Competence is not a system—and memory is not resilience Ask an SME owner how operational risks are managed, and a familiar answer appears with quiet confidence: “We’re fine. My people are experienced.” It sounds reassuring. It is also one of the most fragile assumptions a business can make. Experience is valuable. It is not a control. Treating it as one is how organisations drift into avoidable failure—slowly, invisibly, and usually without warning. Experience lives in people

And why clarity of authority matters more than completeness of process Most businesses have Standard Operating Procedures. They are written carefully, approved formally, and stored somewhere accessible. They remind staff what should happen, in what order, and who is responsible at each step. On paper, they signal preparedness. And then stress enters the system: An incident occurs. A customer escalates. A staff member is injured. A regulator appears without warning. A parent t