Where Most Organizations Are Today
If your organization works with children or vulnerable adults, your commitment isn’t in doubt.
You’ve already invested in background checks, policies, and training. You’ve done what you were told prevention requires.
And yet, if you’re like most organizations, you’re still wondering whether you’re doing enough — or whether you’re actually preventing sexual abuse (SAM).
That’s not because you’re doing anything wrong. Your instincts are right: the tools you were given weren’t designed to prevent SAM; they were designed to restore credibility after scandals.
If they had been designed to prevent abuse, they would have been designed to help you manage uncertainty — because SAM risk is nothing but uncertainty:
- It’s rarely the result of blatant rule-breaking.
- It often arises from blurred boundaries, oversight gaps, shifting cultures, or systems that drift.
- The real risk doesn’t lie in isolated acts, but in how uncertainty in behavior, context, and systems accumulates over time.
That’s where a mature safeguarding system begins — not with assuming that background checks + rules + training = prevention, but with acknowledging uncertainty.
Step One: Acknowledging Uncertainty — The Foundation of Defensibility
Acknowledging uncertainty isn’t a weakness. It’s the first act of professional risk management.
Until you acknowledge uncertainty, you can’t manage it.
When you manage the risk of SAM without managing its uncertainties, you’re only introducing controls that someone else told you should work — and confirming that you’ve done what was asked.
When you manage uncertainty, you do something very different:
You design and regularly test controls against fit-for-purpose criteria that assess, in your context, whether they’re actually reducing uncertainty, increasing protection, and being used effectively.
Over time, that process — regularly testing, refining, and documenting your reasoning — creates defensibility.
A defensible system is one where you can show — clearly, calmly, and credibly — that every decision made sense at the time it was made.
It shows your organization acted:
- Deliberately, not reactively.
- Transparently, not defensively.
- Aligned with purpose, not improvised under pressure.
In a world where “nothing happened” is no longer proof of safety, defensibility is the first sign of progress.
Step Two: Building Capability — Turning Insight into Action
You don’t need to start big to create defensibility.
Starting small and expanding gradually is often the smartest approach.
You can begin with one critical risk area — or a pilot program to test what works — and iterate improvements in short cycles.
If you have the resources, you can build a comprehensive, enterprise-wide risk management (ERM) system focused on sexual abuse and refine it the same way: incrementally, through learning.
Either way, prioritization and iteration are key.
As you repeat this process, your organization begins to build capability — the ability to manage uncertainty systematically, not sporadically.
Capability is built when:
- Teams identify uncertainty early, not just react after the fact.
- Frontline staff can explain what keeps people safe and why.
- Systems evolve through feedback instead of waiting for crises.
With capability, safeguarding shifts from static policy to living practice — a system that improves because people are using it.
And as capability grows, so does your ability to manage bigger uncertainties — the ones that directly shape your organization’s future.
Step Three: Where Risk Management Becomes a Source of Value
Step two strengthens prevention.
Step three takes uncertainty management to a different level — where risk management becomes part of how the organization grows, not just how it protects.
When your organization can shift from managing the uncertainties around the risk of SAM to managing the uncertainties of SAM risk, you unlock value.
“SAM risk” means something larger than “the risk of SAM.”
It’s the full spectrum of abuse-related uncertainties that affect your ability to achieve your objectives — positive and negative.
This is the shift from “are we preventing harm?” to “are we managing uncertainty in a way that protects and advances our organization or our mission?”
When safeguarding is managed as part of enterprise-wide risk management, value begins to appear — and it’s measurable.
Research on organizations with mature ERM systems shows consistent patterns:
Strategic Value
- Reduced uncertainty around achieving objectives enables more ambitious goals.
- Confidence to expand services and reach more people.
- A reputation for integrity that attracts partners, families, and funders.
Operational Value
- Fewer incidents, smoother audits, and faster learning cycles.
- Lower staff turnover and burnout through trust and clarity.
Financial Value
- Lower insurance costs, faster access to grants, greater donor confidence.
- Research shows firms with strong ERM maturity enjoy a measurable valuation premium — in some cases up to 25% — due to improved decision-making and resilience.
Reputational Value
- Trust that is earned, visible, and sustained.
- Recognition not just for avoiding harm, but for managing risk well.
At this stage, risk management stops being a cost center and becomes a strategic asset.
Step Four: Continuous Improvement — Learning as a Strategic Asset
The longer an organization manages uncertainty in this way — through reflection, documentation, and adaptation — the more valuable its capability becomes.
Each review strengthens:
- Defensibility, because you can show your reasoning.
- Capability, because you’ve learned what works and what doesn’t.
- Value, because the system gets cheaper, faster, and smarter.
This is the living-system advantage: every feedback loop compounds learning and trust.
The Bottom Line
No organization achieves full maturity overnight.
You start where you are — acknowledging uncertainty, designing a minimum viable system, and expanding it through prioritized, disciplined iteration.
Each step builds defensibility, capability, and value — and with them, confidence.
Because when your system manages sexual abuse-related uncertainty as well as your organization manages its mission, safeguarding stops being a cost and becomes what it should have been all along — a source of resilience, trust, and lasting value.
