[OR] [P2] [S5] [LL] [C14] Common Challenges and Pitfalls

[P2] [S5] Chapter 14

Common Challenges and Pitfalls

Introduction

While most organisations recognise the importance of Lessons Learned, many struggle to implement them effectively. Common issues include:

• Superficial analysis
• Weak governance
• Poor follow-through
• Lack of integration across functions

As a result, organisations often:

• Repeat the same incidents
• Fail to improve resilience capabilities
• Fall short of regulatory expectations

This chapter examines the root causes of these challenges and provides actionable guidance to address them.

Purpose of the Chapter

To identify the common challenges and pitfalls organisations face when implementing Lessons Learned in operational resilience, and to provide practical strategies to overcome these barriers—ensuring that lessons translate into meaningful, sustainable improvements.

Challenge 1: Treating Lessons Learned as a “Tick-Box” Exercise

Description

Lessons learned are conducted purely for compliance purposes, with:

• Minimal analysis
• Generic findings
• No real improvement actions

Impact

• Limited value from lessons learned
• Repeated failures
• Poor resilience maturity

Root Causes

• Compliance-driven mindset
• Lack of leadership emphasis
• Insufficient understanding of resilience

Mitigation Strategies

• Shift focus from compliance → resilience outcomes
• Embed lessons into operational processes
• Strengthen governance oversight

Challenge 2: Superficial Root Cause Analysis

Description

Organisations stop at identifying:

• Immediate causes
• Symptoms

Instead of:

• Underlying systemic issues

Impact

• Ineffective fixes
• Recurring incidents

Root Causes

• Lack of RCA expertise
• Time constraints
• Pressure to close incidents quickly

Mitigation Strategies

• Use structured RCA methodologies
• Train staff in RCA techniques
• Ensure cross-functional participation

Challenge 3: Lack of Clear Ownership and Accountability

Description

No clear ownership for:

• Lessons learned
• Improvement actions

Impact

• Delayed or incomplete implementation
• Lack of accountability

Root Causes

• Weak governance framework
• Ambiguous roles and responsibilities

Mitigation Strategies

• Define clear ownership using RACI model
• Assign accountability at senior levels
• Track ownership in action registers

Challenge 4: Poor Action Tracking and Follow-Through

Description

Actions are:

• Not tracked
• Not monitored
• Not completed

Impact

• Lessons not implemented
• No measurable improvement

Root Causes

• Lack of tracking systems
• Competing priorities

Mitigation Strategies

• Implement centralised action tracking system
• Use dashboards and reporting tools
• Establish regular review cycles

Challenge 5: Siloed Learning Across the Organisation

Description

Lessons learned remain within:

• Individual teams
• Specific functions

Impact

• Missed opportunities for organisation-wide improvement
• Repeated issues across different units

Root Causes

• Lack of communication channels
• Organisational silos

Mitigation Strategies

• Establish centralised repository
• Promote cross-functional workshops
• Encourage knowledge sharing

Challenge 6: Lack of Service-Centric Focus

Description

Focus is on:

• Systems
• Processes

Instead of:

• Critical Business Services (CBS)

Impact

• Improvements do not enhance service resilience
• Customer impact not addressed

Root Causes

• Traditional process-centric mindset
• Limited understanding of CBS

Mitigation Strategies

• Map lessons to CBS
• Focus on end-to-end service delivery
• Align actions with customer impact

Challenge 7: Ineffective Communication of Lessons Learned

Description

Lessons are:

• Not communicated widely
• Poorly presented
• Not understood

Impact

• Limited awareness
• Lack of engagement

Root Causes

• Weak communication strategy
• Lack of stakeholder engagement

Mitigation Strategies

• Use structured communication frameworks
• Tailor messages to stakeholders
• Use dashboards and visual tools

Challenge 8: Limited Integration with Operational Resilience Framework

Description

Lessons learned are not integrated with:

• Scenario testing
• Impact tolerance
• Risk management

Impact

• Fragmented resilience capabilities
• Missed improvement opportunities

Root Causes

• Disconnected processes
• Lack of coordination

Mitigation Strategies

• Integrate lessons across all OR components
• Establish cross-functional governance
• Align with resilience lifecycle

Challenge 9: Resistance to Change

Description

Employees resist:

• New processes
• Additional responsibilities

Impact

• Low adoption of lessons learned processes
• Ineffective implementation

Root Causes

• Cultural barriers
• Lack of awareness
• Fear of blame

Mitigation Strategies

• Promote no-blame culture
• Provide training and awareness
• Engage leadership support

Challenge 10: Data Quality and Technology Limitations

Description

Issues with:

• Incomplete data
• Fragmented systems
• Lack of integration

Impact

• Poor analysis
• Ineffective decision-making

Root Causes

• Legacy systems
• Lack of standardisation

Mitigation Strategies

• Improve data governance
• Integrate systems
• Use analytics tools

Challenge 11: Over-Reliance on Major Incidents

Description

Lessons learned only triggered by:

• Major disruptions

Impact

• Missed learning opportunities
• Reactive approach

Root Causes

• Lack of awareness
• Weak reporting culture

Mitigation Strategies

• Capture lessons from:
• Near misses
• Testing
• Minor incidents

Challenge 12: Unrealistic Expectations and Resource Constraints

Description

• Limited resources
• High expectations

Impact

• Delayed implementation
• Incomplete actions

Root Causes

• Poor planning
• Lack of prioritisation

Mitigation Strategies

• Use risk-based prioritisation
• Align resources with priorities
• Set realistic timelines

Summary of Challenges and Solutions

Building Resilience Through Overcoming Challenges

Addressing these challenges enables organisations to:

• Strengthen lessons learned processes
• Improve resilience capabilities
• Enhance service delivery
• Meet regulatory expectations

Implementing an effective lessons learned capability is not without challenges. However, by recognising and addressing these pitfalls, organisations can transform lessons learned from a compliance exercise into a strategic capability.

Overcoming these challenges requires:

• Strong governance
• Clear accountability
• Cultural alignment
• Continuous improvement

Ultimately, organisations that successfully address these challenges will achieve:

• Higher resilience maturity
• Reduced incident recurrence
• Stronger Critical Business Services

Transition to Next Chapter

Having examined the common challenges and pitfalls, the next chapter will present a practical case study (banking sector example), illustrating how lessons learned can be applied effectively to improve operational resilience in real-world scenarios.

C1	C2	C3	C4	C5	C6
C7	C8	C9	C10	C11	C12
C13	C14	C15	C16	C17	C18

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.