Models in the Wild

Control Friction and the Compliance Signaling Equilibrium
||,
Controls are followed. Evidence is produced, approvals are recorded, and required processes are completed consistently across the organization. From a governance perspective, the system appears disciplined and operationally mature. Dashboards show high completion rates, audits validate procedural adherence, and documentation...
continue reading
The Signaling Cost of Over-Compliance
||,
Controls are added to increase confidence and reduce uncertainty. Additional validation steps, layered reviews, documentation requirements, and approval mechanisms are introduced to demonstrate diligence and reinforce assurance. From within the organization, each addition appears prudent and individually justified, particularly in...
continue reading
Why GRC Feels Like a Monty Hall Problem (Revisited)
||,
A decision is made, a control approach is selected, and implementation begins under conditions of incomplete information. Teams align around the choice, resources are committed, and governance processes begin reinforcing the selected path through planning, reporting, and operational coordination. Over...
continue reading
Designing for Governance Is a Game You’re Already Playing
||,
Governance is often treated as a structure applied after the fact—policies written, controls implemented, approvals enforced, and compliance measured against defined procedures. The underlying assumption is that once rules exist, behavior will naturally align to them. Yet the same patterns...
continue reading