Implementation does not usually fail because nobody has read the guidance. It fails when roles, evidence, escalation, communication and data are not joined up in real operations.
Policy exists, evidence does not
Risk: The organisation can describe the process but cannot reconstruct the case timeline or prove resident communication.
Control: Audit closed cases, not policies. Require timestamped evidence across report, triage, inspection, works and closure.
Lifestyle blame
Risk: Damp and mould is attributed to resident behaviour without enough investigation of structure, ventilation, heating, leaks or vulnerability.
Control: Use the Ombudsman’s zero-tolerance framing and require property-condition evidence before conclusions.
Repeat cases treated as new cases
Risk: A property has multiple historical damp reports but each is triaged as a fresh isolated repair.
Control: Flag repeat property/resident patterns and trigger senior review.
No-access becomes a dead end
Risk: Missed appointments are recorded as resident failure without considering vulnerability, communication barriers or alternative routes.
Control: Create a resident-sensitive no-access pathway with multiple contact channels and escalation.
Averages hide harm
Risk: Board packs show average repair performance while serious breaches and repeat cases are buried.
Control: Report breach counts, overdue significant hazards, repeat cases, vulnerable households and evidence quality.
Sensors generate unmanaged alerts
Risk: Devices are installed but alerts are not triaged, documented or linked to case workflows.
Control: Define alert thresholds, ownership, resident comms and case escalation before deployment.