The most dangerous point in an organizational recovery is often the moment it begins to look successful.
I have seen this in hospitals, utilities, mines, banks and public agencies. The example below is a hospital, because that is where the consequences are most immediate and human. The pattern is not clinical. It is structural and everywhere.
New leaders are in place. Policies rewritten. Governance structures strengthened. The crisis has receded, and there is now a plan, a reporting cycle and a better sense of control. That is progress. But none of it yet proves that the management system which allowed the failure has changed.
Governance failure is rarely born in the boardroom. It develops in operations, when concerns are softened on their way upward. By the time a Board receives the surprise, managers have been living with the strain for months.
I know how that softening happens, because I did not see it either.
This was known. The exposure sat on the risk register under a name of its own: the risk of an unwelcome intruder – with a remedy that had been costed: secured entrances, card access, a staffed reception. The capital wasn’t there that year. So, the item stayed where it was, and what reached the Board was a single line: the risk was being actively monitored.
I read that line and did not question it. Someone had been assigned. The item appeared on a register.
Then . . . a man walked in with a gun.
The risk of an unwelcome intruder. Nobody reading that phrase sees a man with a gun.
What “monitored“ had actually meant was a name beside an entry on a list. No one was measuring whether the exposure was growing. No one had defined what would trigger escalation. No one ever thought it could happen here. The Board received an accurate report and an inaccurate picture.
For a long time I understood that as a reporting failure. It isn’t. Ask why the word “monitored“ was chosen, and the answer is not evasion. It is arithmetic. The hazard could not be resolved, so it was reworded. Stating it at full strength would have created an obligation nobody had the means to discharge, and so the language absorbed the pressure the system could not.
I have watched the same grammar do the same work in a utility, where deferred asset renewal sat in Board papers as a condition being managed for years before it arrived as an outage.
Organizations begin to filter reality as their capacity to act on what they know runs out. The gap between what is reported and what is lived is not a communication problem. It is a capacity problem.
And capacity is rarely governed, because the information that would reveal an organization’s limits is precisely the information most likely to be softened before it arrives. The closer a system runs to its ceiling, the more its reporting reassures. Boards are told the plan is on track most convincingly at exactly the moment the organization has least room to deliver it. It is a closed loop, and it seals itself: the less capacity you have, the less you know you lack it.
This is sharpest for a Board that is formed partway through a recovery. It inherits the interpretation along with the evidence. It was not present for the failure, so it has no independent picture against which to test what it is now being told. Everything it sees has been assembled by people who invested effort in making the progress real, and their conviction is genuine, which makes it more persuasive, not less. A new Board is therefore most reassured during precisely the period when it is least able to verify what it is being told. Its first task is not to challenge the recovery. It is to independently establish what the organization is actually capable of today.
Capacity is not simply beds, dollars, staff or operating rooms. Those are the measures everybody counts. Capacity is also the attention available to managers, the ability of leaders to lead rather than triage, the time required to redesign services safely, the organization’s ability to absorb another change, and the decision space required to act before the next crisis arrives.
Think of it as ballast rather than cargo. Cargo is what you are paid to carry, so it is measured, invoiced and reported. Ballast determines how much more you can take on without capsizing, and because nobody is paying for it, nobody counts it. Right up until the weather turns.
This makes capacity a strategic matter rather than an operational one. An organization running at its ceiling has not merely lost headroom; it has lost the ability to choose. Only the choices that can be made without cost remain, and those are rarely the ones that matter. Long before a Board is told the organization is constrained, its real options have already narrowed.
Boards spend a great deal of time on risk appetite – how much risk the organization is willing to accept. Very few have ever established their risk capacity: how much the organization could actually absorb before its ability to function degrades. Appetite without capacity is a statement of preference, not a control.
This matters most acutely during recovery, because recovery itself is a demand on capacity. Repairing controls, responding to oversight, rebuilding trust, recruiting leaders, reducing costs, redesigning services, implementing new technology – all of it may be necessary. But it cannot all be urgent.
When leaders do not decide what will stop, slow or be deferred, recovery becomes one more load imposed on an already overloaded system. People become exhausted. Workarounds return. And the filtering resumes, not because anyone has decided to conceal anything, but because the organization has once again lost the means to act on what it knows.
That is not a failure of commitment. It is a failure to govern capacity.
So, the question a Board must be able to answer is not “are we on plan?” It is this: who has the authority to pause, resize or resequence an initiative before it damages people or performance? If nobody holds that authority, capacity is not being governed. It is being hoped for.
The most meaningful evidence of recovery is therefore not a new structure, a revised policy or a successful handover. It is an organization with enough capacity to afford the truth. When people can raise a concern at full strength without creating an obligation nobody can meet, the filtering stops on its own. Nobody has to be told to be candid. Candour simply becomes affordable again.
A management system is simply how an organization notices, decides and acts. Structures can be rebuilt in a year. That takes longer, and it is the only thing that makes the rest hold.
That is when recovery moves beyond visible repair. That is when it begins to last.
If this resonates because you are living it – that’s a sign.
I work with leadership teams when the strategy is sound, and the effort is real, yet the results don’t prove out. The issue is usually deeper: the business is asking more of the organization than its abilities, capacity, and operating conditions can support.
That is the work I help leadership teams sort through.
