Thinking

Every position here is a working one. These are not marketing statements. They are the views that shape how engagements are run and how technical decisions are made.

Sixteen Pillars — Technical Leadership & Governance. Three guiding principles — Data First, Governance, and First Principles — sit above six capabilities: architecture, security, compliance, standards, delivery, and operations, all directed toward business outcomes: technology as a governed asset that is reliable, compliant, scalable, and built to last.

The foundation

Sixteen Pillars operates across sixteen domains — the technical and organisational disciplines that determine whether a business’s technology is an asset or a liability.

The common thread is that technical decisions are never purely technical. A data model encodes how an organisation understands its own business. An architecture encodes what the organisation values — speed, reliability, security, maintainability. A governance framework encodes how the organisation behaves when nobody is watching.

Getting these things right is not a software problem. It is a leadership problem. It requires someone in the room who understands both the technology and the business consequences of technical decisions.

The Data First position

Every engagement starts with the data model.

This is not a preference. It is the result of consistent observation: most of the significant technical problems an organisation carries — fragmented systems, compliance gaps, architecture nobody fully controls, integrations that break — trace back to data that was never properly defined or governed.

The data model is the foundation. Everything built on top of it inherits its properties — good and bad. Getting it right at the start changes every decision that follows.

The governance position

Governance is not what happens during an audit. It is what happens when nobody is watching.

A well-governed technical function does not look different under scrutiny than it looks on a normal Tuesday. The policies are operating. The standards are being applied. The owners are accountable. The data is what it claims to be.

Most organisations have governance documentation. Fewer have governance that operates. The gap between the two is where technical risk lives.

The first principles position

The fundamentals of computing have not changed since the 1980s. Data structures, logic, constraints, systems thinking — these are not concepts that were superseded by modern frameworks and cloud infrastructure. They are the basis on which modern frameworks and cloud infrastructure are built.

Most of the problems that appear in enterprise systems appear because someone stopped working from first principles and started working from assumptions about what the framework would handle. It rarely handles it.

The writing

What follows is an ongoing record of positions, observations, and analysis. Written from practice, not theory.

What an architecture review actually examines

June 9, 2026

An architecture review is often misunderstood as a documentation exercise. Someone arrives, reads the architecture documents, comments on whether they look reasonable, and leaves a report behind. This is not an architecture review. This is reading. A genuine architecture review examines what the organisation actually has — which is almost never what the architecture documents

A clean four-box architecture diagram showing CRM, ERP, website, and finance — labelled "what the organisation thinks it has" — being peeled back like paper to reveal a much more complex blueprint underneath labelled "what the organisation actually runs", containing legacy systems, custom Excel reports, spreadsheets everywhere, integrations built by someone who left, marketing automation, manual reconciliations, no IT visibility, no documentation, and tribal knowledge. A legend at the bottom categorises integrations, manual processes, unsupported risks, and shadow systems. A four-step methodology runs down the left side: start with people, inventory and questions, apply the lenses, deliver what matters. The footer reads: the most important systems are often the ones missing from the diagram.

Without a roadmap, every decision is reactionary

June 9, 2026

An organisation without a roadmap is not undirected. It is directed by whatever is shouting loudest at any given moment. The strategic vacuum does not feel like a vacuum from the inside. There is plenty of activity. Decisions are being made. Projects are being funded. Vendors are being selected. The organisation appears to be moving.

A central roadmap labelled "Direction. Priorities. Outcomes." surrounded by eight pressure signposts — end-of-year budget, loud department, vendor promise, competitor move, emergency fix, old habit, personal preference, key account request — each pushing a project marker toward the roadmap from a different angle. The subtitle reads: activity is not progress unless it is measured against direction. The footer reads: a roadmap turns activity into direction.

I just want a website

June 9, 2026

It usually starts with a brief like this. “I just want a website. Nothing fancy. A few pages, a contact form, something that looks professional. A thousand pounds, give or take.” The website gets built. It does what was asked. For a while, this is enough. Then the business grows. The escalation Year one. The

A small shopfront labelled "Your Business" with a £1,000 website plaque sits at the start of a road that leads through escalating crates — ecommerce £1,000, accounting £4,000, inventory £2,000, returns £1,500, customer service £2,000, marketing automation £2,500, warehouse management £3,000 — ending in a tangled, fragile system marked complex, expensive, fragile, slow. A timeline runs along the bottom from Year 0 to Year 4. The footer reads: the original choice wasn't the problem, the absence of a plan was.

