Governance Has a Growth Curve
Governance requirements are not static. They change as organizations grow — not linearly, not predictably, but in a recognizable pattern that practitioners who have built or studied organizations across multiple growth stages can describe with reasonable precision.
The governance that made a five-person organization effective is the governance that will make a fifty-person organization dysfunctional. The decision speed, the information informality, the founder authority, the undocumented norms — all of these were features at Stage 1. They are bugs at Stage 3. Organizations that do not recognize this growth curve install governance too late, pay too much for the lessons it should have prevented, and often attribute the resulting failures to leadership or culture rather than to the simpler diagnosis: the governance infrastructure was sized for the organization two years ago.
The inverse problem is also real. Organizations that over-govern — that install Stage 4 governance infrastructure in a Stage 2 organization — pay a different cost: process weight, decision latency, capacity consumed by governance activity rather than operational delivery. Both are failures of governance calibration. The Staged Governance Model described in this article provides a structured diagnostic for identifying where an organization currently is, what the next stage requires, and how to sequence the transition.
The Five-Stage Model
Stage 1 — Founder Governance. The defining characteristic of Stage 1 governance is that one person — the founder, the director, the principal — makes all significant decisions. There may be other people in the organization, but they are executing, not deciding. Strategy is in the founder's head. Policy is what the founder would do in this situation. Accountability is what the founder is willing to tolerate.
Stage 1 governance is not bad governance. It is appropriate governance for a very small organization with a single point of authority, low complexity, and high need for decision speed. It is fast, coherent, and aligned — because all decisions run through the same mental model. Its failure mode is not dysfunction; it is fragility. The organization's governance capacity is entirely a function of one person's attention, judgment, and availability. When that person is unavailable, governance stops. When that person makes a bad decision, there is no check.
The diagnostic signals for Stage 1: decisions are made in the founder's head or in informal conversations; there are no documented policies; role definitions exist informally if at all; financial authority is undifferentiated; there is no formal accountability process for any role including the founder's.
Stage 2 — Delegated Governance. Stage 2 begins when the organization grows large enough that the founder can no longer make every decision and maintain operational output. Some decisions are delegated — to a senior staff member, to a team lead, to a trusted partner. But the delegation is informal and implicit. The person who received authority knows they have it because the founder said so, not because there is a documented authority framework. The accountability for the delegate is informal: the founder checks in, provides feedback, and corrects decisions they disagree with — but there is no formal evaluation, no documented expectation, no defined consequence for underperformance.
Stage 2 governance is characterized by implicit accountability: people are held responsible for outcomes, but the standards, processes, and consequences of accountability are not written down. This works when the delegate and the founder have shared norms and shared understanding of what good looks like. It fails when they do not — or when the delegate role is filled by someone new who does not share the implicit framework the organization has been operating on.
The diagnostic signals for Stage 2: the founder has delegated some decisions but cannot describe the exact boundaries of what has been delegated; there are role definitions for some positions but not all; financial authority exists in practice but is not documented in a delegation framework; the organization has informal norms that are well-understood by long-tenured staff and opaque to new hires; accountability is exercised primarily through informal feedback.
Stage 3 — Structured Governance. Stage 3 is the first stage where governance becomes explicit. It is characterized by: documented decision rights (who can decide what, without reference to the founder), written policies for significant operational domains (HR, finance, procurement, data), a defined accountability structure (who evaluates whom, on what basis, at what frequency), and a board or governing body that exercises oversight in a meaningful way rather than rubber-stamping management.
The transition from Stage 2 to Stage 3 is the most common governance crisis point. Organizations that reach Stage 2 successfully — that have grown through the founder stage, that have begun delegating — often stay at Stage 2 longer than their size warrants. They defer the explicit governance infrastructure because it feels bureaucratic, because the founder is comfortable with the informal system, or because the crisis that would force the transition has not yet materialized. When it materializes — typically in the form of a significant HR dispute, a financial irregularity, a board conflict, or a senior departure — the governance debt of operating Stage 2 governance in a Stage 3-sized organization comes due all at once.
