Structural Audit¶
Method — instantiates Structural Harm Mapping
A systematic inspection of one organization's own rules, workflows, incentives, and resource flows to surface the arrangements that quietly generate harm.
A Structural Audit is a systematic inside inspection of a single organization's own machinery — its rules, workflows, incentives, resource allocations, eligibility gates, and internal dependencies — carried out to surface the arrangements that generate harm even when every part looks reasonable in isolation. Its defining feature is the diagnostic sweep: rather than following one applicant's route or tracing one rule, it inventories the organization's structure and traces how specific arrangements combine into a recurring harmful pattern, producing a findings register of harm sources that an owner can act on. It hunts for the latent, not the acute — the standing configuration that makes bad outcomes likely, not the one-off incident that reveals it.
Example¶
A logistics firm's injury statistics look enviably low, but near-miss reports and quiet turnover suggest the numbers are lying. A structural audit inspects the machinery from the inside. It finds a productivity metric that docks a team's bonus whenever a shift logs an injury; a first-aid station staffed only on the day shift; an incident form routed through the very supervisor whose bonus the injury threatens; and temporary workers who fear non-renewal if they report at all. The audit traces how these arrangements combine into a stable pattern — real injuries recategorized as "first aid only" or never logged — and names that pattern as a structural source, not worker carelessness. Illustratively, the under-logging concentrates on night shifts and among temps, exactly where the incentives bite hardest. The finding is not "be more careful"; it is "the bonus metric and the reporting route manufacture the silence."
How it works¶
What distinguishes it from a generic review is that it looks for structure, inside one organization:
- Inventory the machinery. Enumerate the rules, incentives, resource flows, and eligibility gates that shape behavior.
- Hunt perverse incentives and latent conditions. Look specifically for arrangements that reward the harm or make it invisible.
- Trace arrangement-to-harm links. Show how several individually defensible parts combine into a recurring bad outcome.
- Produce a sourced findings register. Rank findings by harm and attach each to the structural source that produces it, so a fix has a target.
Tuning parameters¶
- Audit surface — rules only, or rules plus incentives, resource flows, and tooling. Wider surface finds more but dilutes focus.
- Independence — internal self-audit or external reviewer. Outsiders get candor about sacred cows but less access to tacit knowledge.
- Evidence base — documents alone, or documents plus frontline interviews. Interviews catch the gap between policy and practice.
- Incentive focus — how hard you probe for metrics that quietly reward the harm, which is often where the real source hides.
- Register granularity — broad themes or specific sourced findings. Specific findings are actionable; themes are safe and inert.
When it helps, and when it misleads¶
Its strength is making an organization's own harmful arrangements visible from the inside and attributable to design rather than to individuals — surfacing the latent conditions that sit dormant until circumstances line up, in the sense James Reason gave the term.[1] Its failure mode is the audit that documents everything and changes nothing: the report as performance, filed and admired. The classic misuse is scoping the audit to exclude the incentive or budget line that actually drives the harm — auditing the reporting form while leaving the bonus metric off the table. The discipline is to rank findings by harm and hand each to an owner with a remedy commitment, so the audit ends in changed arrangements rather than a bound PDF.
How it implements the components¶
structural_pathway— it traces how the organization's own arrangements combine to produce the harm, specific enough that a remedy can target a link (the bonus metric, the reporting route).harm_pattern_description— it names the recurring harm the sweep surfaces (systematic under-logging), bounded and grounded in the audit's own evidence.
It stays inside one organization: it does not follow harm across interacting institutions — cumulative_burden_layer and counterfactual_comparison are Systems Harm Analysis's — nor chart an individual's route to a service — access_and_resource_map is the Access Pathway Map's.
Related¶
- Instantiates: Structural Harm Mapping — it supplies the inside-out diagnosis of one organization's harm-generating arrangements.
- Sibling mechanisms: Systems Harm Analysis · Access Pathway Map · Institutional Barrier Review · Policy Pathway Analysis · Social Determinants Mapping · Equity Impact Assessment · Harm Reduction Dashboard · Remedy Co-Design Workshop · Affected-Party Review Panel
Editorial Notes¶
Form Classification¶
Form family: Assessment, Review & Assurance
Rationale: Structural Audit operates as a bounded evaluation of existing evidence or work that produces a finding or disposition because it a systematic inspection of one organization's own rules, workflows, incentives, and resource flows to surface the arrangements that quietly generate harm.
Independent corroboration: The frozen evidence defines Structural Audit as 'A systematic inspection of one organization's own rules, workflows, incentives, and resource flows to surface the arrangements that quietly generate harm', so its operative form is Assessment, Review & Assurance.
Nearest alternative: Analysis, Modeling & Optimization — Structural Audit includes features of an analytical, modeling, inference, comparison, or optimization procedure that derives insight or a solution, but its defining operation is a bounded evaluation of existing evidence or work that produces a finding or disposition.
Review outcome: Independent reviewer agreement; medium confidence.
Origin Attribution¶
Primary origin: Organizational & Management Science
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Universal
Rationale: Examining roles, authority, incentives, dependencies, and decision paths for recurring failure is an organizational-structure audit rather than a narrow artifact inspection. NIST bias guidance explicitly locates harms in institutional and systemic structures; audit and governance supply evidence and accountability.
Related originating lineages:
- Accounting & Auditing — Systematic evidence supports findings.
- Law & Governance — law_governance contributes legal doctrine, regulatory governance, and procedural accountability to this mechanism's defining operation—A systematic inspection of one organization's own rules, workflows, incentives, and resource flows to surface the arrangements that quietly generate harm—without displacing the selected primary historical lineage.
- Political Science — Political science and institutional power analysis supplies a parallel or contributing lineage for the mechanism's defining operation: a systematic inspection of one organization's own rules, workflows, incentives, and resource flows to surface the arrangements that quietly generate harm.
- Sociology & Anthropology — Institutions reproduce structural outcomes.
- Systems Thinking & Cybernetics — systems_cybernetics contributes systems thinking, feedback control, and cybernetics to this mechanism's defining operation—A systematic inspection of one organization's own rules, workflows, incentives, and resource flows to surface the arrangements that quietly generate harm—without displacing the selected primary historical lineage.
- Ethics of Technology & AI Governance — Technology ethics and ai governance supplies a parallel or contributing lineage for the mechanism's defining operation: a systematic inspection of one organization's own rules, workflows, incentives, and resource flows to surface the arrangements that quietly generate harm.
Review resolution: The blind reviewers disagree on primary lineage (organizational_management versus sociology_anthropology). Authoritative or primary research supports organizational_management as the best historical origin: Examining roles, authority, incentives, dependencies, and decision paths for recurring failure is an organizational-structure audit rather than a narrow artifact inspection. NIST bias guidance explicitly locates harms in institutional and systemic structures; audit and governance supply evidence and accountability. The cited NIST, AI RMF Playbook; NIST, AI Fundamental Research: Managing AI Bias directly supports the mechanism's defining operation. All independently supported contributing domains are retained without an arbitrary cap. origin_mode=cross_disciplinary_synthesis records lineage, while domain_reach=universal records later applicability separately from provenance.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Researched adjudication after independent review; high confidence.
Sources consulted:
References¶
[1] Latent conditions — in James Reason's analysis of organizational accidents (the "Swiss cheese" model, BMJ, 2000), the dormant weaknesses built into a system's design, procedures, and incentives that lie in wait until active failures line up with them. A structural audit is, in effect, a search for latent conditions before they combine into harm. registry ↩