Post 021 — Framework Guide · Introductory

2026

A beginner's guide to reading organisational failure

Why 'individual fault' is always the wrong diagnosis — and four structural lenses that reveal what is actually happening.

When a large organisation fails, the story we tell is almost always about individuals. A fraudulent CFO. A reckless CEO. A negligent regulator. We identify the person, apply the punishment, and consider the matter resolved.

But if you have read through the case studies in this series — Lehman Brothers, KDDI's G-Plan, the Sunagawa bear hunt — you will have noticed something. The individuals involved were not exceptional villains. They were ordinary people responding rationally to the structural environments they found themselves in.

SANA OS provides four analytical lenses for diagnosing what those structural environments actually were. This post is a guide to using those lenses — starting from scratch.

Why "individual fault" is the wrong frame

When two employees at a grandchild company produce ¥246 billion in fictitious revenue over seven years — bypassing every layer of a sophisticated governance system — the question "how could anyone do this?" is the wrong question. The right question is: what structural configuration made this the rational output of their environment?

The same logic applies to Lehman Brothers. A firm employing thousands of highly educated, motivated people, with extensive compliance functions, sophisticated risk models, and layers of external oversight — still drove into insolvency at 44:1 leverage. The failure was not a failure of individuals. It was a failure of structure.

Understanding the structure is not an excuse for the individuals involved. It is the only path to preventing the next occurrence.

The four lenses

Lens 1 — GMM

Governance Maturity

Diagnoses the three-layer configuration: rules (C), culture/narrative (B), and survival conditions (A). Detects where blind spots exist and where formal controls have become checklists without substance.

Lens 2 — RBM

Resource Balance

Maps demand versus supply of resources (capital, staff, attention). Identifies when supply removes the natural endpoint that would otherwise terminate a structural failure — the "lethal medicine" pattern.

Lens 3 — RSM

Role System

Analyses whether the correction loop (Observer, Auditor) is functioning or has been captured by the production loop (Executor, Decider). Identifies Phantom Auditor states where the function exists formally but operates not at all.

Lens 4 — CPM

Cognitive Pressure

Examines how survival anxiety, conformity pressure, and narrative lock alter individual and collective cognition — turning rational people into actors who cannot process the signals that might save them.

Lens 1: GMM — where do the rules stop working?

Governance Maturity Model analysis begins by asking: at which layer is the configuration broken?

LayerKDDI / G-PlanLehman Brothers
C — Rules"Three blind spots": KDDI (P&L focus, no business reality check), Biglobe (G-Plan classified as exception), G-Plan (no credit review rules, all authority in one person). Internal audit completed procedures without vouching."Regulatory gutting": 2004 SEC net capital rule amendment permitted internal risk models, effectively removing leverage limits. High-risk operations were institutionally legitimised.
B — Culture"Growth pressure on new business": with telecoms revenue plateauing, non-telecoms growth became the only acceptable identity. Producing the numbers was the only path to continued existence."Too Big to Fail": the Bear Stearns rescue signalled to Lehman that systemic firms would be saved. This narrative paralysed risk perception across the organisation.
A — SurvivalFear of business closure as organisational and personal extinction. The capital efficiency logic of corporate governance codes made "unprofitable = cut" feel inevitable and immediate.Extreme leverage: 44:1 at peak. A 2.5% asset decline would eliminate all equity. The firm was operating at the structural edge of viability.
The structural lesson: when internal controls become a checklist-completion exercise, formal procedure becomes the strongest shield for concealment. Blank spots in basic credit management at peripheral organisations — grandchild companies, new business units — are structural bugs waiting to be exploited.

Lens 2: RBM — what removed the natural endpoint?

Every structural failure has a natural termination: money runs out. What makes catastrophic failures catastrophic is the removal of that natural endpoint.

In Lehman's case, the repo market's willingness to keep lending — sustained by the Too Big to Fail assumption and disguised by Repo 105 accounting — removed the endpoint. In KDDI's case, group financing that provided capital against declared revenues without verifying economic substance removed it.

The three dangerous resource supply configurations to watch for:

  1. Mechanical group financing: capital provided within preset limits without scrutiny of what it is actually funding.
  2. Misaligned payment cycles: advance payment structures that allow cash outflows to precede cash inflows indefinitely.
  3. Asymmetric compensation: short-term performance bonuses that are paid before long-term consequences materialise, with no clawback mechanism.

Lens 3: RSM — who has the authority to say no?

Role System analysis asks: is there anyone in this organisation who has both the structural authority and the practical ability to activate the correction loop?

In Lehman, that authority existed — CRO Antoncic, Mike Gelband, Matthew Lee — but was physically removed from the system. In KDDI's G-Plan, the authority existed formally (internal audit, management oversight) but was deactivated by the psychological sanctity of the revenue-generating unit and the acceptance of implausible explanations as sufficient.

Both produce the same result: Phantom Auditor status. The function is present. The function is inert. And because the function appears present, no one triggers an external review.

Watch for: any situation where one person controls origination, ordering, and acceptance verification of the same transactions. That configuration structurally eliminates the correction loop from the inside.

Lens 4: CPM — what does survival pressure do to cognition?

Cognitive Pressure analysis tracks the stages through which a rational person becomes unable to process signals that might save them.

The stages are consistent across both cases:

  1. Survival anxiety trigger: a specific threat to existence is identified (business closure, competitive irrelevance).
  2. Initial rationalisation: one transgression is justified as temporary ("I'll fix it with real revenues").
  3. Narrative sanctification: the strategy that produced success becomes the definition of the organisation. Questioning it is threatening.
  4. Narrative lock: the last available exit (the KDB offer; voluntary disclosure) is closed because accepting it requires acknowledging that the narrative is wrong.

The Camouflaged state — where employees recognise the problem but cannot speak — is the organisational expression of this individual process. When psychological safety is absent, the last line of defence silences itself.

"Complex social failures are not the product of individual wickedness. They are the product of structural configurations that make destructive behaviour the rational choice for the people inside them."

The map

LensThe diagnostic questionThe structural lesson
GMMWhere have rules become checklists? Which peripheral units have no credit review standards?Formal blind spots are structural bugs. They will be exploited.
RBMIs any resource supply removing the natural endpoint of a structural failure?Unsupervised group financing is a lethal medicine.
RSMIs anyone with authority to say no actually able to say no?Never allow one person to control origination, ordering, and acceptance verification.
CPMIs there survival pressure that makes honest reporting more costly than concealment?Physical and psychological isolation removes the capacity to say "this frightens me."
The paradox: the organisations that most need this diagnosis are the ones most likely to believe they do not. A complete and functioning compliance system is one of the most reliable signs that the Phantom Auditor state may be present — because the system's completeness makes it easy to mistake checklist completion for actual control.
← Post 020Post 022 →