The diagnostic signals for Stage 3 readiness: the organization has 15+ people; delegation is happening but generating confusion about authority; the founder is being copied on decisions that should not require their input; new hires are creating friction because they operate on explicit policy rather than implicit norm; the board is asking questions about governance infrastructure that management cannot answer.
The minimum Stage 3 infrastructure: a documented delegation of authority framework, an HR policy covering the employee lifecycle, a financial policy covering authority thresholds and approval chains, a board charter specifying the board's role and the CEO accountability process, and a documented performance evaluation process for at least the executive team.
Stage 4 — Systematic Governance. Stage 4 adds three elements to the Stage 3 infrastructure: integrated risk management, formal board oversight functions (audit, risk, or governance committees), and an internal or external audit function appropriate to the organization's size and sector.
Stage 4 is appropriate for organizations with significant public accountability obligations — regulated financial institutions, large nonprofits with major public funders, publicly accountable service providers, or organizations approaching a significant transaction (merger, acquisition, regulatory licensing). It is not appropriate for most organizations of 50–200 people. The governance overhead of Stage 4 — the committee structure, the audit function, the formal risk management framework — is only justified when the accountability environment requires it.
The diagnostic signals for Stage 4 readiness: external regulatory requirements mandate audit, financial reporting at a scale that requires external review, a governance failure has occurred that requires formal remediation, or a board of significant size and professional composition has determined that the oversight risk warrants the investment.
Stage 5 — Institutional Governance. Stage 5 is characterized by: external accountability relationships (regulatory oversight, stock exchange listing, major public grant with external audit), professional governance staff (corporate secretary, general counsel, chief compliance officer), formal standing committees with charter-defined authority, and governance processes that run independently of any specific leader's initiative.
Stage 5 governance is designed to survive leadership transition — to maintain consistency, compliance, and accountability even as executives and board members change. It achieves this by embedding governance in institutional processes rather than in personal relationships. The trade-off is adaptability: Stage 5 governance is slower, more expensive, and less responsive to novel situations than earlier stages. These are acceptable trade-offs for organizations operating at scale in highly regulated environments. They are unnecessary costs for organizations that are not.
The Diagnostic: Where Are You?
The Staged Governance Model provides a diagnostic tool built around five domains: decision authority, policy and documentation, accountability structure, board function, and risk management.
For each domain, rate the current state on a 1–5 scale where 1 corresponds to Stage 1 and 5 corresponds to Stage 5. The average across domains gives the current governance stage. The mode gives the most reliable single indicator.
Decision authority: 1 = founder makes all decisions; 2 = informal delegation without documentation; 3 = documented delegation framework with defined authority limits; 4 = formal delegation with audit trail and compliance verification; 5 = institutional authority framework independent of specific leaders.
Policy and documentation: 1 = no documented policies; 2 = some informal documentation of practices; 3 = documented policies for major operational domains; 4 = policy framework with review cycle and compliance monitoring; 5 = regulatory-grade policy infrastructure with version control and formal review.
Accountability structure: 1 = accountability through founder relationship; 2 = informal performance expectations; 3 = documented performance management process; 4 = formal evaluation system with board oversight of executive; 5 = multi-layered accountability including external audit and regulatory reporting.
Board function: 1 = no formal board or purely advisory; 2 = board exists but primarily ratifies management decisions; 3 = board exercises meaningful oversight with charter, regular meetings, and CEO accountability; 4 = board with standing committees and formal audit/risk function; 5 = board with professional directors, external audit, and institutional independence.
Risk management: 1 = no formal risk identification; 2 = informal risk awareness; 3 = active risk list with ownership and escalation triggers; 4 = integrated risk management framework with board-level risk reporting; 5 = enterprise risk management with regulatory compliance.
A diagnostic that returns a profile of [1, 2, 3, 1, 2] — decision authority still founder-dependent, no board function, early risk management — identifies the specific governance gaps to address in sequence: decision authority framework first, then board structure, then risk management.
