product's credibility depends as much on its limits as on its capabilities. SoReady can check consistency, trace provenance, compute states and assist analysis. It does not replace the authority of a federation, a security service, an auditor or the LOC. It does not turn data into certification by simply passing it through the platform. Trade secrets stay protected while governance principles remain explainable.
SoReady preserves the depth of existing tools, adds the continuity they lack, and gives every decision its context, its evidence and its owner.
Weak signals, coverage gaps and contradictions.
Functions, venues, disciplines, means and events.
Options, impacts, responsibilities and evidence.
History, lessons learned and reusable assets.
Readiness becomes an asset once the board can question it: why is this object declared ready, what evidence demonstrates it, what reservation remains and who accepted it? SoReady creates this capacity for scrutiny and keeps the history of changes. After the event, the same corpus supports the debrief, the handover to future teams and the reuse of reference data. The platform thus connects immediate performance and organisational legacy.
The references structure the analysis. They constitute neither a certification of SoReady nor an automatic validation of an event's compliance.
| Public reference | Domain | Use in this document |
|---|---|---|
| ISO 20121:2024 | Responsible event management | Governance and improvement |
| ISO 31000:2018 | Risk management | Treatment and residual exposure |
| ISO 22301:2019 | Business continuity | Scenarios, exercises and recovery |
| ISO/IEC 27001:2022 | Information security | Identities, controls and audit |
| ISO/IEC 42001:2023 | AI management systems | Roles, risks and accountability |
| NIST AI RMF / OWASP | AI and application risks | Threats and assurance |
| W3C PROV-O / WCAG 2.2 | Provenance and accessibility | Traceability and inclusive use |
The standards and frameworks cited provide complementary angles: event management, risk, continuity, security, AI, provenance and accessibility. They make it possible to check that the architecture does not overlook a major dimension. This document does not reproduce their normative content and does not claim to demonstrate compliance. Any certification is a matter of scope, a management system and a formal audit.