THE EVOLUTION OF HOLLY
From Governance Question to Safeguarding Standard
The HOLLY Safeguarding Standard did not begin as a proposal to create a new safeguarding framework.
It began with a governance question.
The original GRACE Framework Green Paper identified safeguarding as one of the fundamental responsibilities of democratic government. While safeguarding is often discussed within individual professions, agencies or statutory services, the Green Paper proposed that safeguarding should instead be understood as a system-wide governance function operating across all institutions exercising public authority.
That proposition raised a further question.
If safeguarding is a governance responsibility, what prevents governance systems from recognising harm before that harm becomes irreversible?
Answering that question required further research.
Following publication of the Green Paper, Young Policy established an ongoing programme of governance analysis examining safeguarding, public protection, institutional accountability, transparency, democratic legitimacy, operational resilience and organisational performance.
Rather than examining institutions individually, the programme sought to understand how governance functions operate across interconnected public systems.
As that research developed, safeguarding emerged as a recurring governance theme.
The Safeguarding Systems & Public Protection (S1) series progressively examined vulnerability recognition, coercive environments, organisational fragmentation, safeguarding architecture, institutional learning, accountability, boundary integrity and public protection.
Each publication explored a different aspect of how governance systems recognise, interpret and respond to emerging harm.
At the same time, the Special Review began examining a substantial body of publicly available evidence relating to organised child sexual exploitation, safeguarding failures, institutional accountability and democratic governance.
Criminal judgments, public inquiries, independent inspections, safeguarding reviews, survivor testimony and other official publications were considered not simply as isolated events, but as part of a wider pattern of institutional behaviour.
The purpose of the Review was never to replace criminal courts or statutory inquiries.
Its purpose was to identify recurring governance signals.
Across that evidence, one observation appeared repeatedly.
Institutions frequently possessed information long before effective intervention occurred.
Warning signs existed.
Safeguarding referrals existed.
Professional concerns existed.
Opportunities to intervene existed.
Yet recognition frequently failed.
This observation became increasingly significant because similar principles already exist within other mature governance disciplines.
Anti-money laundering systems do not rely upon a single transaction proving criminality.
Fraud prevention rarely depends upon one event establishing deception.
Public health surveillance identifies emerging patterns before outbreaks become widespread.
Across each of these disciplines, governance seeks to recognise cumulative indicators of risk before irreversible harm occurs.
The same principle applies to safeguarding.
Waiting for certainty before recognising foreseeable risk may itself become a governance failure where vulnerable people remain exposed to preventable harm.
These findings progressively shaped the development of the HOLLY Safeguarding Standard.
HOLLY was therefore designed not as a criminal justice framework, nor as a mechanism for determining liability after harm has occurred.
It was developed as a governance standard.
Its purpose is to strengthen the protection of women and children by improving institutional recognition, encouraging earlier identification of vulnerability, supporting proportionate safeguarding intervention and strengthening governance capability across interconnected public systems.
HOLLY adopts a risk-based approach to safeguarding.
It does not require definitive proof before recognising that protective intervention may be necessary. Rather, it recognises that governance frequently operates under conditions of uncertainty.
Individual indicators may appear unremarkable in isolation, yet when viewed collectively they may reveal patterns requiring further enquiry, enhanced safeguarding or coordinated intervention.
This distinction reflects one of the central governance principles emerging from Young Policy’s wider programme of research.
Criminal justice determines guilt.
Safeguarding protects the vulnerable.
Governance ensures that institutions remain capable of recognising when protective action should be considered.
FROM RECOGNITION TO PROTECTION
The development of HOLLY did not end with the identification of institutional recognition as a safeguarding capability.
Continuing work within the Special Review raised a more difficult question.
What happens when an institution does recognise the risk?
Further analysis demonstrated that recognition and intervention could themselves coexist with continuing harm.
An institution might identify vulnerability, deploy a safeguarding measure and correctly record that intervention while the person concerned nevertheless remained exposed to risk.
Recognition was therefore necessary.
But recognition was not enough.
