Governance That Works Until It Is Tested
A governance system demonstrated under ordinary conditions is not thereby demonstrated under stress. Post-crisis financial-sector evidence shows what can happen when that distinction matters.
Post-crisis reviews of the 2007–2009 financial period produced a recurring institutional finding, later formalized in international supervisory guidance: risk governance systems that appeared adequate under ordinary conditions failed to produce a timely, accurate, organization-wide view of exposure during periods of acute stress. Several institutions required days or weeks to assemble a complete picture of group-wide risk during the crisis itself — not because the underlying risk data did not exist, but because the systems and processes that would normally consolidate it were built for routine cadence, not crisis speed, and simply could not compress to meet the moment.
The documented pattern. Risk information frequently lived in separate systems by business line, by region, by legal entity, requiring manual reconciliation — a process that functioned adequately when conducted on a calm, predictable schedule and broke down when it needed to happen quickly and under pressure. Post-crisis supervisory analysis identified inadequate risk-data aggregation and timely enterprise visibility as material governance weaknesses at a number of institutions.
Why this generalizes beyond finance. The specific systems involved were risk-data aggregation platforms, but the underlying governance lesson is general: any control or reporting system that has only ever been exercised under calm, low-volume, well-resourced conditions has an unverified assumption built into it — that it will continue to function the same way under stress. Where stress performance has not been deliberately tested, normal-condition performance leaves that assumption unresolved.
Governance consequence. A board reviewing governance system performance during normal operations has genuine, accurate evidence that the system works — under those conditions. It has no evidence at all about how the system performs under stress, unless stress has actually been simulated. The absence of a failure during calm periods is not evidence the system would hold during acute pressure; it is simply evidence that calm periods have not yet tested it.
What changed afterward. Supervisory expectations following this period explicitly began requiring institutions to demonstrate they could produce a complete, accurate risk view on demand, including under stressed and unplanned scenarios — a direct governance response to the recognition that untested capability is not the same as demonstrated capability.
Evidence boundary. The specific findings regarding 2007–2009 risk-data aggregation failures and subsequent supervisory response are well documented in post-crisis regulatory and Basel Committee analysis. The broader generalization — that any governance system untested under stress carries unverified assumptions about its stress performance — is Obraval’s interpretation, extending a documented sector-specific case into a general governability principle.
The executive question. Has this governance or control system ever actually been exercised under stressed, compressed, or unplanned conditions — or has its apparent effectiveness only ever been observed during calm ones?