GoodwillyGiving, lending, passing on

How Charities Work

Safeguarding Failures Are Governance Failures, Not Bad Luck

Serious harm in an organisation almost always follows the same structural pattern. The pattern is visible in advance to anyone who knows what to look at.

Black and white office scene featuring accounting documents, calculator, and laptops.
Photograph by Artem Podrez via Pexels
Editorial note. Independent reporting and analysis. Nothing here is sponsored or paid for. How we work.

Treat the sections below as a sequence. With safeguarding as a governance function, getting the early decisions right makes the later ones much easier.

Before you start

  • Concentrated authority with no independent reporting route is the core risk.
  • Policies without practice, training and audit change nothing.
  • Reporting culture is visible in whether concerns get raised at all.

The recurring structure

Reviews of serious incidents across sectors describe a consistent pattern rather than a series of unrelated accidents. The pattern usually includes concentrated authority, weak independent oversight, no safe route to raise a concern and a reluctance to act on early signals. Where those conditions exist, harm becomes likely over a long enough period regardless of the individuals involved.

This is why safeguarding is treated as a governance responsibility rather than as an operational task delegated downwards. General patterns from published reviews are described here rather than any particular organisation's case.

Policy is the easiest part

Almost every organisation has a safeguarding policy, and having one demonstrates nothing at all on its own. What matters is whether staff and volunteers know what it says, have been trained on it and can name the person they would go to.

From the receiving end, a useful test is asking three people at random who the safeguarding lead is and what they would do about a specific concern. Where the answers differ or are vague, the policy exists on paper and not in the organisation. Regulators and funders increasingly ask about practice rather than about whether a document exists.

Reporting routes that work

A route that requires reporting a concern to the person the concern is about is not a route at all. Effective arrangements include a named trustee, an external contact or a whistleblowing line independent of the management chain. The route has to be known, usable and demonstrably safe, since people do not use a channel they believe will cost them their position.

On the shop floor, whether anyone has actually used the route is a more informative question than whether it exists. An organisation reporting zero concerns over several years is describing its reporting culture rather than its record.

Power concentration

Founders, long-serving leaders and charismatic individuals accumulate informal authority that no organisational chart records. That authority makes challenge socially expensive, and reviews repeatedly find that people had concerns and did not raise them.

Board composition matters here: a board recruited by, and loyal to, the person it should be scrutinising cannot perform that function. Term limits, independent recruitment of trustees and regular board renewal are the ordinary structural defences.

They are unglamorous and are the main thing distinguishing organisations that catch problems early from those that do not.

Checks and their limits

Background checking regimes exist in many countries under various names and screen for recorded history rather than predicting future conduct. A check confirms the absence of a record, which is a genuinely useful but narrow piece of information. Treating a completed check as the whole of safeguarding is a widespread and consequential error.

In the annual accounts, supervision, two-person working, open premises, record keeping and clear boundaries do far more preventive work than screening does. The requirements, names and scope of these regimes differ substantially by jurisdiction, so check your own rules rather than importing another country's.

Organisations need what they say they need, which is often unglamorous and often money.

What an outsider can look at

Ask who the named safeguarding lead is and whether a trustee holds specific responsibility for it. Ask when the policy was last reviewed and when training was last delivered, since dates are harder to fudge than intentions.

Bought used, look at how long the senior leadership has been in post and how recently the board changed composition. Look at whether the annual report mentions safeguarding at all, since organisations taking it seriously generally report on it. None of this guarantees anything, and all of it is more informative than a downloadable policy document.

The takeaway

Ask who someone would report a concern to if the concern were about the person in charge.

Unrestricted money is the most useful gift and the least satisfying to make.

Questions readers ask

Is a background check enough?

No. A check confirms the absence of a record. Supervision, two-person working, open premises and clear reporting routes do far more preventive work.

What is the strongest warning sign in a small organisation?

Authority concentrated in one long-serving person with a board that person recruited, and no reporting route that bypasses them.

How Charities Worksafeguardinggovernancerisk
More in How Charities Work
Dhruv Namdeo
Contributing writer, Goodwilly

Dhruv writes about repair, reuse and lending libraries.

Also by Dhruv Namdeo