Home · Insights · Quality

A year without load shedding. Your quality system has not caught up

The workarounds built during the power crisis did not end when the power stabilised. Most are still running, and most were never documented.

Key takeaways

  • South Africa reached 365 consecutive days without load shedding in May 2026, the first time since 2018.
  • During the crisis, almost every operating business built temporary workarounds to keep producing.
  • Temporary controls are easy to introduce and nobody is ever accountable for removing them.
  • The common survivors are manual record fallbacks, relaxed calibration intervals, deferred maintenance and generator arrangements nobody registered.
  • A control that is still operating but no longer justified is an undocumented change to your quality management system.
  • The stable period is the opportunity. This work is far easier now than it was under a schedule.

In May 2026, South Africa passed 365 consecutive days without load shedding, the first full year since 2018. Unplanned outages have fallen by more than half year on year, and additional baseload capacity has returned to the grid.

For most businesses that is straightforwardly good news, and it has been received as such. But there is a quieter consequence that very few operations have worked through, and it sits directly in the quality management system.

Between roughly 2019 and 2024, almost every operating business in the country built workarounds. They had to. Production had to continue through interruptions that arrived on a schedule somebody else set. Those workarounds were sensible, proportionate and often ingenious.

Most of them are still running. And most were never written down, never formally approved, and have never been reviewed against conditions that no longer exist.

Why temporary controls become permanent

This is not carelessness, and it is worth being clear about that, because the instinct is to treat it as a discipline failure. It is a structural problem.

Introducing a temporary control is easy and urgent. Somebody has an immediate problem, they solve it, and production continues. Everybody understands why. The decision is made quickly, usually verbally, usually by whoever is closest to the work.

Removing one is neither easy nor urgent. It requires somebody to notice that a condition has changed, to establish that the original reason has fallen away, to confirm nothing else has come to depend on the workaround, and to take responsibility for reverting it. There is no deadline forcing any of that, and no consequence for leaving it. So it stays.

Then something more insidious happens. New people join and learn the workaround as the normal method. The original justification is forgotten, because it was never recorded. Within two or three years, an emergency adaptation has become simply the way the process runs, and nobody in the building can tell you why.

What is most likely still in place

These are the ones we see most often across manufacturing, engineering and processing operations in South Africa.

The workaroundWhy it was introducedWhat it means now
Manual record fallbacksSystems were down, so results were written on paper and captured laterGaps and late entries became normal. Traceability is weaker than the records suggest
Stretched calibration intervalsInstruments could not be scheduled reliably, so intervals slippedThe interval was never restored. The basis for the current interval is no longer defensible
Deferred maintenancePlanned work was displaced by unplanned interruptionsA backlog that was rational in 2023 is now simply a backlog
Relaxed in-process checksChecks were reduced to recover lost production timeReduced sampling became the standard sampling. Nobody re-justified it
Skipped approval stepsApprovers were unreachable, so work proceeded and was signed laterSigning after the fact is now habit, which makes the approval meaningless
Generators and fuel storageInstalled quickly, often under real pressureFrequently missing from the environmental aspects register, the legal register and the hazard identification for refuelling
Temporary suppliersApproved suppliers could not deliver, so alternatives were usedStill in use, often never formally evaluated or added to the approved list

What the standard actually requires

ISO 9001 anticipates this situation. Clause 6.3 requires that changes to the quality management system are carried out in a planned manner, with consideration of the purpose of the change, its potential consequences, the integrity of the system, resources, and responsibilities.

Emergency change is a legitimate part of operating a business, and no standard expects a formal change process during a power interruption. That is not the issue.

The issue is that an emergency change which becomes permanent is a permanent change that was never assessed. If an auditor asks why your calibration interval is what it is, and the honest answer is that it drifted during load shedding and nobody moved it back, the interval is not wrong so much as unjustified. And the difference between wrong and unjustified matters less than people hope, because you cannot demonstrate either way.

This connects to something we have written about before, which is why corrective actions keep coming back. A control introduced without analysis is the same failure in a different direction: something changed in the system without anyone establishing whether it should have.