Reading a Profile: A Worked Example
The profile is more useful than the average, and the reason is worth making explicit. Consider that [1, 2, 3, 1, 2] profile in full. The average is 1.8, which would round to "early Stage 2." But the average conceals the actual problem. This organization has built a documented performance management process (accountability scored 3) while its decision authority is still entirely founder-dependent (scored 1). It is holding people accountable through a structured process for outcomes they have no documented authority to produce. That is not a Stage 2 organization with a uniform infrastructure gap. It is an organization with a specific, diagnosable internal contradiction — accountability infrastructure built ahead of the authority infrastructure that makes accountability fair.
The sequencing the profile implies is therefore not "advance everything to Stage 2." It is: close the decision authority gap first, because the accountability process already in place is generating unfair consequences without it. The board function gap (also scored 1) comes second, because an organization with structured accountability and emerging delegation needs an oversight body before it adds risk infrastructure. Risk management (scored 2) is the lowest priority of the three gaps, because it is the least load-bearing for the contradictions the organization is currently living with.
The principle the profile makes visible is that the binding constraint is the floor, not the ceiling. An organization is held back by its weakest load-bearing domain, not lifted by its strongest. Reading the profile domain-by-domain prevents the common error of investing in the domain that is already most mature because it is the most legible and the easiest to improve further.
The Transition Requirements Between Stages
Each stage transition has specific requirements. Attempting to skip stages produces the over-governance failure mode described below.
Stage 1 to Stage 2: The primary requirement is the first explicit delegation. Not an informal "you handle X" — a documented agreement specifying what the delegate can decide without reference to the founder, what requires consultation, and what requires approval. Even a single page is more valuable than informal understanding. The secondary requirement is a basic financial authority policy: who can authorize expenditure up to what amount, who must approve above that threshold.
Stage 2 to Stage 3: Three documents must exist before Stage 3 can function: a delegation of authority framework covering all significant operational domains, an HR policy covering the employee lifecycle, and a board charter. These are not comprehensive governance documents — they are the minimum explicit infrastructure that makes Stage 3 governance operable. Without them, the organization will revert to Stage 2 norms under pressure.
Stage 3 to Stage 4: The transition to Stage 4 requires an external trigger — a regulatory requirement, a significant audit, a major public accountability obligation — because Stage 4 governance cost is only justified by Stage 4 accountability pressure. Organizations that attempt Stage 4 governance without external accountability drivers will find the overhead unsustainable.
Stage 4 to Stage 5: Stage 5 is organizational maturity at scale. The transition is driven by institutional complexity, regulatory environment, and public accountability obligations. Most organizations will not reach Stage 5, and should not attempt to.
The Failure Mode of Over-Governing
Over-governing — installing Stage 4 governance in a Stage 2 organization — is the less-discussed governance failure mode. It produces three specific dysfunctions.
Decision paralysis. Governance infrastructure designed for a 500-person organization requires approvals, documentation, and process verification that a 20-person organization cannot sustain without consuming operational capacity. The people who should be making decisions are instead managing governance process. Decisions that should take a day take a week. The organization's competitive advantage — the speed and coherence of its early stage — is consumed by process weight.
Talent friction. High-governance organizations attract and retain people who are comfortable in structured environments. They lose people who joined for the autonomy and pace of early-stage organizations. The governance infrastructure signals organizational culture. Stage 4 governance signals Stage 4 culture, even when the organization is Stage 2 in every other dimension.
Founder resistance. Governance infrastructure that is too advanced for the current stage will not be used. The founder and early team, who built the organization on informal norms, will route around governance processes that feel unnecessary. Governance that is bypassed is worse than no governance — it creates the appearance of structure with none of the protection.
