Article

The Diplomatic Disruptor - Challenging Broken Governance Without Burning the Institution

This article explores how meaningful change in risk and governance can be achieved without confrontation or disruption for its own sake. Through the career of Courtenay Brammar, it highlights how systemic weaknesses—particularly in cybersecurity—often stem from governance failures rather than purely technical shortcomings. Drawing on her background in operational risk during the Basel II reforms, Brammar identified early that cyber risk was rooted in fragmented accountability and inconsistent controls. Rather than criticising from the outside, she built evidence-based frameworks, developed cross-disciplinary expertise, and worked within institutions to influence change. Her approach combines intellectual rigor, curiosity, and persistence, showing how professionals can challenge entrenched systems constructively. The article ultimately presents a broader lesson for risk professionals: sustainable transformation comes not from breaking institutions, but from reshaping them through insight, credibility, and disciplined engagement.