The Platform PM

PlaybookLast reviewed October 2026

Your first 60 days leading product on a complex platform

For a new head of product on a payments, telco, security, identity or AI platform: learn the domain, diagnose the team and the product, act at once only where you must, and commit to a plan by day 60 without breaking what works.

The job on one page

Say you've just joined a company that runs a complex B2B platform: payments, cross-border payouts, telco, security, identity or AI agent infrastructure. You're senior, but new to the company and probably to its domain. Half the roadmap is already promised to customers, a partner you've never met can switch part of the business off, and your team is watching. In 60 days you need to earn the trust of engineers, sales and compliance, see the team and the product honestly, make the few calls that can't wait, and publish a plan the company can run.

The first 60 days in four phases: listen, diagnose, decide, commit. The written diagnosis at day 30 is the hinge: everything after it rests on what you wrote down. Some problems can't wait for the schedule: integrity issues and real fires get acted on at once, whatever the day.

I split the 60 days into four phases: listen (days 1-15), diagnose (days 16-30), decide (days 31-45) and commit (days 46-60). The hinge is the written diagnosis at day 30. Before it you're collecting; after it you're choosing. Write it down, test it with the people who know the domain best, and let it change your mind. One branch runs beside all four phases: some problems get acted on at once, whatever the day, like an integrity or compliance problem, a real fire, or a regulator's date nobody owns.

What the 60 days are for. Somewhere between a quarter and a half of senior transitions are judged failures or disappointments within about two years, depending on who you ask (McKinsey's 2018 range; the popular "40% fail in 18 months" is shakier, see Words that mean something else here). Two things matter more than the headline. Outside hires ramp slowly: at one US investment bank they were rated below insiders for two years. And leaders mostly derail on relationships, failing to build a team or to adapt, not on analysis. So day 60 is a plan you commit to, not a result you prove, and most of the work is people.

Four ideas shape this playbook. Nobody has studied product leaders' first months directly, so I've borrowed from research on executives, expertise and teams.

  1. The domain is the steepest climb and the easiest part to fake. Expertise is stored patterns from real cases: chess masters remember real positions far better than novices, but random ones no better, and in Boris Groysberg's research, star analysts who changed firms lost ground unless their team came with them. You can't judge the roadmap until you know who can say no, where the money moves and what the rules force. The twist: in one study, CEOs from the same or a related industry did worse after taking over, because they brought rigid templates. That's solid on expertise and more of an analogy for leaders. If you come from an adjacent domain (cards to cross-border, SaaS security to identity), things that look familiar but work differently are a bigger risk than ignorance.
  2. Different people decisions have different timings. Retention in the first fortnight, the hiring pipeline by about day 30, assessment all the way through, and most moves after day 45 to 60. When a new leader fired a lot of people early, more of the people who stayed chose to leave. The direction is well supported; the exact timings are my own. See when to make people decisions.
  3. The best early wins are shared, and on platforms they often fix how work runs. In consultancy data on more than 5,400 new leaders, the ones who struggled chased personal quick wins and the ones who thrived got wins with their team. Alan Mulally's first big win at Ford was a weekly review where bad news became safe. But some wins have to be fixes people can feel: Hubert Joly started at Best Buy by restoring the employee discount and fixing site search. Nobody has compared the two kinds head to head.
  4. Tempo follows the situation, and a platform is usually in several at once. Across 599 CEO transitions, reorganizing helped companies doing well and destroyed value in those doing badly, McKinsey found in 2016; another study found moderate strategic change helped and big change hurt, more so for outsiders. Your core rail may be a steady success while a new corridor is a start-up.

Two more ideas come later: engineers and compliance judge you on the domain first (phase 1), and the failure to fear is a strategy written before you understand the money and the risk (phase 3).

Put together: learn the rails, rules and partners before you judge the roadmap; judge the team and how it works earlier, but act on people slowly and in order; write the diagnosis down at day 30; and commit at day 60 to a plan that says what stops.

What's different on regulated platforms:

  • Partners can stop the business, and no code fix helps. A sponsor bank can freeze onboarding or exit, the FCC can get your voice traffic refused, a lab can retire your model. When the middleware company Synapse went bankrupt on April 22, 2024, users of more than 100 fintechs had their funds frozen.
  • Someone else sets the calendar: audits, certifications, regulatory effective dates, network rule releases and model retirements.
  • Compliance holds something close to a veto, and some obligations are product's to deliver: consent, disclosures, KYC (identity checks) flows, audit evidence. US consumer-finance supervisors expect compliance built into how products are designed and run.
  • Some incidents must be reported on a clock: major ICT incidents under the EU's DORA since January 17, 2025; exploited vulnerabilities under the EU Cyber Resilience Act from September 11, 2026, with a 24-hour early warning; and material cyber incidents at public-company customers within four business days of deciding they're material.

If you joined because your company bought another platform, read this alongside Integrating a platform after an acquisition.

01Days 1-15

Listen and learn the domain

You know what mandate you were given, which situation each product area is in, who can stop the business, which external dates are fixed, and who on your team might leave first.

