Governance Comes First — Even When the Vendor Is Your Friend

Every leader in a regulated environment eventually faces this.

A vendor you trust — and genuinely enjoy working with — makes a mistake that impacts your systems, your customers, or your risk posture.

The first instinct is to handle it quietly. Have a call. Align. Move forward.

I’ve learned that instinct can be wrong.

Trust isn’t a control. Goodwill doesn’t satisfy audit. And relationships don’t protect the organization when accountability is questioned later.

Trust builds partnerships. Process protects institutions. When they conflict, the institution has to win.

Document it. Follow the process. Escalate when required. Not to punish anyone — but because accountability is part of the job.

The best partners understand this. In my experience, proper process doesn’t weaken the relationship — it strengthens it. Expectations become clearer. Trust becomes more grounded.

Strong partnerships can withstand accountability. That’s part of what makes them strong.

Leadership isn’t about avoiding friction. It’s about building partnerships strong enough to handle reality.