The Ambiguity — Conflict Model of Implementation in 21st-Century Risk Management and Audit Readiness
Introduction
Implementation is the point at which policy, regulation, and organizational intent encounter reality. While the design and adoption of policies often receive sustained attention, outcomes are determined by how those policies are interpreted, negotiated, and enacted over time.
This essay argues that Richard Matland’s ambiguity — conflict model remains one of the most effective frameworks for understanding implementation success and failure in contemporary governance, particularly in the underexamined domains of risk management, auditing, and regulatory compliance.
Although these domains are often framed as technical or administrative, they are better understood as implementation processes shaped by varying degrees of uncertainty and stakeholder disagreement. When ambiguity and conflict are misdiagnosed, leaders apply inappropriate tools, resulting in symbolic compliance, governance drift, or outright failure.
The argument unfolds in three parts. The first situates the ambiguity — conflict model within contemporary implementation and governance scholarship.
The second extends the model into risk management and audit readiness, demonstrating how compliance regimes routinely shift across implementation environments.
The third translates theory into actionable guidance for managers operating under modern conditions of digitalization, regulatory complexity, and legitimacy pressure.
The Ambiguity — Conflict Model Revisited
Matland’s ambiguity — conflict model emerged as a response to long-standing divisions in implementation research. Rather than privileging either hierarchical control or local discretion, the model identifies two conditions that shape outcomes. Ambiguity refers to uncertainty about goals, means, roles, or evaluation criteria.
Conflict refers to sustained disagreement among stakeholders who possess the power to influence implementation (Matland, 1995). The interaction of these dimensions produces four distinct implementation environments.
Administrative implementation occurs when ambiguity and conflict are both low. Political implementation arises when goals are clear but contested.
Experimental implementation appears when conflict is low but goals or methods are uncertain. Symbolic implementation occurs when both ambiguity and conflict are high, often resulting in actions that signal intent or legitimacy without producing substantive change.
The enduring value of the model lies in its diagnostic nature. It does not prescribe universal best practices.
Instead, it clarifies which forces dominate outcomes in a given context and therefore which forms of leadership, governance, and accountability are likely to be effective.
Contemporary Implementation and Governance Literature
Implementation scholarship has expanded considerably since Matland’s original formulation. Research on policy design emphasizes how instruments interact over time, producing layering, drift, and new forms of ambiguity even when formal goals appear stable (Capano, 2020; Howlett, 2023). Policy capacity research demonstrates that ambiguity and conflict operate across analytical, operational, and political dimensions and at multiple levels of governance (Wu, Ramesh, & Howlett, 2015).
Governance theory further complicates implementation conditions. Fragmented authority, cross-sector collaboration, and networked accountability have reduced the effectiveness of purely hierarchical control.
Kettl describes a governance environment in which responsibility is widely distributed and accountability must be negotiated rather than imposed (Kettl, 2009). Paquet similarly emphasizes heterarchical and polycentric arrangements in which coordination emerges through learning and adaptation rather than command (Paquet, 2005).
The administrative burden literature reframes implementation as a lived experience. Learning costs, compliance costs, and psychological costs shape behavior and outcomes, often reinforcing inequity despite formally neutral rules (Moynihan & Herd, 2015; Herd & Moynihan, 2018).
These insights are particularly relevant to auditing and compliance, which impose significant organizational and cognitive demands while presenting themselves as objective and technical.
Digital governance introduces additional tension. Algorithmic decision systems and automated compliance tools reduce some forms of process ambiguity while intensifying conflict and goal ambiguity related to transparency, fairness, and accountability (Eubanks, 2018; National Institute of Standards and Technology, 2023).
Rather than displacing the ambiguity — conflict model, these developments heighten its relevance by increasing the speed at which implementation contexts shift across environments.
Despite these advances, risk management and compliance auditing remain under-theorized within implementation studies.
Audits are often treated as technical assurance mechanisms rather than as governance instruments that allocate authority, signal legitimacy, and redistribute organizational effort.
