Insights

How these failures actually work

Written from the six situations clients arrive with. No case studies and no client names — each one argues from how the failure works, not from somebody's engagement.

2026-10-05
A system written for the auditor
Most failed certification audits are not a documentation problem. They are the moment a system written to be inspected meets an operation that never used it.
2026-10-05
When the numbers stop improving
A safety record that improves for three years and then flattens has not stalled. It has run out of the kind of problem that counting can find.
2026-10-05
The plan was written for the building
Most continuity plans answer what happens if the site burns down. Far more operations stop because one supplier, one system, or three people became unavailable.
2026-10-05
Three versions of the same number
When a management review spends its first twenty minutes arguing about whether a figure is right, the problem is not the figure. It is that nobody owns its definition.
2026-11-07
The risk register nobody opens
A register assembled the week before an audit is not a weak control. It is a record of decisions that were never made.
2026-11-07
What a business impact analysis is actually for
Continuity plans fail in rehearsal for one reason: they were written before anybody worked out which hours cost the most.

How these failures actually work

A system written for the auditor

When the numbers stop improving

The plan was written for the building

Three versions of the same number

The risk register nobody opens

What a business impact analysis is actually for