Due diligence isn’t just about proving compliance — it’s about understanding risk.

Many leaders responsible for due diligence genuinely don’t know what’s expected. I routinely get asked:

“What does good look like?”

This one-page checklist is a great starting point I use to calibrate leaders on where to look first.

Here’s how I use it:

• Pull a real issue or event and follow how it was corrected.
• Pull a compliance-related preventive maintenance task and trace the full line of inquiry — from vendor recommendations to the work performed.
• Write down what you find.
  

Then ask:

• What did we find?
• What risk does it pose?
• Do we need to look at more samples?
  

Then share the findings with the leadership team and the team doing the work — not to assign blame, but to engage the team in closing gaps in controls, guidance, and visibility.

The more items that surface on this checklist, the higher the likelihood of an event — because these are signals that barriers and controls have gaps.

When that happens, the people closest to the work — who carry the most risk — often don’t have the visibility, information, or guidance needed to deliver the standard.

Spotted a red flag? 🚩

Contact Morgan Davis for expert support.