The Independent Eye
for Industrial Plant Maintenance Governance

"Everyone is busy. Nothing is moving."

People carrying on two conversations at once — one on the phone, one in person. Tradespeople doing work that is not in their job description. Supervisors managing paperwork while their crew waits at the workface. Activity everywhere. Progress nowhere. Everyone occupied. Nobody in sync. This is not a workforce problem. This is a broken process problem — and it is costing you every hour it continues.

"Our costs are what the system shows."

The Computerised Maintenance Management System (CMMS) shows what was entered. It does not show what was not entered, what was deferred without documentation, what was closed out on paper before the work was actually done. The numbers look manageable. The maintenance budget keeps getting cut to protect shareholder optics. The real cost — the invisible cost — is being buried in overtime, reactive callouts, and contractor overruns. The system is not lying. The system just cannot see what nobody is telling it.

"The scope keeps changing. The budget is blown by day three."

Scope creep starts before Day 1 because the work packages were never truly defined. Contractor crews arrive with skills that do not match the task. Parts are not staged. Equipment prep by operations does not align with what maintenance needs. Jobs get started on the Critical Path (CP) before they are actually ready — because the schedule says start and nobody has the authority to say stop. Midway through, scope changes. The budget is gone. And someone at the top is asking to close out jobs early so the plant can restart before the window is actually finished.

"We fixed it. Six months later we are back in the same place."

The win gets celebrated. The lessons do not get embedded. The behaviours that produced the improvement erode within weeks because there is no enforcement mechanism keeping them in place. Update meetings return to chaos — everyone talking at the same time, phones out, work packages reviewed by title only with none of the detail that makes execution predictable. World class behaviour has a half-life of about sixty days without a system enforcing it. Then the drift starts again. And the costs that everyone agreed were unacceptable become, quietly, the cost of doing business.

If the gap between what your system says and what your workface shows were visible, quantified, and in front of your leadership team every morning — would your operation run differently?

The CSB investigation found that the raffinate splitter tower was overfilled during startup because level indicators known to be unreliable had not been corrected. Operators received no training on the specific startup procedure. Shift supervisors were absent from the control area. Warning alarms activated and were silenced. The chain ran to completion because at every step the culture made proceeding safer than stopping to question.

Lord Cullen's public inquiry established that a condensate pump was reinstated during a shift handover without knowledge that its pressure safety valve had been removed for maintenance. The permit-to-work system had not communicated the incomplete isolation across shifts. The incoming shift operated equipment in an unknown unsafe state because the handover was verbal, undocumented, and unverified. This is the definitive case study in handover communication failure.

NRC inspection found that boric acid had corroded through the reactor vessel head to within 3/16 of an inch of a pressure boundary breach that would have been catastrophic. Inspection records showed the corrosion had been developing for years. Maintenance personnel had noted boric acid deposits repeatedly and closed the items as acceptable without investigation. The CMMS contained records of observations that were downgraded, deferred, and reclassified until the condition was within hours of catastrophic failure. The PM existed. The data existed. Nobody questioned the closure.

The National Commission report found that the negative pressure test — the primary barrier verification before temporarily abandoning the well — produced anomalous results that were misinterpreted as acceptable. The decision to proceed was made under schedule pressure. The well was 43 days behind schedule and over $58M over budget. Two separate work crews interpreted the same ambiguous data differently. Neither stopped to resolve the ambiguity. The blowout preventer — the last line of defence — failed to seal the well. Every barrier failed because the questioning attitude that should have stopped work at the pressure test was overridden by schedule.

The Rogers Commission established that engineers at Morton Thiokol had known for years that O-ring performance degraded at low temperatures. The concern had been raised, reviewed, and accepted as an acceptable risk on six prior flights. By the seventh flight with O-ring erosion, the anomaly had been normalised — it was no longer treated as a warning sign. It had become the expected condition. Engineers who tried to stop the Challenger launch the night before were overruled by management under schedule pressure. The information existed. The concern was raised. The upward communication failed because the culture had made acceptance easier than escalation. Sociology professor Diane Vaughan named this pattern Normalised Deviance — the gradual process by which unacceptable risk becomes acceptable through repeated exposure without consequence.

The TSB investigation found that the train, carrying 72 tanker cars of crude oil, was left unattended overnight by a single-person crew. Hand brakes were applied but insufficient for the grade. A locomotive engine fire reduced air brake pressure. The train rolled downhill uncontrolled into the centre of Lac-Mégantic and exploded. The TSB found that the operating company had approved a single-person crew operation without adequate risk assessment, had no formal handover standard for overnight parking on a grade, and had normalised the practice of unsupervised parking of dangerous goods trains. There was no one to see the problem develop, no one to question the risk, and no escalation path because there was no one to escalate to.

