Changes, Controls, and Audits
When Governance Breaks, Even Strong Teams Struggle
Background
A newly spun-off company—with over $700M in revenue—had an experienced IT leadership team.
But they were struggling with something fundamental: Governance.
Specifically around:
- Scoping
- Estimating
- Change and release management
The Problem
Despite strong technical talent, critical gaps existed:
- No auditable process for production changes
- No single source of truth (who, what, why, when)
- No consistent testing, approvals, or rollback plans
- No structured way to provide cost estimates or track actuals
- No formal approval framework
Changes were happening. Control was not.
Analysis
The issue wasn’t capability—it was structure.
A fragmented environment had emerged:
- Documentation spread across email, Word, and Excel
- Code changes not tied to specific requests
- Database updates not tracked
- No clear alignment between business requests and IT execution
At the same time, the company needed to meet strict audit requirements..
Key Insight
Without governance, even high-performing teams create unmanaged risk.
Solution
ClarityBridge Partners focused on practical, high-impact changes—not complexity.
1. Introduced structured change governance
- Formal change management meetings
- Business prioritization of requests
- ROI tied to each initiative
2. Centralized everything
Designed and implemented a web-based change & release platform:
- Single system for all documentation and code
- Eliminated email-based tracking
- Real-time status, approval, and testing notifications
- Full audit trail (who, when, why)
- Integrated with upstream systems (e.g., IT help desk)
3. Built audit-ready reporting
- Partnered with Big 4 auditors
- Created automated reports aligned to audit requirements
- Ensured complete visibility into the change lifecycle
Outcome
From engagement to implementation: < 90 days
- Governance embedded directly into daily operations
- Full auditability and compliance achieved
- Dependency on tribal/legacy knowledge eliminated
Audit impact:
- Audit preparation reduced from days → <1 hour
- 100% accuracy and completeness
- Global, traceable approval process
- Emergency changes governed with same rigor
Business impact:
- Increased business engagement and ownership
- Shifted budgeting responsibility to requesting departments
- First audit: zero findings
Key Lessons
- Keep solutions focused and intuitive - complexity creates risk
- Governance must be designed in, not layered on later
- Reliance on email, spreadsheets, and informal systems:
- Increases risk
- Reduces productivity
- Fails under audit scrutiny
Call to Action
These challenges aren’t unique to IT.
The same risks exist anywhere organizations rely on:
- Informal processes
- Legacy knowledge
- Disconnected systems
ClarityBridge Partners helps organizations build practical governance and audit-ready processes—without overengineering the solution.


Data entry took down a company (almost)
Data Entry Error Becomes an Existential Risk
Background
A client relied on a call center to refill credits on customer devices. On multiple occasions, agents entered the wrong amount—often 10× higher than requested.
What appeared to be a simple data entry issue quickly escalated:
- The company operated in a regulated environment
- Corrections were made directly in the production database
- These changes had no documentation, no approvals, and no audit trail
By the time ClarityBridge Partners was engaged, the regulator had intervened. The company was placed on probation, with the risk of being shut down after one more unmanaged incident.
Analysis
This wasn’t a single failure—it was a breakdown across people, process, and governance:
- A custom application with no built-in validation controls
- A call center with high turnover and inconsistent training
- A technically capable IT team, but limited operational governance
- No executive visibility until regulatory action was underway
Even with an error rate of <1 in 1,000, the absence of controls meant every error carried outsized risk.
Solution
ClarityBridge Partners focused on pragmatic, high-impact controls:
1. Prevent errors at the source
Require dual-entry validation for transaction amounts.
→ Reduced effective error rates by orders of magnitude (~99.999%).
2. Establish controlled remediation
Replaced direct database edits with a formalized support workflow, including:
- Full audit trail
- Defined approvals
- Complete traceability
3. Implement governance discipline
Introduced change and release management across applications and infrastructure.
4. Engage regulators proactively
Worked directly with the regulator to demonstrate improved controls and define a clear path off probation.
Outcome
- Error risk reduced to near-zero levels
- Full auditability and compliance restored
- Regulatory confidence rebuilt
- Business continuity secured
Key Insight
In regulated environments, operational gaps don’t stay isolated—they compound.
