Audits can be complete, action plans closed and dashboards green while the reality on the floor tells a different story. Good governance must test whether assurance reflects practice.