risks.sgit.ai publishes a six-step acceptance interval ladder, which sgit.ai's Risk Acceptance Office plan has adopted; riskmandate.ai's "Accepted is not acceptable" page frames the intervals differently, and nothing on riskmandate.ai shows that the plan has named the difference as an open question.
Side A: risks.sgit.ai, and the plan that follows it
risks.sgit.ai↗, concept C3, "The acceptance interval ladder":
"Six rungs: 1h, 4h, 1d, 1w, 1m, 6m, default one month."
The same entry also describes the steps in bands ("Under 24 hours means pull the plug; a day to a week is a lower-grade incident"), so risks.sgit.ai itself carries both framings side by side.
The Risk Acceptance Office plan↗, published on sgit.ai on 24 September 2026, says its research found that "The published method disagrees with itself in four places: two different interval ladders, ..." Its method file, 02-the-method.md, tabulates the six steps "As published on risks.sgit.ai" and then says:
"RiskMandate.ai's "Accepted is not acceptable" page publishes different bands (1 to 24 hours, 1 day to 1 week, 1 week to 1 month as the default, 1 to 3 months, over 3 months). The plan uses the risks.sgit.ai ladder and lists the reconciliation as an open question."
The first of its open questions is "Which ladder?", ending "a single published ladder would help every client conversation."
Side B: riskmandate.ai
riskmandate.ai's "Accepted is not acceptable" page↗ states the rule in its own terms: "Anything under a week is an incident", and, on when a risk should come back, "roughly a month far above, three months mid, six months at or near the line."
What we checked
- The markdown copy of riskmandate.ai's page in the snapshot does not carry the band labels the plan quotes ("1 to 24 hours" and so on); they may be on the rendered HTML page, which is not in the snapshot. The two phrasings above are what the markdown copy says.
- riskmandate.ai's acceptable and acceptance pages do not link risks.sgit.ai. Across the whole riskmandate.ai snapshot, risks.sgit.ai appears once, in the v1.4.0 release note.
- No riskmandate.ai file mentions the Risk Acceptance Office plan.
- Whether one ladder should win is not for this newsroom to say. The signal is that the question has been asked on one site and not yet reached the other.