Governance Frame
Research
Governance Frame Research
Independent research on governance, risk, and compliance.
Vendor-neutral analysis for executives and practitioners — evidence-led, corrected when wrong, never a product brochure.
Research papers
View allIndustry research brief
Industry Research Brief — DORA in Active Supervision: Examination Readiness Across EU Financial Authorities
2026-07-16-research-dora-supervision
Industry research brief
Industry Research Brief — Evolution of GRC: Persistent Pain Points and Historical Mitigations (2002–2026)
2026-07-15-research-grc-evolution
Industry research brief
Industry Research Brief — Current GRC Pain Points and Control-First Alleviation Paths
2026-07-15-research-grc-current-pain
Briefings
View allCPS 230 at the Contract Deadline: Governing Material Service Providers, Fourth Parties, and Exit Risk
CPS 230 is no longer primarily a policy-drafting exercise. By 1 July 2026, APRA-regulated entities must treat material service provider (MSP) arrangements as governed operationa…
The Fallacy of the Connector Count: Why Multi-Entity Operators Require Sovereign Audit Enclaves
A PE roll-up opens one GRC login for twelve legal entities and celebrates the connector count. Tonight an auditor for Clinic East can see more than Clinic East. This briefing ke…
Healthcare Perimeter Watch — When Edge Signals Become Board Exposure
A regional health system's perimeter monitoring produces eight validation signals before shift change. This briefing traces those signals from technical validation to executive…
Control-First GRC: Part 3 — Quantitative Risk, Continuous Resilience, and Governed Automation (2019–Today)
Modern governance operates under shorter reporting timelines, wider technology dependencies, operational-resilience requirements, and growing use of generative AI. Point-in-time…
Control-First GRC: Part 2 — Cloud Migration and the Checklist Industrial Complex (2009–2018)
As infrastructure and business applications moved into hosted and cloud environments, compliance teams gained access to more machine-generated evidence. APIs and integrations re…
Newsletters
View allGovernance Frame Australia — August 2026: After the Tranche 2 Enrolment Deadline
2026-06-16-newsletter-austrac-tranche-2
Governance Frame Europe — July 2026: CSRD After Omnibus I and the Revised ESRS
2026-07-16-newsletter-csrd-omnibus-esrs
Governance Frame U.S. Cyber Disclosure Review — August 2026: What Item 1.05 Filings Reveal About Materiality
2026-08-16-newsletter-sec-item-105-filings