Governance

You know governance should add value.

The frustration is how often it doesn’t.

You put structures in place.
You define policies.
You report on risk.
You support the board.

And yet –

Governance is often seen as a barrier, not an enabler.
Conversations about risk are avoided rather than welcomed.
Important issues are surfaced too late – or not at all.
You are expected to provide assurance, but not always given visibility.

In some organisations, it becomes unspoken:

Don’t ask too much. Don’t say too much.

Governance exists. But it is not shaping outcomes.

Why this keeps happening

In many organisations, governance is treated as something that sits between the board and the executive.

It focuses on:

  • Policy
  • Compliance
  • Risk reporting
  • Formal assurance

All important. But not sufficient.

Because the real drivers of success or failure sit deeper in the organisation:

  • How decisions are made
  • How priorities are set
  • How trade-offs are handled
  • How performance, risk and delivery interact

When governance is disconnected from these, it becomes:

  • Retrospective rather than forward-looking
  • Focused on control rather than decision-making
  • Seen as overhead rather than support

This is where “don’t ask, don’t tell” cultures take hold.

Not through intent – but through design.

The missed opportunity for governance professionals

Many governance, risk and compliance professionals recognise this.

They don’t want to be:

  • The policy function
  • The compliance checker
  • The “risk police”
  • People who just implement ISO 37000

They want governance to help the organisation succeed.

They are right. But the shift is not about doing more governance. It is about redefining what governance is for.

From:

Monitoring and assurance
to
Enabling informed, accountable decision-making

Where Business Integrated Governance (BIG) fits

BIG reframes governance as something that operates through the organisation – not just above it.

It connects:

  • Purpose, strategy and objectives
  • Governance bodies and decision-making forums
  • Accountability across organisational units
  • Performance, risk and delivery information

This creates a system where governance is embedded in how the organisation operates. Within BIG:

  • Governance bodies are designed around decisions and accountabilities, not just reporting cycles
  • Risk is considered in the context of objectives and outcomes, not in isolation
  • Assurance supports confidence in decision-making – not just compliance
  • There is a clear line of sight from board priorities to operational reality

This aligns with the broader intent of governance standards – but makes them operational.

What changes when this works

When governance is integrated:

  • Boards and executives have visibility of what really matters
  • Risk discussions are linked to objectives and decisions
  • Governance meetings focus on trade-offs and direction
  • Issues are surfaced earlier – and acted on
  • Accountability is clearer across the organisation

Most importantly:

Governance becomes part of how the organisation succeeds. Not something applied after the fact.

The role of culture and information

Two factors often limit governance impact:

Culture

If governance is seen as punitive or bureaucratic, people will avoid it.
Information will be shaped to reduce challenge.
Important issues will remain hidden.

Information

If governance relies on manually assembled reports:

  • It is slow
  • It is inconsistent
  • It is open to interpretation

BIG takes a different approach. Information used for governance should be:

  • Systematically sourced
  • Connected to objectives and accountabilities
  • Consistent across governance, management and delivery

This creates the conditions for open, evidence-based discussion.

A practical first step

If this reflects your experience, start here:

Can we clearly see the risks to our mission-critical objectives – and who is accountable for managing them?

Then test:

  • Are objectives explicitly defined and owned?
  • Are risks considered in relation to those objectives?
  • Do governance forums focus on decisions, not just reporting?
  • Is there visibility beyond the executive layer into how things are actually operating?

If not, governance is likely disconnected from where it needs to operate. From there, typical steps are:

  1. Clarify mission-critical objectives
  2. Map governance bodies to decisions and accountabilities
  3. Align risk, performance and delivery discussions
  4. Establish a connected information model to support governance

Let’s be clear – if strategy isn’t being delivered today, the problem is rarely the strategy itself. It sits in the ecosystem around it. Culture and organisational machinery both play a part. If those aren’t working, taking a different approach to strategy alone won’t fix the issue. What’s needed is a better-connected environment for decision-making and delivery. That is what BIG is designed to provide.