The environmental and safety tail

The quality consequences are the most numerous, but the generator question is usually the most serious, and it is the one most often missed.

A diesel generator installed in a hurry brings a set of obligations with it. Air emissions. Noise. Bunded fuel storage and spill containment. Refuelling as a hazardous activity requiring its own risk assessment. Possibly a permit or a registration, depending on size and location.

Many of these installations went in during a genuine operational emergency, commissioned by whoever could get one delivered. They frequently never reached the environmental aspects register, the legal and other requirements register, or the hazard identification. They are still on site, still fuelled, and in an integrated system they are still your responsibility.

The economics have shifted here too. With supply more stable, the pressure has moved from availability to cost, as tariffs have risen and demand has weakened. A generator that was indispensable in 2023 may now be an expensive asset carrying compliance obligations for a risk that has materially reduced. That is worth a deliberate decision rather than a default.

How to find them, practically

Do not start with a document review. The workarounds are not in the documents, which is the entire problem.

Ask the people who run the process one question: what do you do differently now compared with 2022? You will get a more accurate list in twenty minutes on the floor than in a week of reading procedures. People remember what they changed, even when nobody wrote it down, and they are usually glad to be asked.

Then, for each item, three questions. Is the original reason still true? If not, should this revert, or has it turned out to be genuinely better? And either way, where is that decision recorded?

Some workarounds will turn out to be improvements worth keeping. That happens often, and it is a good outcome. But keeping one should be a decision with a name attached to it, not an accident of nobody having got round to changing it back.

Why now is the moment

This work is far easier in a stable period than it was under a schedule, and it will be far easier now than it will be if conditions tighten again. Load shedding is suspended, not abolished, and the sensible planning position is that the improvement is real while the underlying risk is retained.

Which is the practical argument. A business that closes out its crisis-era workarounds now is in a genuinely stronger position either way: cleaner and more defensible if conditions hold, and starting from a known baseline if they do not. A business that leaves them in place is carrying a set of undocumented controls whose justification expired more than a year ago, and it will discover them at an audit rather than at a time of its choosing.

If you would like a considered view of where your management system has drifted from what is actually documented, contact us. It is a common piece of work at the moment, and it is usually less daunting than businesses expect once the list exists.

Frequently asked questions

Is load shedding actually over?
It is suspended rather than abolished. South Africa passed 365 consecutive days without load shedding in May 2026, and unplanned outages have fallen sharply. The generating fleet is in better condition than it has been in years. Prudent planning treats the improvement as real but the risk as retained.
Why does this matter for ISO 9001?
Because a temporary control that stays in place is a change to your management system that was never assessed, approved or documented. Clause 6.3 requires changes to be carried out in a planned manner. Emergency changes are a legitimate exception. Emergency changes that quietly become permanent are not.
What are the most common leftovers?
Manual record-keeping introduced when systems were down, calibration and maintenance intervals that were stretched and never restored, relaxed in-process checks, generator and fuel arrangements that were never registered as environmental aspects or added to the legal register, and approval steps that were skipped to keep production moving.
Is this really a risk if nothing has gone wrong?
Nothing going wrong is not evidence that a control is adequate. It is evidence that the failure has not occurred yet. The specific exposure is that you cannot demonstrate why your current controls are appropriate, because the reasoning behind them was a power crisis that no longer applies.
Where do we start?
Ask the people who run the process what they do differently now compared with 2022. You will get a more honest list in twenty minutes than any document review will produce, because the workarounds live in practice rather than in procedures.
Does this affect ISO 14001 and ISO 45001 too?
Yes, and often more seriously. Diesel generators bring air emissions, noise, fuel storage and spill risk. Many were installed quickly under pressure and never made it into the environmental aspects register, the legal and other requirements register, or the hazard identification for refuelling and maintenance.

Reading up because you have a decision to make?

Skip ahead. An obligation-free consultation gives you the honest answer for your specific business.

087 150 3022