Organizational Risk Indicators: How Early Warning Indicators Are Organizational, Not Personal
When leaders talk about early warning signs of sexual misconduct, they often mean personality: the charming colleague who ignores limits, the supervisor who seems too friendly. The instinct is understandable and it leads to bad practice. It encourages profiling, rests on hunches about individuals, and ignores the organization's own part in letting harm continue.

This article, written for HR and risk leaders in Seattle and elsewhere, argues for a different kind of early warning: observable signals in how the organization operates. It is the approach RMA takes, and it is both fairer and more useful.
Why personal indicators fail
Looking for a type of person has three problems. It is unreliable, because misconduct does not follow a recognizable personality. It is unfair, because it invites suspicion of people on the basis of traits that may be protected. And it misdirects attention: if the problem is a person, the solution is to watch or remove that person, and the conditions that allowed the behavior remain in place for the next one.
The EEOC Select Task Force took a systemic view. Its chart of risk factors for harassment does not describe types of people. It describes workplace conditions: isolated workplaces, decentralized workplaces, significant power disparities, workplaces with "high value" employees, and workplaces that rely on customer satisfaction. For each one it explains why the condition raises risk and what an employer can change. The chart also notes workforce characteristics, such as a young workforce, as contexts in which people may be less aware of norms or less able to resist pressure. The right use of that information is to give those employees better orientation and support, never to treat anyone as a suspect.
What organizational early warning signals look like
Think of signals in four groups.
Structure
A program, site or shift where one-to-one access to dependent people is routine and no senior person is regularly present.
Roles with authority over pay, schedules, grades, housing or references, and no independent check on how that authority is used.
Remote sites where managers are unsure how to handle concerns, which the task force identified as a feature of decentralized workplaces.
Process
Required supervisory reviews that are skipped, delayed or waived.
Exceptions to contact or access rules granted repeatedly to the same people or teams.
Concerns raised informally that are never written down or passed to someone who can act.
Long gaps between a concern and any documented follow-up.
Pattern
Transfers, schedule changes, reduced hours or departures clustering around people who raised concerns.
Several people independently avoiding the same room, the same shift, or the same supervisor.
Repeated low-level concerns about a role or process that never add up because nobody sees them together.
Response
A history of leaders handling high-performing or well-connected staff differently when concerns arise. The task force recommended applying workplace rules uniformly regardless of rank or value to the employer.
Corrective actions that are announced and never verified.
Reporting routes that run through the person being reported.
Behavior still matters, in the right way
Organizational signals do not replace attention to behavior. They change how behavior is handled. Observable conduct, such as repeated boundary-testing, secrecy around contact with someone dependent on the organization, or pressure on a subordinate, deserves a prompt, documented response under the organization's standards. The difference is that the response is triggered by what someone did, not by what someone is, and that the organization also asks what condition made the behavior easy.
Building a signal system without surveillance
Choose signals you can observe without monitoring private lives. Review records the organization already holds: supervision logs, exception approvals, concern logs, schedule changes and exit feedback.
Route weak signals to one place. A single owner who sees concerns from every channel can notice patterns no one manager sees.
Set simple thresholds for review. For example, three concerns about one process or location within a quarter triggers a structured look.
Document what you decide and why. A record of reasoning protects both the people affected and the organization.
Review the signals themselves. Ask yearly whether any signal is producing unfair scrutiny of a group, and retire it if so.
Guardrails
No protected characteristics as indicators.
No covert monitoring of employees' private communications or personal accounts.
No treating a signal as a finding. Each one prompts a question, not a conclusion.
Communicate openly with staff about what the organization tracks and why.
Limits and legal context
Signals cannot predict who will commit misconduct and no system prevents all harm. Legal duties, including federal law such as Title VII for covered employers and state and local rules in Washington and elsewhere, differ by jurisdiction. This article is educational and is not legal advice. Consult qualified counsel.
How RMA can help
RMA's Risk Exposure Audit identifies structural vulnerabilities and key risk indicators before they become crises, with a focus on observable behavior and organizational conditions. To see how, visit RMA's solutions page or read about the team on the About page.
Related reading
Continue with these related RMA articles:
References
Feldblum, C. R., & Lipnic, V. A. (2016). Report of the Co-Chairs of the EEOC Select Task Force on the Study of Harassment in the Workplace. U.S. Equal Employment Opportunity Commission. https://www.eeoc.gov/select-task-force-study-harassment-workplace
U.S. Equal Employment Opportunity Commission. Chart of Risk Factors for Harassment and Responsive Strategies. https://www.eeoc.gov/chart-risk-factors-harassment-and-responsive-strategies

