Judgment Over Frameworks

Every governance framework produces the same artefact: a matrix, a checklist, a maturity model. These structure a conversation. They are not a substitute for it, and treating them as one is where most governance programmes quietly fail.

A risk matrix tells you a use case scores high on impact and medium on reversibility. It does not tell you whether to proceed, pause, or redesign it. That call requires someone with authority and context, accountable for it afterward. Frameworks distribute analysis, not accountability; without a named owner, the framework becomes a paper trail, not a governance mechanism.

This is why OPERA puts People before Evaluation: before building the risk model, you need to know who owns the decision it feeds. Get that sequence backwards and you end up with well-documented risk assessments nobody acted on, a more expensive failure than having no framework at all, because it looks like governance was done.

None of this argues against frameworks. It argues for treating them as decision support, not decision replacement, and building the ownership structure first so judgment has somewhere to land.