Week 1: check the mandate with the CEO. Your first season is shaped by the mandate you were hired with, as Hambrick and Fukutomi argued, and the CEO's version may not match the job description. Write your mandate in one paragraph, show it to the CEO in week 1 and take the edits. Then have the conversations Michael Watkins suggests with a new boss: how they see the situation, what success looks like and by when, and how they like to work. If the founder still runs the company, ask which product decisions they keep.

Make a rough situation call for each area, not one for the company. Watkins' five situations are a handy lens, not a proven model:

Start-up

Signals on a platform
New product, region or corridor; no fit yet
First-60-day emphasis
Hire, pick first customers, set a learning cadence
Main trap
Importing big-company process

Turnaround

Signals on a platform
Churn, outages or a regulator letter
First-60-day emphasis
Triage in weeks; cut work; fix the incident loop
Main trap
Listening too long

Accelerated growth

Signals on a platform
Demand outruns the platform
First-60-day emphasis
Cadence, decision rights, platform investment
Main trap
Shipping features while debt grows

Realignment

Signals on a platform
Revenue fine, but drifting
First-60-day emphasis
Make the problem visible with data; build allies
Main trap
Declaring a crisis nobody feels

Sustaining success

Signals on a platform
Strong metrics, proud team
First-60-day emphasis
Learn deeply; protect what works; pick 1-2 bets
Main trap
Reorganizing to make your mark

Turnaround or realignment? I ask: is the problem in the board deck, has the CEO said it out loud, do engineers and sales describe the same problem, and is there a regulator, bank or carrier deadline? Write your call down by day 10 and test it in phase 2.

Say your company's US card-issuing product is profitable and stable, while a payouts corridor to Brazil launched last quarter has three customers. The first is sustaining success and needs protecting; the second is a start-up and needs customers and a learning cadence. One plan for both would get one of them wrong.

Learn the domain from real cases, filed under a structure. Beginners learn more from studied examples than from solving problems unguided (researchers call it the worked-example effect). On a platform, the examples are real: a closed postmortem, a rejected registration, a chargeback file, a failed payout trace, an agent run that looped. The structure is the site's ten primitives: file every new fact under one, from entity and identity to liability allocation. My default for the first 15 days:

  • Customers: 10 conversations: three won, three lost, three churned or at risk, and the largest account. Recorded calls first.
  • Support and incidents: the top 20 ticket categories, 20 recent escalations and 10 postmortems from the last 12 months; note which ones a partner caused.
  • Operations: half a day with the team that fixes breaks; ask what they do by hand.
  • Money and power: the money-flow map and the power map on one page each, corrected by finance and partnerships.
  • Architecture: an hour with the most senior engineer; draw it back and let them fix your drawing.

Use the site's guides as a day-0 test. Read the Field Guide closest to your platform and take its 20-question self-check cold, ideally before your first meeting, then again at day 30: telco and CPaaS, order-to-cash, procure-to-pay, spend management, cross-border payouts, AI agent orchestration. Security and identity don't have a guide yet; see What to learn first.

List the partners who can stop you, with what would set them off, who owns the relationship, and the contract's renewal and termination terms.

PartnerWhat they can do
Sponsor or partner bankFreeze onboarding, restrict geographies, exit
Card networksChange rules twice a year; monitoring programmes, fines
Carriers, registries, the FCCFilter, fine, suspend; database removal stops voice
Model providersRetire models on two weeks' to six months' notice
Correspondents, local partnersClose corridors; hold prefunded money
Auditors and assessorsQualify or withhold the reports customers require

US banking agencies expect banks to manage their third parties from start to finish, so a fintech's product team ends up inside its bank's risk programme (2023 guidance). Say your sponsor bank's annual review finds gaps in how you monitor business customers: it can pause new sign-ups the following week, and no sprint fixes that. In August 2025 the FCC removed about 1,400 providers from its Robocall Mitigation Database, so other carriers had to refuse their voice traffic (the site's telco guide covers it).

Build one calendar of external dates by day 15: audits and certifications (SOC 2 period end, PCI DSS assessment, ISO 27001 surveillance, FedRAMP), regulatory effective dates, partner rule releases, model retirements and contract renewals. Some are already fixed: full EU Cyber Resilience Act obligations from December 11, 2027; Canada's NG9-1-1 deadline of March 31, 2027; Ofcom's alpha sender verification on July 15, 2027; FedRAMP's 2026 rules with certification classes A to D. Anything with a date and no owner goes on the list of problems to act on right away.

Meet compliance in week 1, and bring questions. Mine: What licences, registrations and certifications do we hold, in whose name, and which do we rent? Which partner can stop us fastest, and what would trigger it? What open findings or remediation plans exist, with dates? What audit evidence comes from product systems? Which incidents are reportable, to whom, how fast, and who decides? What's the one thing you wish product understood?

