Somewhere along the way, we seemed to have developed self-serving, compliance focussed systems designed to appease auditors rather than safeguard people. In a time of scarce resources and transformational change, this seems absurd, even negligent. Why does our sector accept it?