When does a temporary control become permanent?

The measure that was only ever meant to be temporary

Infrastructure has to keep operating while problems are investigated and resolved. That requirement usually falls to the operating or maintenance organisation, and it produces a familiar set of responses.

Inspect weekly until the trend is understood. Monitor deterioration until the rate is known. Introduce an operating restriction until the assessment is complete. Carry additional spares until the failure mode is characterised. Apply a temporary repair until the permanent one can be scheduled.

Every one of those is rational when introduced. Every one of them carries an implicit end condition — until. And the end condition is very rarely written down.

How an interim control becomes a maintenance activity

The transition is gradual, and every step in it is reasonable.

A control is introduced under urgency and performed for a few cycles. Because it recurs, it is added to the maintenance plan, where it acquires a work order and a frequency. The work order attracts labour hours, and the labour hours eventually appear in the establishment. Consumables and components attached to it are ordered often enough that a stock level is set. A planner builds the schedule around it because it is in the schedule.

Within a few years the organisation has a resourced, budgeted, planned activity with no visible connection to the condition that produced it. Nobody decided the control was permanent. The organisation simply stopped being asked.

What it is actually costing

The cost of a long-running control is almost never assembled.

It is not a line. It is labour hours across several years, the components consumed, the access or possession time it occupies, the spares held against it, the planning attention it takes and the other work displaced when it competes for the same window. Each element sits in a different system and none of them is tagged to the condition.

That matters because the useful comparison — the one that turns a control into a decision — is between the cumulative cost of continuing to hold the condition and the cost, feasibility and disruption of resolving it. Almost no organisation has both figures on the same page, and the reason is not analytical difficulty. It is that nobody has been asked to produce them.

Until they are on the same page, continuing is not a choice the organisation is making. It is a choice it is not making.

What the control does to the regime around it

An enduring control is rarely self-contained.

It changes inspection frequencies on adjacent assets because the access is shared. It consumes possession or shutdown time that other work needed. It fixes a spares holding that would otherwise have been reviewed. It occupies competence — a small number of people who know how the arrangement works and why.

Maintenance regimes are usually baselined when they are designed and rarely re-baselined afterwards. A control introduced under urgency is absorbed into the regime without the regime being recalculated, so its effect on everything around it is real and invisible at the same time.

Why nobody ends it

Ending a control requires someone to own ending it, and that ownership is almost never assigned.

Execution is owned — a team performs the activity, a supervisor schedules it, a budget carries it. Closure is different work: establishing whether the underlying condition has changed, whether the original basis still holds, what resolution would now cost and disrupt, and who decides. It belongs to nobody in particular, so it happens when something forces it.

There is also a quieter reason. A control that is working produces no problem. The asset is available, the risk is held, the reporting is green. Nothing generates a prompt, because nothing is going wrong. The organisation is being competent, and competence is what conceals it.

Driving a control to closure

A condition held under mitigation should return to a decision at intervals the organisation sets deliberately — not because something has gone wrong, but because nothing has.

Is the condition unchanged, improving or deteriorating? Is the control still doing what it was introduced to do? What has it cost cumulatively, against the current estimate of resolution? Has anything changed — access, remaining asset life, planned works, technology — that alters the answer? And is continuing it still the proportionate response, or merely the established one?

Continuing may well be right. Access may be difficult or disruptive. Intervention may introduce more risk than it removes. Remaining life may be short enough that permanent correction cannot be justified. An organisation that corrected every condition on principle would be misallocating money it needs elsewhere. The distinction is not between correcting and mitigating. It is between mitigating as a current decision and mitigating because an old measure was never revisited.

There is a second distinction worth keeping visible, though it belongs to a different question. Managing the consequences of a condition is not the same as accepting responsibility for its cause, and a record that shows only the activity performed cannot demonstrate which the organisation did. When a technical matter requires commercial recognition is examined elsewhere. For this purpose the point is narrower: an organisation should be able to say what its own conduct represents.

The decision point

Evidence deteriorates faster than the asset. Personnel change, project teams demobilise, correspondence becomes harder to interpret, and temporary arrangements acquire permanent work-order references that are eventually all that survives. The physical condition usually remains visible; the reasoning around it does not.

A temporary control becomes permanent not when someone decides it should, but when the organisation stops being able to say why it exists, what it costs and what would end it.

Those three answers are cheap to hold and expensive to reconstruct. An organisation that can give them still has a choice.

Westheath reviews maintenance regimes where a control has been holding a condition for longer than anyone intended.