Where to go next

If you want to explore further:

A different way to position governance

Governance professionals already bring critical capabilities:

  • oversight
  • risk thinking
  • assurance
  • structure

BIG provides the context to apply these where they matter most.

Not just:

“Are we compliant?”

But:

“Are we making the right decisions – and do we understand the risks to what matters most?”

Join the conversation

Business Integrated Governance is being developed with governance, risk, audit, strategy and delivery professionals.

If this reflects your experience:

Explore the material. Challenge the thinking.

Please join the conversation here:

It should be how the organisation works.

RSS Governance Blogs

  • From Strategy to Delivery – Why Prioritisation is the Missing Machinery April 2, 2026
    From Strategy to Delivery – Why Prioritisation is the Missing Machinery Most organisations don’t struggle with strategy because they lack ideas. They struggle because they lack […] The post From Strategy to Delivery – Why Prioritisation is the Missing Machinery first appeared on big-cic.org/blog.
  • From Dashboards to Decisions – Why Executives Still Can’t See What Matters April 1, 2026
    From Dashboards to Decisions – Why Executives Still Can’t See What Matters Most organisations are not short of information. They have dashboards for performance.Risk registers for […] The post From Dashboards to Decisions – Why Executives Still Can’t See What Matters first appeared on big-cic.org/blog.
  • Building a Strategic Framework for SMEs January 22, 2026
    Building a Strategic Framework for SMEs Founders succeed because, at the start, they do everything themselves. As the organisation grows, that load is shared with team […] The post Building a Strategic Framework for SMEs first appeared on big-cic.org/blog.
  • BIG, OCRUM & the Mission-Critical Oversight Gap December 4, 2025
    From Risk Lists to Uncertainty: How BIG and OCRUM Close the Mission-Critical Oversight Gap Webinar: 3/12/25 – event report – David Dunning Introduction This session brought […] The post BIG, OCRUM & the Mission-Critical Oversight Gap first appeared on big-cic.org/blog.
  • Inspiring GRC professionals into a role in strategy delivery? November 20, 2025
    Strategy delivery and the curse of “don’t ask don’t tell” syndrome 3rd December 2025, 12.30 PM UK time Many organisation boards receive performance reports, compliance-reports, risk-lists […] The post Inspiring GRC professionals into a role in strategy delivery? first appeared on big-cic.org/blog.
  • FRANKENORG! November 13, 2025
    FRANKENORG! On the 12th November, the BIG CIC presented a session which described the use of integrated governance in a selection of organisations. Instead of explaining […] The post FRANKENORG! first appeared on big-cic.org/blog.
  • Operationalising strategy delivery – the priority perspective October 16, 2025
    Operationalising strategy delivery – the priority perspective Executive summary Strategy development and delivery is a mature discipline (see IASP Body of Knowledge v3.0), yet many organisations […] The post Operationalising strategy delivery – the priority perspective first appeared on big-cic.org/blog.
  • From Risk Lists to Certainty: How BIG and OCRUM Can Close the Mission-Critical Oversight Gap October 10, 2025
    “Does your board receive reliable information on risk linked to your Mission Critical Objectives?” Some would argue that Most boards would struggle to answer “yes.” The […] The post From Risk Lists to Certainty: How BIG and OCRUM Can Close the Mission-Critical Oversight Gap first appeared on big-cic.org/blog.
  • Purpose to Performance: Embedding Risk, Governance & Strategy for Impact May 23, 2025
    Purpose to Performance: Embedding Risk, Governance & Strategy for Impact Enabling accountable, risk-aware and purpose-driven leadership at every level. On Wednesday 21st May, David Dunning (from […] The post Purpose to Performance: Embedding Risk, Governance & Strategy for Impact first appeared on big-cic.org/blog.
  • Connecting Project & Strategy Management through Integrated Governance October 4, 2024
    Effective strategy delivery is essential for organizations to thrive and fulfil their purpose. However, it’s widely acknowledged that many organizations struggle with this process. Within the […] The post Connecting Project & Strategy Management through Integrated Governance first appeared on big-cic.org/blog.