Margaret Heffernan’s Willful Blindness: Why We Ignore the Obvious at Our Peril (2011; Wilful Blindness in the United Kingdom) takes an idea from criminal law and turns it into an account of how people and organisations fail. In law, wilful blindness is the rule that a person who suspects a fact and deliberately avoids confirming it can be treated as if they knew it. Heffernan, a former BBC producer and chief executive of three companies, argues that the same choice not to know runs through private lives, companies and public institutions, and that it is driven less by wickedness than by ordinary human tendencies: we prefer people like ourselves, we do not see faults in what we love, we filter out evidence that threatens our convictions, we run out of mental capacity when tired, we obey, we conform, we wait for someone else to act, and we let distance and money dull our moral sense. Her examples include Enron, BP’s Texas City refinery, Abu Ghraib, Bernard Madoff’s investors and the abuse scandals in the Catholic Church, alongside research on obedience, bystanders and fatigue. For internal auditors this is a book about the gap between what an organisation knows and what it acts on, which is where serious audit findings often sit, and about the auditor’s own capacity not to see. This guide summarises the book without reproducing it, sets out its mechanisms, checks its real cases against the record and brings them up to 2026, traces how the legal doctrine has developed since publication, records the criticisms and the later research, maps the argument to audit practice and ends with a worked example in which a hospital system’s audit function goes looking for what the organisation already knew.
In this guide
- The book in one page
- Who Margaret Heffernan is, and how the book came about
- The structure: twelve chapters, two editions
- The mechanisms: why people and institutions choose not to know
- The cases, checked against the record and brought up to date
- The law and the standards since the book
- The nine ideas worth keeping
- The vocabulary: fourteen terms defined for practitioners
- What it means for internal audit: auditing what the organisation already knows
- The criticisms, the later research and what the book leaves out
- Editions, reading time and how to read it
- A one-hour discussion guide for an audit team
- Worked example: Ashgrove Health System looks for what it already knew
- Frequently asked questions
- Related guides
The book in one page
| Question | The answer, in our words |
|---|---|
| What is wilful blindness? | In law, deliberately avoiding confirmation of a fact one strongly suspects, which courts may treat as knowledge. Heffernan extends the idea to everyday and organisational life: the obvious that people and institutions manage not to see because seeing it would be costly or uncomfortable. |
| Why does it happen? | Because looking away feels safer. The publisher’s description puts it as protecting a sense of safety, avoiding conflict, reducing anxiety and protecting prestige. The chapters work through the mechanisms: affinity, love, conviction, the limits of the mind, obedience, culture, the bystander effect, distance and money. |
| Where does it show up? | In marriages and health choices, in companies such as Enron and BP, in institutions such as the Catholic Church and the US Securities and Exchange Commission, and in history, including Nazi Germany. |
| Who sees? | The people the book calls Cassandras: whistleblowers such as Sherron Watkins at Enron, Coleen Rowley at the FBI, Cynthia Cooper at WorldCom and Joe Darby at Abu Ghraib, who saw what colleagues did not and were isolated for saying so. |
| What is the remedy? | Challenging one’s own biases, encouraging debate, discouraging conformity and engaging with complicated problems rather than simplifying them away; organisations need structures that make seeing, and saying, safe. |
| What changed in 2019? | A fully revised and updated UK edition added later cases, including Grenfell Tower, Carillion, Harvey Weinstein and Windrush. |
| Who wrote it? | A former BBC producer and chief executive, now a professor of practice at the University of Bath, whose later books include Beyond Measure and Uncharted. |
| Why read it as an auditor? | Because many of the failures audit functions are asked to explain afterwards were visible beforehand to someone inside the organisation, and because the book describes the forces that also act on auditors: affinity with management, long relationships, fatigue and the wish not to be the one who says it. |
Who Margaret Heffernan is, and how the book came about
Heffernan produced radio and television programmes for the BBC for thirteen years and ran three companies as chief executive: InfoMation Corporation, ZineZone Corporation and iCast Corporation. She is a professor of practice at the University of Bath, mentors chief executives through Merryck and Co., chairs the board of DACS, writes for the Financial Times, and has advised the Casey Review of the Metropolitan Police and the Independent Inquiry into Child Sexual Abuse. Willful Blindness was her third book; it was shortlisted for the Financial Times and Goldman Sachs Business Book of the Year award, and her biography reports that the Financial Times named it one of the most important business books of its decade. Her later books include Beyond Measure (2015), Uncharted (2020) and Embracing Uncertainty (2025). Her TED talks, by her own account, have been seen by more than seventeen million people, and she was inducted into the Thinkers50 Hall of Fame in 2023.
