I learned about the gap between the mask and the man at a funeral three years ago. It was a cold Tuesday, the kind where the air feels like wet wool.

The priest was reading a passage about the deceased’s “unwavering commitment to punctuality,” and for some reason, my brain snagged on the word. This man had been my uncle. He was a man who once forgot to pick me up from school for six hours because he saw a dog that looked like a cloud. He was never on time. He was a chaotic, beautiful mess.

But there we were, listening to a report of a life that did not exist. The ritual required a “green” status for his character, so we all nodded. I laughed. It was loud, it was sharp, and it was entirely wrong for the room. But the lie was so heavy it felt like it needed to be broken.

Business audits work the same way. We check the box because the box is there to be checked. We look at the ink on the paper and say the building is safe. We police the report, but we let the resource-the actual, physical safety of the walls and the people inside them-rot.

01. The Paperwork Ghost and the Empty Hallway

When a fire alarm goes dark for maintenance, the law says you need a plan. Most firms satisfy this by printing a sheet of paper. The internal auditor comes by six months later, flips to the page, sees the signature of a site manager, and moves on. This is how the paperwork ghost is born.

The auditor is checking for the existence of the plan, not the existence of the guard. In many cases, that “plan” was a piece of paper taped to a wall while the actual hallway remained empty for twelve hours.

The auditor’s job, as defined by most corporate handbooks, is to verify the record. If the record says a human walked the floor every thirty minutes, the audit is a success.

When we audit the document, we signal to the staff that the document is the goal. If the goal is the paper, the easiest way to reach it is to sign the paper at the end of the shift without ever leaving the chair.

02. The Skill Gap the Spreadsheet Ignores

“A logbook does not keep the broth from burning; the spoon does.”

– Zoe K.L., Submarine Cook (4 Years Service)

In a submarine, if you miss a check, people die. There is no room for “good enough.” But in a standard office building or construction site, the audit never asks if the person holding the spoon knows how to cook. It only asks if they logged the temperature.

Internal audits rarely look at the resume of the person performing the fire watch. They do not check if that person knows the difference between a Class A and a Class B fire. They do not check if the person has the lung capacity to shout over a generator or the presence of mind to call the department before trying to play hero.

The audit sees a name. A name is a data point. A data point is “compliant.” We are governing a commons-our shared safety-with tools meant for accounting. You can account for a dollar because every dollar is the same. You cannot account for safety that way, because a distracted guard is not the same as a vigilant one, even if they both sign the same line.

03. The Fiction of the Twelve-Hour Shift

Human attention is a finite resource, yet audits treat it as an infinite one. Most fire watch plans call for a guard to be present for the duration of the impairment. If the system is down for twenty-four hours, the auditor wants to see twenty-four hours of coverage.

What the audit fails to catch is the “fatigue bleed.” I have seen audits where a single name was signed for sixteen straight hours. The auditor gave it a gold star because “coverage was continuous.”

In reality, after hour nine, that guard was a statue. They were physically there, but the resource-the watchful eye-had been depleted. By auditing the “fact” of the shift length rather than the “quality” of the human state, the company buys a false sense of security. They are paying for a body, but they need a brain.

04. When the Binder Becomes the Shield

There is a specific kind of comfort that comes from a thick three-ring binder. It feels heavy. It feels official. But in the world of high-stakes safety, the binder is often the shield used to hide a hollowed-out operation.

When a building owner hires a Fire watch security company, they often think they are buying a signature on a log. If the internal auditor only cares about the paper, the vendor quickly learns that the paper is the product.

This creates a race to the bottom. The vendor who provides the best paper for the lowest price wins, even if their actual boots-on-the-ground performance is non-existent.

I once saw a facility where the fire watch logs were pre-dated. The auditor noticed that the ink was the same color and the handwriting didn’t change for a week, but since every box was filled, they marked it as “minor observation” rather than “systemic failure.” The resource (the fire watch) had been replaced by the artifact (the log).

05. The Trap of the “Green” Dashboard

We live in the era of the dashboard. Every executive wants a screen that shows a row of green lights. The problem is that green lights are easy to fake if you only measure the presence of a report.

If a site manager is told their bonus depends on “100% Safety Compliance,” and compliance is defined as “having a filed report for every impairment,” that manager will ensure every report is filed. They will not necessarily ensure the fire watch happened.

Safety is messy. It involves near-misses, broken radios, and guards who get sick. A “real” safety record should have some red in it. It should have notes about what went wrong. But an internal audit that looks for “perfection” in the paperwork actually encourages the scrubbing of reality.

06. The Resource Erosion You Cannot See

The “commons” in a company is the underlying infrastructure that keeps everyone alive-the sprinklers, the alarms, the fire-rated doors. When these fail, we use a fire watch to bridge the gap.

If the audit only checks the paperwork, the budget for the actual watch starts to get squeezed. Why pay for a premium service with GPS tracking and digital timestamps when a cheaper guy with a pen creates the same “green” light on the auditor’s spreadsheet?

This is invisible erosion. To the auditor who arrives on Friday, all three days look identical. They all have a signed log. Over time, the quality of the guards drops. The training vanishes. The equipment fails. But the reports stay perfect.

07. The Digital Bridge to Reality

The only way to fix this is to stop auditing the artifact and start auditing the event. This is where modern reporting shifts the gravity of the audit. Digital systems like TrackTik change the nature of the proof.

It is no longer about a signature that could have been written at a kitchen table; it is about a GPS-stamped, time-verified pings from a specific corner of the warehouse at 3:15 AM. When the audit switches from “Did they sign the paper?” to “Were they at the north exit at 0300?”, the report and the resource finally merge.

We need to be honest about our own laziness. It is easy to look at a folder. It is hard to look at a process. I remember the guilt I felt after laughing at that funeral. I felt like I had betrayed the “report” of my uncle’s life.

But as I sat there, I realized that the real “resource” of his life wasn’t his punctuality. It was his kindness, his messy house, and the way he’d apologize for being late by bringing you a weird rock he found.

If we want our buildings to stay standing, we have to stop falling in love with the report. We have to look for the “weird rocks”-the actual signs of life and vigilance. We have to audit the guard, the heat, and the hallway. If the paper is perfect but the building is at risk, the auditor hasn’t done their job. They’ve just participated in a ritual.

The danger of the internal audit is that it provides a “hallucinatory safety.” It makes everyone from the CEO to the floor manager feel like the risk has been mitigated because the compliance folder is full. But safety is not a filing cabinet. It is an active, breathing state of awareness.

When you prioritize the document over the person, you are betting that a fire will respect your paperwork. It won’t. A fire only respects a human being with an extinguisher and the training to use it.