The situation
An operational-technology near-miss revealed that the approved process did not fit the time pressure engineers faced. Repeating the policy would not remove the incentive to take a shortcut.
What changed
Security and engineering reviewed the real workflow together. They clarified escalation, improved the approved route and used the near-miss as practical context for future decisions.
Why it matters for ACP
Good governance records the control, the exception and the owner. Paid ACP includes behaviour-change support to help those controls survive contact with daily work. It is not sold separately.