The book began with Enron. Reviewers reported at publication that Heffernan first met the idea while writing a play about the company for the BBC, and that she read the trial transcripts of its chief executive and chairman, including the judge’s instruction to the jury about deliberately closing one’s eyes to what is obvious. From that legal starting point the book widens into psychology and neuroscience, and it adds interviews with executives, whistleblowers and white-collar criminals and the examples people offered when she asked them about wilful blindness, almost all of whom mentioned the Iraq war and global warming. It was first published in the United Kingdom by Simon and Schuster on 3 February 2011, as Wilful Blindness, and in the United States by Walker and Company the same year, as Willful Blindness. A fully revised and updated edition followed from Simon and Schuster UK on 4 April 2019.
The structure: twelve chapters, two editions
The first edition has twelve chapters, which move from the individual mind to organisations and society and end with the people who see and with remedies. The table lists the chapter titles from the US first edition. The middle column states the subject each title names, in our words; the right-hand column gives examples that reviewers reported on that theme. Except for the Cassandra chapter, whose contents the Financial Times review described, the placement of an example under a chapter is our reading, not a claim about where it appears.
| No. | Chapter (US first edition) | The subject the title names | Examples reviewers reported on this theme |
|---|---|---|---|
| 1 | Affinity and Beyond | Our attraction to people and ideas like our own | None reported in the reviews we read |
| 2 | Love Is Blind | What we will not see in people and institutions we love | A wife who would not see a husband’s alcoholism; a mother who could not see abuse; Madoff’s family |
| 3 | Dangerous Convictions | Beliefs that filter out contrary evidence | Alan Greenspan and the housing bubble |
| 4 | The Limits of Your Mind | Limited mental capacity, overload and fatigue | BP Texas City’s exhausted operators; exhausted guards at Abu Ghraib; interns on 24-hour shifts; the sleep researcher Charles Czeisler |
| 5 | The Ostrich Instruction | The legal doctrine of wilful blindness | The judge’s instruction in the Enron trial |
| 6 | Just Following Orders | Obedience to authority | Stanley Milgram’s obedience experiments |
| 7 | The Cult of Cultures | How organisational culture makes the abnormal feel normal | None reported in the reviews we read |
| 8 | Bystanders | Why groups fail to act on what all their members see | Research on the bystander effect |
| 9 | Out of Sight, Out of Mind | Distance from consequences | A woman near an Austrian concentration camp who asked that the cruelty stop or be kept out of sight |
| 10 | De-moralizing Work | How money and incentives crowd out moral judgment | Doctors ordering tests for financial reasons; subprime lending |
| 11 | Cassandra | The people who see, and what happens to them | Watkins, Rowley, Cooper and Darby; the isolation of whistleblowers and how they find allies |
| 12 | See Better | Remedies, for individuals and institutions | Challenging biases, encouraging debate, discouraging conformity |
Two notes on editions. The published title of the last chapter is See Better: a 2011 newspaper review of the US edition, a library record of the first US edition and the Open Library record of the UK edition give that title, while In Praise of Potholes appears in the Library of Congress pre-publication record of the US edition and in catalogue records copied from it. And the 2019 revised edition, at 448 pages against 391 for the UK first edition, adds cases from the years after 2011, among them Grenfell Tower, Carillion, Harvey Weinstein and Windrush. We have not seen the contents of the 2019 edition and do not describe its chapter structure.
