When the Media Becomes the Control

Across almost every industry, there is a recurring pattern that is both familiar and uncomfortable. Serious organisational failures are often not discovered internally. They are exposed from the outside.

It might be an investigative journalist publishing a story after months of work. It might be a whistleblower going public after being ignored. It might be a regulator stepping in after years of non-compliance. Or it might be a court case that forces evidence into the open.

Only then does the organisation respond decisively.

From an ICAM perspective, this is not a sign of transparency or accountability. It is a sign that the system has already failed.

External scrutiny is not a control. It is what happens when internal controls are no longer effective.

The Moment of Exposure Is Not the Beginning

One of the most important shifts ICAM brings is the understanding that incidents do not start when they are discovered. They start much earlier, in the conditions that allow them to develop unnoticed.

By the time a story breaks publicly, the organisation has already passed through multiple missed opportunities.

Someone usually knew. Often more than one person. There were signals. Complaints may have been raised. Data may have pointed to inconsistencies. Behaviour may have been observed and rationalised. Concerns may have been quietly discussed and then set aside.

The issue is not that the organisation had no chance to act. It is that it did not act effectively when it had the chance.

This is why media exposure is a lagging indicator. It tells us that the system has already failed to detect, escalate, or respond internally.

The Illusion That Systems Are Working

Most organisations genuinely believe they have strong systems in place. They can point to policies, procedures, training programs, reporting lines, audits, and governance frameworks.

On paper, everything looks sound.

But ICAM draws a sharp distinction between what exists and what actually works.

A reporting system can exist and still be unused. A policy can be written and still be ignored. A leadership expectation can be stated and still be contradicted by everyday behaviour. An audit process can be completed and still miss the real risk.

This creates an illusion of control. Leaders see structure and assume effectiveness.

External scrutiny disrupts that illusion. It exposes the gap between formal systems and lived reality.

Why People Don’t Speak Up Internally

In many cases, the organisation already had the information it needed. The issue was not a lack of visibility, but a lack of safe and effective reporting.

People do not stay silent because they do not care. They stay silent because speaking up carries risk.

That risk is often deeply understood within the organisation. People know who has influence, how dissent is treated, and what happens to those who challenge the status quo.

Even in organisations that promote openness, the real test is not what is said, but what is experienced.

If reporting leads to being labelled difficult, disloyal, or problematic, then the system is not safe. If confidentiality is not trusted, people will not use it. If previous reports have gone nowhere, people stop trying.

Over time, silence becomes rational.

From an ICAM perspective, this is a failure of a critical defence. Communication pathways may exist structurally, but they are ineffective functionally.

When internal reporting fails, external reporting becomes the only viable option.

How Deviance Becomes Normal

Serious issues rarely begin as extreme events. They begin as small deviations.

A shortcut here. A workaround there. A decision to prioritise output over process. A justification that “this is how it has to be done.”

These deviations are often seen as practical rather than problematic. They may even be rewarded if they deliver results.

Over time, repetition turns deviation into normal practice. What was once questionable becomes accepted. What was once exceptional becomes routine.

This is the normalisation of deviance.

Once this takes hold, internal detection becomes unlikely. The system is no longer identifying a problem because it no longer sees it as a problem.

External scrutiny interrupts this normalisation. It reclassifies accepted behaviour as unacceptable behaviour.

From an ICAM standpoint, this is a powerful reminder that culture can override formal controls. When that happens, the real system is no longer the one written in policy documents.

The Role of Pressure and Trade-Offs

Most organisations do not consciously choose to ignore risk. Instead, they operate under competing pressures.

There are targets to meet, deadlines to hit, clients to satisfy, and performance metrics to achieve. These pressures shape behaviour, often more strongly than formal rules.

The tension between performance and compliance is rarely resolved explicitly. Instead, it is managed implicitly through everyday decisions.

People learn what is truly valued by what is rewarded, tolerated, or ignored.

If outcomes are prioritised above all else, then the path to those outcomes becomes flexible. Controls begin to feel like obstacles rather than safeguards.

This is not usually a deliberate decision. It is an emergent property of the system.

External scrutiny often exposes these hidden trade-offs. It shows that the system was not balanced, even if it appeared to be.

Leadership and the Problem of Distance

Senior leaders often believe they have a clear view of their organisation. They receive reports, review metrics, attend briefings, and engage with their teams.

But there is often a gap between what leaders see and what is actually happening.

