Theory
Governance runs short of time for judgment
The note's claim, a hypothesis, is that judgment is the scarce part of governance, risk and compliance work, because evidence collection takes the hours that decisions need. When collecting and formatting evidence takes most GRC hours, little time remains for decisions. Automating the clerical work may give that time back.
The claim
Claim: hypothesis
Risk acceptance, exception review, prioritisation, and knowing when to stop doing something are the parts that need a person with context and authority. They are also the parts most often squeezed by reporting deadlines.
It remains an open question whether organisations use the saved time for better judgment or simply cut staff and leave the judgment undone.