The mechanisms: why people and institutions choose not to know
The book’s central claim is that not seeing is common, ordinary and usually understandable, and that it affects groups and institutions as much as individuals. The first chapters are about individuals, beginning with affinity, the pull toward people who resemble us, which in our reading leaves a group of similar people with shared blind spots. We protect the people and institutions we love by not looking at their faults, which is why, in one example reviewers singled out, Madoff’s own family did not see the fraud. We hold convictions that screen out contrary evidence, as the book argues Alan Greenspan did with the housing bubble. And our minds have limits: tired, distracted or overloaded people fall back on what they already believe. One reviewer quoted the book’s use of research on resource depletion to argue that doubt is the first faculty to go when the mind is tired, and the book draws on the sleep researcher Charles Czeisler’s work on the impairment caused by sleep loss.
The middle chapters move into organisations. The legal chapter takes the doctrine itself, the instruction that lets a jury infer knowledge from deliberate avoidance. The book’s discussion of obedience draws on Milgram’s experiments, and its account of Abu Ghraib stresses that exhausted guards were in no state to act on their own moral judgment. The theme signalled by the chapter title The Cult of Cultures is how norms make questionable practice feel routine; one review groups the chapter with those on the comfort of conformity and the difficulty of speaking out. The bystander chapter takes the research showing that the presence of others can make each person less likely to act. Distance, physical and organisational, keeps consequences out of view, and money changes what people notice: the New York Times review highlighted the book’s argument that a preoccupation with money breeds blindness, with examples from medicine and home buying. The final chapters turn to the people who do see. The Cassandra chapter describes whistleblowers who were isolated at first and sometimes later found allies, and the book closes with how individuals and organisations can see better, which the publisher summarises as challenging biases, encouraging debate and discouraging conformity.
For an auditor the useful thing about the mechanisms is that each one predicts where in an organisation the unseen will be. Affinity predicts it in homogeneous leadership teams and in long relationships with trusted suppliers and advisers. Love predicts it around the organisation’s founders, stars and flagship products. Conviction predicts it in the strategy everyone has committed to. The limits of the mind predict it wherever people are exhausted, which the BP Texas City case puts in hours worked. Obedience and culture predict it wherever authority is steep and dissent is rare. The bystander effect predicts it in anything that everyone can see and nobody owns. Distance predicts it in outsourced and overseas operations. And money predicts it wherever incentives reward not asking. The culture audit guide turns similar predictions into procedures, and the professional skepticism guide describes the individual auditor’s side.
The cases, checked against the record and brought up to date
The book’s real cases are told briefly, and several have moved on since 2011. The table sets out the main ones, how the book uses them as reviewers described it, what the primary record shows, and what has happened since. The column on how the book uses each case rests on reviews of the book; the other two columns rest on primary or reputable sources.
| Case | How the book uses it | What the record shows | What happened next |
|---|---|---|---|
| Enron | The origin of the book; executives who could have known how troubled the company was; the judge’s instruction on deliberate ignorance | In May 2006 Judge Sim Lake told the jury it could find Kenneth Lay and Jeffrey Skilling guilty if they had been deliberately ignorant of criminal conduct; prosecutors argued Lay had avoided asking about the finance chief’s partnerships. Skilling was convicted on 25 May 2006 on nineteen counts | Skilling was sentenced to 292 months in October 2006; in January 2009 the Fifth Circuit upheld the convictions but vacated the sentence, and in June 2013 he was resentenced to 168 months, with about $42 million going to victims, and he was released in February 2019; Lay died in July 2006 and his convictions were vacated |
| BP Texas City | Exhausted operators and cost-cutting; the book reports that the control-board operator had worked twelve-hour shifts for twenty-nine consecutive days | The explosion on 23 March 2005 killed 15 people and injured 180. The Chemical Safety Board’s final report (March 2007) described organisational and safety deficiencies at all levels of BP and recommended a fatigue standard and process safety indicators; the Baker Panel reported in January 2007 | OSHA settled for $21 million in 2005; its 2009 inspection found 270 failures to abate and 439 new wilful violations, and in August 2010 BP agreed to pay a $50.6 million penalty |
| Abu Ghraib | Exhausted guards on long shifts; Joe Darby as a Cassandra | Darby turned the photographs over to Army investigators on 13 January 2004, described it as a moral call, received death threats and moved into protective custody; he received a special Profile in Courage Award in 2005 | A civil case against the contractor CACI, whose interrogators worked at the prison, produced a $42 million jury verdict in November 2024; a Fourth Circuit panel upheld it in March 2026, then reversed it in August 2026 after the Supreme Court’s June 2026 decision in Cisco Systems v. Doe on suits for violations of international norms |