Engineers and compliance judge you on the domain first. I can't prove this for product leaders, but the trust research points that way. We trust people on ability, benevolence and integrity, and ability is judged within a domain; a big meta-analysis found all three predict trust, and trust predicts performance. Your engineers will judge you on the rails, rules and failure modes, not your last title. Go to incident reviews in your first two weeks, and keep "at my last company" in a private notebook.

Meet the internal candidate in week 1. At one Fortune 100 firm, people turned down for an internal role were about twice as likely to leave, more so when the winner came from outside, like you. Acknowledge it, ask what they want, give them a real piece of the 60-day work, and tell the CEO what you agreed. Don't promise a promotion you don't control. People close to your predecessor are the other exit risk: they leave more after a succession.

Tell the team how you'll work, and change nothing structural: you're listening first, there's no reorganization before day 60, and existing owners keep deciding. Will Larson's first trap for new engineering executives is changing things before you understand the problem. Sit in every existing ritual once without changing it. Confirm who owns every critical obligation (on-call, attestations, partner relationships) so nothing drops. Fix only what's unsafe or illegal.

Start a private strategy draft in week 2. Gibson Biddle, who was VP of Product at Netflix, suggests a rough strategy within about two weeks, refined over the first month. Treat every line as a guess. It's really a list of what you'll be wrong about, and only the CEO sees it.

Checklist

  • Write a one-paragraph mandate and get the CEO's edits in week 1; agree how the CEO wants to be kept informed
  • Make a provisional situation call for each product area and write it down by day 10
  • Meet any internal candidate for your role in week 1 and agree a visible role in the next 60 days
  • Hold 1:1s with every PM, designer, engineering manager, staff engineer and peer leader, and listen to 10 customer conversations
  • Read 10 postmortems, the top 20 ticket categories and 20 recent escalations; spend half a day in the operations queue
  • Take the closest Field Guide's self-check cold; draw the money-flow and power maps and have them corrected
  • List every partner that can stop the business and build one calendar of external dates, each with an owner
  • Change nothing structural; confirm owners for on-call, attestations and partner relationships

02Days 16-30

Diagnose

You have a written diagnosis of the roadmap, the platform, the obligations product owns and the team, tested with the people who know the domain best, and you can answer one question per primitive without notes.

Sort the roadmap into five bins. This sorting is mine, but most product leaders would recognize it:

  1. Committed to a named customer or partner: in a contract, side letter, RFP answer or sales email. Ask legal for every "future functionality" clause.
  2. Mandated, with an external date: a regulation, network rule, registry deadline or model retirement.
  3. Reliability or audit work tied to an SLO or a finding (open SOC 2 exceptions, PCI gaps).
  4. Revenue bets with an owner and a metric.
  5. Discretionary: no owner, no metric, no customer.

Red flags: bin-1 items product didn't know about, bin-2 items with no owner, and a lot of capacity in bin 5 (I'd look hard above about 30%, but that's a guess). Find the commitments before you judge the roadmap. Cutting something promised in a contract or dated by a regulator is the most expensive way to look decisive. Say a bulk payout API sits on the roadmap as a nice-to-have, but a sales email promised it to your second-largest customer for next quarter. That's bin 1, not bin 5, and cutting it can cost a renewal.

Read incidents, not dashboards. Pull 12 months of Sev-1 and Sev-2 incidents: were action items done, which causes repeat, how many did partners cause, what credits did you pay, and does product go to postmortems? Google's example error-budget policy makes follow-up mandatory: an incident that eats more than 20% of a four-week error budget gets a postmortem with at least one top-priority action. If postmortem actions don't close, you've found your first early win.

Agree the metrics, then check what the words mean. Pick five to seven from Metrics by platform type, cut by counterparty, and ask engineering what "delivered", "approved", "paid" and "success" mean in the code. Say messaging reports 98% "delivered", but in the code that means the carrier accepted the message, not that the phone got it. The number you'd show the board may not be the one customers feel.

Go through the platform's debt with engineering. CIOs McKinsey surveyed in 2020 put tech debt at 20-40% of the value of their technology estate. The platform questions I'd ask: where do partner-owned rules live in code rather than configuration? Can you reproduce a past calculation? Who fixes reconciliation breaks? Which external APIs, model snapshots or standards are near end of life? What would a second sponsor bank, carrier route or model provider cost?

List the compliance obligations product owns. You'll find them in the obligations register, security questionnaires, partner contracts, open findings and the last exam or partner-audit letter. Product usually owns consent evidence, disclosures, KYC and KYB (business identity) flows, reportability workflows, audit evidence, data residency, 911 address validation and fields partners require. In the UK, the FCA's Consumer Duty (in force since July 31, 2023) asks firms to show good customer outcomes, which pulls product decisions into scope.

Check customer health and concentration. Under US accounting rules, public companies have to disclose any customer worth 10% or more of revenue. Ask for the top-10 share even in a private company, plus retention by segment, the next two quarters of renewals and signs that customers use a second provider. On usage-priced platforms, I suspect churn often shows up as traffic quietly moved elsewhere. Say one marketplace sends 30% of your payout volume and starts routing a third of it to a second provider: you lose a tenth of your volume, and nobody ever files a churn notice. Check whether a partner's price rise can be passed on within a month.

