{"id":3295,"date":"2026-09-23T10:23:50","date_gmt":"2026-09-23T08:23:50","guid":{"rendered":"https:\/\/www.pfadvisory.it\/?p=3295"},"modified":"2026-09-23T12:09:55","modified_gmt":"2026-09-23T10:09:55","slug":"understanding-complexity-governing-it","status":"publish","type":"post","link":"https:\/\/www.pfadvisory.it\/en\/understanding-complexity-governing-it\/","title":{"rendered":"Understanding complexity, Governing IT"},"content":{"rendered":"<h2 class=\"wp-block-heading\">Why the quality of decisions depends on the quality of the context<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In modern organizations, complexity is not an obstacle to be eliminated but an intrinsic condition of systems. Technological interdependencies, the pace of innovation, regulatory evolution and the globalization of supply chains make it increasingly difficult to trace a problem back to a single cause or a single function. In this scenario, governance cannot be reduced to managing isolated risks or fragmented indicators; it must instead understand the context, interpret connections and anticipate their consequences. The quality of decisions, in fact, depends on the quality of the context on which those decisions are made<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Understanding complexity to improve the quality of decisions<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1. Complexity as a structural condition<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Complexity is often perceived as a problem to be reduced. However, in contemporary organizational systems it is a structural characteristic, generated by:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>interdependent technologies and distributed infrastructures<\/li>\n\n\n\n<li>regulations in continuous evolution<\/li>\n\n\n\n<li>global and multilayered supply chains<\/li>\n\n\n\n<li>new cyber threats and systemic risks<\/li>\n\n\n\n<li>accelerated organizational transformations<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These elements create ecosystems in which relationships matter more than individual components.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. Why understanding the context is essential <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Governing complexity requires first and foremost understanding it. This principle is recognized by major international standards:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">ISO 31000 considers the definition of context a fundamental element of the risk\u2011management process and promotes the integration of risk into governance, strategy and decision\u2011making processes.<\/li>\n\n\n\n<li class=\"translation-block\">NIST Cybersecurity Framework 2.0 begins with an understanding of organizational context and risk: the Govern function establishes strategy, expectations and policies, while the Identify function enables the understanding of assets, suppliers and relevant cyber risks.<\/li>\n\n\n\n<li class=\"translation-block\">DORA (Regulation EU 2022\/2554) requires that the ICT risk\u2011management framework be integrated into the entity\u2019s overall risk\u2011management system and proportionate to the nature, scale and complexity of its activities.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In all these cases, complexity is not a factor to be simplified, but one to be interpreted.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. Observing connections, not just indicators<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Understanding context means going beyond individual indicators and observing connections. It means asking:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><em>What is actually changing?<\/em><\/li>\n\n\n\n<li><em>Which dependencies are emerging?<\/em><\/li>\n\n\n\n<li><em>Which risks are shifting?<\/em><\/li>\n\n\n\n<li><em>Which consequences are we not yet observing?<\/em><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Complexity often manifests in the invisible relationships between processes, technologies, people and suppliers. Ignoring these relationships means making decisions based on an incomplete representation of the system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4. Better decisions require better contexts <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The quality of a decision depends on the quality of the context on which that decision is made. A poor, fragmented or outdated context leads to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>distorted assessments<\/li>\n\n\n\n<li>incorrect priorities<\/li>\n\n\n\n<li>underestimated risks<\/li>\n\n\n\n<li>ineffective responses<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Conversely, a rich, integrated and dynamic context enables organizations to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>make informed and resilient decisions<\/li>\n\n\n\n<li>anticipate changes<\/li>\n\n\n\n<li>understand dependencies <\/li>\n\n\n\n<li>evaluate systemic impacts<\/li>\n<\/ul>\n\n\n\n<div style=\"height:18px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5. The role of modern governance<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph translation-block\">Before governing complexity, we must learn to read it. Modern governance has a crucial task: transforming complexity from noise into actionable information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This requires:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>advanced analytical capabilities<\/li>\n\n\n\n<li>integration of data and processes<\/li>\n\n\n\n<li>systemic vision<\/li>\n\n\n\n<li>cross\u2011functional collaboration<\/li>\n\n\n\n<li>dynamic monitoring tools<\/li>\n\n\n\n<li>solid and coherent reference frameworks<\/li>\n<\/ul>\n\n\n\n<div style=\"height:0px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Complexity as a strategic competence of modern governance<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Complexity is not an obstacle but a language. Organizations that learn to read it can turn into advantage what others perceive only as noise.