| Madoff and the SEC | Madoff’s family and investors not seeing; the regulator among the institutions that looked away | The SEC’s inspector general found in August 2009 that the agency had received six substantive complaints between 1992 and 2008 and conducted three examinations and two investigations without ever performing a thorough one | Madoff, arrested in December 2008, pleaded guilty in March 2009, was sentenced to 150 years and died in prison in April 2021; by October 2026 the trustee had recovered $15.5 billion and distributed $14.8 billion |
| Alice Stewart | The medical establishment’s slowness to accept her finding that X-raying pregnant women raised the risk of childhood cancer | Her preliminary findings appeared in the Lancet in 1956 and the full paper in the BMJ in 1958; a study commissioned by the Medical Research Council found no link, and her unit received no further MRC grant; a 1962 US study of 734,243 children supported her | Practice changed gradually and by the 1980s foetuses were rarely X-rayed; she died in 2002, aged 95 |
The book uses several other cases more briefly, among them Albert Speer, whose devotion to Hitler the book argues led him to overlook the Final Solution, the Catholic Church’s abuse scandals and the subprime lenders, and the 2019 edition adds the later cases noted above. The whistleblowers Watkins, Rowley and Cooper are among the book’s Cassandras: Watkins at Enron, Rowley over the FBI’s handling of warnings before the attacks of 11 September 2001, and Cooper at WorldCom. The Smartest Guys in the Room summary tells the Enron story in full, the Normal Accidents summary gives the systems view of industrial accidents, and the corporate scandals guide draws audit lessons from Enron and WorldCom among others.
The law and the standards since the book
The legal doctrine at the centre of the book has developed since 2011, and for auditors in regulated organisations the developments matter more than the psychology. Within months of the book’s publication the US Supreme Court defined wilful blindness, in a patent case; the False Claims Act treats deliberate ignorance as a form of knowledge; and the Supreme Court and the Medicare programme have since tied obligations to what an organisation knew or chose not to learn. The table is the guide’s addition, not the book’s.
| Date | Development | What it says | Why it matters to an auditor |
|---|---|---|---|
| May 2006 | The instruction in the trial of Lay and Skilling | The jury could convict if the defendants had been deliberately ignorant of criminal conduct | Knowledge can be inferred from avoidance; an executive cannot rely on not having asked |
| 31 May 2011 | Global-Tech Appliances v. SEB, US Supreme Court, 8 to 1 | Wilful blindness requires a subjective belief that a fact is highly probable and deliberate action to avoid learning it; it is narrower than recklessness or negligence and well established in criminal law | Defines the line between not knowing and choosing not to know |
| Statute | False Claims Act, 31 U.S.C. 3729(b)(1) | “Knowingly” covers actual knowledge, deliberate ignorance and reckless disregard, with no proof of specific intent to defraud required; liability is a civil penalty per claim plus three times the government’s damages | For any organisation that bills the US government, not looking is not a defence |
| 1 June 2023 | United States ex rel. Schutte v. SuperValu, unanimous | False Claims Act knowledge turns on what the defendant actually knew and believed; deliberate ignorance covers awareness of a substantial risk combined with intentional avoidance of confirming it | The documents showing what the organisation knew, such as reviews, reports and hotline logs, become the evidence |
| 1 January 2025 | Medicare overpayment rule, revised in the 2025 physician fee schedule | An overpayment is identified when a provider knowingly receives or retains it, using the False Claims Act standard; the 60-day return clock runs from then, suspended for up to 180 days during a timely, good-faith investigation | A hospital holding a review that shows likely overpayments is on the clock whether or not anyone has acted on it |
| 15 December 2026 | IIA Organizational Behavior Topical Requirement takes effect | Minimum requirements for assurance engagements in which organisational behaviour is in scope; at the draft stage the IIA said it would not require such engagements to be in the plan | For functions that conform with the Standards, culture work in assurance engagements gains minimum mandatory requirements; see the topical requirements guide |
Two points follow for audit practice. First, the legal standard and the book’s standard differ. The law asks whether a particular person suspected a particular fact and took steps not to confirm it; Heffernan’s subject is the broader failure to see. An audit report should use the word blindness in the book’s sense only with care, because in US law the same phrase describes a state of mind with legal consequences. Second, the documents an audit function produces become part of what the organisation knows. A finding that identifies a likely overpayment, a pattern of hotline reports or a control failure that management has not acted on is evidence of knowledge, and the escalation route described in the escalation ladder guide needs to be followed promptly.
