How Charities Work
Safeguarding Failures Are Governance Failures, Not Bad Luck
Serious harm in an organisation almost always follows the same structural pattern. The pattern is visible in advance to anyone who knows what to look at.

Treat the sections below as a sequence. With safeguarding as a governance function, getting the early decisions right makes the later ones much easier.
Before you start
- Concentrated authority with no independent reporting route is the core risk.
- Policies without practice, training and audit change nothing.
- Reporting culture is visible in whether concerns get raised at all.
The recurring structure
Reviews of serious incidents across sectors describe a consistent pattern rather than a series of unrelated accidents. The pattern usually includes concentrated authority, weak independent oversight, no safe route to raise a concern and a reluctance to act on early signals. Where those conditions exist, harm becomes likely over a long enough period regardless of the individuals involved.
This is why safeguarding is treated as a governance responsibility rather than as an operational task delegated downwards. General patterns from published reviews are described here rather than any particular organisation's case.
Policy is the easiest part
Almost every organisation has a safeguarding policy, and having one demonstrates nothing at all on its own. What matters is whether staff and volunteers know what it says, have been trained on it and can name the person they would go to.
From the receiving end, a useful test is asking three people at random who the safeguarding lead is and what they would do about a specific concern. Where the answers differ or are vague, the policy exists on paper and not in the organisation. Regulators and funders increasingly ask about practice rather than about whether a document exists.
Reporting routes that work
A route that requires reporting a concern to the person the concern is about is not a route at all. Effective arrangements include a named trustee, an external contact or a whistleblowing line independent of the management chain. The route has to be known, usable and demonstrably safe, since people do not use a channel they believe will cost them their position.
On the shop floor, whether anyone has actually used the route is a more informative question than whether it exists. An organisation reporting zero concerns over several years is describing its reporting culture rather than its record.
Power concentration
Founders, long-serving leaders and charismatic individuals accumulate informal authority that no organisational chart records. That authority makes challenge socially expensive, and reviews repeatedly find that people had concerns and did not raise them.
Board composition matters here: a board recruited by, and loyal to, the person it should be scrutinising cannot perform that function. Term limits, independent recruitment of trustees and regular board renewal are the ordinary structural defences.
They are unglamorous and are the main thing distinguishing organisations that catch problems early from those that do not.
Checks and their limits
Background checking regimes exist in many countries under various names and screen for recorded history rather than predicting future conduct. A check confirms the absence of a record, which is a genuinely useful but narrow piece of information. Treating a completed check as the whole of safeguarding is a widespread and consequential error.
In the annual accounts, supervision, two-person working, open premises, record keeping and clear boundaries do far more preventive work than screening does. The requirements, names and scope of these regimes differ substantially by jurisdiction, so check your own rules rather than importing another country's.
Organisations need what they say they need, which is often unglamorous and often money.
What an outsider can look at
Ask who the named safeguarding lead is and whether a trustee holds specific responsibility for it. Ask when the policy was last reviewed and when training was last delivered, since dates are harder to fudge than intentions.
Bought used, look at how long the senior leadership has been in post and how recently the board changed composition. Look at whether the annual report mentions safeguarding at all, since organisations taking it seriously generally report on it. None of this guarantees anything, and all of it is more informative than a downloadable policy document.
The takeaway
Ask who someone would report a concern to if the concern were about the person in charge.
Unrestricted money is the most useful gift and the least satisfying to make.
Questions readers ask
Is a background check enough?
No. A check confirms the absence of a record. Supervision, two-person working, open premises and clear reporting routes do far more preventive work.
What is the strongest warning sign in a small organisation?
Authority concentrated in one long-serving person with a board that person recruited, and no reporting route that bypasses them.
Also by Dhruv Namdeo
- Why a Charity Sitting on Money Is Not Necessarily HoardingHow Charities Work
- Charity Mergers Happen Less Often Than They Probably ShouldHow Charities Work
- What Non-Profit Does and Does Not MeanHow Charities Work
- Impact Reporting: Outputs, Outcomes and the Gap Between ThemHow Charities Work





