Bonus Bonus: the human factor
Projects are rarely killed by technology. They are killed by people who do not want to deliver or hear bad news.
Chapter 25: The human factor: ego, fear, and shame
Large IT projects fail mainly because bad news does not reach the person who can stop the project in time, or that person does not want to hear it. Very capable people fall into these traps too. So besides personal responsibility, watch how information is passed on: will you learn the unvarnished truth before a problem grows into a scandal? You will not recognize a person you can trust with a project by their self-confidence, but by the fact that they speak in ranges, ask for independent oversight themselves, and know how to scale down or stop a project.
It is rarely technology that kills a project; it is silence
This chapter is for those who do not manage a project directly but are accountable for it: company management, board members, deputy ministers, and heads of departments. You do not need to understand code. But you do need to recognize whether the information reaching you is true.
Flyvbjerg and Budzier reviewed 1,471 IT projects: on average, costs exceeded the plan by 27%, but one in six projects was a “black swan” with an average cost overrun of 200% and a schedule overrun of almost 70% Flyvbjerg and Budzier, 2011. It is exactly this kind of extreme case, which disappears in the average, that can threaten a company’s existence.
Such an outcome rarely has a single sudden cause. Research by Mark Keil and colleagues, summarizing 14 studies, describes two phenomena: people withhold, soften, or delay bad news, and those who receive it may refuse to hear it. Willingness to report drops where people are punished for it and grows when the messenger does not have to fear blame Keil et al., 2014. A green report is therefore not proof that everything is fine. It is like a warning light in a car that someone has covered with tape.
Green
The project is going to plan: deadline, budget, and scope are holding, and no serious problem is open.
Amber
The goal is achievable, but the project has serious problems that need attention and a decision by management.
Red
In its current form, the project will most likely not succeed. It will not work without a major intervention (scope, budget, deadline, or stopping it).
An honest picture tends to be amber. Of 227 major government projects in the United Kingdom, as of March 2024 only 11% were rated green, 72% amber, and 12% red IPA, 2024. If all your projects are green, ask why.
Ten traps and how to spot them
These are recurring patterns of behavior that almost anyone can fall into under deadline pressure and worry about their own reputation. So set up project governance in a way that lets you catch them in time.
| Trap | How to spot it | What to do |
|---|---|---|
| Optimism and underestimation | a single date, “the deadline is fixed”; scope is cut without recalculating the benefits | ask for a range and a comparison with similar projects; send every cut back for approval |
| Escalation of commitment | “we’re already 80% there,” “it would be a waste of what we’ve invested” | write down stop criteria at approval; decide on continuing from scratch and with someone who did not push the project through |
| Silence about bad news | the report stays green until the week before the deadline; nobody can explain how the traffic light is calculated | separate reporting a problem from looking for a culprit; look at the underlying data now and then |
| Deafness to warnings | “users don’t know how to work with the system”; the messenger is questioned instead of the message being checked | for every warning, ask for a record: who raised it, how it was checked, what was decided |
| Ego and inability to admit a mistake | the mistake is blamed on others, measures of success change, the history of decisions is rewritten | assess the quality of decision-making, not just the outcome; set an example by admitting your own mistake |
| Authority and groupthink | unanimity without discussion; disagreement never appears in the committee minutes | appoint a devil’s advocate; the highest authority speaks last |
| Blind trust in the system | “the system calculated it, so it’s right”; nobody knows the error rate | ask about the measured error rate, human review, and the option to appeal |
| Shame about admitting ignorance | nobody ever says “I don’t know”; documents are approved without questions | admit what you do not understand yourself; ask who will explain it |
| “We want our own” | “our situation is unique,” external reviewers “don’t know our environment” | ask for three comparable projects and know how they turned out (chapter 2) |
| Covering yourself and diluted responsibility | “it was agreed,” the go/no-go is signed by “the committee”; a vendor chosen by name, not by proven results | every key decision has a named owner; assess vendors on evidence |
The traps are described by decision-making research (Kahneman and Lovallo, Staw, Janis, Keil, and others); the recommendations summarize the background material for this chapter. A single warning sentence is not enough to draw a conclusion. What matters is repeated behavior.