Write provisional team assessments, privately. Use one public framework or your company's ladder, like the UK government's (five levels, nine skills, updated February 28, 2025) or Ravi Mehta's 12 competencies, which assume no PM is great at all of them. For each PM, read recent specs, roadmap rationale and metrics, and ask their engineering lead, designer and one or two colleagues the same three questions. I separate three things: skill against the level, context (understaffed, fixed roadmap, incident-heavy legacy) and trajectory over six months.

AreaStrong signalWeak signal
DiscoveryNames recent customers; a decision changed by evidence"Sales asked for it"
PrioritizationWritten rationale; can say what wasn't doneRequests with dates; everything P1
MetricsKnows the area's key numbers and reliability figuresReports features shipped
Engineering trustEngineers call the PM a partner"Requirements thrown over the wall"
Platform depthKnows the API contract and partner obligationsCan't say what breaks if a dependency fails

Look at the system before the person: where leadership picks the features, weak discovery may be the operating model, not a skill gap, as Marty Cagan argues. Lower-status people feel less safe speaking up, so the PM blamed for the last outage may be the quietest in the room.

Size the team by load, not by ratio. The familiar PM-to-engineer ratios come from polls and job-title counts, not evidence. I'd ask instead: how many customer surfaces, APIs and partners does each PM own, and how much of their week goes to compliance, partners, incidents and enterprise deals? Too few PMs looks like engineers waiting on decisions, tech leads writing specs and a roadmap set by sales escalations. Too many looks like PMs splitting single teams, lots of strategy documents and little shipped.

Decide the hiring pipeline by day 30. Roles take months to fill, so a backfill opened on day 45 lands well after day 100. Re-scope each open role against what you've found (a platform PM, a PM who's comfortable with compliance) instead of cloning the person who left.

Write the diagnosis down: this is the hinge. Two to three pages: what's true, what's at risk, what can't wait, open questions, and your situation call per area. Test it with the CTO, the head of compliance and a top salesperson before anyone else sees it. Then answer these ten questions out loud to a domain expert, ideally whoever owns that area, and note what they correct.

PrimitiveThe day-30 question
Entity & identityWhat's our unit of record, and which identifiers do others issue?
State & lifecycleWhich transitions move money or risk, and which run per counterparty?
System of record & ledgerWhose answer wins for each key entity, and who fixes breaks?
Rules & policyWhich three rules decide customer outcomes, and who can change them?
Effective datingWhich external changes are dated in the next six months?
Interfaces & standardsWhich standards carry our money or data, and who forces upgrades?
Networks & counterpartiesWhich parties between us and the outcome can block us?
Regulatory layeringIs each obligation law, certification or partner rule, and what's due?
Exceptions & reversalsWhat are the top five exceptions by volume and by cost?
Liability allocationFor each major failure, who pays, and what have we paid before?

My own working targets, still to be tested with experts: the vocabulary and top failure modes by day 15, one answer per primitive by day 30, a roadmap trade-off you can defend to compliance and a partner by day 60, and real fluency in six to twelve months. Nobody has measured how long product leaders take to become credible.

Checklist

  • Sort every roadmap item into the five bins; list bin-1 promises product didn't know about and bin-2 items with no owner
  • Review 12 months of Sev-1 and Sev-2 incidents: action-item closure, repeat causes, partner-caused share, credits paid
  • Agree five to seven metrics, cut by counterparty, and check their definitions with engineering
  • List the compliance obligations product owns, with owners; pull retention, concentration and renewals
  • Write provisional assessments of every PM against one framework, from three angles, privately
  • Decide each open role: keep, re-scope or pause
  • Retake the guide's self-check and answer the ten primitive questions aloud to a domain expert
  • Write the two-to-three-page diagnosis and test it with the CTO, the head of compliance and a top salesperson

03Days 31-45

Decide and align

A few collective early wins are under way, your strategy draft has been through the CEO and each key peer one-to-one, and every people and hiring decision has either been made or been given a date.

Pick one or two early wins the team will share. In Van Buren and Safferstone's data, the new leaders who struggled were chasing a personal win: they micromanaged, jumped to conclusions and took criticism badly. A good early win, as I read their work and the cases, is shared, removes a pain people already feel, is cheap and reversible, and is visible to the CEO and at least one peer team. On platforms it often fixes how work runs: every Sev-1 gets a blameless postmortem with tracked actions; one written rule for who can promise a feature or a date to a customer; a monthly metrics review with engineering, sales, operations and compliance. Say operations hand-fixes failed payouts every morning because last spring's postmortem actions never closed. Getting those actions done with engineering is a win support, engineering and customers all feel.

In a troubled area, make at least one a fix customers or staff can feel: the top ticket driver, a broken onboarding step, a partner escalation nobody owned. Bad early wins: a feature forced through to look fast, a reorganization, a new framework.