The nine ideas worth keeping
- Blindness is ordinary. The mechanisms are affinity, love, conviction, fatigue, obedience, conformity, inaction in groups, distance and money; none requires bad people, which is why good organisations suffer from it.
- Knowledge can be inferred from avoidance. Courts treat deliberate ignorance as knowing; an organisation that arranges not to know has not escaped knowing.
- Sameness narrows sight. A homogeneous team shares its blind spots, and a long relationship turns trust into a reason not to check.
- Tired people do not see. Fatigue is a control risk; the Texas City case puts it in hours worked, and hours worked are auditable.
- Authority and culture decide what can be said. Where dissent is rare, the absence of bad news is not evidence of good news.
- Everyone’s problem is nobody’s. What many people see and nobody owns goes unreported; ownership is the cure for the bystander effect.
- Money changes what people notice. Incentives that reward not asking produce not asking.
- Cassandras are isolated before they are vindicated. The whistleblowers in the book were alone at first, and some found allies later; a speak-up channel is only as good as what happens to the person who uses it.
- Seeing better is a practice. Debate, dissent and diversity of view have to be built into how decisions are made; they do not survive as values alone.
The vocabulary: fourteen terms defined for practitioners
| Term | What Heffernan means | What it looks like in an audit |
|---|---|---|
| Wilful blindness | In law, deliberately avoiding confirmation of a suspected fact; in the book, the wider human habit of not seeing the obvious | The gap between information an organisation holds and decisions it has taken |
| The ostrich instruction | The jury instruction allowing knowledge to be inferred from deliberate avoidance | Management’s claim not to have known, tested against what it was sent |
| Affinity | Our attraction to people and ideas like our own | Homogeneous teams, long-tenured advisers, auditors recruited from the areas they audit |
| Love is blind | Not seeing faults in what we love | Flagship products, star performers and founders treated as beyond question |
| Dangerous convictions | Beliefs that screen out contrary evidence | A strategy whose assumptions are never re-tested |
| The limits of your mind | Finite mental capacity, made worse by fatigue and overload | Overtime, consecutive shifts, alert fatigue in monitoring teams |
| Resource depletion | A term from psychology the book uses for the tiring of the mind; doubt goes first | Reviews performed at the end of long days; see the later research below |
| Just following orders | Obedience to authority | Instructions that override controls, and staff who comply |
| The cult of cultures | Organisational norms that make the abnormal feel normal | Workarounds everyone uses and nobody records |
| Bystanders | The diffusion of responsibility when many see the same problem | Issues raised in meetings that never reach an owner |
| Out of sight, out of mind | Distance from the consequences of a decision | Outsourced, offshore and third-party operations |
| De-moralizing work | Money and incentives crowding out moral judgment | Incentive plans that pay for volume without quality conditions |
| Cassandra | The person who sees and says what others will not, and is at first ignored or isolated | The whistleblower, and the auditor with an unwelcome finding |
| See better | The remedies: challenge, debate, dissent, engagement with complexity | Structures that make seeing and saying safe, and are tested |
What it means for internal audit: auditing what the organisation already knows
The practical lesson of the book for an audit function is a change of question. Most audit work asks whether controls operate. The book suggests asking, as well, what the organisation already knows that it has not acted on: the report that was filed, the complaint that was closed, the exception that was approved again, the warning from the person everyone regards as difficult. Those items are cheap to find because they are already written down, and they are where the costly failures in the book’s cases were visible in advance. The table maps the book’s mechanisms to audit activities. The ethics and compliance programme audit guide, the organisational culture topical requirement guide and the GIAS Domain II guide carry the surrounding procedures.
