The Invisible Risk
Every organization serving children or vulnerable adults is working hard to keep them safe.
Policies are written, staff are trained, and background checks are complete; all of these steps matter.
They help keep dangerous people out and signal that safety is taken seriously.
And yet, despite those efforts, sexual abuse keeps happening — even in organizations considered “safe.”
That’s not because people don’t care or aren’t trying hard enough.
It’s because sexual abuse risk doesn’t behave like most other risks.
Sexual abuse risk isn’t a single hazard you can isolate or eliminate.
It doesn’t reside in a “bad actor.”
It develops quietly in the ordinary interactions between people, environments, and systems — in the uncertainty of everyday life.
The danger builds slowly — in the spaces between policy and practice, between supervision and trust, between what’s written and what’s actually lived.
To manage it effectively, you have to understand those spaces for what they are: zones of uncertainty.
That’s where sexual abuse risk hides, grows, and — if unmanaged — harms.
The Three Layers of Uncertainty
Every organization faces uncertainty.
But in safeguarding, those uncertainties layer on top of one another, making sexual abuse risk both harder to see and harder to manage.
- Behavioral Uncertainty — Will people act as expected?
Though we all know better, most controls assume people will behave as expected — that policies will be followed and training remembered.
But behavior under pressure, fatigue, or emotion is unpredictable.
The greatest risk often comes not from malicious intent, but from small lapses that accumulate unnoticed.
- Environmental Uncertainty — Where and when does risk emerge?
Risk changes as settings, programs, and relationships evolve.
New technologies, travel, and even minor changes in space or schedule can open up new vulnerabilities.
Static controls — even good ones — lose effectiveness when the environment moves faster than the system can respond.
- Systemic Uncertainty — Will safeguards hold when they’re tested?
A policy can look perfect in theory, but fail under pressure.
Oversight can weaken.
Supervision can thin.
Communication can break down.
The system itself becomes uncertain — not because people don’t care, but because the world it’s managing keeps changing.
Why Abuse is a Risk — Not Just a Rule Violation
For decades, prevention efforts have focused on controlling behavior — screening for “bad actors,” enforcing codes of conduct, and delivering mandatory training.
Those steps are important. They reduce opportunity and clarify expectations.
But they only go so far.
Because most abuse doesn’t happen through blatant rule-breaking — it happens when uncertainty goes unmanaged.
Sexual abuse risk is an emergent risk because:
It doesn’t come from a single point of failure or intent — it arises from how ordinary parts of an organization interact, drift, and adapt over time.
It’s not linear — it’s dynamic — which is why static prevention tools inevitably fall behind.
It emerges from normal dynamics — routine interactions, decisions, and moments of trust that combine in unpredictable ways.
It evolves through feedback loops — small gaps or exceptions that reinforce each other until a pattern of risk forms.
It adapts to context and change — as programs, people, and pressures shift, new vulnerabilities emerge faster than static rules can respond.
It’s amplified by uncertainty — because no one can perfectly predict how people, cultures, or systems behave under stress, and abuse risk grows in that unpredictability.
That’s why Enterprise Risk Management (ERM) reframes risk not as a person or an event, but as the effect of uncertainty on objectives.
In safeguarding terms:
If your objective is to protect children and vulnerable adults, then risk isn’t just the chance of abuse.
It’s every uncertainty — in people, systems, or culture — that could interfere with that protection.
When you think this way, prevention becomes less about policing behavior and more about understanding and managing uncertainty before it becomes harm.
From Rules to Systems: How to Start Managing Uncertainty
Managing uncertainty begins with a mindset shift — from compliance to capability.
It’s not about adding more rules.
It’s about building systems that can sense, learn, and adapt.
From Policies → Processes → Systems
- Policies set expectations.
- Processes make them operational.
- Systems connect them — linking what’s written, what’s done, and what’s learned.
From Reacting → Sensing → Learning
Most safeguarding still reacts after the fact.
Living systems sense weak signals early — small lapses, near misses, emerging tensions — and turn them into learning before harm occurs.
From Proving Compliance → Demonstrating Capability
Compliance proves effort.
Capability demonstrates effectiveness.
The question isn’t “Do we have policies?” — it’s “Can we show how our policies work in practice, and adapt when they don’t?”
The Turning Point: From Rules to Learning
The old model of prevention focused on control — telling people what not to do and expecting compliance to be enough.
It assumed that if bad actors were screened out and good people followed the rules, safety would follow.
The new model starts from a different question:
Where does uncertainty live?
- Where are staff least confident?
- Where does supervision drift under pressure?
- Where might opportunities for abuse appear — even unintentionally?
When people are invited to surface uncertainty rather than hide it, prevention becomes a process of learning together — identifying where safeguards weaken, how to strengthen them, and how to adapt as conditions change.
This turns safeguarding from a rule-based exercise into a living capability.
It replaces fear of mistakes with curiosity about improvement, and silence with shared responsibility.
When that happens, safety isn’t enforced — it’s understood.
And that understanding is what makes it last.
The Bottom Line
Sexual abuse risk keeps rising — not because organizations don’t care, but because the nature of the risk keeps changing faster than rule-based systems can respond.
We don’t prevent abuse by trying to spot “bad actors.”
Because we can’t spot bad actors with rules alone.
We minimize risk by managing uncertainty — by understanding where systems drift, where oversight weakens, and where risk hides in plain sight.
When organizations learn to manage uncertainty — not fear it — they don’t just protect people more effectively.
They build cultures of trust, learning, and accountability.
And that’s what lasting safety is made of.
