Skip to content

Between the Alert and the Outcome

The sections follow the stages of a case. Detection ends where this begins.

Home

The programme

The programme itself

A function that can look at anybody needs somebody looking at it.

Measuring a Programme Honestly

Six numbers that describe what an insider programme is actually doing, including the ones nobody wants to report.

The Metrics That Corrupt It

Four measures in common use that reliably push an insider programme toward investigating more people for less reason.

Transparency With the Workforce

A programme nobody understands is one everybody assumes the worst about. Publishing what it does costs little and is what makes it tolerable.

Audit and Oversight of the Investigators

A function with access to everybody's records needs somebody checking it. The arrangement is simple and is almost never in place.

When the Programme Should Be Narrowed

Programmes expand by default. The signals that one has grown past what it can justify, and what reducing it looks like.

Reviewing a Case That Went Wrong

An outcome was overturned, somebody was treated unfairly, or a case became a claim. The review that follows determines whether it happens again.