Approve a strategic initiative where required layer maturity is not yet in place

In plain terms

Proceed with something the organization’s governance cannot yet support, having written down which capability is missing and how it will be built. Permitted deliberately.

What is being judged

Whether the gap is survivable for the duration it will exist, and whether the remediation plan is real.

The framework permits this because organizations will do it regardless, and a framework that forbids ambition beyond capability is ignored rather than followed. The failure being prevented is not ambition. It is ambition nobody wrote down as a risk.

Three tests. Which layer and which level, named specifically. Governance is immature is not a gap statement; Control is at Level 1 and this initiative requires Level 3 by Q3 is. What could go wrong while the gap is open, which is the part that makes this a risk decision rather than a scheduling one. Whether the remediation plan is bound to this approval, with an owner and a date, rather than referenced as an existing programme that predates the initiative and was already late.

What this decision does not cover

It does not set the target maturity, which is L6-02 and is what makes the gap measurable. It does not accept the initiative’s operational risk, which remains with Layer 4.

When it fires

On event. When an initiative is proposed whose required maturity exceeds the current assessed level in any layer. When an assessment shows a layer has fallen below the level an in-flight initiative assumed.

On cycle. None, though open approvals are tracked to closure.

What you need before deciding

The current maturity profile and the target profile. Which layers the initiative actually stresses, which is usually fewer than all six. What the gap means concretely: which artifacts are absent, which decisions have no named owner. A remediation plan with an owner and a date.

How this goes wrong

The unbounded approval: the gap is named, no remediation plan is bound, and the approval becomes a standing permission. Remediation by reference: pointing at an existing improvement programme rather than committing to a plan for this gap, which is how a gap stays open for years. Ambition without maturity: the strategy commits to autonomous operations while Layer 4 has no AI system register and no published thresholds. This is the Layer 6 anti-pattern, and this decision is what converts it from an oversight into a recorded risk.

Related decisions

Upstream L6-02 target maturity, the maturity assessment.

Downstream the remediation plan, tracked to closure.

Related L4-RSK-01 risk appetite, since an open maturity gap is an exposure the appetite should contemplate.

Instrument references

None. No instrument makes governance capability a precondition of strategic ambition, or provides a mechanism for proceeding without it. Crosswalk gap 10, and the second half of what makes target maturity operational.