Alp SuleimanGrowth Partner

Agile Corporate Governance

Agility starts as a team-level method, but in a large company it dies unless decision rights, budgets and oversight rhythm change. What really has to be agile is governance.

EnterpriseStrategy 88 / 885 min read

Author: Published

In a large company, agile teams work in two-week sprints. The product owner sets priority and the team ships fast. Then a new feature waits three months for funding approval because it was not a line in the annual budget. The architecture committee's next meeting is six weeks out. Legal puts a contract change in a queue. The team is agile, the organization is not, and the customer sees not sprint velocity but the total time from decision to delivery.

This is where applying agile methods differs from agile governance. The first is how a team works: Scrum, Kanban, sprints, retrospectives. The second is how the company decides, funds and oversees.

When you need it

If you have agile teams but results fall short of expectations, governance is usually the bottleneck. Signals: teams complain about waiting for approval after finishing work, the same decision passes through three committees, budget is divided once a year and resources cannot shift to opportunities that change mid-year, audit and risk functions are out of step with agile tempo and teams call it “bureaucracy,” or when strategic priority changes it takes months for the change to reach teams.

It is too early in a small company where the decision mechanism is already short. In a fifty-person structure, designing governance is not a separate job: the founder and the team decide in the same room. The need arises when the decision chain starts passing through multiple layers, multiple functions and multiple geographies.

What most teams miss

A common mistake in large companies is trying to spread agility across the whole company with one framework. But the issue is not which framework is used, it is where decision rights sit. Not every decision has to be made in the same place: some are reversible, cheap and rely on information from the field; others are irreversible, expensive and need central attention.

The idea Jeff Bezos laid out in his 2015 shareholder letter captures this well: easily reversible decisions (“two-way doors”) should be made quickly, by small groups, with little approval, while hard-to-reverse decisions (“one-way doors”) should be made carefully and with broader review. A common error in large companies is managing every decision as if it were a one-way door. That looks safe but paralyzes the organization.

An agile company is not one that makes fewer decisions. It is one that makes each decision at the right level and the right speed.

The second thing missed is funding. Project-based budgeting runs against agile work: a model that freezes scope and cost at the start of a project conflicts with work that moves forward by learning. The alternative is to fund persistent teams or value streams and redistribute funding at set intervals based on evidence. Approaches like Beyond Budgeting argue for this direction. You do not need to change the whole budget at once when starting the shift: try it first in a small area.

The third is oversight and risk. Agile governance does not mean no rules; it means rules that are explicit and known in advance. Teams decide freely inside guardrails: a budget ceiling, architecture principles, security and compliance standards, brand rules. Inside the guardrails no approval is needed. Approval is needed to step outside. Risk and compliance teams should be the ones who define requirements up front and automate controls, not the ones who approve at the end of the sprint.

Unlike the team-level adoption of agile methodologies, this piece looks at which layer of the company, and under which rules, decisions are made.

The playbook

1. Measure decision latency

Over the last six months, trace how many days an important company decision took, how many different places it passed through and how long it waited at each stage. Most companies are surprised the first time they measure this. The output: a “decision time” map and the three longest waiting points.

2. Classify decisions and write the decision rights

Separate decisions into two-way and one-way doors. For each class, write who decides, who is consulted and who is merely informed (a simple framework such as RAPID or RACI works). Start with the ten most frequent decisions; it is the fastest win in governance design.

3. Define the guardrails

Write clearly the space in which teams can move without approval: spending limit, permitted architecture, compliance requirements, brand frame. The clearer the boundary, the greater the freedom inside it. A vague boundary leads everyone to stay on the safe side and ask for approval.

4. Rebuild funding and the review rhythm

For one or a few value streams, start a pilot that funds the team rather than the project. Hold a quarterly session on “what did we learn, what evidence do we have, where should resources shift?” Take the investment decision off the annual calendar and tie it to evidence.

5. Embed risk and oversight in the process

Turn compliance, security and legal requirements into checklists, templates and automated tests. Make one person from each of these functions a regular member of the product team. The aim is to catch risk in the field, at the moment the work is done.

6. Set an escalation and resolution time rule

If a decision cannot be made in two days it moves up one level, and that level is also bound by a time limit. A waiting decision means a decision not made; make that visible.

What to measure

  • Decision latency: how many days an important decision takes from idea to approval; the most honest leading indicator of agility.
  • Share of decisions needing approval: the proportion teams can make without approval; shows whether the guardrails work.
  • Resource reallocation speed: how fast funding and teams can be shifted when an opportunity appears.
  • Idea-to-customer time: end-to-end delivery time; ties the governance bottleneck to the result.

Pitfalls

Confusing agility with methodology rollout. Training the whole department and setting up a sprint calendar is easy. Changing decision rights is hard. If the hard part is skipped, you get a company that looks agile and is actually slow.

Unlimited autonomy. Distributing authority without rules produces inconsistency and risk. Autonomy is meaningful inside clear boundaries.

Building governance as a parallel structure. Adding a new committee for agile governance increases slowness unless you remove existing committees. Every new mechanism should replace an old one.

One big budget revolution. Changing the entire funding model at once creates early conflict with finance and audit. Set up a small pilot and expand with evidence.

Start this week

  1. Pick your last five important decisions and write, for each, how many days it took from idea to approval and how many different desks it passed through.
  2. With the management team, produce a “who decides this?” table for the ten most frequent decisions. Mark every one where more than one person says “I decide.”
  3. Pick one product team and set a limit it can spend without approval, plus three rules it must follow.

Put it to work

Let’s adapt this strategy to your company.

Let’s pin down which stage you’re in and whether this is the right lever for you right now.

↑ All strategies