Every board I have sat with believes its organisation makes good decisions. Most of the time, they are right. The problem is the word “believes”.
Confidence is not evidence. And the distance between the two has a name.
What is the Assurance Gap?
The Assurance Gap is the difference between what your organisation can actually do and how confident your executives are that it can.
Measure any part of your decision system on two axes. Capability, meaning what you are genuinely able to do. And confidence, meaning how sure your leadership is that you can do it. Where confidence runs ahead of capability, you have an Assurance Gap. The wider it is, the more exposed you are, because you are making high stakes decisions on the strength of a belief you have never tested.
Why can a board not see it?
Because the gap is invisible in everything a board governs with.
Risk registers record conclusions. Board papers record conclusions. Business cases record conclusions. None of them record the judgement that produced the conclusion. The one thing a board is accountable for, the quality of the decision itself, is the one thing written down nowhere.
So a board reads the artefacts, sees nothing wrong, and signs. The artefacts were never going to show the problem. They are the wrong instrument.
What is Hidden Fragility?
Hidden Fragility is the most dangerous position an organisation can occupy: low capability with high confidence.
Plot capability against confidence and you get four quadrants. High capability with high confidence is earned assurance. High capability with low confidence is undervalued strength. Low capability with low confidence is uncomfortable, but at least it is honest. Low capability with high confidence is the danger zone, because nothing looks wrong until a decision fails in public.
That is where boards get blindsided. Not through bad luck. Through unexamined confidence.
Can decision governance actually be measured?
Yes, and this is the part most people assume is impossible.
Decision governance maturity can be assessed across thirty domains and three phases, from how capital gets allocated through to the integrity and legitimacy of the decision system itself. Every domain is scored twice, once for capability and once for confidence. The gap between the two is the finding. It is built to catch the organisations whose self assessment is wrong, which is to say, the ones most at risk.
This is the opposite of a survey. A survey asks people what they think. This measures what they can evidence.
Why does this matter now?
Because the rules changed, and the change is quiet.
Under mandatory climate reporting and the wider tightening of governance expectations, boards are increasingly accountable for the quality of the judgement behind their disclosures, not just the disclosures themselves. Every major framework, the ASX Corporate Governance Principles, the UK Corporate Governance Code, SOX, Basel III, APRA CPS 220, assumes you decide well. Not one of them measures whether you do.
So the requirement to make good decisions has never been higher, and the means to prove you make them has never existed. That is the gap this fills.
What should a board do about it?
Stop asking whether your organisation makes good decisions. You will always answer yes.
Ask instead whether you could prove it. Pull your last twenty material decisions and, for each one, evidence how it was made, who made it, and what it was weighed against. Not the conclusion. The reasoning.
If you can, you are rare. If you cannot, you have found your Assurance Gap, and it is far better that you found it than an inquiry did.
Every governance failure begins as a behavioural one. So instrument the behaviour, not just the risk.
Start here
The exercise above costs nothing but an afternoon, and it is the fastest way to feel the edge of your own Assurance Gap. Do it before your next board meeting. If showing your working is harder than it should be, that is not a filing problem. It is a decision governance problem, and it has been building quietly for years.
Do not wait for an inquiry to measure it for you. If you want to know what your decision system can actually evidence, domain by domain, at board level, speak to an expert at Kepa Software about a decision governance assessment. Your confidence is not evidence. But it can be tested, and the boards that test it are the ones that will weather the next decade.
Alternatively, call us at 1300 500 444 or send an email to enquiries@kepasoftware.com
