The situation
Mandatory always wins. The question is what loses.
Operational resilience, cybersecurity, AI governance, sustainability reporting: whatever the jurisdiction, each new rule brings work that has to be planned. A new mandate usually arrives with a fixed date and no room to negotiate. Putting it at the top of the list is the easy part. Working out what happens to everything else is where portfolio plans start to break.
In banks, insurers, telcos and utilities, the change portfolio often splits into “mandatory” and “everything else.” Mandatory wins, as it should. But when nobody can see the trade-offs, everything else shrinks quietly, one regulation at a time, until the strategic agenda has little capacity left. Few leaders can show how much of their change capacity goes to mandatory work, by team and by quarter, and that share decides how much strategy they can afford.
Speed brings its own risk. Under deadline pressure, a replan done by hand can break a dependency to make a date look achievable, move a commitment that was meant to stay put, or let a deadline slip without anyone noticing. And for a program under scrutiny, “we’ll comply” is not enough. The regulator expects to see the plan, and evidence that delivery is on track.