A federated operating model is viable, but only when a strong technology risk culture is embedded in group governance, ...