Fable
The key to the north gate finally had a real gatekeeper
The ancient city had four gates, and each gate had a lock, a lamp, a night patrol bell, and a visitor register. For many years everyone said these things were the responsibility of city defense, but city defense said specific maintenance depended on each gate itself.
After the city connected to caravans, the North Gate became the busiest. During the day it inspected goods, at night it released urgent items, and it also had to stop unregistered strange carriages. Control measures multiplied, but the person truly responsible became increasingly unclear. The city lord first posted a notice: all guards must value North Gate security. The notice was posted prominently, but no one repaired broken locks, no one replaced missing pages in the visitor book, and no one tested the night patrol bell when it failed.
An unauthorized carriage entered through the north gate. During the review, the guard said he checked according to the rules, the carpenter said no one notified him to repair the lock, and the accountant said the visitor book purchase had not yet been approved. Everyone was involved a little, and no one was responsible for control effectiveness.
The city lord designated the North Gate to control everyone. This person does not necessarily guard the gate in person, but must design the access rules, confirm the locks work, preserve evidence, arrange testing, follow up on defects, and improve controls as risks change.
A few weeks later, the controllers discovered that the nighttime urgent-order process bypassed the visitor log, so they added temporary registration, next-day review, and random exception checks. The guards were only responsible for enforcement, and there was now clear ownership for whether controls were effective.
When an incident happens again, the retrospective no longer starts with finger-pointing. Everyone first looks at who owns this control, where the evidence is, what the most recent test result was, and whether the defect has been closed. The city lord held three more meetings, and each time people nodded, but no one walked away with the key. The north gate kept producing small errors: the lamp oil ran out, the visitor ledger couldn't be found, and the night patrol assumed someone else would cover it.
Finally, he handed the North Gate to a gate captain, setting out the responsibilities, budget and escalation process in writing. The gate captain could not do all the work personally, but had to know when each lock was inspected and who was writing each ledger. A month later, an inspection found that the gate captain had replaced a broken bell and turned away an unregistered night cart. Only then did everyone understand that control measures become daily practice, rather than a posted notice, only when they are assigned to a specific owner.
The city lord understood that control written on paper is not the same as control in operation. Every key control needs a person who can be named, otherwise the permissions, records, approvals, and monitoring of the enterprise assistant will remain wishes.