Trish's Blog

Yesterday’s Part 1 covered the distance between what your evidence trail proves and what your people are doing. Standards are written to be auditable; an auditor cannot observe judgement, so organisations build for the artifact and end up running two systems.

What it costs you?

Certification without capability. You pass the audit and fail the event because the event was never in the manual.

Regulatory exposure. A complete document set is no longer a defence when behaviour tells a different story.

Money you cannot see on any line item. Audit preparation cycles. Duplicated processes. Staff maintaining the real workflow and the documented one. Repeat findings that keep returning because the corrective action treated the paperwork rather than the pattern.

People. When the report matters more than the reality, your most capable staff learn that speaking up produces friction and no change. They stop. Then they leave. The ones who remain are comfortable with the arrangement, which makes them the least likely to warn you.

Time. Nearly every serious failure was visible to someone well before it became visible to everyone. The delay between those two moments is a behavioural problem, not a documentation one.

What changes when you address it?

Your evidence trail starts describing what happens rather than what was intended. Audits get shorter. Findings get fewer. Assurance starts meaning something. Reporting rises before it falls. It looks worse on the graph and it is the healthiest signal you will get all year.

When people believe raising something produces a response rather than a consequence, near miss and incident numbers climb. Severity follows them down. Corrective actions hold, because they address the thinking that produced the behaviour rather than the record that captured it.

Regulatory change becomes an adjustment rather than a project. When people understand the intent behind a requirement and not only the steps, a new version of a standard stops being a crisis.

And your board receives assurance worth having. Not a document count. Evidence that the people responsible for the system understand what it is for.

What it looked like in practice. A Perth organisation engaged me on two priority areas. Bullying was not one of them. Nine months in, their HR team checked something they had noticed. Bullying reports were down 71.6 per cent. Nobody had run a bullying program. The behaviour changed because the thinking changed, and the result arrived somewhere nobody had targeted.