Write down how decisions really get made, then fix one gap. Don't redesign decision rights in month one. Map who actually decides roadmap, pricing, deprecations, incident follow-up and partner commitments, and show the gaps; unclear decision rights stall decisions, as Bain's Rogers and Blenko found. Make reversible decisions fast and irreversible ones carefully, as Jeff Bezos put it in his 2015 letter. Fix one painful gap by day 45, and agree what PMs decide alone, what needs you and what needs the engineering manager.

Agree the capacity split with the CTO. Friction with technology leaders over platform investment is a common reason product executives leave, according to an agency's survey. Agree who decides roadmap versus platform trade-offs, who owns reliability and incident follow-up, and the shares for roadmap, platform and debt, and interrupts. Protect a visible share for reliability in writing, and never promise dates to sales without the engineering manager.

Turn the private draft into a strategy memo. I use Richard Rumelt's kernel: a diagnosis, a guiding policy that rules things out, and actions that fit together. Goals aren't a strategy. About 100 days into IBM, Lou Gerstner said a vision was the last thing it needed right then; tough strategies for each business came first.

Show the CEO first, then walk every peer through it one-to-one: the CTO, sales, compliance and finance, before any group meeting. Finance should see it in their numbers. The failure to fear here is a strategy written before you understand where the money and the risk are. I think it's the most dangerous one on a platform, though the research says relationship failures are more common. Ron Johnson rebuilt J.C. Penney's pricing without small tests and misread core customers who loved discounts; Léo Apotheker announced HP's biggest portfolio moves all at once, before the team and the market were on board. Both also failed on alignment. If finance or compliance would first hear about your plan at an all-hands, you're not ready.

Make the hiring decisions, and consider internal moves. At one bank, external hires were paid about a fifth more and took two to three years to match people promoted from inside (Bidwell 2011). Simply interviewing internal applicants, even ones you then turn down, halved how often they later left, compared with rejecting them unseen (Keller & Dlugos 2021). Larson suggests naming at most about three critical roles and closing the top candidates yourself.

Test people and structure calls with HR and the CEO, and announce few. Share themes, not verdicts, with the team. Have a career conversation with each PM. For underperformance documented before you arrived, start the agreed process with HR; for "everyone knows" concerns, set clear expectations and a timebox. Don't reorganize unless the turnaround case is strong, and a team reorganized just before you arrived needs a very good reason to go through it again.

Checklist

  • Launch one or two collective early wins, at least one an operating-system fix and, in a troubled area, one fix customers feel
  • Write down how roadmap, pricing, deprecation, incident and partner decisions are actually made, and fix one ambiguity
  • Agree the capacity split and reliability ownership with the CTO, in writing
  • Turn the private draft into a strategy memo: diagnosis, guiding policy, coherent actions, what you won't do
  • Share it with the CEO first, then pre-wire the CTO, sales, compliance and finance one-to-one
  • Decide every open role; consider internal moves; interview internal applicants
  • Hold career conversations with each PM and share themes, not verdicts, with the team
  • Start HR processes only for documented underperformance; give a timebox for undocumented concerns

04Days 46-60

Commit

The plan is published with choices, first bets, a stop-list and dated deferrals; the operating cadence is running; the people moves that were ready are made; and the CEO has agreed how progress will be judged at six and twelve months.

Publish the plan. Here's the outline I'd use for the day-60 memo:

  1. The domain on one page: money, rules, partners, failure modes, filed under the primitives
  2. The diagnosis per area, with its situation
  3. Two or three choices, and what you will not do
  4. First bets, each with a metric, an owner and a date
  5. Team and structure calls made, and those deferred with a date
  6. The operating cadence
  7. Risks: platform, compliance, partner and customer concentration
  8. What you need from the CEO and peers
  9. What your week-2 draft got wrong

Say what stops. In a McKinsey survey, successful leaders were almost twice as likely to say plainly what to stop (2015, cited in McKinsey 2018). Taking over P&G in June 2000, A.G. Lafley ended about $200M of projects and focused on four core businesses and ten countries. Every start in your plan gets a stop: a project, a report, a meeting, a promise made without product. Say the plan adds a reliability push on the payout API; pair it with stopping the custom reporting project one mid-size customer asked for and nobody else uses.

Start the operating cadence, adding before you remove. My minimum: quarterly planning with an explicit capacity split; a monthly cross-functional metrics review; a weekly incident and escalation review with product in the room; a rule for who can change the roadmap and how customers are told; a decision log. Run the existing cadence for a full cycle before changing it, and change one ritual at a time. Mulally added one meeting at Ford and changed its norms before touching the org chart. Amazon's weekly business review and Basecamp's six-week cycles are examples, not recipes. Bring in one written artifact, like a one-page decision record, rather than a whole memo culture.

Commit to first bets you can measure, each with a metric, cut by counterparty where it matters, and a review date. Tell customers and partners only what changes for them.

