Definition
Promotion is the decision that moves a candidate control from testing into service as a current control — and the commitment that travels with it. To promote, the team records the candidate’s fitness-for-purpose answers and sets the two frequencies the control will carry: how often it will be monitored and how often it will be reviewed.
Promotion is gated on that record. In the application, a card dragged to Current before the fitness answers and frequencies are recorded snaps back with a note saying what’s missing. When promotion completes, the promotion date is stamped, the first monitoring and review dates are set from it, and the control joins the organization’s rhythm.
Why This Matters
Promotion is where intention becomes schedule. The commitments made at promotion are the schedule the system runs from that day forward: the control enters the monitoring schedule, comes due for review, and counts toward monitoring coverage and review coverage — two dimensions of the Governance Maturity Rating (GMR).
Because the team sets the frequencies itself, the schedule reflects the control’s real importance and the organization’s real capacity. What the record shows afterward is a commitment the team chose, made at a moment it can point to.