This omission is striking given the central role audits play in certifying quality, security, environmental responsibility, and financial integrity across sectors.
Risk Management and Audit Readiness as Implementation Processes
Risk management and auditing are commonly framed as administrative routines governed by checklists, documentation, and formal assessments. ISO certification, internal controls, cybersecurity audits, and ESG reporting often appear to fit comfortably within the administrative quadrant of the ambiguity — conflict model.
In practice, audit readiness rarely remains purely administrative. Ambiguity emerges when standards overlap, evolve, or conflict with operational realities.
Organizations struggle to reconcile ISO requirements with data protection laws, sector-specific regulations, or emerging sustainability frameworks. Conflict arises when stakeholders disagree about audit scope, resource allocation, or whether compliance should prioritize legitimacy or learning.
As a result, auditing frequently migrates across implementation environments. Political implementation becomes visible when compliance costs are contested or when audit findings threaten established power arrangements. Experimental implementation appears in pilot programs, new assurance technologies, or emerging reporting regimes. Symbolic implementation surfaces when certifications or public commitments function primarily as legitimacy signals rather than as drivers of substantive change.
Recognizing these shifts is essential. Treating a political or symbolic compliance initiative as if it were purely administrative leads to predictable failure.
Conversely, understanding when symbolic commitments must be translated into measurable controls allows organizations to move toward substantive performance.
Implementation Environments in Practice
Administrative audit readiness depends on disciplined process design. Clear standards, documented workflows, and routine monitoring reduce ambiguity and support consistent outcomes.
Lean process mapping and continuous improvement approaches help prevent documentation from becoming detached from operational reality.
Political audit readiness requires coalition-building rather than procedural tightening. When stakeholders agree on goals but contest costs or consequences, evidence alone is insufficient. Negotiation, transparency, and legitimacy-building shape outcomes more than technical rigor.
Experimental audit readiness thrives under conditions of learning. Pilots, sandboxes, and iterative evaluation allow organizations to explore uncertain requirements without locking into ineffective routines. Success depends on institutionalizing learning rather than treating experimentation as a temporary deviation.
Symbolic audit readiness reflects the realities of legitimacy management. Public commitments, ethical pledges, and high-level assurances often precede operational clarity. These signals can coordinate action, but only if leaders treat them as starting points that require translation into owned, measured, and reviewed practices.
Key Takeaways and Actionable Insights for Managers
Audit readiness and risk management failures are frequently attributed to poor execution rather than to misdiagnosed implementation conditions. The ambiguity — conflict model provides managers with a way to align governance tools with actual organizational dynamics rather than with assumptions.
Implementation environments are dynamic. Compliance initiatives often move from experimental to administrative, or from symbolic to political, as scrutiny increases. Managers benefit from reassessing ambiguity and conflict regularly rather than assuming stability.
Symbolic compliance is not inherently illegitimate. In high-ambiguity, high-conflict environments, signaling intent can create space for coordination and shared meaning.
The managerial obligation is to convert those signals into measurable processes, ownership, and review cycles.
Clarity consistently outperforms intensity.
Clear standards, roles, and documentation reduce ambiguity more effectively than additional layers of oversight. Excessive control in ambiguous environments often increases resistance rather than compliance.
Conflict requires governance rather than persuasion. When disagreement is structural, technical solutions alone will fail. Stakeholder alignment, negotiation, and legitimacy-building must precede enforcement.
External accountability strengthens credibility. Independent audits and transparent reporting enhance legitimacy, particularly in contested environments.
Conclusion
The ambiguity — conflict model remains a powerful lens for understanding implementation in 21st-century governance. Risk management and auditing, often treated as technical functions, reveal deep dynamics of uncertainty, power, and legitimacy when examined through this framework. By recognizing audits as implementation processes rather than administrative endpoints, leaders can better diagnose failure, select appropriate strategies, and move from symbolic compliance toward substantive performance. In an era of accelerating regulation, digital transformation, and public scrutiny, implementation success depends less on adopting new tools than on understanding the conditions under which those tools operate.