Make the people moves that were waiting, and date the rest. Go back to your provisional assessments and write down what changed your mind. Make the moves that are ready and fair; schedule the others for day 90. In some countries an exit takes months, so check with HR before you promise a date. Publish the team plan (structure, or "no change" and why; hiring; the competency framework) and pick two or three health signals: regretted attrition, an engagement survey item, how PMs and engineers work together, the share of unplanned work.

Agree how you'll be judged. Ask the CEO what progress looks like at six and twelve months. Boards expect action, but not in weeks: in McKinsey's 599 transitions, underperforming CEOs were twice as likely to leave in year three as in years one or two. Book a day-90 and a day-180 review of your own transition.

Checklist

  • Publish the plan: choices, first bets with metrics and dates, what stops, what's deferred and when it will be decided
  • Pair every start with a stop, and tell the team what you stopped and why
  • Start or adjust the cadence: quarterly planning, monthly cross-functional review, weekly incident review, roadmap change rule, decision log
  • Introduce one written artifact, such as a one-page decision record, and model it yourself
  • Make the people moves that are ready and fair, and give the rest a day-90 date
  • Publish the team plan: structure, hiring plan, competency framework
  • Tell customers and partners only what changes for them
  • Agree with the CEO how progress will be judged at six and twelve months
  • Book your own day-90 and day-180 transition reviews

Problems to act on right away

The phases are a default. A few problems get handled the day you find them, in any phase, because waiting makes them worse and more context won't change the answer. Act narrowly, tell the CEO, and write down why.

TriggerExampleAct how
Integrity or compliance problemA PM misstates compliance status to a partner bank or carrierSame day, with HR and compliance
Unsafe or illegal in productionA voice number live without a validated 911 address; a sanctions gapStop or fix it; tell compliance
A real fireSev-1 outage, regulator letter, partner threat to exitJoin the response; let the incident lead lead
Sev-1 follow-up missingPostmortem actions never closeRequire a postmortem and tracked actions
Mandated date with no ownerA rule's effective date, an audit window, a model retirementName an owner and put it in the plan
Reportable incidentMajor ICT incident (DORA), exploited vulnerability (CRA)Confirm who decides reportability, and how fast

In a turnaround, the list gets longer. When everyone knows an area is in trouble, triage the roadmap, cut work and fix the incident loop in weeks; listening for too long is the failure. In McKinsey's 2016 data, new CEOs of struggling companies who made four or more strategic moves in two years did better than those who made fewer.

What doesn't belong here: reorganizations, roadmap rewrites, firing on first impressions and new frameworks. They feel urgent and almost never are.

When to make people decisions

"Wait on people until you understand the team" is half right. Different people decisions run on different timings. The split below is mine, built from the studies further down, so treat the exact days as a starting point.

1. Retention

When
Days 1-15
What it covers
The internal candidate, flight risks, people close to the predecessor
Why this timing
Rejected candidates leave at about twice the rate

2. Hiring

When
Decide by about day 30
What it covers
Open roles: keep, re-scope or pause
Why this timing
Fill times run to months

3. Assessment

When
Continuous; provisional at day 30
What it covers
Each PM against one framework, from three angles
Why this timing
Your early read is the least reliable it will be

4. Moves

When
Mostly after day 45-60
What it covers
Role changes, performance plans, exits, structure
Why this timing
Early mass terminations raise turnover

The exceptions to clock 4 are integrity and compliance problems, and underperformance documented before you arrived, which can carry on along its existing timeline.

Why moves wait. At a US hospitality company, more people quit after a leader change when the new leader fired many people, was inexperienced or was promoted from inside the unit. That's frontline work, so I'd trust the direction more than the size. In Fortune 500 data, top managers were about twice as likely to leave after an outsider became CEO as after an insider, so some people will go without you doing anything. And in a study of West Point cadets, followers who started out expecting a lot from a new leader tended to lose trust. Firing a lot of people early backfires.

Why some can't wait. In a 2015 McKinsey survey, 72% of leaders wished they'd reshaped their team faster (cited in McKinsey 2018), and practitioners agree that keeping an underperformer too long is more common than moving too fast. In lab studies, teams that got a new leader mid-task dropped failing tactics and did better, and replacing the top team is how outsider CEOs actually change strategy. My answer: move fast on clear problems, be patient on structure, and do nothing in bulk.

Assess fairly. Same prompt and time window for everyone, ratings written privately, revisited at day 60. Ask what each PM did with the mess they had. Don't let the predecessor's loyalists run your diagnosis, and don't ignore them either. Frameworks describe shapes, not grades: a PM who's weak at discovery may be your best person for an area heavy on partners and compliance.

Metrics by platform type

Agree five to seven in phase 2. Definitions matter more than targets.

