Comprehensive OGC vs In-House Legal Decision Manual
Choosing between outside general counsel and an in-house legal team is an operating-model decision. The right answer depends on legal volume, need for embedded context, seniority, specialist breadth, regulatory intensity and cost. Many growing companies benefit from a hybrid model in which internal ownership and external expertise are deliberately separated.
This section treats the subject as a legal-operations problem rather than a marketing description. Each part identifies the business trigger, the legal risk, the evidence or records that should exist, the internal owner, the role of counsel and the practical control that converts advice into a repeatable process.
1. Monthly legal volume
Business and legal issue. Count actual legal requests, contracts, disputes, notices and compliance issues before deciding whether fixed headcount is justified. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
2. Predictability of demand
Business and legal issue. Stable recurring demand favours internal capacity more than irregular bursts of complex specialist work. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
3. Need for business embedding
Business and legal issue. Daily participation in product, sales, HR and management decisions may favour in-house presence. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
4. Need for senior judgment
Business and legal issue. A company may require GC-level judgment without enough work to justify a full-time senior executive. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
5. Specialist breadth
Business and legal issue. One lawyer rarely covers corporate, labour, data, litigation, tax, IP and regulatory work at equal depth. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
6. Contract throughput
Business and legal issue. High-volume repetitive contracting may justify internal contracts resources with external escalation support. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
7. Transaction pipeline
Business and legal issue. Fundraising, M&A and financing create episodic high-skill demand that often remains external even with an in-house team. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
8. Litigation portfolio
Business and legal issue. Frequent litigation may justify an internal litigation manager while appearances and specialist advocacy remain external. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
9. Regulatory intensity
Business and legal issue. Highly regulated businesses often need continuous embedded legal/compliance ownership. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
10. Geographic spread
Business and legal issue. Multi-State or international operations increase the need for coordinated local/specialist counsel. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
11. Board expectations
Business and legal issue. Institutional investors and boards may expect a clear internal owner of legal risk even if substantive work is outsourced. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
12. Independence
Business and legal issue. External counsel can provide useful distance in investigations, board disputes or sensitive executive matters. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
13. Conflicts
Business and legal issue. Outside firms can face client conflicts while in-house teams face organisational conflicts and reporting-line pressures. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
14. Institutional memory
Business and legal issue. In-house counsel naturally accumulates business context; OGC must create matter trackers and repositories to replicate it. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
15. Response speed
Business and legal issue. Embedded counsel can respond quickly, but overloaded internal teams may be slower than an OGC team with defined SLA. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
16. Cost of in-house
Business and legal issue. Salary should be compared with benefits, recruitment, technology, training, management and specialist external spend. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
17. Cost of OGC
Business and legal issue. Retainer plus separate projects and litigation should be measured against the value of flexible senior and specialist capacity. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
18. Recruitment risk
Business and legal issue. Hiring the wrong first legal employee can create cost and capability gaps that are difficult to correct quickly. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
19. Scalability
Business and legal issue. OGC can scale team size with projects while in-house teams require recruitment and management lead time. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
20. Control over priorities
Business and legal issue. Internal teams are directly managed by the business, while OGC priorities must be governed through scope and SLA. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
21. Data/security
Business and legal issue. Either model requires secure access controls, but external sharing creates additional vendor and confidentiality considerations. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
22. Crisis response
Business and legal issue. The company should know whether a crisis is owned internally, by OGC or by specialist external counsel. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
23. Hybrid model
Business and legal issue. An internal legal manager plus OGC can combine institutional ownership with senior/specialist depth. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
24. First in-house hire
Business and legal issue. The ideal profile should match the dominant workload rather than default to a generic corporate lawyer. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
25. Transition from OGC
Business and legal issue. A mature OGC engagement should leave templates, trackers and risk registers that can be handed to a new internal team. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
26. External specialist panel
Business and legal issue. Even mature in-house teams need trusted external firms for litigation, tax, competition, insolvency, IP and transactions. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
27. Performance metrics
Business and legal issue. Measure turnaround, dispute prevention, contract cycle time, risk closure and budget predictability rather than document count alone. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
28. Governance reporting
Business and legal issue. Whichever model is chosen, senior management should receive periodic visibility into legal risk and decisions required. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
Corporate legal-operations checklist
- Demand quantified
- Dominant work type identified
- Seniority need
- Specialist need
- Regulatory intensity
- Litigation volume
- Contract volume
- Board expectations
- Cost comparison
- Hybrid option
- Transition plan
Questions management should answer
- What work requires daily embedded context?
- What work needs senior specialist judgment?
- How many legal requests arise each month?
- What is the true annual cost of in-house?
- Which skills will still be external?
- Who owns legal risk at management level?
Final operating principle
A legal retainer or outside-general-counsel model should create institutional memory. The objective is not to make the business dependent on one lawyer’s inbox. Matters, approvals, templates, deadlines and risk decisions should remain traceable. Scope, fees and responsibilities should be reviewed as the company grows so the legal operating model continues to match actual demand.