| Audit activity | What the book implies | Procedure it changes |
|---|---|---|
| Risk assessment and planning | The unseen sits where nobody looks: areas never audited, data nobody reads, people nobody asks | Add an inventory of information the organisation collects without a decision attached to it, such as external reviews, hotline logs, exit interviews and exception reports, and plan against it; the risk assessment playbook gives the method |
| Speak-up and whistleblowing channels | A channel is only as good as what happens to the person who uses it | Trace a sample of reports from receipt to closure, including who closed each and on what evidence; interview reporters where policy permits |
| Culture and behaviour | Authority, conformity and culture decide what can be said | From 15 December 2026, scope culture work to the Organizational Behavior Topical Requirement when it is in an assurance engagement; the culture audit guide sets out the tests |
| Fatigue and workload | Tired people do not see | Treat hours worked as a control-relevant indicator in safety-critical and review-heavy processes; analyse payroll and rostering data for sustained overtime |
| Incentives | Money changes what people notice | Read incentive plans for rewards that depend on not asking, such as volume without quality conditions, and test whether quality gates are applied before payment |
| Third parties and distance | Out of sight, out of mind | For outsourced operations, test what the organisation actually knows about how the work is done, not only what the contract says; the third-party risk guide covers the programme |
| Board and management information | Knowledge can be inferred from avoidance | Compare what senior management and the board received with what was known below them; where significant information did not travel up, report the gap |
| The function’s own blind spots | Affinity, long relationships and fatigue act on auditors too | Rotate assignments, test for affinity in staffing, and rely on GIAS Standard 1.1, under which the chief audit executive must keep an environment in which auditors are supported in reporting unfavourable results; the independence and objectivity guide covers the safeguards |
The standards give the function the warrant to do this. Standard 1.1 of the Global Internal Audit Standards, on honesty and professional courage, requires auditors not to omit material facts and requires the chief audit executive to keep an environment in which auditors are supported in reporting evidence-based results, favourable or not; Standard 2.1 requires auditors to identify and manage their own potential biases; and Standard 4.3 requires professional skepticism, including seeking more evidence when information appears incomplete or inconsistent. Read with the book in mind, the three standards describe an auditor who is not wilfully blind and a chief audit executive whose job includes making sure the team is not either. The difficult conversations guide helps with the moment the book calls Cassandra’s: saying what nobody wants to hear.
The criticisms, the later research and what the book leaves out
The book was well received, but reviewers raised fair points. Nancy Koehn, reviewing it in the New York Times in April 2011, admired its prose and range but found the argument that a preoccupation with money breeds blindness to rest on anecdotal data, thought the historical account of the shift toward money undeveloped and the discussion of solutions brief, wished the examples had gone deeper, and thought the ideas could have been applied more forcefully to climate change. The Canberra Times reviewer noted that some of the research, Milgram’s experiments among it, will be familiar to readers of popular psychology. A further criticism, which is ours, is that diagnoses of wilful blindness are easy in hindsight: once a disaster has happened, every ignored signal looks obvious, and the many signals that were rightly ignored are forgotten. An auditor using the book has to remember that organisations receive more warnings than they can act on, and that the skill is in deciding which ones matter, not in acting on all of them.
Three of the strands of research the book draws on have been revisited since 2011, and the table records what later work found. None of the three undermines the book’s main argument, but each changes how an auditor should use it.
| Research the book draws on | What later work found | What it changes for an auditor |
|---|---|---|
| Resource depletion: the idea that mental self-control is a limited resource that tiring tasks use up | A preregistered replication across 23 laboratories and 2,141 participants, published in 2016, found an effect close to zero (d = 0.04) | Rely on the evidence about sleep loss and long hours, which rests on a different body of research, rather than on laboratory depletion effects |
| The bystander effect: the presence of others makes each person less likely to act | A study of 219 real public conflicts captured on CCTV in the UK, the Netherlands and South Africa, published in 2019, found that at least one bystander intervened in nine of ten, and that more bystanders made intervention more likely | The problem in organisations is less that nobody acts than that nobody owns; design for ownership |
| Milgram’s obedience experiments | Reicher, Haslam and Smith argued in 2012 that participants were not blindly obedient but identified with the experimenter and his scientific project, which they called identification-based followership | People go along with projects they identify with, which makes a respected leader’s favourite initiative a higher risk, not a lower one |
What the book leaves to the reader is the organisational machinery. It describes why people do not see and praises those who do, but it says less about how an organisation should route, triage and resolve the warnings it receives, or how to tell a Cassandra from someone who is simply wrong; Koehn’s point about the brevity of the solutions applies here. The 2019 edition may answer some of this; we have not seen it. For an audit function the gap is filled by its own methods: the ethics and compliance programme audit for the speak-up machinery, the root cause guide for asking why a known problem was not acted on, and the Why They Do It summary for the offender’s side of the same failures.
