ESG, contractors, mental health, climate — EHS keeps absorbing mandates without headcount. Why scope creep is a governance failure, and how to name it.
Over the last decade, the EHS function absorbed ESG reporting, contractor management, climate risk, mental health, business continuity, and whatever crisis arrived last quarter — usually without a single added headcount. If you lead EHS, you already know this; you’re living it. What I want to name is the part that rarely gets said in the open: scope creep without resources isn’t a workload problem. It’s a governance failure with your name attached to the outcome, and managing it heroically is making it worse.
The conventional belief — held by executives and, more dangerously, by EHS leaders themselves: absorbing new responsibilities gracefully is what good corporate citizens do, and the resourcing will eventually follow the work.
My counter-position in one sentence: every mandate you absorb without resources or decision rights converts your function’s finite capacity into an unfunded insurance policy for someone else’s risk — and the invoice arrives on the day something in your original mandate fails.
How did everything become EHS’s job?
Through a completely rational process that nobody designed. When a new risk domain emerges — sustainability disclosure, contractor prequalification, psychological safety, pandemic response, climate exposure — the organization looks for the function that already handles “risk, people, and compliance-shaped things.” That’s you. EHS has the audit muscle, the data discipline, the training infrastructure, and the cultural permission to walk into any department and ask questions. Handing the new thing to EHS is the path of least organizational resistance, every single time.
Each individual handoff is defensible. The sum is not. The aggregate is a function whose formal mandate — preventing serious injuries, controlling exposures, managing environmental liability — now competes for attention with a portfolio of adjacent duties, most of which come with reporting deadlines and none of which came with people. And because EHS professionals are, as a population, conscientious to a fault, the function absorbs it. Quietly. Competently. Fatally.
Here’s the mechanism that makes it fatal: attention is the actual currency of risk management. The hours your team spends assembling ESG data or chasing contractor insurance certificates are hours not spent on the floor, not spent on the high-energy exposures, not spent coaching supervisors. Scope creep doesn’t announce itself as risk. It just thins the layer of attention over your original mandate until, somewhere, the layer breaks. And when it breaks — when the serious injury happens — the incident review will not credit the sustainability report you shipped on time. It will ask why the energy-control audit was six months behind.
“Your competence is being used as evidence against your case.”
Why is this a governance failure and not a workload complaint?
Watch: Good EHS Directors Don’t Fail Because the Job Is Hard
Because the Leadership Engagement Index says so, in at least three of its five dimensions.
Resourcing is the obvious one: real leadership engagement means the mandate and the resources move together. An executive team that assigns work without capacity isn’t engaging with safety — it’s disposing of accountability. Decision rights is the subtler one: scope has been added to EHS, but the right to deprioritize something in exchange almost never comes with it. You’ve been given more to do and no authority to decide what gets done. That combination — full accountability, partial authority — is the signature of a governance failure in any function; EHS just experiences it more chronically than most. Frontline voice rounds it out: when the EHS team itself says “we cannot cover this,” and that signal changes nothing, the organization has told you what a frontline report is worth.
I’ll say the quiet part: some of this is on us. The profession’s instinct to absorb, cope, and deliver — to be indispensable — is exactly what makes the pattern sustainable for everyone except the function and the workers it exists to protect. Heroic absorption reads, from the executive floor, as proof that the resourcing was adequate. Your competence is being used as evidence against your case.
The steelman objection deserves a real answer: “EHS should own more — safety, health, environment, and sustainability genuinely converge, and a broader mandate is influence. Isn’t this the seat at the table you asked for?” Yes — and I’d rather lead a broad, integrated risk function than a narrow compliance one. But a seat at the table is defined by authority and resources, not by workload. A broadened mandate with budget, headcount, and decision rights is a promotion. A broadened mandate without them is a liability transfer wearing a promotion’s clothes. The test is not what’s in your portfolio. The test is what came with it.
How do you push back without torching your credibility?
Not by refusing work — that loses. By making the trade-offs visible and forcing the decision upward, where it belongs. Four mechanics:
Run a capacity ledger. One page. Every standing obligation your function carries, the hours it actually consumes, and the total against your real staffing. Not as a complaint — as an operating document, maintained like a production schedule. Most executive teams have genuinely never seen the aggregate, because it accreted one reasonable request at a time. Make the aggregate undeniable.
Price every new mandate at intake. When the next domain arrives, the answer is never “no” and never a bare “yes.” It’s: “Yes — that’s 0.4 of a full-time equivalent. Here are three options: fund it, take it with this named item that stops, or accept in writing that both are now under-resourced.” Then let the executives decide. Deciding trade-offs is their job; your job is refusing to let the trade-off happen invisibly inside your team’s overtime.
Tier your portfolio by consequence. Classify everything you own into life-safety and catastrophic-exposure work, regulatory-clock work, and adjacent absorbed work. Publish the tiers. When capacity breaks — and it will — the breakage lands in tier three by design instead of tier one by exhaustion. This is the difference between a function that fails randomly and one that degrades on purpose, in the right order.
Escalate with the Index, not with adjectives. “We’re overwhelmed” is an emotion and gets a wellness poster. “Resourcing and decision rights are misaligned with accountability, here is the ledger, here is the risk sitting in tier one” is a governance finding and gets a meeting. Speak the language of the board pack. This is, frankly, where outside senior voice earns its fee: part of what FractionalEHS does inside client organizations is say exactly this to executive teams — with the standing of someone who has run the function globally and no career dependency on the room’s approval. The same sentence lands differently when it isn’t attached to next year’s performance review.
What should you do Monday?
Start the capacity ledger — even a rough one. Draft the tier classification of everything your function owns. And the next time a new mandate arrives, price it at intake before you accept it. You will feel the discomfort of breaking the absorption habit exactly once. The alternative is feeling the incident review ask why tier one was uncovered.
Key takeaways
- EHS absorbs new mandates because it’s the path of least organizational resistance — each handoff is individually rational and the aggregate is unmanaged.
- Attention is the real currency of risk management; scope creep thins attention over the life-safety mandate until it breaks, and the break is what gets investigated.
- Accountability without matching resources and decision rights is a governance failure, measurable on the Leadership Engagement Index — not a workload complaint.
- Heroic absorption is self-defeating: delivering everything anyway is read upstairs as proof the resourcing was fine.
- The countermeasures are mechanical: a capacity ledger, pricing mandates at intake, consequence-tiering the portfolio, and escalating in governance language rather than adjectives.