Who to trust with a project: behavior matters, not self-confidence
A project often goes to whoever is the highest performer, the loudest, or the best technically. That choice has its reasons, but it does not guarantee that the person can openly report bad news too. A study of salesperson promotions in 131 companies showed that companies promote mainly on performance in the current role, and the best salespeople then lead weaker teams on average as managers. The authors link this to the so-called Peter principle Benson, Li, and Shue, 2019. The data comes from sales, not IT, so treat it as an analogy: people are chosen based on results in a different job from the one they will then be doing.
So choose based on proven behavior on past projects: how they reported problems, whether they ever scaled something down or stopped it, how accurate their estimates were. Ask former colleagues and reviewers as well. Also watch what kind of environment they create around them: psychological safety, the feeling that it is safe to say something unpleasant, is linked to how a team learns Edmondson, 1999. A higher number of reported problems therefore does not have to mean a worse project. It may point to more open reporting.
| Warning sign | Good sign |
|---|---|
| Warning signPretends to understand. | Good signAdmits not understanding something and says how they will fill in the information they need. |
| Warning signHides a mistake or blames it on others. | Good signAdmits the mistake and changes the approach. |
| Warning signThe report is always green. | Good signReports a problem in time, while it is still “amber.” |
| Warning signRefuses an audit or picks the reviewers themselves. | Good signAsks for an independent review on their own. |
| Warning signPromises a single date. | Good signSpeaks in ranges and bases them on comparable projects. |
| Warning signCuts scope quietly. | Good signWhen cutting, recalculates the benefits and sends them back for approval. |
| Warning sign“We’ve already invested too much, we can’t stop.” | Good signCan propose scaling the project down or stopping it. |
| Warning signQuestions the person who brings bad news. | Good signChecks the warning and records what was decided. |
| Warning signQuotes only what proves them right. | Good signLooks for evidence against their own view and changes the plan based on new data. |
| Warning signUnanimity without discussion. | Good signSpeaks last at meetings; disagreement goes into the minutes. |
| Warning sign“The system calculated it.” | Good signKnows the system’s measured error rate. |
| Warning sign“We’re unique.” | Good signLearns from others and knows how comparable projects turned out. |
| Warning signDecisions are made by “the committee”; “it was agreed.” | Good signSigns the go/no-go with their own name. |
| Warning signIs the only source of information about the project. | Good signOpens a direct channel for you to the team and the users. |
| Warning signPunishes the bearer of bad news. | Good signRecognizes the bearer of bad news for their honesty. |
Horizon: for twenty years, nobody believed the people who reported errors
One of the worst British IT scandals did not arise because the system had bugs. Every system has bugs. It arose because the institution for years did not believe the people who pointed them out. The British Post Office introduced the Horizon accounting system in its branches, and according to the public inquiry, branch operators began complaining about incorrect data almost immediately after it was introduced. The Post Office demanded that they make good the shortfalls and brought criminal prosecutions. According to the inquiry, hundreds of people were wrongly convicted and thousands more were held liable for losses that never actually occurred Horizon Inquiry, Vol. 1, 2025. In 2019, the court found that the original Horizon “was not remotely robust” Bates (No 6), 2019.
- 1999–2002The Post Office introduces Horizon
The accounting system from ICL Pathway (later Fujitsu) is rolled out to branches from September 1999 until the turn of 2001 and 2002. Complaints about incorrect data come in almost immediately.
- 2000–2013Prosecutions based on system data
In England and Wales, the Post Office prosecutes branch operators and staff over shortfalls shown by Horizon. As late as 2015, it publicly claims that “Horizon is robust.”
