Core principles

Clarity

Every responsibility should be understandable without translation.

Anti-pattern: Placeholder for ambiguous role boundaries.

Accountability

Ownership must be explicit and reviewable.

Anti-pattern: Placeholder for shared ownership without escalation.

Practicality

Controls should work in the organization’s actual operating environment.

Anti-pattern: Placeholder for controls that exist only on paper.

Consistency

Decisions and evidence should follow a repeatable pattern.

Anti-pattern: Placeholder for ad hoc exception handling.

How principles guide action

Principles define what good governance looks like before anyone writes a control or publishes a policy. They give the organization a common lens for evaluating tradeoffs.

Move to controls →