Navigate Your Path to Success with ClarityBridge Partners

Changes, Controls, and Audits

When Governance Breaks, Even Strong Teams Struggle

Background

A newly spun-off company—with over $700M in revenue—had an experienced IT leadership team.

But they were struggling with something fundamental: Governance.

Specifically around:

  • Scoping
  • Estimating
  • Change and release management

The Problem

Despite strong technical talent, critical gaps existed:

  • No auditable process for production changes
  • No single source of truth (who, what, why, when)
  • No consistent testing, approvals, or rollback plans
  • No structured way to provide cost estimates or track actuals
  • No formal approval framework

Changes were happening.  Control was not.


Analysis

The issue wasn’t capability—it was structure.

A fragmented environment had emerged:

  • Documentation spread across email, Word, and Excel
  • Code changes not tied to specific requests
  • Database updates not tracked
  • No clear alignment between business requests and IT execution

At the same time, the company needed to meet strict audit requirements..


Key Insight

Without governance, even high-performing teams create unmanaged risk.


Solution

ClarityBridge Partners focused on practical, high-impact changes—not complexity.

1. Introduced structured change governance

  • Formal change management meetings
  • Business prioritization of requests
  • ROI tied to each initiative

2. Centralized everything

Designed and implemented a web-based change & release platform:

  • Single system for all documentation and code
  • Eliminated email-based tracking
  • Real-time status, approval, and testing notifications
  • Full audit trail (who, when, why)
  • Integrated with upstream systems (e.g., IT help desk)

3. Built audit-ready reporting

  • Partnered with Big 4 auditors
  • Created automated reports aligned to audit requirements
  • Ensured complete visibility into the change lifecycle

Outcome

From engagement to implementation: < 90 days

  • Governance embedded directly into daily operations
  • Full auditability and compliance achieved
  • Dependency on tribal/legacy knowledge eliminated

Audit impact:

  • Audit preparation reduced from days → <1 hour
  • 100% accuracy and completeness
  • Global, traceable approval process
  • Emergency changes governed with same rigor

Business impact:

  • Increased business engagement and ownership
  • Shifted budgeting responsibility to requesting departments
  • First audit: zero findings

Key Lessons

  • Keep solutions focused and intuitive - complexity creates risk
  • Governance must be designed in, not layered on later
  • Reliance on email, spreadsheets, and informal systems:
    • Increases risk
    • Reduces productivity
    • Fails under audit scrutiny

Call to Action

These challenges aren’t unique to IT.

The same risks exist anywhere organizations rely on:

  • Informal processes
  • Legacy knowledge
  • Disconnected systems

 

 

ClarityBridge Partners helps organizations build practical governance and audit-ready processes—without overengineering the solution.

Data entry took down a company (almost)

Data Entry Error Becomes an Existential Risk

Background
A client relied on a call center to refill credits on customer devices. On multiple occasions, agents entered the wrong amount—often 10× higher than requested.

What appeared to be a simple data entry issue quickly escalated:

  • The company operated in a regulated environment
  • Corrections were made directly in the production database
  • These changes had no documentation, no approvals, and no audit trail

By the time ClarityBridge Partners was engaged, the regulator had intervened. The company was placed on probation, with the risk of being shut down after one more unmanaged incident.


Analysis
This wasn’t a single failure—it was a breakdown across people, process, and governance:

  • A custom application with no built-in validation controls
  • A call center with high turnover and inconsistent training
  • A technically capable IT team, but limited operational governance
  • No executive visibility until regulatory action was underway

Even with an error rate of <1 in 1,000, the absence of controls meant every error carried outsized risk.


Solution
ClarityBridge Partners focused on pragmatic, high-impact controls:

1. Prevent errors at the source
Require dual-entry validation for transaction amounts.
→ Reduced effective error rates by orders of magnitude (~99.999%).

2. Establish controlled remediation
Replaced direct database edits with a formalized support workflow, including:

  • Full audit trail
  • Defined approvals
  • Complete traceability

3. Implement governance discipline
Introduced change and release management across applications and infrastructure.

4. Engage regulators proactively
Worked directly with the regulator to demonstrate improved controls and define a clear path off probation.