The difference between a manageable issue and a business-threatening event is control maturity.
Call to Action
If your organization relies on manual processes, legacy systems, or workarounds to “fix” production issues, you may be carrying more risk than you realize.
ClarityBridge Partners helps organizations identify hidden operational risk, implement practical controls, and strengthen regulatory confidence—without overengineering the solution.
Six Sigma 10; Requirements 0
How a major mortgage servicing project nearly failed despite “successful” project execution
Organizations often assume that if:
- The documentation is complete
- The meetings are happening
- The methodology is being followed
- And the status reports are green
…then the project must be on track.
That is not always true.
This case highlights how a major financial institution nearly missed a critical regulatory requirement—even after months of structured project work using a modified Six Sigma DMAIC methodology.
Background
A major bank entered into a stipulation agreement requiring updates to its mortgage servicing application to properly account for mortgages in bankruptcy.
Under the required process:
- Past-due mortgage balances would be separated from the original loan
- The primary mortgage would be restored to current status
- Arrears would be tracked separately as a second obligation
- Late charges would not accrue if both payments were made on time
The existing mortgage servicing system did not support this functionality.
A project was launched to modify the application and bring the bank into compliance.
The project team followed a modified Six Sigma DMAIC approach and produced extensive project documentation across the: Define, Measure, Analyze and Improve phases
At first glance, the project appeared well managed.
- The templates were complete.
- The narratives were polished.
- The process diagrams were detailed.
- The meetings were occurring regularly.
Everything looked correct.
The Problem Nobody Saw
After several months on the project, something felt wrong.
While reviewing the project deliverables, I modified the end-to-end process map to include the proposed solution and associated accounting flows.
That exercise exposed a critical issue:
The proposed solution did not actually account for how the modified loan balances and payments would be managed within the servicing system.
In other words:
The project documentation was complete, but the core business and regulatory requirement had not been solved.
Root Cause Analysis
Several issues contributed to the failure:
- Lack of Domain Expertise
The project manager did not have deep mortgage servicing or bankruptcy processing experience.
As a result, the team focused heavily on process execution without fully validating operational outcomes.
- Critical SME Exclusion
Only one individual had deep technical knowledge of the legacy loan servicing platform.
That resource was not actively involved in the project.
The team lacked the system-level understanding required to validate whether the proposed solution was technically and operationally viable.
- Fragmented Team Structure
Different remote teams handled separate project phases:
-
- Define
- Measure
- Analyze
This created process silos and reduced continuity across the initiative.
Each group completed its assigned deliverables, but no one owned end-to-end validation.
- Failure to Validate Against Regulatory Requirements
Most importantly:
No one formally reviewed the proposed solution against the original government stipulation requirements.
The project focused on completing methodology artifacts rather than validating compliance outcomes.
The Turning Point
After repeatedly escalating the issue and highlighting the missing functionality, the project team finally reassessed the initiative.
The result:
- The project was reset.
- Additional subject matter expertise was added.
- The structure of the initiative was revised.
- And the organization realigned the project around the actual business and regulatory requirements—not simply document completion.
Outcome
The project experienced delays and restructuring.
However, the revised effort ultimately met the regulatory stipulation requirements because:
- Appropriate SMEs were engaged
- Project governance improved
- And the team validated the solution against real operational requirements
Key Insight
The regulatory requirements were clear from the beginning.
So how were they missed?
Because the project had:
- Weak integration between teams
- Insufficient project governance
- Inadequate subject matter involvement
- And no clear ownership for validating final business outcomes
Most importantly:
No one consistently asked the most important question: “Does this solution actually meet the stipulation requirements?”
That single question changed the direction of the project.
Final Thought
Many struggling projects are not failing because teams are not working hard.
They fail because:
- Teams become disconnected
- Process replaces critical thinking
- Governance focuses on deliverables instead of outcomes
- Organizations lose visibility into whether the business problem is actually being solved
At ClarityBridge Partners, this is exactly the type of disconnect we help organizations identify before projects become significantly more costly and difficult to recover.
👉 Find out if we can help you!