The Dawson-Brooks Royal Commission found that operators were unfamiliar with the response of heat exchangers to lean oil at low temperatures — a scenario that had not occurred in recent memory and for which no written procedure existed. When the exchanger cracked and released a flammable vapour cloud, operators did not know how to respond because the knowledge existed only in the memory of experienced engineers who were no longer present on site. The wisdom of the operation had walked out the door with a generation of retiring staff and was never captured, never documented, never transferred. A site that could not name what it did not know could not train against it.

Multiple investigations — including those by the Indian Council of Medical Research and independent technical panels — established that at the time of the leak, the refrigeration system for the methyl isocyanate storage tank had been shut down for cost savings, the scrubber designed to neutralise escaping gas was offline for maintenance, the flare tower was out of service, and the water curtain was too short to reach the point of release. Every layer of protection had been bypassed, deferred, or disabled. None of these decisions were made by one person on one night. They were made incrementally, over months, by an organisation that had stopped questioning whether its safety systems were actually capable of performing their function. This is the most devastating consequence of maintenance deferral and normalised deviance ever documented.

Reverse parking is a site safety standard. If people are not following it in the car park — where everyone can see them — they are not following safety standards inside the fence either. Normalised deviance does not start at the workface. It starts here.

Everyone talking at the same time. Phones out. Work packages reviewed by title — not by content. No job owner accountable for delivery. No barrier log. No critical path visibility. A meeting that produces noise and no decisions is not a coordination event. It is a symptom of an operation that has lost control of its own execution rhythm.

Tradespeople standing. Waiting for parts that were supposed to be staged. Waiting for a permit that was not prepared in advance. Waiting for a decision that should have been made yesterday. Standby time is the most visible form of leakage in a maintenance operation — and it is almost never captured in the Computerised Maintenance Management System (CMMS).

Supervisors doing planner work. Planners doing scheduler work. Technicians doing supervisor work. When people are consistently operating outside their defined role it means the roles are not enforced — or the accountabilities were never clear to begin with. Every overlap is waste. Every waste has a dollar value.

Skills that do not match the scope. Crew size that does not match the job. Mobilised because the purchase order was signed — not because the work was ready. A contractor without a verified scope, confirmed parts, and a named job owner at the workface is a financial liability from the moment they arrive. The clock is running. The readiness is not there.

Work orders closed as complete. Equipment returned to service. The system says it is done. Nobody verified at the workface. The CMMS receives what was entered — it cannot verify what actually happened. The gap between the system record and the physical reality is where every unplanned failure, every warranty void, and every repeat job originates.

The people in the building already know what the problems are. They have known for a long time. The reason nothing changes is not ignorance — it is the absence of an independent voice with the authority, the data, and the professional standing to say what everyone already knows, in a format that leadership cannot dismiss.

RISL is that voice. We carry no vendor relationship, no internal political exposure, and no incentive to soften the finding. Our only mandate is operational truth — verified at the workface, quantified in dollars, and delivered with forensic precision.

The names of the assets change. The regulatory frameworks differ. The terminology shifts between sectors. But the gap between what the system says and what the workface shows — the silence that makes it the norm — exists in every industrial operation in every sector. The leakage physics are universal. The enforcement methodology is the same. The only variable is how long the organisation has been carrying the cost before someone names it.

Field-verified client results are being compiled from active engagements across Oil & Gas, Mining, and Power Generation in Canada and the Caribbean. Testimonials will be published here as engagements are completed and clients provide authorisation to share.

Every module is anchored to a verified, published standard — Red Seal RSOS, SMRP Body of Knowledge, ASME codes, ISO 55001. Not opinion. Not experience. The documented requirement your trade, discipline, and industry has agreed constitutes competence.

After each module, there is a section called What We Find. It describes exactly what RISL's Independent Eye encounters when it arrives at an operation that has not applied this standard. Recognise your operation in that description — you have identified the leakage source.

Return to the RISL Diagnostic Engine and run your site parameters. The leakage number that appears is the modelled consequence of operating below the standard you just read. That number is where the conversation with RISL begins.

Ten founding subscriber spots at $497/month — locked for the life of your subscription. The standard rate is $797/month. The difference is $3,600 per year. The founding rate closes when the ten spots are filled.

All prices in CAD + GST/HST where applicable. No lock-in period. Cancel any time.

This figure is calculated in real time from actual job conditions versus world-class standards. Every bucket above reflects a verified gap — a leakage event that has been measured, costed, and attributed to a specific failure in your work management system.