Editions, reading time and how to read it
| What | Details | Best for |
|---|---|---|
| UK first edition | Simon and Schuster, 3 February 2011, as Wilful Blindness; 391 pages in the Google Books and Open Library records | The original text |
| US first edition | Walker and Company, New York, 2011, as Willful Blindness; 294 pages | US readers |
| Revised edition | Simon and Schuster UK, 4 April 2019, fully revised and updated; 448 pages; ISBN 9781471180804 | The current edition, with the post-2011 cases |
| Reading plan | The chapters on the limits of the mind, the ostrich instruction, obedience, culture and Cassandra first; the rest as interest allows | An auditor with two evenings |
| Companion reading | The Why They Do It summary for the offender’s psychology; the Bad Blood summary for a case in which employees saw and were silenced; the Influence summary for the psychology of compliance | Placing the argument |
Read it with a list of the organisation’s warning channels beside you: the hotline, the incident system, the external reviews, the exit interviews, the regulators’ letters. For each chapter, ask which channel the mechanism would block. The chapters are built from stories, and the stories are the point: they are the ones an audit committee will remember when the function reports a finding about something the organisation already knew.
A one-hour discussion guide for an audit team
- Ten minutes: the known unknowns. Each person names one thing they believe the organisation knows and has not acted on. Write them down without discussion.
- Fifteen minutes: the mechanisms. For each item, decide which of the book’s mechanisms keeps it unseen: affinity, love, conviction, fatigue, obedience, culture, bystanders, distance or money.
- Ten minutes: the channels. List the organisation’s warning channels and, for each, who receives the warnings and what the last one led to.
- Ten minutes: ourselves. Ask where the function itself is affine, tired or loyal: auditors recruited from the areas they audit, relationships older than five years, findings softened at the last review.
- Fifteen minutes: the plan. Decide whether a review of what the organisation already knows belongs in the 2027 plan, how it would be scoped, and how it relates to the Organizational Behavior Topical Requirement; the topical requirement guide covers the scoping.
Worked example: Ashgrove Health System looks for what it already knew
Ashgrove Health System is a fictional US nonprofit with five hospitals, $2.1 billion of revenue and an internal audit function of twelve. In its 2027 plan the chief audit executive proposed a cross-cutting review with an unusual scope: not whether controls operated, but what the system already knew and had not acted on. The audit and compliance committee agreed, on the reasoning that a health system billing Medicare is treated by the False Claims Act as knowing what it deliberately avoids learning, and that since January 2025 the Medicare overpayment rule has used the same standard. The function inventoried every stream of information that reached someone in the system without a documented decision attached to it, then took a sample from each and traced what happened.
