Why Governance Matters: The Key to Reducing Risk Without Slowing Down

QCon London 2026

Session security

Why Governance Matters: The Key to Reducing Risk Without Slowing Down

Tuesday Mar 17 / 10:35AM GMT, Mountbatten (6th Fl.) at The QEII Centre, London

Abstract

When you hear “governance,” you might think of red tape, bureaucracy, or someone telling you what you can’t do. But real governance is about alignment and reducing technical risk. And that matters more than ever.

In most cases, engineers aren’t deliberately making risky decisions—they just don’t have clear expectations. That’s where good governance comes in. It ensures everyone understands what “good” looks like, gives teams the autonomy to move fast while staying on course, and provides built-in mechanisms to self-correct before small missteps become big problems.

In this talk, I’ll break down how to implement governance that actually helps, not hinders, including:

  • Understanding what’s in your software estate
  • Making smart technology choices - and why “boring” is often best
  • Turning policies into automated steps on the way to production

If you want to reduce risk, improve decision-making, and keep your organization running smoothly—without slowing your teams down—this session is for you.

Topics

security Platform Engineering risk governance
76% senior dev or higher
1:11 speaker ratio
60+ practitioners

QCon London 2026 is a three day conference for senior software engineers, architects and team leads. An international program committee of working engineers selects every session. Patterns and practices, not products and pitches.

Share

From the same track

Tuesday 17 March

10:35 Mountbatten (6th Fl.) Session security Why Governance Matters: The Key to Reducing Risk Without Slowing Down Sarah Wells Independent Consultant and Author 11:45 Mountbatten (6th Fl.) Session Kernel Building on Bedrock: A Security Philosophy from Bootloader to Runtime Alex Zenla Founder & CTO @Edera 13:35 Mountbatten (6th Fl.) Session SBOMs From Chaos to Clarity: Modern SBOM Practices That Actually Work Viktor Petersson Founder of sbomify, Co-founder & CEO of Screenly, Host of Nerding Out with Viktor 14:45 Rutherford (4th Fl.) Unconference Unconference: Software Security & Risk Management 15:55 Windsor (5th Fl.) Session security Exploding GPUs Andrew Martin Founder and CEO @ControlPlane, CISO OpenUK, CNCF Security Advisory Group 17:05 Windsor (5th Fl.) Session security Adopting Memory-Safety and Fine-Grained Compartmentalisation With CHERI David Chisnall Director of System Architecture @SCI Semiconductor, OS, Compiler, and Computer-Architecture Expert, Maintainer of the CHERIoT Platform