Thinking / System design· Part 8 of 10 in From exception to decision
Completed is not the same as effective
Work can be finished without restoring the control, reducing the risk or achieving the outcome that justified the work.
- Verification
- Effectiveness
- Controls
- Assurance
31 August 2026
On this page
- Completion and effectiveness answer different questions
- Actions should have intended outcomes
- Define verification before the work is done
- Verification should be proportionate
- The control can often verify the result
- Some effectiveness takes time
- Failed verification is valuable information
- Effectiveness closes the loop with the assurance layer
Operational systems often treat completion as the end of a process.
The work was performed.
The task was closed.
The record is complete.
For many routine activities, that may be enough.
For material governance matters, it may not be.
There is a difference between proving that an action occurred and proving that the action achieved its intended result.
Completion and effectiveness answer different questions
Consider a few examples.
Training completed ≠ Competence demonstrated
Valve replaced ≠ Barrier restored
Procedure issued ≠ Procedure followed
Inspection completed ≠ Asset acceptable
Action closed ≠ Risk reduced
The left-hand side records activity.
The right-hand side describes an outcome.
That difference matters because governance normally cares about the outcome.
Actions should have intended outcomes
A useful action record should therefore capture more than:
Replace PSV-104.
It should also be possible to understand why the action exists.
For example:
Action: Replace PSV-104 Purpose: Restore overpressure protection Expected outcome: Barrier B-17 available Verification: set pressure certificate, installation inspection and functional test
This changes the meaning of completion.
Completion becomes:
The replacement work occurred.
Verification becomes:
The intended barrier capability has been restored.
Both are valuable.
They should not be confused.
Define verification before the work is done
There is also value in deciding how effectiveness will be demonstrated before the action is performed.
Otherwise verification can become retrospective.
The work is complete.
Someone asks how to close the issue.
The easiest available evidence is accepted.
A better process asks earlier:
What evidence would convince us that this action worked?
That might be:
- a functional test,
- a repeat inspection,
- a reconciled system state,
- an approved regulator response,
- a measured reduction in condition,
- an independent review,
- or a defined period without recurrence.
The verification method becomes part of the intended response rather than an administrative step at the end.
Verification should be proportionate
Not every action needs formal independent verification.
That would create unnecessary overhead.
The level of verification should depend on factors such as:
- consequence,
- risk,
- obligation source,
- control criticality,
- decision conditions,
- and required independence.
A low-risk administrative correction might be verified automatically.
A safety-critical barrier restoration may require a different person or authority.
A legal submission might require evidence of receipt.
A financial reconciliation might be verified by a control running again.
The principle is not:
Verify everything manually.
It is:
Make the required level of confidence explicit.
The control can often verify the result
This creates a particularly useful connection back to the assurance layer.
Suppose a control originally detected:
Expected state: programme status agrees with authoritative licence status Actual state: mismatch
An action corrects the replicated value.
Rather than closing the exception because somebody says the correction is complete, the control can run again.
If the expected state now exists:
Resolved → Verified
The operating model has tested its own restoration.
The same pattern can apply elsewhere.
Required inspection missing → inspection completed → control confirms current inspection exists
or:
Temporary approval expired → new decision completed → control confirms current authority exists
The control that detected divergence can sometimes provide the strongest evidence that the expected condition has returned.
Some effectiveness takes time
Not every action can be verified immediately.
Suppose an organisation changes a maintenance strategy because repeated failures are occurring.
The work may be completed when the strategy is updated.
Its effectiveness may not be known for months.
Likewise:
Procedure revised → implementation complete → effectiveness measured through later operating behaviour
or:
Corrective action completed → recurrence monitored for 90 days → effectiveness review
That suggests another useful distinction:
Completion date ≠ Verification date
The system should be able to preserve both.
Failed verification is valuable information
Verification is not merely a hurdle before closure.
It can reveal that the chosen response did not work.
Suppose:
Repair completed Functional test failed
The correct result is not an awkward workflow exception.
It is useful evidence.
The organisation has learned that its intended remediation was ineffective.
That may require:
- another action,
- another risk assessment,
- a changed decision,
- or escalation.
A good governance model allows the process to move backward when reality does not match the intended outcome.
Effectiveness closes the loop with the assurance layer
The earlier assurance model asked:
What should remain true?
Controls test that expected state.
This series asks:
What happens after the expected state stops being true?
The answer is now beginning to form:
Detect → Assess → Decide → Act → Verify
And verification brings us back to:
Is the expected state true again?
That makes assurance a loop rather than a sequence.
But even when the expected condition has been restored, one governance question remains.
When is the organisation entitled to say that the matter is closed?