Messaging (CPaaS)

Metric
Delivery rate, per carrier and country
Definition
Delivery receipts ÷ messages sent
Watch for
"Delivered" means the next hop accepted

Messaging

Metric
OTP conversion
Definition
Codes verified ÷ codes sent
Watch for
Falls under SMS pumping

Voice

Metric
Answer rate; spam labelling
Definition
Answered ÷ attempted; share labelled spam
Watch for
Labels you can't see

Card payments

Metric
Authorization rate
Definition
Approved ÷ attempted authorizations
Watch for
Cut by issuer

Card payments

Metric
False declines; fraud; disputes
Definition
Good orders declined; fraud bps; dispute ratio
Watch for
Network monitoring thresholds

Bank rails (ACH)

Metric
Returns by code
Definition
Returns ÷ debits
Watch for
Unauthorized-return thresholds

Cross-border payouts

Metric
Payout success; time to credit
Definition
Paid without return ÷ initiated; median, p90
Watch for
"Sent" isn't "credited"

Cross-border payouts

Metric
All-in cost
Definition
Cost against mid-market rate ÷ amount sent
Watch for
FX is most of the cost

Any API platform

Metric
Availability; latency; error budget
Definition
Good requests ÷ total; p50 and p99; 1 − SLO
Watch for
Uptime misses partner-side failures

Engineering delivery

Metric
DORA's five metrics
Definition
Lead time, deploys, recovery, change fails, rework
Watch for
Don't rank teams with them

Security (CNAPP)

Metric
Detection; false positives; KEV fixes
Definition
Detections ÷ known attacks; FPs ÷ alerts
Watch for
Vendors' own test sets

Identity and KYC

Metric
Pass rate vs conversion; manual review
Definition
Passed ÷ completed vs approved ÷ started
Watch for
Abandonment left out of "pass"

AI agents

Metric
Task success; cost per successful task
Definition
Successes ÷ attempts, one try and repeated
Watch for
One try flatters

Any B2B platform

Metric
Gross and net revenue retention
Definition
Retained revenue without and with expansion
Watch for
Churn shows as moved traffic

Cut every metric by counterparty. Averages hide the one carrier, issuer, corridor or model causing the problem. That's the lesson of state and lifecycle: state is per counterparty. Say card approvals hold steady overall, but after a rule change one large issuer starts declining a fifth of your traffic. The average barely moves; the cut by issuer shows it the same day.

Good benchmarks are scarce. The few with a solid source:

  • Cross-border: in Swift's October 2024 data, about 90% of payments reached the beneficiary's bank within an hour, but only about 43% reached the customer's account in that time.
  • Card-not-present authorization: about 81% on average, against more than 96% in person (2022, from the analyst firm Aite-Novarica).
  • Retention: median net revenue retention of about 101% across private B2B SaaS companies (2025, from the analyst firm SaaS Capital).
  • AI agents: about two-thirds of production agents ran ten steps or fewer before a human stepped in (the MAP study, December 2025); on one benchmark about 60% of tasks passed on one try but under a quarter passed all of eight tries (2024, from the site's AI agent guide).
  • A commitment, not a benchmark: Twilio's Messaging API SLA is 99.95% a month (as of April 9, 2026). An SLA is the contractual floor; your internal target should be tighter.

For SMS delivery, call attestation, identity pass rates, security detection and false positives, and agent cost per task, I found only vendor figures or nothing. Don't let a vendor's number become your target. Card-network monitoring thresholds change and sources disagree, so read the network's own documents.

Use DORA's metrics carefully. There are five delivery metrics: change lead time, deployment frequency and failed-deployment recovery time for throughput; change fail rate and deployment rework rate for instability (per DORA's guide, updated January 5, 2026). DORA itself warns against comparing them across very different applications. Its 2025 report linked AI adoption to both higher throughput and more instability.

What to learn first, by platform

What I'd learn first on each platform, drawn from the site's guides.

  • Telco and CPaaS (guide): numbers are rented and routes sit behind registries; removal from a database stops voice traffic; carrier fees change by memo.
  • Payments (order-to-cash, procure-to-pay, spend management): money and information travel separately; a fintech card programme is really a bank's programme; network rules act like regulation.
  • Cross-border payouts (guide): the fee is the FX rate; you rent the licence and the dollar access; recalls are requests, not chargebacks.
  • Security (CNAPP): you sell into the customer's half of shared responsibility; NIST's vulnerability database stopped enriching most older entries in April 2026; your customers' reporting clocks become your requirements.
  • Identity and KYC: FinCEN's US beneficial-ownership rule; deepfakes aimed at verification; your regulated customer keeps the anti-money-laundering obligation, so you sit inside its third-party risk programme.
  • AI agents (guide): the platform sells control more than intelligence; tests become statistics; labs set price, rate limits and retirement dates.

Examples

Most of these are CEOs of big companies, told partly in hindsight, so read them as illustrations, not proof.

Lou Gerstner, IBM: customers first, vision later

When Gerstner took over IBM in 1993, he sent senior managers out to visit customers for three months and write up what they heard. About 100 days in, he said a vision was the last thing IBM needed. In a turnaround, listen to customers and fix operations before you write the grand plan (phase 3).

Alan Mulally, Ford: make the first red safe

Mulally started a weekly review where every initiative was green, red or yellow. For weeks every slide was green while Ford headed for a $17bn loss. When one executive finally showed red, Mulally applauded. Your best early win may be a meeting where bad news is safe (phase 3).

