Signs of poor governance (updated monthly)
Is your organization’s governance healthy, or just "compliant" on paper?
Poor governance rarely happens overnight; it leaves a trail of subtle signs. This series is a monthly deep-dive into the common patterns of bad GRC observed in the field. By treating governance as a recurring calendar of awareness rather than a one-time audit preparation, we can build more resilient, transparent businesses.
Below is a running archive of "Red Flags." Check back monthly to see if any of these signs are appearing in your organization.
Sign no. 1: Managers Without Teams
A common pattern in deteriorating governance is the proliferation of managerial titles that lack any direct reports. While often intended as a "reward" or a way to retain talent, this creates a significant GRC blind spot.
Sign no. 2: Unclear Roles and Responsibilities
In a healthy organization, if you ask three different people who is responsible for a specific process—such as a Corrective Action or a Risk Assessment—they should all point to the same person. In poor governance, they point at each other.
Sign no. 3: Lack of Strategic Direction
When an organization treats governance as a series of boxes to check rather than a roadmap to follow, it is a clear sign that strategic direction is missing. Without a direction, GRC efforts become fragmented, expensive, and—ultimately—ignored by the workforce.
Sign no. 4: Poor Risk Management
Risk management is the heartbeat of modern ISO standards, which are built on Risk-Based Thinking. When an organization views risk as a static document rather than a dynamic process, they aren't managing the business; they are just filling better paperwork.
Sign no. 5: Many layers of Management, few decision-makers
When you have an abundance of "managers" but only one or two people are actually allowed to sign off on a decision, governance becomes a performance rather than a process.
Sign no. 6: Transparency & Communication Failures
Good governance is fueled by accurate, timely information. When communication is treated as "need-to-know" or is buried in email chains and private folders, transparency dies. An organization that operates in the dark cannot possibly manage risk or maintain compliance.
Sign no. 7: Weak Accountability
Accountability is what holds governance together. When deadlines are treated as suggestions, "non-conformities" are ignored, and performance issues are met with a shrug, your governance framework is effectively an empty ritual.
Sign no. 8: High Turnover
Stability is the foundation of any sustainable management system. While some attrition is natural, high turnover is often a loud signal of deep-seated governance issues. When employees leave in waves, they take more than just their skills—they take the "institutional memory" required to keep your GRC (Governance, Risk, and Compliance) framework alive.
Sign no. 9: Marketing activities carried out without proper oversight
In many organizations, Marketing operates in a silo, detached from the core governance framework. While agility and creativity are essential for growth, marketing without oversight leads to "overselling" capabilities, misaligned brand promises, and—in regulated industries—significant legal and compliance risk.
