One of the questions I am asked most often is, "What does good assurance actually look like? which is a fair question.
Most organisations can describe what compliance looks like; They can point to policies, audits, dashboards, KPIs, action plans and committee papers, as those things are relatively easy to identify.
Assurance is different, as it isn't a document or a report and it certainly isn't a green dashboard. Real assurance is a level of confidence that what leaders believe is happening is broadly aligned with what is actually happening.
Notice I said confidence, not certainty! No organisation ever reaches a point where it knows everything. People make mistakes, circumstances change, risks emerge and information will always be imperfect.
The goal is not perfect knowledge, the goal is reducing the distance between reality and organisational understanding. So how do you know you're getting there?
Maybe the first sign is that uncomfortable information starts arriving earlier. Near misses are reported without hesitation, staff raise concerns before they become incidents and managers stop filtering difficult conversations because they know they will be listened to rather than blamed. The organisation becomes more interested in understanding than defending.
Another indicator is that senior leaders become more curious, instead of accepting positive reports at face value, they ask thoughtful questions.
Curiosity replaces reassurance seeking and you also begin to notice consistency.
What the Board hears increasingly reflects what frontline staff experience; site visits confirm what reports suggest rather than contradict them, audits become opportunities to learn rather than exercises in proving compliance and one of the strongest indicators is cultural.
People stop seeing assurance as something owned by Health & Safety, Compliance, Internal Audit or Governance, they begin to understand that assurance belongs to everyone because everyone contributes information that shapes leadership decisions.
When that happens, communication changes, people become more willing to challenge, leaders become more willing to listen and questions become more valuable than quick answers; The organisation develops healthy tension rather than unhealthy silence.
Ironically, organisations with genuine assurance often appear less confident than those living with the Compliance Illusion™. Not because they are weaker but because they recognise that understanding requires constant testing.
They are comfortable saying: We think this is true, but let's verify it.
That mindset is incredibly powerful although none of this guarantees that incidents won't happen or it will eliminate human error and it doesn't remove organisational risk but it does make surprises less likely; It allows weak signals to be recognised before they become major failures.
It helps Boards make decisions based on a richer understanding of operational reality rather than simply the information that successfully travelled through layers of management.
For me, that is what real assurance looks like: Not certainty and not perfection.
Just an organisation that has built the conditions where reality has the greatest possible chance of reaching the people responsible for making the most important decisions.
Real assurance isn't when nothing goes wrong, it's when reality reaches decision makers before problems become failures.
An independent assurance, governance and risk adviser, keynote speaker and the creator of The Compliance Illusion™.