Information can be filtered as it moves upward. Issues can be softened, reframed, or delayed. Metrics can obscure as much as they reveal.

Leaders may not be intentionally misled, but they can be unintentionally insulated.

ICAM highlights the importance of verification. It is not enough to receive information. Leaders must test its accuracy.

Without this, confidence becomes assumption.

External scrutiny bypasses internal filters. It presents evidence that has not been shaped by organisational dynamics. This is often why it feels so confronting.

It is not just the issue itself that shocks leaders. It is the realisation that the issue existed without their awareness.

When Reputation Becomes the Priority

Reputation matters. Organisations rely on trust, credibility, and public confidence.

But when reputation protection becomes the dominant priority, it can distort decision-making.

Issues may be minimised to avoid attention. Investigations may be constrained to limit exposure. Communication may be carefully managed to control the narrative.

In these environments, the goal shifts from solving problems to containing them.

ICAM identifies this as a critical failure in organisational learning. When image takes precedence over truth, the system loses its ability to self-correct.

External scrutiny removes that control. It forces the issue into the open, often in a way that is more damaging than early internal action would have been.

The Cost of Waiting to Be Exposed

When organisations rely on external scrutiny to trigger action, the consequences are rarely limited to the original issue.

The impact spreads.

Trust erodes. Stakeholders question not just the incident, but the entire system. Employees lose confidence in leadership. Regulators increase oversight. Legal consequences emerge. Financial costs escalate.

Perhaps most importantly, the organisation’s credibility is damaged.

All of this is avoidable to some degree. Early detection and action rarely eliminate consequences entirely, but they significantly reduce them.

ICAM reinforces the value of early intervention. The longer a problem persists, the more embedded it becomes, and the more severe the eventual outcome.

The Role of Investigative Journalism

Investigative journalism plays a critical role in modern society. It provides an independent mechanism for uncovering issues that might otherwise remain hidden.

Journalists are not bound by organisational hierarchies or internal politics. They can gather information from multiple sources, protect anonymity, and present findings publicly.

In doing so, they often act as a form of accountability.

But from an ICAM perspective, this role is reactive, not preventative.

Journalism becomes effective when internal systems are ineffective. It fills a gap that should not exist.

This does not diminish the importance of journalism. It highlights the importance of strengthening internal systems so that external intervention is not required.

What Healthy Systems Do Differently

Organisations that function well from an ICAM perspective do not rely on external exposure to identify serious issues.

They create conditions where issues surface internally, early, and often.

This begins with trust. People must believe that speaking up is safe and worthwhile. That belief is built through consistent action, not messaging.

It is reinforced when reports are taken seriously, when feedback is provided, and when visible change occurs.

Leadership plays a central role. Leaders must actively seek out information that challenges their assumptions. They must create space for dissent and respond constructively to it.

Controls must be tested in practice. It is not enough to assume they work. They must be verified under real conditions.

Culture must support honesty over comfort. This means valuing truth even when it is inconvenient or uncomfortable.

Perhaps most importantly, organisations must separate performance from integrity. High performance should never shield poor behaviour. In fact, it should attract greater scrutiny.

The ICAM Perspective on Prevention

ICAM is fundamentally about understanding and preventing recurrence.

When applied to this issue, it shifts the focus away from the moment of exposure and towards the conditions that made exposure necessary.

It asks different questions.

Not “Why didn’t we know?” but “Why didn’t our system allow us to know?”

Not “Why did this person act this way?” but “What conditions allowed or encouraged this behaviour?”

Not “How do we respond now?” but “How do we ensure we would detect this earlier next time?”

These questions move the organisation from reaction to learning.

Final Reflection

When an issue is exposed by journalists, whistleblowers, or courts, the organisation often treats that moment as the crisis.

From an ICAM perspective, the crisis happened much earlier.

It happened when people chose not to speak up because it was unsafe. It happened when small deviations became normal. It happened when pressure outweighed control. It happened when leaders relied on assumption rather than verification. It happened when reputation became more important than learning.

The public exposure is simply the point at which the system can no longer contain the problem.

Healthy organisations do not wait for that moment.

They design systems that surface issues early. They listen to weak signals. They encourage challenge. They act before problems become scandals.

Because once the media becomes the control, the opportunity for quiet prevention has already been lost.

And ICAM reminds us of a simple but powerful truth:

If your system needs an external force to reveal its failures, then your system is not in control.