CONTROL PORTFOLIO THEORY: Optimising governance through dynamic control portfolio rebalancing

“CONTROL PORTFOLIO THEORY: Optimising governance through dynamic control portfolio rebalancing” (Conceptual, theory‑building monograph – Draft V1, December 2025, Sydney 2000)For decades I have seen a recurring problem in both practice and research:Organisations do not fail because they have no controls; they fail because they have the wrong mix of controls for their growth trajectory.This working paper introduces Control Portfolio Theory (CPT) – a framework that treats organisational controls as an investment portfolio that must be continuously optimised and rebalanced, not a static checklist to be maximised.What CPT provides: --12 structured control families as asset classes: Administrative, Management, Cultural, Ethical, Information & Communication, Monitoring & Continuous Improvement, IT & Cybersecurity, Integration, Elastic, Environmental, Knowledge, Relational. --Three portfolio‑level metrics you can monitor in real time. -- A full Control Work Breakdown Structure (Control WBS v1.0) – a six‑level, code‑based catalogue (~2000+ elements) that maps CPT’s 12 families directly to: COSO, SOX, ISO 31000, COBIT 2019, NIST CSF 2.0, ISO 27001:2022, GDPR, and the IIA Three Lines Model. The monograph is explicitly conceptual and theory‑building. All quantitative values – control correlations, phase‑based portfolio allocations, Synchrony Gap thresholds, Drag Index bands, Diversification Score bands, dashboard cut‑offs – are theoretically‑grounded estimates with emerging or strong empirical support from documentary analysis and recent studies (2020–2024); they require further empirical validation and local calibration.Bangladesh’s 15 major governance failures (2010–2025) are used as a “high‑intensity empirical laboratory” to stress‑test the logic. Who this draft is for :The working paper is organised so that different audiences can enter at different points:Practitioners – CROs, CAEs, governance leaders, risk/compliance heads Academic theorists and PhD students Empirical researchers Regulators and policy makers Students and general readers