What we look at first

When authority follows the person instead of the role, every promotion, departure and reorganization leaves a gap behind it. Work gets handed over verbally. Decision rights never get reassigned. Successors hold the responsibility without the authority to act on it, and the roles next to them quietly absorb what nobody picked up.

A strong team carries that for a few weeks. After three months it has stopped being a gap and become how the company works.

Closed means someone finished an assigned task by a deadline. Fixed means the problem stopped happening. Most companies measure the first, so the tracker looks healthy right up until the same incident repeats.

When something comes back after the action was closed, it is usually one of three things. The procedure still does not fit the work. The training did not reach every worker at every location. Or the procedure was not followed on the day it mattered. A closed action does not tell you which one. Finding out means going back to look at the work.

Most companies have a risk register. A managed risk has four things: a named owner, a stated tolerance, a decision right, and an escalation process that moves it to the right leader while there is still time to act.

With those four in place, each risk gets a decision. A risk that lacks them gets deferred one quarter at a time, and each deferral looks reasonable on its own.

Stated values set the intent. A process with named owners delivers it.

Documentation written for an audit and never used in the field does not control anything. What we check is whether a supervisor can run the job from what is written, and whether the standard of care in the procedure matches what the job actually takes.