| Signal | What the function found | The mechanism at work | What changed |
|---|---|---|---|
| An external coding review | A 2025 review at two hospitals had found that documentation did not support the severity coded on 23 of 120 sampled inpatient claims and estimated $3.4 million of potential overpayments; the report had been filed by the revenue cycle team fourteen months earlier and never sent to compliance | Money and distance: the people who received it were rewarded on collections | Finding (high): compliance opened an investigation, counsel assessed the 60-day obligation, and the committee was briefed at its next meeting |
| The hotline | Of 187 reports in 2026, 52 were closed by department managers as resolved without review by compliance, including seven about billing at the same outpatient clinic | Bystanders: each report was handled, none was owned | Finding: all reports triaged by compliance, closure only on documented investigation, quarterly trend reporting to the committee |
| Nurse staffing hours | Payroll data showed 41 intensive-care nurses at two hospitals working more than 60 hours in at least eight weeks of 2026; the patient safety committee had never received hours-worked data | The limits of the mind: fatigue as an unmeasured risk | Observation: an hours-worked indicator added to the patient safety dashboard |
| Incident reports | Near-miss reports at one hospital fell by 38 percent in the year after a change of unit leadership, while medication errors that reached patients did not fall | Culture: the reports stopped, the errors did not | Observation: falling report volumes treated as a trigger for review rather than as improvement |
| Physician compensation | Three productivity bonuses exceeded the threshold at which the system’s own policy requires a fair-market-value review; the reviews had been deferred twice | Love is blind: the physicians were among the system’s most valued | Finding: reviews completed; deferral now requires compliance approval |
| The function itself | The hotline process had not been audited for five years, and two of the twelve auditors, recently transferred from revenue cycle management, were assigned to revenue cycle audits | Affinity: auditors auditing their former colleagues | Assignments changed under GIAS Standard 2.1; a hotline audit added to the plan; the chief audit executive reported both to the committee |
The review produced three findings and two observations for management and two changes inside the function, and it took about a third of the hours of a conventional revenue cycle audit, because most of the evidence was already in the system’s files. Its effect came from the framing. Each item was presented to the committee as something Ashgrove knew, with the date on which it first knew it and the name of the role that received it, which turned familiar problems into a timeline that no one could describe as unforeseeable. The committee chair asked for the inventory of information streams to be kept and refreshed each year, and the chief financial officer, who had expected a review of controls, said it had turned out to be a review of attention.
The example carries two cautions from the criticisms above. The function did not treat every unacted signal as a failure: it sampled each stream, assessed which items mattered, and reported that most hotline closures had been reasonable. And it was careful with language. The report said that the information had been received and not acted on; it did not say that anyone had been wilfully blind, a phrase with legal meaning that the function left to counsel. The healthcare internal audit guide and the hospital revenue cycle audit guide cover the processes involved.
Frequently asked questions
Is wilful blindness the same as negligence?
No. In US law it requires a subjective belief that a fact is highly probable and deliberate action to avoid learning it, which the Supreme Court in 2011 described as narrower than recklessness or negligence. Heffernan uses the term more broadly, for the ordinary failure to see what is in front of us.
Does the book excuse the people who did not see?
It explains rather than excuses. Its mechanisms are ordinary, which is why they catch good people, but the legal idea it starts from holds people responsible for what they could and should have known; its whistleblowers are the proof that seeing was possible.
Which parts matter most for auditors?
The chapters on the limits of the mind, the ostrich instruction, obedience, culture and Cassandra. Together they explain why warnings are missed, what the law makes of it, and what happens to the people who raise them.
How does it relate to Why They Do It?
Eugene Soltes’s book, summarised on this site, is about the white-collar offenders themselves; Heffernan’s is about the people and institutions around them that do not see. The Why They Do It summary covers the first.
Should I read the 2011 or the 2019 edition?
The 2019 revised UK edition is the current one; it adds later cases such as Grenfell Tower, Carillion, Weinstein and Windrush. The 2011 text carries the core argument and the cases this guide checks.
Where does the book sit in the reading list?
In the judgment section, with the books on ethics and the psychology of failure; the internal audit reading list organises the books it recommends by theme and career stage.
Related guides
- How to Audit Corporate Culture: A Topical Requirement Method — turning the book’s mechanisms into tests
- The Organizational Culture Topical Requirement: Preparing to Audit the Unwritten Rules — the standard that takes effect in December 2026
- How to Audit the Ethics and Compliance Program — the speak-up machinery the book’s Cassandras needed
- GIAS Domain II: Ethics and Professionalism, Including Professional Courage — the auditor’s duty not to look away
- Internal Audit in Healthcare: The Complete Guide for Providers and Payers — the setting of the worked example
- Why They Do It by Eugene Soltes: Summary and Lessons for Auditors — the offender’s side of the same failures
- The Best Books for Internal Auditors — where this book sits among the others
- All book summaries — the full set of summaries for auditors
- The Fearless Organization by Amy Edmondson: Summary and Lessons for Auditors — psychological safety and speaking up
- Blind Spots by Bazerman and Tenbrunsel: Summary and Lessons for Auditors — why decent people miss the ethics of their own decisions.
Leave a Reply