Exception Drift

Temporary exceptions quietly become normal operating behavior.

What it looks like

• “Just this once” becomes “how we do it”
• Controls exist, but are routinely bypassed
• Exceptions accumulate without visibility
• Policy remains strict; reality becomes informals

Failure mechanism

Exceptions are not bounded by time, scope, or evidence. The system loses its baseline—and can no longer tell what “normal” is.

Minimum viable controls

Verification

• Log every exception with owner, rationale, scope, expiry
• Require explicit approval for renewals
• Track exception volume and duration

Counterweights

• Independent approval for high-risk exceptions
• Separation of requester and approver
• Escalation for repeated exceptions

Correction Loops

• Weekly/monthly exception review
• Automatic expiry with re-authorization required
• Root-cause fixes prioritized over repeated bypass

Proof you’re controlling it

• Exceptions expire and are closed
• Repeat exceptions trigger underlying fixes
• Exception metrics are visible to leadership

Where it shows up

Everywhere—commonly Team → Organization—and quietly drives Crisis as Audit later.

Related patterns

Oversight Theater • Crisis as Audit • Authority Without Friction