The gap between how analytics systems are implemented and how they are governed is where regulatory and reporting risk lives. This article frames the problem and introduces a framework for closing it.