Next steps: Contracts, governance and advice

Ask the outcome question

Do not ask only whether a policy, committee, or board paper exists. Ask: if the proposed governance had operated before the relevant product or supplier decision, would it realistically have changed the decision, timing, scope, or remediation?

Use a short counterfactual: Identify the decision that created or accepted the risk. Identify the person or body that could have stopped, conditioned, or escalated it. Identify the evidence that body would have received. Test whether the evidence arrived early enough and carried a defined consequence.