Compliance is not the reason nothing ships
In regulated, public-company environments, compliance becomes the accepted explanation for slow delivery. It is usually the alibi rather than the cause, and treating it as the cause guarantees it becomes one.
Work inside a regulated telecom estate for long enough and you will hear compliance offered as a complete explanation for why something took nine months. Sometimes that is accurate. More often it is the last constraint in a chain, and the one nobody argues with, which is precisely why it gets named.
The alibi problem
Compliance is uniquely convenient as an explanation. It is external, it is non-negotiable, and challenging it looks reckless. So it absorbs delay caused by unclear ownership, late architecture decisions, and requirements that were never really agreed. The genuine regulatory constraint, often a matter of weeks, ends up carrying the blame for months of ordinary organisational friction.
The cost of this is not just the delay. It is that the real causes go unexamined, because a satisfying explanation is already on the table.
Where the nine months actually went
- Unclear ownership
- Late architecture decisions
- Requirements never really agreed
- Compliance
The only link nobody argues with, so it carries the blame for all of them
Designing for auditability from day one
The teams that move quickly in regulated environments are not the ones taking risks. They are the ones who stopped treating compliance as a review gate and started treating it as an architectural property.
- Lineage and access control designed into the data platform at the start, not reconstructed under audit pressure.
- Evidence produced as a by-product of how the system runs, rather than assembled by hand each cycle.
- Compliance expertise embedded in the team early, where it shapes design, instead of arriving at the end to judge it.
- A documented, pre-agreed path for the common cases, so routine changes never need a bespoke negotiation.
The last point delivers most of the gain. Most regulatory delay is not a hard constraint; it is the absence of an agreed route through a constraint, negotiated from scratch every time by people who were not there for the previous negotiation.
Separating the constraint from the habit
Ask which regulation requires this, and in what words. The answer is frequently that no regulation requires it. It is how we have always demonstrated compliance.
That question, asked without hostility and with a genuine willingness to accept the answer, is the most useful tool available. A meaningful fraction of what an organisation believes is mandated turns out to be inherited practice: a control designed for a system retired years ago, a sign-off introduced after an incident nobody now remembers.
The goal is not less compliance. It is compliance that costs what it should, so that when a genuine constraint does arrive, the organisation has the credibility and the room to take it seriously.
Enterprise Technology Executive
Anurag Kumar Mishra
I lead large-scale transformation across telecom and enterprise technology, connecting technology strategy, operating models and capital allocation to measurable business outcomes.
LinkedIn