Fragmented governance
Governance is spread across strategy, risk, technology, and operations
Four functions each hold part of the answer, and no one holds the whole picture.
Every function is doing its job. The problem is that readiness gets assembled from four partial views that were never designed to fit together, so the gaps live in between them where nobody is looking.