Every serious corporate failure of the past two decades has been examined by people who found the frameworks in good order. The register existed. The audit was passed. The certificate hung in reception. Governance, risk, and compliance was not absent at the moment things went wrong — it was present, and it did not work.

William Domanski has spent his career at the point where the framework meets the floor, and in this conversation he concedes something his profession rarely says out loud: the standards are susceptible to interpretation. Two practitioners read the same requirement, arrive at contradictory applications, and both hold valid certification. What follows from that admission is an unusually candid hour on what risk work can and cannot do — and on the demographic crisis the discipline has watched approach for forty years without moving.

Takeaways

1. A certificate does not attest to a fact about an organisation. It attests to an encounter between an organisation and an auditor who has their own view of what conformance looks like.
2. The gap between what a board expects to see on paper and what the operational floor is actually experiencing is the whole job. Close it and GRC produces value; leave it and GRC produces paperwork.
3. Three lines of defence are not enough. There are two further lines — executive management and the board — and they are lines of accountability, not defence. Their job is to contribute to the decision, not to be informed of it.
4. The red flag in a risk committee is not a difficult question. It is the absence of one.
5. Large language models are not the chief risk officer. They are what you use before you speak to the chief risk officer. And you never use AI to verify AI.
6. Silent crises are not ignored because they are small. They are ignored because they are not happening to us yet — which is precisely why healthy ageing populations will be handled as badly as climate change has been.

Chapters

[00:00] – Cold open — value produced, value protected, integrity never shortcut

[01:17] – Introduction — the frameworks were in order, and it still failed

[04:22] – The cost line that grows faster than revenue

[06:23] – Value or paperwork — the gap between the board's paper and the operational floor

[09:54] – Guidance, certification, and the vulnerability of interpretation

[16:09] – ISO 9001 — auditors, conformity assessment bodies, and concepts passed off as requirements

[21:15] – Purpose, profit, and whether the value you create ages well

[27:20] – Silos and the language barrier — why integration actually fails

[30:02] – Three lines, five lines — making the executive and the board work

[37:41] – Risk intelligence or reassurance — the committee that asks no questions

[46:15] – AI, bias, and the human in the loop — never use AI to verify AI

[56:16] – The silent crisis — ageing populations and forty years of ignored data

[01:05:50] – Lightning round

Guest Links & References

• William Domanski

About the Show

On the Subject of Leadership is a long-form interview series on governance, organisational culture, and the realities of decision-making — without slogans or motivational gloss.

Hosted by Dr Robert N. Winter.

Subscribe / Follow

Newsletter / Website: robert.winter.ink

LinkedIn: dr-robert-winter

X: @DrRobertWinter

Instagram: DrRobertWinter

Mastodon: social.winter.ink/@robert

YouTube: @OnTheSubjectOfLeadership

Credits

Recorded remotely via Riverside

Music: The Hidden Thread by Roberto Prado / Artlist