This distinction became the subject of YP-173-26, Recognition Without Protection: Institutional Recognition, Safeguarding Intervention and Unresolved Harm.
The analysis identified three related forms of safeguarding failure:
Recognition failure — where relevant signals are not adequately understood.
Response failure — where recognised risk does not produce proportionate protection, investigation, escalation or accountability.
Resolution failure — where an intervention occurs but its existence or completion is treated as sufficient evidence that the underlying risk has been addressed.
The research also developed the concepts of the intervention paradox and procedural camouflage.
An intervention may affect not only the external risk but the institution’s perception of that risk.
Once action has been recorded, the existence of the intervention may create institutional reassurance that something has been done.
Where that reassurance becomes stronger than the actual protective effect, institutional activity and human consequence can begin to diverge.
This produces an important governance proposition:
A control can fail twice: first, by failing adequately to control the underlying harm; and secondly, by making that continuing failure less visible.
The safeguarding sequence therefore extends beyond recognition and intervention:
Recognition → Responsibility → Intervention → Visibility → Scrutiny → Accountability → Protection → Learning
The implication for HOLLY is significant.
Safeguarding cannot be understood simply as the capacity to recognise vulnerability early.
Recognition must become responsibility.
Responsibility must survive institutional process.
And institutional action must ultimately be examined against what happened to the person whom the system existed to protect.
The question therefore becomes not merely:
Did the institution recognise the risk?
But:
Was the person the system existed to protect actually protected?
FROM PROTECTION TO CONSTITUTIONAL RESPONSIBILITY
The continuing development of HOLLY has also raised a deeper question concerning the relationship between safeguarding and constitutional governance.
Protection does not begin with the safeguarding institution.
It begins with the obligation to protect.
Law and public policy establish rights, duties and protective responsibilities. Institutions are then created and entrusted with authority so that those commitments can become practical protection.
This creates a chain between constitutional or legal promise and human consequence:
Protective Obligation
↓
Law and Policy
↓
Institutions
↓
Authority and Responsibility
↓
Information
↓
Recognition
↓
Intervention
↓
Investigation and Escalation
↓
Protection
↓
Accountability and Learning
Every part of that architecture may exist formally.
A right may be recognised.
A law may exist.
An institution may have jurisdiction.
A procedure may be followed.
A safeguarding intervention may be recorded.
And the person may still remain unprotected.
This raises a fundamental systems-governance question:
Where does responsibility for the protective outcome reside when the obligation to protect is distributed across multiple institutions?
Police may possess one responsibility.
Prosecutors another.
Local authorities another.
Schools, healthcare bodies, safeguarding partnerships and other organisations may each possess further responsibilities.
Each institution may therefore be capable of demonstrating that it performed its particular function while the protective outcome itself becomes fragmented across the system.
HOLLY increasingly examines that space.
Formal responsibility can be distributed.
Human consequence cannot.
The person at risk experiences the system as a whole.
AN EVOLVING STANDARD
The development of HOLLY therefore reflects more than a single publication, investigation or safeguarding review.
It represents the continuing evolution of a wider programme of governance research examining how democratic institutions recognise risk, exercise authority, maintain accountability and protect those who depend upon them.
The Special Review continues.
The S1 series continues to develop.
The wider GRACE Framework continues to evolve.
And evidence capable of challenging, refining or strengthening the safeguarding analysis will continue to emerge.
HOLLY should therefore not be understood as a finished destination.
Its development demonstrates the purpose of the governance methodology from which it emerged: evidence informs analysis; analysis identifies recurring mechanisms; those mechanisms are tested against further evidence; and the framework develops through learning and review.
HOLLY began with a question about recognition.
Its continuing development has produced another.
What happens after the institution sees?
Safeguarding begins with recognition, but recognition is not its fulfilment.
Recognition must become responsibility.
Responsibility must become action.
Action must remain visible to scrutiny.
And institutional activity must ultimately be measured against the human consequence it exists to influence.
The evolution of HOLLY therefore continues.
Because the purpose of safeguarding is not simply to recognise vulnerability.
It is to protect the vulnerable.