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Understanding context is the first step in governing complexity \u2014 a principle recognized by international standards, cybersecurity frameworks and European ICT\u2011risk regulations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The quality of decisions depends on the quality of the context. And the quality of the context depends on the ability of governance to interpret connections, dependencies and transformations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In an interconnected world, understanding complexity is no longer optional: it is a strategic competence.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Sources and Regulatory References<\/h3>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">European Regulations<\/h4>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Regulation (EU) 2022\/2554 \u2014 DORA, Articles 4\u20136\nIntegration of ICT risk into the overall risk\u2011management system, proportionate to the entity\u2019s complexity.<\/li>\n\n\n\n<li class=\"translation-block\">Directive (EU) 2022\/2555 \u2014 NIS2  \nStrengthening cyber resilience and risk management for essential and important sectors.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">International Frameworks<\/h4>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>NIST AI Risk Management Framework 1.0<\/strong>\n<ul class=\"wp-block-list\">\n<li>Functions <em>Govern, Map, Measure, Manage<\/em> for AI risk management.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>ISO 31000:2018 \u2014 Risk Management System<\/strong>\n<ul class=\"wp-block-list\">\n<li>Principi, framework e processo per la gestione del rischio, con enfasi sulla definizione del contesto.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"<p>Complexity is not an anomaly to be reduced, but a structural condition of contemporary organizational systems. Interdependent technologies, dynamic regulations, global ecosystems and emerging risks make any approach that attempts to isolate causes or functions insufficient. Governing complexity requires first and foremost understanding it \u2014 a principle recognized by major international standards, cybersecurity frameworks and European ICT\u2011risk regulations. This article examines why the quality of decisions depends on the quality of the context, and how modern governance must transform complexity from noise into actionable information.<\/p>","protected":false},"author":1,"featured_media":3297,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[],"class_list":["post-3295","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Understanding complexity, Governing IT | PF Advisory<\/title>\n<meta name=\"description\" content=\"Scopri perch\u00e9 la governance dell&#039;intelligenza artificiale deve precedere l&#039;adozione aziendale tra AI Act, NIST e ISO 42001.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pfadvisory.it\/en\/understanding-complexity-governing-it\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Understanding complexity, Governing IT | PF Advisory\" \/>\n<meta property=\"og:description\" content=\"Scopri perch\u00e9 la governance dell&#039;intelligenza artificiale deve precedere l&#039;adozione aziendale tra AI Act, NIST e ISO 42001.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pfadvisory.it\/en\/understanding-complexity-governing-it\/\" \/>\n<meta property=\"og:site_name\" content=\"PF Advisory\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-23T08:23:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-23T10:09:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/09\/uupq9sfi-1024x808.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"808\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"wp_19764851\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"wp_19764851\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/\"},\"author\":{\"name\":\"wp_19764851\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#\\\/schema\\\/person\\\/fb34cce26c0ad7d653104ef34f523146\"},\"headline\":\"Understanding complexity, Governing IT\",\"datePublished\":\"2026-09-23T08:23:50+00:00\",\"dateModified\":\"2026-09-23T10:09:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/\"},\"wordCount\":665,\"publisher\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/uupq9sfi.png\",\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/\",\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/\",\"name\":\"Understanding complexity, Governing IT | PF Advisory\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/uupq9sfi.png\",\"datePublished\":\"2026-09-23T08:23:50+00:00\",\"dateModified\":\"2026-09-23T10:09:55+00:00\",\"description\":\"Scopri perch\u00e9 la governance dell'intelligenza artificiale deve precedere l'adozione aziendale tra AI Act, NIST e ISO 42001.