The principle is proportionality: the governance investment should match the governance need. Governance is not a virtue in itself. It is infrastructure that protects the organization and enables it to operate reliably as it grows. Too little infrastructure leaves the organization fragile. Too much infrastructure makes it slow. The diagnostic's value is in identifying not the governance ceiling but the governance floor — the minimum investment that brings the organization to the next sustainable stage.
Where the Model Breaks Down
The staged model is a diagnostic, not a law. It describes a common growth curve, and the most important thing to know about it is where the curve does not apply — because treating a heuristic as a rule is its own governance failure.
The model assumes a single organization with a single growth trajectory, and it generalizes poorly to organizations that span stages internally. A holding structure with a Stage 1 venture and a Stage 4 regulated subsidiary does not have "a stage" — it has a portfolio of stages, and the diagnostic must be run per entity. It also assumes growth is the driver. Some organizations need Stage 4 infrastructure at twenty people because of what they do, not how large they are — a firm handling regulated client funds, a venture holding sensitive data under statutory obligation. For these the accountability environment, not headcount, sets the floor. The model's own escape hatch is the Stage 3-to-4 rule: the trigger is external accountability pressure, which can arrive at any size, and when it arrives early the organization must skip-build the specific infrastructure the obligation demands rather than the whole stage.
A second limit is drift. A diagnostic run today describes today. An organization that documents a delegation framework and then never uses it has the artifact of Stage 3 and the behavior of Stage 2. The model rates infrastructure; reality runs on whether the infrastructure is enforced. A re-rating every twelve months, scored against observed behavior rather than the existence of documents, is the discipline that keeps the diagnostic honest.
Governance as Compound Investment
The organizations that navigate governance transitions most successfully treat governance as a compound investment rather than a compliance cost. They build the Stage 3 infrastructure before the Stage 2 crisis makes it urgent. They design Stage 4 readiness into Stage 3 infrastructure so the transition requires extension rather than rebuilding. They capture governance lessons — what the current infrastructure failed to prevent, what the next stage requires — and embed them in the infrastructure before the next failure.
This is not a natural organizational instinct. Under operational pressure, governance investment looks like a cost. The cost of a board charter is a day of the executive director's time. The cost of the governance crisis it prevents — the disputed decision, the donor relations failure, the employment dispute — is measured in months and sometimes in organizational survival.
The governance maturity model does not tell organizations to build more governance than they need. It tells them to build the governance they need before they need it, at the stage they are at, calibrated to the accountability environment they are operating in. This is the standard professional practice in every other infrastructure domain. It is less practiced in governance — which is why so many organizations meet Stage 3 problems with Stage 1 solutions.
What You Can Run This Week
The model earns its value the first time you score yourself, and that takes under an hour. Rate your organization 1–5 on the five domains — decision authority, policy and documentation, accountability structure, board function, risk management — from observed behavior, not from documents you intend to write. Write down the profile, not just the average. Then read the floor: find the lowest-scoring domain that is currently load-bearing — the one whose weakness is producing friction you can name. That is your next investment, regardless of which domain would be more satisfying to advance. If two domains tie at the floor and one is generating unfair consequences — accountability ahead of authority, for instance — that contradiction is your sequencing answer.
The single most useful artifact to produce this week is the one the next stage requires that you do not yet have. If you are Stage 1 reaching toward Stage 2, it is the one-page delegation agreement. If you are Stage 2 reaching toward Stage 3, it is whichever of the three required documents — delegation framework, HR policy, board charter — is most overdue. Building the minimum next artifact before the crisis that demands it is the entire discipline. Everything else in the model is in service of knowing which artifact that is.
Continue in this series
This piece is part of What Is Organizational Governance? A Systems Practitioner's Complete Guide, my systematic guide to organizational governance and operating systems. Related reading:
- What Is Organizational Governance? A Systems Practitioner's Complete Guide
- The Six Most Common Governance Failure Modes
- Why Governance Survives Leadership Changes Only When It Is Structural
- Decision Velocity in Distributed Operations Without Becoming the Bottleneck
Working through this in your own organization? I help technical leaders design it directly — advisory engagements.
