Insights. Design the operating layer

Keep, connect, replace, own

How to decide what your operating layer should be made of

7 minutes to read. Published 6 September 2026.

Most operating problems arrive dressed as a software decision. Should we move to a new CRM? Is it time for a proper case-management platform? Would a single system fix everything?

Usually the answer is a different question. Not which product, but what the layer between your products should be made of. Four decisions, taken in order, settle it. Taking them in order matters, because each one is cheaper than the next.

First, name the words

An operating layer is the records, queues, permissions and handoffs that connect the systems you keep. It is not a product. It is the connective tissue between the products you already have.

A record is one place that holds the current state of a piece of work: who has it, what has happened, what comes next. A handoff is the moment work passes from one person or system to another. Most drag lives in the handoffs, which is why buying a better system for one side of a handoff so rarely helps.

Keep, connect, replace, own: four decisions in orderEach system in your stack is put to four questions in order. Keep: Is it the right place for its own work to live, and would the people who use it defend it? Connect: Is the drag in the handoff between systems rather than in the system itself? Replace: Would replacing it remove the duplication or close the control gap? Own: Is there no suitable system anywhere for this piece of the flow? A yes sends the system to that verb; a no sends it to the next question. Each decision is cheaper than the one after it.START WITH EVERY SYSTEM YOU ALREADY RUNTake the four questions in order. Each answer is cheaper than the next, so most systems never reach the later ones.QUESTION 1Is it the right place for its ownwork to live, and would the peoplewho use it defend it?YESNOKeepIt stays, and stays the system ofrecord for its own work.QUESTION 2Is the drag in the handoff betweensystems rather than in the systemitself?YESNOConnectName the source record, decide whatmoves and when, then automate onlythe predictable.QUESTION 3Would replacing it remove theduplication or close the controlgap?YESNOReplaceThat layer goes. Everything elsestays where it is.QUESTION 4Is there no suitable systemanywhere for this piece of theflow?YESOwnA small component, documented as itis built, handed over so your teamcan run it.
The four decisions as the questions that settle them. A yes sends a system down to its verb; a no sends it along to the next question. Most systems never reach the later ones.

Decision one: keep

Start by listing the systems that do their job. The accounting platform that the accountant trusts. The specialist case or deal system the team knows. The document workspace everyone can find things in.

The test is not whether a system is modern or whether it has a feature list you admire. The test is whether it is the right place for its own work to live, and whether the people who use it would defend it. A system that passes stays, and stays the system of record for its own work.

Most businesses are surprised by how much survives this step. That is good news. Everything you keep is a migration you do not have to do.

Decision two: connect

Now look at what moves between the systems you kept. Every piece of information that is typed twice is a connection that does not exist. Every status that has to be looked up in two places is a record that has not been named.

Connecting is mostly deciding, not building. For each field that matters, which system is the source? When may it move, and to where? Who approves the movement, and what is written down when it happens? What happens when the connection fails?

Only after those questions are answered does it make sense to automate anything, and then only the predictable movement with agreed permissions. Automating an undecided flow spreads the confusion faster.

Decision three: replace

Sometimes one system is genuinely the problem. It duplicates work, costs more than it earns, or leaves a control gap the rest of the stack has to work around. Replace it, and only it.

The test is that replacing it removes the duplication or closes the gap. If it does not, the problem was in the handoff, not the system, and a new system will inherit it. There is no blanket rip-and-replace in this method. The layers holding the flow back go; the rest stays.

Decision four: own

Last, and rarest, there may be a piece of the flow for which no suitable system exists. A queue with your specific rules. A view that joins three records nobody else joins. An approval route that no off-the-shelf product models.

That is the only case for building something. When it happens, the component is small, documented as it is built, and handed over so your own team can run and change it. It is built because control justifies it, never because building is interesting.

Two shapes the result can take

Whatever survives the four decisions runs on a foundation. For most businesses that is a shared managed foundation: your own accounts, workspaces, permissions and data structures inside infrastructure someone else keeps running.

A dedicated environment exists for the cases where branding, isolation, integration or contractual requirements call for it. It is a separate path with its own scope and its own price. The label alone establishes no technical or regulatory assurance; those come from explicit scope, evidence and sign-off, never from a diagram.

A worked example

Worked example. The business, people and systems shown are fictional.

A twelve-person consultancy runs a well-liked CRM, a document workspace, an accounting platform and a project tool nobody updates. Applying the four decisions: keep the CRM, the document workspace and the accounting platform. Connect them so an agreed engagement creates one client record that carries its stage, its owner and its kick-off checklist. Replace the project tool, because it duplicates the checklist and nobody trusts it. Own one small thing: a delivery queue with the firm's own definition of "ready to start", because no product models it.

Four systems become three, one connection and one queue. No migration of the systems that mattered. The founder can see every engagement's stage without asking.

Where to start

You do not need to take the four decisions alone, and you should not take them before the flow has been mapped. Our free Operating Infrastructure Audit reads the picture you describe and says which decision your business is actually facing. The paid Blueprint takes the decisions with you and writes them down before anything is built.

The example is invented to show the shape of the method. It describes no client and no delivered work.

Start

Turn this into a first diagnosis.

Describe how work moves through your business and you get a written read of where it drags and what to fix first, free.