There is a model in risk management called the Swiss cheese model. 

The idea behind the model is that risk management is a layered system where a series of controls are deployed to prevent bad things from happening, identify them quickly if they happen, and mitigate the consequences.  Unfortunately, when holes in the cheese slices align – the controls fail to do their job.  

It is one thing to fail to notice holes or prevent them from aligning; it is quite another not to have the right cheese slices you need in the first place.

Though controls differ slightly by sector, most youth-serving organizations currently use a set of four controls.  These controls, first brought together as a cohesive set about twenty years ago, were designed to try to prevent and identify sexual abuse.  

The immediate problem is that the four controls, on their own, are not enough to prevent sexual abuse.  On the contrary, sexual abuse is rising.  Adult-on-child sexual abuse has doubled in the last ten years.  Child-on-child sexual abuse has increased five times.  Therefore, additional controls are needed to provide comprehensive child protection.

One example of why they fail to prevent sexual abuse concerns criminal background checks.  Criminal background checks were introduced to ensure known pedophiles would not be able to work with minors and vulnerable adults.  They are an essential control but not without their challenges.  You can read about their deficiencies here.

The problem with them as far as comprehensive sexual abuse prevention is concerned is that, if you applied for a job at a fast food restaurant, you would have to go through a more involved intake process than is required for working with children, which only requires criminal background checks.  No application forms, reference checks, interviews, or anything else.  It’s not that organizations don’t use these and other controls, though many don’t, but there are at least ten additional steps to an effective intake process, all of which should be optimized for sexual abuse prevention.  

Risk management best practices ensure an organization can implement comprehensive child protection. 

That sexual abuse prevention must be comprehensive is a BOKRIM core principle.

We talk about the need for organizations to implement comprehensive protection for themselves for the rising costs of failing to prevent sexual abuse here.  You can see what comprehensive sexual abuse prevention and protection look like in our Ten-Step Guide.