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/uupq9sfi.png\",\"contentUrl\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/uupq9sfi.png\",\"width\":1217,\"height\":960},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/understanding-complexity-governing-it\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.pfadvisory.it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Understanding complexity, Governing IT\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#website\",\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/\",\"name\":\"PF Advisory\",\"description\":\"Information security | Governance and Compliance\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#organization\"},\"alternateName\":\"pf advisory\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.pfadvisory.it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#organization\",\"name\":\"PF Advisory\",\"alternateName\":\"pf advisory\",\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/logo_normale2-scaled.png\",\"contentUrl\":\"https:\\\/\\\/www.pfadvisory.it\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/logo_normale2-scaled.png\",\"width\":2560,\"height\":290,\"caption\":\"PF Advisory\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/pfadvisory26\\\/?viewAsMember=true\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.pfadvisory.it\\\/#\\\/schema\\\/person\\\/fb34cce26c0ad7d653104ef34f523146\",\"name\":\"wp_19764851\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g\",\"caption\":\"wp_19764851\"},\"sameAs\":[\"https:\\\/\\\/www.pfadvisory.it\"],\"url\":\"https:\\\/\\\/www.pfadvisory.it\\\/en\\\/author\\\/wp_19764851\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Understanding complexity, Governing IT | PF Advisory","description":"Scopri perch\u00e9 la governance dell'intelligenza artificiale deve precedere l'adozione aziendale tra AI Act, NIST e ISO 42001.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pfadvisory.it\/en\/understanding-complexity-governing-it\/","og_locale":"en_GB","og_type":"article","og_title":"Understanding complexity, Governing IT | PF Advisory","og_description":"Scopri perch\u00e9 la governance dell'intelligenza artificiale deve precedere l'adozione aziendale tra AI Act, NIST e ISO 42001.","og_url":"https:\/\/www.pfadvisory.it\/en\/understanding-complexity-governing-it\/","og_site_name":"PF Advisory","article_published_time":"2026-09-23T08:23:50+00:00","article_modified_time":"2026-09-23T10:09:55+00:00","og_image":[{"width":1024,"height":808,"url":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/09\/uupq9sfi-1024x808.png","type":"image\/png"}],"author":"wp_19764851","twitter_card":"summary_large_image","twitter_misc":{"Written by":"wp_19764851","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/#article","isPartOf":{"@id":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/"},"author":{"name":"wp_19764851","@id":"https:\/\/www.pfadvisory.it\/#\/schema\/person\/fb34cce26c0ad7d653104ef34f523146"},"headline":"Understanding complexity, Governing IT","datePublished":"2026-09-23T08:23:50+00:00","dateModified":"2026-09-23T10:09:55+00:00","mainEntityOfPage":{"@id":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/"},"wordCount":665,"publisher":{"@id":"https:\/\/www.pfadvisory.it\/#organization"},"image":{"@id":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/09\/uupq9sfi.png","articleSection":["Cybersecurity"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/","url":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/","name":"Understanding complexity, Governing IT | PF Advisory","isPartOf":{"@id":"https:\/\/www.pfadvisory.it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/#primaryimage"},"image":{"@id":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/09\/uupq9sfi.png","datePublished":"2026-09-23T08:23:50+00:00","dateModified":"2026-09-23T10:09:55+00:00","description":"Scopri perch\u00e9 la governance dell'intelligenza artificiale deve precedere l'adozione aziendale tra AI Act, NIST e ISO 42001.","breadcrumb":{"@id":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/#primaryimage","url":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/09\/uupq9sfi.png","contentUrl":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/09\/uupq9sfi.png","width":1217,"height":960},{"@type":"BreadcrumbList","@id":"https:\/\/www.pfadvisory.it\/understanding-complexity-governing-it\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pfadvisory.it\/"},{"@type":"ListItem","position":2,"name":"Understanding complexity, Governing IT"}]},{"@type":"WebSite","@id":"https:\/\/www.pfadvisory.it\/#website","url":"https:\/\/www.pfadvisory.it\/","name":"PF Advisory","description":"Information security | Governance and Compliance","publisher":{"@id":"https:\/\/www.pfadvisory.it\/#organization"},"alternateName":"pf advisory","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pfadvisory.it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.pfadvisory.it\/#organization","name":"PF Advisory","alternateName":"pf advisory","url":"https:\/\/www.pfadvisory.it\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.pfadvisory.it\/#\/schema\/logo\/image\/","url":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/07\/logo_normale2-scaled.png","contentUrl":"https:\/\/www.pfadvisory.it\/wp-content\/uploads\/2026\/07\/logo_normale2-scaled.png","width":2560,"height":290,"caption":"PF Advisory"},"image":{"@id":"https:\/\/www.pfadvisory.it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/pfadvisory26\/?viewAsMember=true"]},{"@type":"Person","@id":"https:\/\/www.pfadvisory.it\/#\/schema\/person\/fb34cce26c0ad7d653104ef34f523146","name":"wp_19764851","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e2ba93f8e0de04f34e142d26e1655ca3851dc793989e5645727d1540b17d314c?s=96&d=mm&r=g","caption":"wp_19764851"},"sameAs":["https:\/\/www.pfadvisory.it"],"url":"https:\/\/www.pfadvisory.it\/en\/author\/wp_19764851\/"}]}},"_links":{"self":[{"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/posts\/3295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/comments?post=3295"}],"version-history":[{"count":5,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/posts\/3295\/revisions"}],"predecessor-version":[{"id":3304,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/posts\/3295\/revisions\/3304"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/media\/3297"}],"wp:attachment":[{"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/media?parent=3295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/categories?post=3295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pfadvisory.it\/en\/wp-json\/wp\/v2\/tags?post=3295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}