Introduction to 'Why'

From Uncertainty to Understanding: Building the Foundation for a Living System

Every organization wants to protect children and vulnerable adults from harm. But good intentions alone aren’t enough — especially in a world where uncertainty is rising, and traditional tools haven’t kept pace. To manage sexual abuse risk effectively, you need more than rules.

You need a system.

The Why stage of Jigsaw lays the foundation for that system by helping your team answer three essential questions:

What are we trying to achieve?
What do we depend on to succeed?
What kinds of uncertainty could help us — or get in our way?

These questions shift your focus from surface-level tools to the core realities of your organization: your values, your environment, your people, and your mission. It’s a shift grounded in Enterprise Risk Management (ERM) — where risk is not defined as “danger,” but as uncertainty around the achievement of objectives.

Why the ‘Why’ Comes First

Traditional approaches to sexual abuse risk management often start with controls — jumping straight to background checks, training, or supervision. Even traditional risk management tends to begin with identifying threats, then moving to selecting controls.

Jigsaw takes a different path — grounded in risk management best practice. We begin by helping you understand your organization and its objectives, the system you’ve created to achieve those objectives, and the uncertainties that could affect success.

That’s because in ERM — and in Jigsaw — uncertainty is the environment in which you operate, and it’s where all your sexual abuse risk lives. Sexual abuse risk isn’t something you can eliminate. It’s one of the many uncertainties you must manage well as a precondition to achieving your mission.

When you recognize that, managing sexual abuse risk becomes central to your work — not just to prevent harm, but to protect your ability to operate effectively, build trust, and deliver on what matters most.

What the ‘Why’ Stage Covers

The Why stage takes you through a structured — but flexible — discovery process:

Scope: Define the boundaries of your organization and, therefore, the system you need to manage.
DNA: Clarify your Vision, Values, and Environment Factors — what drives you and how you make decisions.
Operating Model: Map what you’re trying to achieve (Swans) and the components you rely on — people, resources, activities, partnerships, revenue, and costs.
Day-to-Day Operations: Capture what happens on the ground: Who does what, when, where, and how.
SAM Risk Sets: Identify the uncertainties — positive and negative — that affect your ability to achieve your Swans.
Existential SAM Threats: Recognize the rare but catastrophic events that could threaten your ability to operate.
System Goals: Define what your sexual abuse risk management system must accomplish to meaningfully reduce uncertainty around your Swans.

A Living, Iterative System — Including System Goals

Jigsaw is not a checklist. It’s a living system — and living systems evolve. That’s why the Why stage doesn’t produce final answers. It produces the best understanding available at this point in time.

This applies especially to System Goals, which are initially drafted based on what you learn in the Why stage — but which are revisited regularly thereafter, particularly after the How stage.

Why? Because once you’ve designed and evaluated real-world controls using the operational and universal criteria you’ll use there, you’ll have new insight into:

What kinds of outcomes are truly feasible
What the system must be able to support consistently
What your people need in order to act protectively, reliably, and with confidence

So, in Jigsaw, System Goals are not the end of the Why stage. They’re the beginning of a learning loop — one you will revisit, refine, and reinforce as your system matures.

How Jigsaw Builds Capability — Across the Whole System

1. Building Organizational Capability: Seeing Your System Clearly

Most organizations have never had the chance to look at themselves through a risk lens — especially when it comes to something as complex and emotionally charged as sexual abuse risk.

They know they care.

They know what they want to prevent.

But they rarely have the tools to map how they actually function, or to see how uncertainty affects their ability to protect and perform.

That’s what the Why stage provides: a structured but flexible way to explore and understand your organization — not just in theory, but in action. It gives you a view of your system you likely haven’t had before.

Here’s what that looks like:

Your values in practice: Many organizations say they value dignity, trust, and inclusion — but their risk systems can feel top-down or compliance-heavy. Jigsaw helps you spot where your systems align with your values, and where they don’t.
Your real operating model: You may have strong goals — like “every child feels safe and supported” — but still rely on volunteers, partners, or under-resourced spaces that introduce risk. Jigsaw reveals where your structure helps or hinders your intent.
Your day-to-day reality: Risk doesn’t live in policy documents. It lives in exceptions, gaps, and grey areas. The Why stage helps teams surface blind spots that policies often miss — like supervision inconsistencies, transition times, or weekend programming.
Your ability to see risk before harm: Most harm is preceded by warning signs — not just in people’s behavior, but in systems breaking down. The Why stage helps you see risk before it becomes damage.
Your starting point for prevention: You can’t reduce what you haven’t identified. The Why stage turns scattered concern into clear focus — so you know what to strengthen, where to intervene, and what your system needs to achieve to protect what matters.

This isn’t just a discovery phase. It’s a transformation in how your organization sees itself.

2. Building Individual Capability: Helping People Make Protective Decisions

If organizations manage structural risk, then individuals manage moment-to-moment uncertainty.

Most protective decisions aren’t made by senior leaders or in policy meetings. They’re made by people in the hallway, on the sidelines, during transition times, or in supervision moments that don’t go to plan.

That’s why the Why stage also begins building individual capability — helping your staff and volunteers begin to see themselves as part of a shared protective system.

This is where Self-Determination Theory (SDT) comes in. People are more likely to act — and keep acting — when they feel three things:

Autonomy: “I have ownership and choice in what I’m doing.”
Competence: “I believe I can do this well.”
Relatedness: “I feel connected to others and part of something that matters.”

The Why stage lays the groundwork for all three.

Autonomy: Owning the System Together

Jigsaw doesn’t tell people what to do. It helps them understand why it matters, how it works, and how they can contribute. When people define their organization’s Swans, identify their own risks, and see how their role supports the whole — they feel ownership. That’s when risk management becomes personal, not imposed.

Competence: Feeling Ready, Not Just Informed

People don’t freeze because they don’t care. They freeze because they don’t feel sure. The Why stage builds early clarity and shared language so that later — when a volunteer sees a grey area, or a team member notices a boundary being crossed — they feel more able to act. Confidence starts here, with understanding how the system works and where they fit into it.

Relatedness: Creating a Culture Where People Act

It’s one thing to know what to do. It’s another to believe others around you will back you up if you do it. That belief — that acting protectively won’t isolate you, but connect you — is a powerful motivator. The Why stage creates that cultural starting point. It invites multiple voices into the system-building process. And it helps people see that protecting children and vulnerable adults isn’t the job of one person. It’s the work of the system, together.

What This Enables

When both organizational and individual capabilities are built together, your team becomes better able to:

Recognize risk as uncertainty — not as blame, but as design challenge
See where systems support or undermine protection
Make and support confident, protective choices in real time
Reflect and improve over time, even when nothing has gone wrong
Align protective action with values, mission, and trustworthiness

And this is just the beginning.

The Why stage builds a shared foundation — one your team will build on throughout the rest of the Jigsaw system. It’s how you start seeing sexual abuse risk not as something to fear, but as something to understand, respond to, and improve — together.

Why This Matters

Managing uncertainty isn’t a distraction from your work. It is the work.

Whether the consequences show up in trust, funding, operations, or lives harmed — your ability to manage uncertainty determines your ability to deliver on your mission.

So we don’t start with controls.

We start with what matters.

And we build from there — with clarity, with structure, and with the belief that systems can learn.