Operational Governance Lags as Compliance Becomes Real-Time

By Jonathan Justus | jonnynow.com | 16 May 2026

LONDON — Eighty-four percent of financial services organisations are operating without fully automated, integrated compliance processes, according to the 2026 RegTech Benchmark Survey from AscentAI. The gap is widening as regulators move from periodic audits to continuous, real-time oversight of operational risk.

Senior professionals reviewing operational governance documents in a corporate meeting
Photo by Cytonn Photography on Unsplash

The shift is reshaping how senior leaders treat governance. PwC's 2026 Global Digital Trust Insights found that 39% of executives now cite unclear governance and ownership as a top challenge in managing connected operational systems, with another 47% pointing to a shortage of qualified personnel. McKinsey's 2026 AI Trust Maturity Survey of roughly 500 organisations identified a parallel pattern: firms that assign clear ownership for responsible AI score an average maturity of 2.6 out of 4, against 1.8 for those without accountable functions.

The Real-Time Compliance Era

For decades, operational governance treated compliance as a point-in-time event — an annual audit, a quarterly attestation, a regulator visit every few years. That model is dissolving. The European Union's Digital Operational Resilience Act, the EU AI Act's general application date of 2 August 2026, and Colorado's AI Act taking effect on 30 June 2026 share one feature: they demand continuous, evidence-backed oversight.

A 2026 GRC analysis from Underdefense notes regulators now expect real-time visibility into third-party ICT risks and zero-lag incident reporting. That requirement collides directly with the AscentAI finding that most compliance work still flows through spreadsheets, email threads, and standalone tools that were never built to communicate with one another.

Why Ownership Beats Tooling

The instinct in many boardrooms has been to buy software. Gartner forecasts the global AI governance platform market alone will reach $492 million in 2026, on a trajectory to exceed $1 billion by 2030. Yet the McKinsey data is unambiguous: governance maturity rises and falls with named accountability, not licence count.

Operationally excellent teams treat the question "who owns this risk?" as the foundation, not the afterthought. They map every regulatory obligation to a single executive, document the escalation path, and review the assignment at least quarterly. Tooling then automates the evidence trail — it does not invent the structure.

Key Insight: Organisations with clearly accountable responsible-AI functions score 44% higher on governance maturity than those without, according to McKinsey's 2026 survey of approximately 500 firms.

The Talent and Process Twins

The PwC finding that 47% of leaders cite a personnel shortage is rarely separable from the 39% who flag unclear governance. In practice, organisations recruit specialists to plug gaps that better process design would close at lower cost. A senior control owner who reviews monthly evidence packs and signs off in a structured workflow is more durable than a contractor parachuted in for one audit cycle.

Industry benchmarks from MetricStream and the Microsoft 365 Maturity Model describe the same progression: ad-hoc, repeatable, defined, managed, optimised. The leap that creates the most operational value is rarely the final one. It is the move from repeatable to defined — the moment leaders write down what good looks like and assign someone to own it.

Watch: Why Great Leaders Drive Accountability

Simon Sinek's classic TED Talk on how purpose-led organisations inspire action is a useful primer for any leader trying to align governance ownership with operational behaviour.

The Operational Edge

The firms that will weather 2026's compliance pressure are not those that buy the most automation. They are those that resolve governance ambiguity inside their own walls before the regulator arrives. With the EU AI Act compliance window narrowing to weeks and continuous monitoring becoming the default expectation, the organisations setting clear ownership today will spend the second half of 2026 executing — not scrambling.

Build Operationally Excellent Governance

Elevana's Operations & Governance and PRO Consultant programmes equip senior professionals with the frameworks to design accountable, audit-ready operating models — and the consulting skills to embed them across complex organisations.

Explore the Programme →

Governance does not fail at the regulator's door. It fails the moment no one is sure who owns the answer.

Jonathan Justus
Jonathan Justus Independent consultant writing on professional communication, leadership, and consulting. More →