Outcome

  • Error risk reduced to near-zero levels
  • Full auditability and compliance restored
  • Regulatory confidence rebuilt
  • Business continuity secured

Key Insight
In regulated environments, operational gaps don’t stay isolated—they compound.

The difference between a manageable issue and a business-threatening event is control maturity.


Call to Action

If your organization relies on manual processes, legacy systems, or workarounds to “fix” production issues, you may be carrying more risk than you realize.

 

 

ClarityBridge Partners helps organizations identify hidden operational risk, implement practical controls, and strengthen regulatory confidence—without overengineering the solution.

Six Sigma 10; Requirements 0

How a major mortgage servicing project nearly failed despite “successful” project execution

Organizations often assume that if:

  • The documentation is complete
  • The meetings are happening
  • The methodology is being followed
  • And the status reports are green

…then the project must be on track.

That is not always true.

This case highlights how a major financial institution nearly missed a critical regulatory requirement—even after months of structured project work using a modified Six Sigma DMAIC methodology.

Background

A major bank entered into a stipulation agreement requiring updates to its mortgage servicing application to properly account for mortgages in bankruptcy.

Under the required process:

  • Past-due mortgage balances would be separated from the original loan
  • The primary mortgage would be restored to current status
  • Arrears would be tracked separately as a second obligation
  • Late charges would not accrue if both payments were made on time

The existing mortgage servicing system did not support this functionality.

A project was launched to modify the application and bring the bank into compliance.

The project team followed a modified Six Sigma DMAIC approach and produced extensive project documentation across the: Define, Measure, Analyze and Improve phases

At first glance, the project appeared well managed.

  • The templates were complete.
  • The narratives were polished.
  • The process diagrams were detailed.
  • The meetings were occurring regularly.

Everything looked correct.

The Problem Nobody Saw

After several months on the project, something felt wrong.

While reviewing the project deliverables, I modified the end-to-end process map to include the proposed solution and associated accounting flows.

That exercise exposed a critical issue:

The proposed solution did not actually account for how the modified loan balances and payments would be managed within the servicing system.

In other words:

The project documentation was complete, but the core business and regulatory requirement had not been solved.

Root Cause Analysis

Several issues contributed to the failure:

  1. Lack of Domain Expertise

The project manager did not have deep mortgage servicing or bankruptcy processing experience.

As a result, the team focused heavily on process execution without fully validating operational outcomes.

  1. Critical SME Exclusion

Only one individual had deep technical knowledge of the legacy loan servicing platform.

That resource was not actively involved in the project.

The team lacked the system-level understanding required to validate whether the proposed solution was technically and operationally viable.

  1. Fragmented Team Structure

Different remote teams handled separate project phases:

    • Define
    • Measure
    • Analyze

This created process silos and reduced continuity across the initiative.

Each group completed its assigned deliverables, but no one owned end-to-end validation.

  1. Failure to Validate Against Regulatory Requirements

Most importantly:

No one formally reviewed the proposed solution against the original government stipulation requirements.

The project focused on completing methodology artifacts rather than validating compliance outcomes.

The Turning Point

After repeatedly escalating the issue and highlighting the missing functionality, the project team finally reassessed the initiative.

The result:

  • The project was reset.
  • Additional subject matter expertise was added.
  • The structure of the initiative was revised.
  • And the organization realigned the project around the actual business and regulatory requirements—not simply document completion.

Outcome

The project experienced delays and restructuring.

However, the revised effort ultimately met the regulatory stipulation requirements because:

  • Appropriate SMEs were engaged
  • Project governance improved
  • And the team validated the solution against real operational requirements

Key Insight

The regulatory requirements were clear from the beginning.

So how were they missed?

Because the project had:

  • Weak integration between teams
  • Insufficient project governance
  • Inadequate subject matter involvement
  • And no clear ownership for validating final business outcomes

Most importantly:

No one consistently asked the most important question: “Does this solution actually meet the stipulation requirements?”

That single question changed the direction of the project.

Final Thought

Many struggling projects are not failing because teams are not working hard.

They fail because:

  • Teams become disconnected
  • Process replaces critical thinking
  • Governance focuses on deliverables instead of outcomes
  • Organizations lose visibility into whether the business problem is actually being solved

At ClarityBridge Partners, this is exactly the type of disconnect we help organizations identify before projects become significantly more costly and difficult to recover.

👉 Find out if we can help you!