AM
All posts
Regulatory & Compliance2 min read

Compliance is not the reason nothing ships 

In regulated, public-company environments, compliance becomes the accepted explanation for slow delivery. It is usually the alibi rather than the cause, and treating it as the cause guarantees it becomes one.

Work inside a regulated telecom estate for long enough and you will hear compliance offered as a complete explanation for why something took nine months. Sometimes that is accurate. More often it is the last constraint in a chain, and the one nobody argues with, which is precisely why it gets named.

The alibi problem

Compliance is uniquely convenient as an explanation. It is external, it is non-negotiable, and challenging it looks reckless. So it absorbs delay caused by unclear ownership, late architecture decisions, and requirements that were never really agreed. The genuine regulatory constraint, often a matter of weeks, ends up carrying the blame for months of ordinary organisational friction.

The cost of this is not just the delay. It is that the real causes go unexamined, because a satisfying explanation is already on the table.

Where the nine months actually went

The genuine regulatory constraint is often a matter of weeks. It ends up named as the cause because challenging it looks reckless, and the real causes go unexamined.

Designing for auditability from day one

The teams that move quickly in regulated environments are not the ones taking risks. They are the ones who stopped treating compliance as a review gate and started treating it as an architectural property.

  • Lineage and access control designed into the data platform at the start, not reconstructed under audit pressure.
  • Evidence produced as a by-product of how the system runs, rather than assembled by hand each cycle.
  • Compliance expertise embedded in the team early, where it shapes design, instead of arriving at the end to judge it.
  • A documented, pre-agreed path for the common cases, so routine changes never need a bespoke negotiation.

The last point delivers most of the gain. Most regulatory delay is not a hard constraint; it is the absence of an agreed route through a constraint, negotiated from scratch every time by people who were not there for the previous negotiation.

Separating the constraint from the habit

Ask which regulation requires this, and in what words. The answer is frequently that no regulation requires it. It is how we have always demonstrated compliance.

That question, asked without hostility and with a genuine willingness to accept the answer, is the most useful tool available. A meaningful fraction of what an organisation believes is mandated turns out to be inherited practice: a control designed for a system retired years ago, a sign-off introduced after an incident nobody now remembers.

The goal is not less compliance. It is compliance that costs what it should, so that when a genuine constraint does arrive, the organisation has the credibility and the room to take it seriously.

Enterprise Technology Executive

Anurag Kumar Mishra

I lead large-scale transformation across telecom and enterprise technology, connecting technology strategy, operating models and capital allocation to measurable business outcomes.

LinkedIn

Keep reading

Next step

Let us talk about the transformation you are actually trying to fund.

Board-level conversations, CXO roles, advisory work, and speaking. If the problem involves large data, complex operations, and a number that has to move, it is worth a conversation.

Start a conversation