The Biggest Barrier to Mission-Critical Governance Isn't Technology

Key Takeaways

• Transparency Is the Missing Element in Governance: According to Tim Leech, the primary obstacle to effective governance is not technology, frameworks, or standards but the lack of reliable reporting to boards on uncertainty and performance linked to mission-critical objectives.
• Information Asymmetry Weakens Board Oversight: Boards often receive extensive reports on risks, controls, compliance, and operations, yet frequently lack an integrated view of how uncertainty affects the organization's most important strategic objectives.
• "Don't Tell/Don't Ask" Governance Persists: Leech argues that many executives are reluctant to provide objective-based risk reporting while many boards are reluctant to demand it, creating a governance dynamic that limits accountability and transparency.
• Current Governance Structures Often Reinforce the Problem: Risk management, compliance, and internal audit functions each provide valuable information, but their reporting frequently remains disconnected from mission-critical objectives and organizational performance.
• Effective Governance Requires Visibility Into What Matters Most: Governance reform will depend less on new technologies or methodologies and more on providing boards with reliable, ongoing transparency into uncertainty and performance tied to the objectives most critical to organizational success.

Deep Dive

In a recent LinkedIn post, I argued that the biggest barrier to effective governance is not technology, cost, standards, or even board interest. It is management's reluctance to provide boards with reliable information on uncertainty and performance linked to Mission Critical Objectives (MCOs), combined with boards' reluctance to insist on receiving that information. The reaction to that post reinforced my belief that this issue sits at the center of one of the most important, and least discussed, governance challenges facing organizations today.

When discussions turn to governance failures, the explanations tend to sound familiar. Organizations are told they need better technology, more sophisticated risk frameworks, stronger governance standards, improved reporting systems, or greater board engagement. The assumption behind all of these prescriptions is that governance failures stem primarily from deficiencies in process, methodology, or resources.

I don't believe that is the real problem. The biggest barrier to effective Mission-Critical Governance is management's reluctance to provide boards with reliable information on uncertainty and performance linked to Mission Critical Objectives, combined with boards' reluctance to insist on receiving that information.

Mission Critical Objectives are the strategic objectives most important to an organization's long-term success. They include the objectives that drive value creation as well as those essential to preserving value. If governance is supposed to help organizations achieve what matters most while avoiding outcomes that threaten their future, then oversight of these objectives should be at the center of board attention.

Yet in many organizations, it is not. Mission-Critical Governance introduces a level of transparency that many organizations have quietly avoided for decades. When boards receive regular reporting on uncertainty and performance linked directly to mission-critical objectives, the entire governance dynamic changes. Directors ask different questions, assumptions receive greater scrutiny, decisions to accept risk become more visible, and accountability increases because it becomes harder for management or boards to claim they were unaware of emerging threats to key objectives.

The Real Obstacle to Governance Improvement is Not Methodology but Information Asymmetry

Organizations already generate vast amounts of governance-related information. Risk functions produce risk registers, risk inventories, and heat maps. Compliance functions report on compliance activities and regulatory obligations. Internal audit reports on control weaknesses, deficiencies, and process failures. Management teams provide operational and financial updates. Boards are often inundated with information.

What they frequently do not receive is a reliable, integrated assessment of uncertainty and performance linked directly to the objectives that matter most. In my upcoming book, Mission Critical Governance: Focusing on What Matters Most, I describe this phenomenon as Don't Tell/Don't Ask Governance Syndrome. The concept is straightforward. Most CEOs do not want to provide boards with regular, reliable reporting on uncertainty linked to mission-critical objectives, and most boards do not insist on receiving it. The result is a governance equilibrium in which critical information remains fragmented, diluted, or absent altogether.

The irony is that many directors would welcome better visibility into uncertainty linked to the organization's most important objectives. Most boards genuinely want to fulfill their governance responsibilities and avoid preventable surprises. Yet many are reluctant to challenge the reporting structures they have inherited. Asking for a fundamentally different form of reporting can create tension. It can expose weaknesses that were previously hidden. It can raise difficult questions about accountability, oversight, and decision-making. For many boards, maintaining the status quo feels safer than demanding greater transparency.

What makes this issue even more concerning is the extent to which major governance institutions continue to reinforce the problem. Regulators and governance standard setters rarely require organizations to clearly define and disclose the board's purpose in overseeing mission-critical objectives and the uncertainty surrounding them. Director institutes devote significant attention to fiduciary duties, governance processes, and board responsibilities, yet often remain largely silent on what meaningful oversight of mission-critical objectives should look like in practice.

The risk management profession has its own blind spot. Risk reporting remains heavily focused on lists of risks, risk taxonomies, and heat maps that are frequently disconnected from objective achievement and organizational performance. Internal audit functions, meanwhile, concentrate largely on management's internal control deficiencies and process weaknesses. Each of these activities has value. None consistently ensures that boards receive reliable reporting on uncertainty and performance linked directly to mission-critical objectives.

The result is a governance ecosystem in which nobody is responsible for regularly providing boards with a clear picture of uncertainty and performance tied to what matters most. That is not an accident of design. In many cases, it is the design.

Who Benefits From Limited Transparency?

The answer varies depending on the organization. Senior executives may benefit from reduced scrutiny of decisions and assumptions. Boards may avoid difficult confrontations with management. Governance professionals may continue operating within established frameworks that focus on activities rather than outcomes. Regardless of who benefits, it is clear who bears the cost.

Shareholders and broader stakeholders depend on boards to oversee the objectives most critical to organizational success. They assume boards have visibility into the uncertainty surrounding those objectives. When that visibility does not exist, the value generated by governance investments is diminished. Directors' and officers' insurers also bear the consequences when governance failures emerge after warning signs went unreported, misunderstood, or ignored.

History provides countless examples of organizations that suffered major governance failures despite having extensive governance processes in place. In many cases, the underlying problem was not that information did not exist somewhere within the organization. The problem was that boards never received reliable reporting on uncertainty linked to the objectives that mattered most. Information was scattered across reports, committees, functions, and management layers, but no one connected it in a way that enabled informed oversight and timely intervention.

Transparency is Not Simply a Reporting Issue but a Governance Issue

The fundamental purpose of governance is not to approve policies, review presentations, or receive periodic updates. Governance exists to increase the likelihood that mission-critical objectives will be achieved while reducing the likelihood of unacceptable outcomes. That purpose becomes difficult, if not impossible, to fulfill when boards lack reliable visibility into uncertainty and performance linked to those objectives.

There are signs that expectations are beginning to change. Investors are demanding greater accountability. Stakeholders are asking tougher questions about board effectiveness. Regulators continue to expand expectations around oversight and resilience. More organizations are beginning to recognize that governance effectiveness cannot be measured solely by the existence of policies, committees, and reporting processes. It must ultimately be measured by whether boards have the information they need to oversee what matters most.

The winds of governance change may finally be starting to blow. Whether they become strong enough to overcome decades of Don't Tell/Don't Ask Governance Syndrome remains to be seen. What is clear is that meaningful governance reform will require more than new technologies, new standards, or new methodologies.

It will require a willingness to provide boards with reliable transparency on uncertainty and performance linked to mission-critical objectives. Until that happens, many organizations will continue investing heavily in governance while avoiding the one thing effective governance depends on most: visibility into what matters most.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey.