The most efficient and effective governance projects tend to be those that follow some sort of emergency: a breach, a lawsuit, a flood, etc. Hence the expression "never waste a crisis" – a phrase of which I was recently reminded by Cheryl Banke...

You know how important metrics are to doing governance right. (If you don’t, have a watch of our May 2025 Roundtable on the subject!) But simply collecting them isn’t enough; rather, you have to ensure they are viewable, analyzable, and actiona...

When pursuing good governance, time needs to be at least as well budgeted as money. Otherwise, you’ll do a poor job of it – or worse, never get done at all.

Remember how AI was going to disrupt and transform our businesses? Well, according to research and my own observations, a lot of that hype has since fizzled. Why? Because there’s more focus being placed on installing AI than installing AI of pr...

Here's a story about that time a client with a privacy initiative almost skipped SalesForce as a system to include in its search for PII – "because it doesn’t have any private information in it"! Note the word ALMOST!--Steve Weissman...