The policy exists. The practice doesn’t
Most organizations with a POSH problem don’t lack a policy — they lack a practice. The IC meets, the training is ticked, the complaint box exists. And the behavior continues.
Compliance theater
The annual training where everyone signs a sheet and learns nothing is not compliance. Real compliance is whether a junior employee believes — from observed behavior, not posters — that reporting is safe.
Auditing behavior, not documents
A behavioral POSH audit looks at what actually happens: who gets mentored, who interrupts whom, what happened after the last complaint. Documents tell you what the organization says. Behavior tells you what it is.
The One Action: Ask your newest employee, privately, whether they would report harassment — and what makes them unsure.