Appendix
Get Dr Casey LaFrance’s stories in your inbox
Join Medium for free to get updates from this writer.
Glossary of Key Terms
Ambiguity
Uncertainty regarding goals, methods, roles, or evaluation criteria during implementation.
Conflict
Sustained disagreement among stakeholders with the capacity to influence outcomes.
Administrative Implementation
An environment characterized by low ambiguity and low conflict, where outcomes depend primarily on resources and technical capacity.
Political Implementation
An environment characterized by low ambiguity and high conflict, where outcomes are shaped by power, negotiation, and coalition-building.
Experimental Implementation
An environment characterized by high ambiguity and low conflict, where learning and adaptation drive outcomes.
Symbolic Implementation
An environment characterized by high ambiguity and high conflict, where actions primarily signal legitimacy or intent.
Audit Readiness
An organization’s capacity to demonstrate compliance through documented, operational, and verifiable controls.
Symbolic Compliance
Compliance behavior focused on appearances rather than substantive performance improvement.
Journal Prompts
Where does my organization currently experience the highest ambiguity in compliance or audit work?
Which stakeholders experience the greatest conflict over audit outcomes, and why?
Which symbolic commitments have not yet been translated into measurable controls?
How often do we reassess our implementation environment, and who participates in that diagnosis?
Discussion Questions
Can symbolic implementation ever be a responsible governance strategy?
How should auditors adapt their role when operating in political or experimental implementation environments?
What risks arise when administrative tools are applied in high-conflict or high-ambiguity contexts?
How does digital automation reduce some forms of ambiguity while potentially increasing conflict?
Training Scenarios
Scenario: ISO 27001 Under Budget Pressure
An organization has committed publicly to ISO 27001 certification. The information security team understands the requirements, but senior leadership resists allocating additional budget or staff time. Audit readiness activities stall, and documentation quality declines.
Focus for discussion: identifying the implementation environment, diagnosing sources of conflict, and selecting governance strategies that move the initiative from symbolic or political implementation toward administrative execution.
Scenario: ESG Reporting Pilot
A multinational firm launches a pilot ESG reporting initiative in one business unit. Standards are evolving, data sources are inconsistent, and teams are willing to experiment. There is little overt resistance, but no agreement on success criteria.
Focus for discussion: managing experimental implementation, institutionalizing learning, and deciding when to standardize.
Scenario: Cybersecurity Audit Fallout
An external audit uncovers control weaknesses that threaten executive bonuses and public reputation. Technical fixes are straightforward, but internal resistance intensifies.
Focus for discussion: political implementation dynamics, legitimacy management, and the limits of technical solutions in high-conflict environments.
Scenario: Public Sector Compliance Mandate
A government agency adopts a new digital compliance system mandated by statute. Goals are clear, but frontline staff report increased administrative burden and declining service quality.
Focus for discussion: distinguishing administrative from political conflict, evaluating burden, and redesigning processes without undermining statutory intent.
Annotated Bibliography
Capano, G. (2020). Policy design and state capacity.
Explains how policy instruments introduce or mitigate ambiguity over time and across governance levels.
Howlett, M. (2023). Designing public policies.
Provides contemporary insight into instrument choice, policy mixes, and implementation complexity.
Herd, P., & Moynihan, D. (2018). Administrative burden.
Reframes implementation through the costs imposed on individuals and organizations.
Eubanks, V. (2018). Automating inequality.
Demonstrates how digital systems reshape ambiguity, conflict, and legitimacy.
National Institute of Standards and Technology. (2023). AI Risk Management Framework.
Illustrates emerging implementation challenges in algorithmic governance.
Ansell, C., & Torfing, J. (2021). Public governance as co-creation.
Extends implementation theory into collaborative and networked environments.