- 2019The Bates v Post Office litigation
Around 555 claimants. A judgment on contractual issues in March, a settlement of GBP 57.75 million in December.
- December 16, 2019Judgment in Bates v Post Office (No 6)
The court also examined the vendor’s internal records of errors: the original Horizon “was not remotely robust,” and the newer version still had “a significant number of bugs, errors and defects.”
- April 23, 2021The Court of Appeal quashes 39 convictions
The decision in Hamilton and others v Post Office Limited.
- May 24, 2024A law quashes convictions en masse
The Post Office (Horizon System) Offences Act 2024 comes into force in England, Wales, and Northern Ireland; a similar law follows shortly afterward in Scotland. The convictions of hundreds of people are quashed.
- July 8, 2025Public inquiry, Volume 1
Describes the impact on people. At the inquiry’s request, the Post Office named 13 people who, according to their families, took their own lives, and at least 59 people who considered suicide.
- 2026Volumes 2–6 not yet published
The rest of the report on causes and responsibility is due in five volumes. As of July 2026, according to the inquiry chair, it was still months from completion.
Timeline sources: the judgment Bates (No 6), 2019, the public inquiry Horizon Inquiry, Vol. 1, 2025, and its 2026 progress update Horizon Inquiry, 2026.
Which traps came into play:
- blind trust in the system: Horizon’s output served as evidence against people,
- deafness to warnings: complaints from branches were treated as excuses, not as reports of a possible bug,
- information asymmetry: known bugs from the vendor’s internal records did not reach the accused,
- institutional ego: the Post Office defended the system and its earlier decisions instead of checking them.
What would the right approach have looked like? A user complaint is treated as grounds for checking, not as a nuisance. Repeated complaints are investigated by someone independent of both the vendor and the department that introduced the system. If the system’s output serves as evidence against people, those affected have access to the logs and to the record of known bugs. In the end, the court did exactly that: it read the records of errors and reached the opposite conclusion to the Post Office.
Phoenix: pay for Canadian federal employees (2016)
The pay system for 290,000 employees from 101 departments was launched in 2016 despite clear warnings. IBM estimated the project at CAD 274 million, CAD 155 million was approved, and instead of increasing the budget, over 100 important functions were postponed. The pilot was canceled so as not to delay the deadline. There were eight oversight committees, but most of them were chaired by people from the project’s management or their direct reports. By June 30, 2017, over CAD 520 million in incorrect payments had been made. The Auditor General called it an “incomprehensible failure of project management and oversight” Auditor General of Canada, 2018.
The lesson: what matters is the independence of oversight, not the number of committees. The alternative was known, too: Gartner had recommended a phased rollout and parallel running with the old system.
Robodebt: automated recovery of welfare payments (Australia)
An automated system determined alleged overpayments of welfare benefits based on the averaged annual income of their recipients. The state then recovered these amounts. In 2023, the Royal Commission described the scheme as a “crude and cruel mechanism, neither fair nor legal” Royal Commission, 2023.
The lesson: for a system that makes decisions about people, verifying that it works technically is not enough. Also track the error rate and make sure there is human review, the option to appeal, and a verified legal basis.
Toeslagenaffaire: childcare benefits (the Netherlands)
While fighting fraud, the tax administration treated errors in many parents’ benefit applications as fraud and clawed the benefits back. In December 2020, a parliamentary committee of inquiry found that fundamental principles of the rule of law had been violated Tweede Kamer, POK, 2020. In January 2021, the government admitted that it had failed to pick up the signals of what was going wrong and only grasped the scale when it spoke with the affected parents and children Dutch government, 2021.
The lesson: signals from below need a way up that does not lead only through those who run the system. Decision-makers should now and then talk directly with the people the system affects.