Platform agnostic, data first

June 9, 2026

Most architectural conversations start with the platform. Which CRM, which CMS, which ERP. The data model emerges from whichever platform was selected — shaped by its assumptions, its category structures, its custom field conventions. This is backwards. The data is the durable asset. The platforms are replaceable. An organisation that lets the platform choose its

A city skyline showing five buildings labelled CRM, CMS, ERP, ecommerce, and analytics, each connected by golden lines down to a blueprint foundation containing data entities — customer, product, contract, order, content, member — labelled as the single source of truth. The footer reads: platforms are replaceable, meaning is not.

The system is perfectly designed for the outcome you are getting

June 9, 2026

The observation is not original. It is widely attributed to Deming, though the precise origin is disputed. The point survives the attribution: if an organisation consistently produces the same operational failure, the cause is rarely the individual at the point of failure. It is the system that made that failure inevitable. Recurring problems are structural.

A diagram showing five interlocking gears labelled CRM, ERP, warehouse, reordering, and accounting — each answering a slightly different question about stock — connected to a conveyor belt producing a crate marked Stock Out. Below, a five-step diagnostic shows how multiple correct answers lead to blame, invisibility, and the need to redesign the chain. The footer reads: blame explains the last failure, architecture explains the next one.

Governance is what happens when nobody is watching

June 9, 2026

Most organisations confuse three things: policy, compliance, and governance. Policy is what you wrote down. Compliance is what you can prove. Governance is what actually happens when nobody is checking, on a normal Tuesday, in the middle of a busy quarter, when the team is under deadline pressure and the person who originally read the

A railway yard at night with multiple signals at red, amber, and green showing tracks converging and diverging through complex switching. Below: a flow showing policies, standards, processes, controls, behaviour, and outcomes. The footer reads: the audit is a snapshot, governance is the system.

The API encodes authority whether you discuss it or not

June 9, 2026

Integrations look like technical projects. Two systems, an API, some mapping, a sync schedule. The work is engineering. The deliverable is a connection. This framing is wrong, and the consequences are visible in every organisation that has built integrations without first answering a different set of questions. Who owns this entity? Who is allowed to

A diagram showing two parallel chains — systems above (CRM, ERP, ecommerce, accounting, support) and organisational teams below (sales, operations, marketing, finance, customer support) — converging on a single contact record labelled "one entity, many consequences." The footer reads: the API encodes authority whether you discuss it or not.

The cost of having two sources of truth

June 9, 2026

The report is due. The manager is waiting. In the corner of the office, someone is four hours into a VLOOKUP, trying to reconcile two versions of the same data that have never quite agreed with each other. This scene is not a one-off. It repeats itself, in the same organisation, on the same schedule,

Two compasses pointing in different directions flank a product performance report showing the same Q2 figure answered differently by System A and System B, with a variance of 67,075 flagged as an error. Caption reads: more data, less certainty.

What EU jurisdiction means for your technology decisions

June 9, 2026

Jurisdiction is not an administrative label. It is a set of live obligations that attach to an entity, travel with its data, and do not pause because the parent company is headquartered somewhere else. Most technology decisions made by international firms with EU operations are made without a clear understanding of this. The results are

A diagram showing a US parent company above a legal boundary line, with data flows — customer data, HR data, SaaS usage, AI connector, analytics — crossing down to an EU entity below. Obligations including GDPR, data residency, lawful basis, transfer mechanisms, and consent travel with each data flow across the boundary.

Operating in a market your org chart forgot

June 9, 2026

A car imported from the United Kingdom, purchased during EU membership. The manufacturer’s nagivation system asks for a country. Greece is on the list. Turkey is on the list. Cyprus — a full EU member state — is not. The system maps it to the Middle East. Nobody made that decision maliciously. Cyprus simply was

A corporate org chart showing Europe Division and Middle East Division beneath a Group Board, each with finance, legal, operations, HR, compliance, and IT. Cyprus sits in the gap between the two divisions, labelled: governed by neither, expected to satisfy both.
Next