Audit committee rule, borrowed from the ER: the first question is never 'who'. It's 'what should have caught this'. Works on wire transfers. Works on medication errors. Works on children.