How Much Governance Is Enough?
Good governance is not defined by how much governance an organisation has. It is defined by whether its governance remains fit for the decisions, accountabilities and dependencies the organisation needs to manage.
Organisations rarely decide to create overly complicated governance.
It accumulates.
A business grows. New services emerge. Technology changes. Regulatory expectations increase. Functions specialise. Data begins moving across organisational boundaries. New risks need to be managed.
Each change produces a response.
A new committee.
Another approval.
An additional policy.
A reporting requirement.
A new assurance process.
Another escalation pathway.
Individually, each decision may be entirely reasonable.
The problem is that organisations rarely have the opportunity to stand back twenty years later and ask a much more fundamental question:
Does our governance still fit the organisation we have become?
That question matters because the answer is not automatically to simplify governance. Sometimes organisations do need less governance. Sometimes they need more. But often the real problem is that governance is concentrated in the wrong places.
A relatively low-risk operational decision may pass through several approval points, while an important decision involving data shared across multiple systems and business areas has no obvious owner. One decision is surrounded by governance. The other falls between organisational boundaries. That is not simply bureaucracy.
It is misaligned decision infrastructure.
Governance has an operating context
Governance structures are created for a reason. They reflect the organisation, technology, risks, responsibilities and operating environment that existed at the time. But those things change.
A governance model designed when information largely remained within individual business units may struggle when data now moves continuously between systems, platforms, functions and external providers. An approval process developed around a single technology may become awkward when the same capability is delivered through several different tools. A committee established to manage one organisational dependency may remain long after the underlying dependency has changed. Meanwhile, entirely new dependencies may emerge without equivalent decision pathways being created.
The governance itself has not necessarily failed.
The organisation around it has changed.
Governance debt is real
Technology teams are familiar with the idea of technical debt. A decision that was sensible at one point in time can gradually become a constraint as systems, requirements and expectations change.
Governance can accumulate in much the same way.
“Governance debt develops when yesterday’s reasonable governance decisions become today’s organisational friction.”
An additional approval introduced after an incident may still exist years later. A reporting requirement introduced for a particular program may quietly become permanent. Multiple committees may acquire overlapping responsibilities. Decision rights may migrate informally as functions change, while the formal governance still reflects an earlier structure.
None of these things necessarily looks significant in isolation.
Over time, however, they can make decision-making slower, accountability less visible and escalation harder rather than easier. And simply adding another governance mechanism rarely solves the underlying problem.
Modern organisations make this harder
Today's organisations are highly interconnected.
Data moves across systems and organisational boundaries.
Cloud platforms introduce third-party dependencies.
Transformation programs alter established roles and accountabilities.
Shared enterprise platforms create relationships between business areas that may previously have operated independently.
Artificial intelligence introduces further connections between data, technology, people, risk, assurance and decision-making.
Yet governance arrangements may still reflect an operating model created for a much simpler environment. This creates an important distinction.
The question is not: How many governance forums do we have? Or even: How mature is our governance framework?
The more useful questions are:
What decisions does the organisation actually need to make?
Where does authority for those decisions sit?
Who is accountable for the outcome?
What dependencies cross organisational boundaries?
Where does oversight genuinely add value?
Can an issue reach the right decision-maker when it needs to?
Are decision pathways proportionate to the significance and risk of the decision?
Those questions shift governance away from structures and toward purpose. They also reveal something that organisational charts and governance diagrams often do not. An organisation can have extensive governance documentation and still have unclear decision rights. It can have many committees and still struggle to escalate an issue. It can have detailed accountability statements while important decisions continue to fall between functions.
More governance does not automatically produce better governance.
Governance should evolve with the organisation
Governance should not be treated as organisational scaffolding that, once constructed, remains indefinitely. It is part of how an organisation operates, and as the organisation changes, the decisions it needs to make change.
Its dependencies change.
Its risks change.
Its information flows change.
Its accountabilities change.
Its governance therefore needs to be periodically reconsidered as well.
That does not mean constantly redesigning governance structures. It means being willing to ask whether existing arrangements still serve their intended purpose.
Some governance may need to be removed.
Some consolidated.
Some strengthened.
And sometimes governance needs to be created where none currently exists.
The objective is not minimal governance. Nor is it maximum governance.
It is fit-for-purpose governance.
Governance that allows the organisation to understand who can decide, who is accountable, what needs oversight and how issues move when they cannot be resolved where they first arise. Organisations change and their governance needs to change with them.
The governance arrangements that worked when an organisation was smaller, less connected and less dependent on shared information may have been entirely appropriate at the time. That does not mean they remain appropriate today.
Good governance is not about having more governance. It is about having governance that remains fit for the organisation you have become and the organisation you are trying to become.