Hubert Joly, Best Buy: felt fixes, then a plan at ten weeks

Joly spent his first week working in a store. Staff complained about site search and a cut employee discount, so he fixed both. About ten weeks in, Best Buy published its diagnosis and priorities. That's the 60-day arc: listen at the front line, fix what people feel, then commit in public (phase 4).

Ron Johnson, J.C. Penney: the last company's playbook, untested

Johnson came from Apple and replaced coupons with everyday pricing in every store at once, reportedly without small tests. Core customers loved their discounts, revenue fell almost a quarter in a year, and he was out after about 16 months. Learn where the money comes from before you bring your last company's playbook (What usually goes wrong).

Léo Apotheker, HP: strategy ahead of alignment

Less than a year in, Apotheker announced in one go that HP might sell its PC business, would leave tablets and phones, and would buy Autonomy. The stock fell and the board removed him a month later. I think the lesson is simple: walk your peers through the plan before you announce it (phase 3).

Gibson Biddle, Netflix: a product leader's own account

Looking back on his first year as VP of Product at Netflix, Biddle advises finding out what the job really is, focusing on three or four projects and drafting a strategy early. It's the only product leader's first year I found written up. Treat the early strategy as a draft to learn from, not a commitment (phase 1).

What usually goes wrong

FailureEarly signs by day 30Case or evidence
Strategy before the money and the riskFinance or compliance hear your plan at the all-handsJ.C. Penney; HP
Weak peer and CEO relationshipsPeers route around you; the CEO still directs PMsCCL derailment research; HP
Wrong situation readTeam defends what you're "fixing"; or "when will things change?"McKinsey 2016
The last company's playbookFrequent "at X we..."; frameworks before problemsJ.C. Penney; Hamori & Koyuncu 2015
Adjacent-domain false confidenceCards logic applied to payouts; uptime logic to deliveryHamori & Koyuncu 2015
Clean sweep in month oneOrg chart drafts in week 3; people ask about their jobsLi et al. 2020
Quick-win behavioursPMs wait for your approval; less bad news reaches youVan Buren & Safferstone 2009
Listening as theatreInterviewees never hear back; the same complaints repeatMIT Sloan 2026
Judging the roadmap before the commitmentsA contractual or regulator-dated item gets cutRoadmap audit, phase 2
Too slow on a clear people problemA known underperformer still owns a critical area at day 60McKinsey 2015 survey

The most common failure is relational. When people explain failed transitions, they point to relationships and politics, not analysis. The HR respondents behind the 1998 failure figure named weak relationships with peers and teams, unclear expectations from the boss and poor political skill, and McKinsey's survey compilation says about two-thirds of transitions founder on politics, culture and people. A strategy written before you understand the money and the risk is often just the symptom: you didn't build the relationships that would have told you.

Words that mean something else here

TermWhat you'd assumeWhat it means here
"40% fail in 18 months"A measured outcomeAn HR perception survey from 1998; see below
Quick winAnything shipped fastA collective, felt, reversible win, often in how work runs
Listening tourA phase before actingA loop: listen, play back, act on something, say what you won't do
First 90 or 100 daysThe deadline for impactA convention; impact usually takes six months or more
AlignmentEveryone agreesEveryone knows who decides and what you won't do
DORAOne thingEngineering: delivery metrics. Payments and banking: the EU resilience act
TPMTechnical product managerOften technical program manager, a delivery role; ask
Empowered teamAutonomyA team given problems and judged on outcomes; check who chose the last three items
RatioA staffing standardA poll or a title count; size by surfaces, partners and duties
Delivered (messaging)The recipient got itThe next hop accepted it
Approved (cards)The merchant got paidAuthorized; capture, settlement and disputes still ahead
Paid (payouts)The beneficiary has itIt left your account

On the failure rates. "40% of new executives fail within 18 months" goes back to a 1998 survey of HR specialists by an executive coaching firm, Manchester Partners: their impressions, not tracked outcomes, about newly hired managers in general. "46% of new hires fail" is a 2005 Leadership IQ survey of hiring managers about all new hires. "Half of new executives fail" is CEB's 2012 research, where most "failures" were people quietly struggling. McKinsey's 2018 range of 27-46% combines a 2013 survey with the CEB study. That's why the overview says a quarter to a half, judged within about two years. None of these is a tracked rate for product leaders, and I found no reliable data on how long product executives stay.

On DORA. On a payments or banking platform, "DORA" usually means the EU Digital Operational Resilience Act, which applies from January 17, 2025. To engineers it means Google's DevOps Research and Assessment metrics. In a meeting with both compliance and engineering, say which one you mean.

Sources

Read on October 2, 2026 unless dated; "search result" means seen only as a snippet or summary.

Academic research

Consultancy and survey figures

Books and practitioner writing (ideas only)

Regulators, law and standards

Company documents and reporting

The site's own research

Examples