Governance that earns its place.
Most governance frameworks grew by accumulation. The 'cut in half' question forces you to explain why each piece exists. What you'll find is which parts have a clear rationale and which parts exist purely because they seemed responsible at the time.
Most governance frameworks fail by optimizing for coverage instead of business outcomes. Strategic governance requires three pillars: compliance requirements as your foundation, organizational needs addressing specific friction, and strategic enablers that unlock competitive advantage.
After twenty years working with data, I've seen the same pattern: companies discover data quality issues and respond with standardization initiatives, new policies, stricter controls. It never works. The problems just get hidden under bureaucracy while the dysfunction continues underneath.
78% of employees bring their own AI tools to work. The real challenge isn't Shadow AI itself, but distinguishing harmless productivity from genuine risk. Most violations happen because employees don't recognize when they've crossed the line with sensitive data.