Every time new guidance lands, whether it is from a regulator, a sector body or an internal governance review, organisations face the same choice: rebuild how decisions are assessed from scratch, or find a way to fold new evidence into what already exists.
The instinct to rebuild is understandable. New regulation feels like it demands new process. A fresh framework from a respected body carries weight. Starting over feels like taking it seriously. But that instinct has a hidden cost: each rebuild fragments the organisation again, creates new vocabulary for the same underlying questions, and moves decision-making out of rhythm with how people actually work.
There is another way, and it starts with separating what endures from what evolves.
An organisation that evaluates decisions through Value, Trust and Alignment has a stable structure. When new regulation lands, that structure does not change. What changes is the evidence that sits beneath each lens. A new guidance on algorithmic transparency might reshape how Trust is evidenced, but it does not reshape the question being asked: can this decision withstand scrutiny from the people affected by it and those responsible for it?
Take a hypothetical example. A financial services firm has spent eighteen months building a decision framework that asks, across its functions, what value an initiative creates, whether it can be trusted to operate fairly and at scale, and whether it fits the operating model and data estate. Six months into operation, new regulations on algorithmic impact assessment arrive. Rather than shelving the framework and building a new one around the regulation, the firm asks: which lens does this feed? The answer is Trust. The regulation becomes new evidence requirements for that lens, absorbed into what already exists. The questions asked by technology, risk, legal and finance do not fracture. They remain aligned.
This matters because fragmentation is how decisions go wrong. When each function, technology, risk, legal, operations, people and culture, arrives with its own assessment process and its own vocabulary, the decision itself becomes invisible. A Chief Information Officer and a Chief Risk Officer are answering different questions and reporting in different language. A board sees fragmented reports instead of a whole picture. By the time someone notices a gap, the decision is usually already committed.
A stable structure means new regulation becomes an evolution, not a revolution. It means functions can speak to each other in one language. It means evidence accumulates, rather than being rebuilt. And it means when a significant decision comes in front of a board, the board sees one coherent view of Value, Trust and Alignment, with every specialist report indexed to the lens it informs.
This is not about ignoring new regulation or guidance. It is about having a structure strong enough to absorb change without breaking apart every time change arrives.
Where the tension matters most is often in Alignment. Organisations frequently assume a decision will work as designed when it lands in reality, and then discover that assumptions collide with how people actually work, with the data that is actually available, or with capability that is actually there. An Alignment Gap is the space between the assumption and the reality. It surfaces when a technology team has designed a system that assumes clean data, but the data estate is fragmented across legacy systems. It surfaces when a risk and legal function has cleared a process as compliant, but the people who will operate it do not have time in their workflow to run it properly. It surfaces when a communication plan assumes everyone reads email, but frontline teams work shift patterns that make that impossible.
The question Alignment asks, does this fit organisational reality?, has to be asked early and evidenced thoroughly. Each function asks it from a different angle. Technology asks: does this fit our architecture and data estate, and can we sustain it with our current team and budget? Risk and legal asks: does this align with how we are currently governed, and can we maintain it? People and operations ask: do our people have the capability and time to run this, and does it fit how we actually work? A board might ask: does this assume change in the organisation that we are not actually making?
That last question is the one that catches most Alignment Gaps. A decision can be valuable and trustworthy and still fail because it assumes an organisation has changed when it has not. A new process for managing consent might be impeccable from a legal and ethical standpoint, but if the people managing it still have the same time and resources they had three years ago, the gap between assumption and reality will open up as soon as the process goes live.
The way to close it is to ask, before commitment: whose work changes, by how much, and do we have evidence that they have time, capability and support to absorb that change? If the answer is no, the decision is not ready. Making it ready is not optional. It is the work that sits between a good decision and one that actually survives contact with reality.
So when new regulation arrives, the question is not "do we need a new framework?" The question is: "what new evidence does this regulation require, and which of our decision lenses does it inform?" Build the structure once. Let it hold. Evolve the evidence as the world evolves. That is how you avoid the cycle of rebuild, misalignment and late discovery that costs time, money and confidence.
The stability is in the structure. The flexibility is in what you put under it.