Source: POK report Ongekend onrecht, 2020, Government response, 2021
What works: safeguards that let the truth travel up
- Independent reviews at key points. The British Gateway Reviews are short reviews by an independent team that assesses how likely the project is to be completed successfully. They are inexpensive: the NAO estimated the cost of reviews of high-risk projects in 2008–09 at GBP 8.3 million, against GBP 10.5 billion in annual spending on 42 projects NAO, 2010. They only work if they cannot be bypassed and a red rating has consequences.
- Estimates based on comparable projects. Instead of estimating only from inside your own plan, look at how similar projects turned out and adjust your estimate accordingly (reference class forecasting) Flyvbjerg, 2006. This also takes into account the extremely bad outcomes mentioned at the beginning.
- Psychological safety. It is safe in the team to admit a mistake and say something unpleasant. Psychological safety does not mean low standards. It starts with management that admits its own mistakes and recognizes whoever points out a problem.
- Stop criteria agreed in advance. They are set before sunk costs build up, so nobody negotiates over them under pressure. You will find a template in chapter 19.
- Separating management from assessment. Whoever runs the project does not assess its status. The assessor reports directly to you and has access to the data.
- Whistleblower protection. An internal whistleblowing system under Act No. 171/2023 Coll. protects a person who reports unlawful conduct Act No. 171/2023 Coll.. It is the last safeguard, not the first: for bad project news, you need an ordinary channel that works earlier.
Premortem: imagine the project has already failed
A premortem is a meeting where the team assumes the project has turned out badly and looks for the reasons why Klein, 2007. It also makes room for criticism that nobody would otherwise voice. Hold one before approving the project or a major stage. Plan for 45–60 minutes and 6–12 people: the project manager, key people from the team, a user representative, and the vendor. It is facilitated by someone who did not push for the project. The following steps and times are a suggestion for you to adapt.
- Setup (5 min)
The facilitator says: “It is a year after the planned launch, and the project has been a disaster. We are not blaming anyone; we are finding out what happened.” The past tense is essential.
- Silent writing (10 min)
Everyone writes down on their own all the reasons why the project failed, including the unpleasant ones: people, politics, the vendor, data, the deadline. No discussion.
- Round (15–20 min)
Participants take turns giving one reason each until all of them have been said. The person with the least decision-making authority starts; the project manager and the sponsor speak last. The facilitator writes things down; nobody evaluates.
- Selection (10 min)
Group similar reasons and vote to pick the 3–5 most likely or most expensive ones.
- Measures and owner (10–15 min)
For each risk, agree on one specific measure, a named owner, and a deadline. For the most serious ones, add a stop criterion too: “if the error rate in the pilot exceeds X%, we do not launch.”
- Follow-up
Attach the list to the project plan and go through it at the next steering committee. Repeat the premortem before launch.
A good answer is specific: a name, a number, a date, a decision. A bad one sounds like “nothing major,” “we’ve already invested too much,” or “the system is robust.” Also ask the vendor how they will report bad news to you and whether they may escalate beyond your project manager.
- Contracting authorities must have an internal whistleblowing system regardless of their number of employees (except municipalities with fewer than 10,000 inhabitants and small organizations of municipalities and regions); other employers must have one from 50 employees (Section 8). The law prohibits retaliation Act No. 171/2023 Coll.. It applies to unlawful conduct, not to bad project news in general.
- For a large project, commission an independent review yourself and set it up so that the reviewer does not report to the project sponsor. After Phoenix, the Auditor General of Canada recommended mandatory independent reviews of key decision points for government-wide IT projects Auditor General of Canada, 2018.
- Write the stop criteria into the project approval document. Political pressure for a quick launch recurs across these cases, and under it, criteria are hardest to negotiate.
Finished. What now?
On your own
Go through the project step by step with a checklist. Your browser remembers the ticked items, so you can come back to them.
Open the A–Z stepsWith us
Want to discuss your project with someone who builds software? Get in touch. The first meeting is free of obligation, and you will leave with a concrete next step, even if you end up building elsewhere.
Discuss your projectWant the guide on paper? The whole guide for printing and PDF