It’s 9:40 on a Saturday night. The walk-in cooler at your highest-volume site is climbing past 50°F, and the manager on duty is doing the only thing the process allows: calling Dave.
Dave doesn’t pick up. Dave is at his daughter’s wedding.
Nobody else knows which refrigeration vendor covers that site, whether there’s an after-hours agreement, or what the spending authorization is for an emergency call. The manager starts googling “emergency commercial refrigeration near me.” By Sunday morning the inventory loss is in five figures, the vendor who showed up charged triple, and the post-mortem will use the word “unlucky.”
Nothing about it was unlucky. The operation was built — nobody decided this, it accreted — so that its entire emergency response capability routed through one phone number.
Engineers treat single points of failure as defects to be designed out. Operations treat them as people to be appreciated. Both are looking at the same thing: a system where one component’s availability determines whether the whole system works.
A single point of failure is a design choice you didn’t know you made
In managing commercial buildings at scale, the failure point is rarely a machine. It’s the person who holds the dispatch logic in their head: which vendor for which trade at which site, who answers after hours, what’s pre-authorized, who to escalate to when the first call fails. As long as that logic lives in a person, the operation has the resilience of that person’s calendar. Vacations, illness, weddings, resignations — every one is an outage window. And the exposure compounds with growth: more sites mean more emergency permutations routed through the same individual.
The interviews behind our research surfaced constantly, usually told with affection: “Miguel handles all that.” The affection is earned. The architecture is indefensible.
What the dispatch looks like when it doesn’t need Dave
Now rerun Saturday night with the dispatch logic living in a system instead of a person.
The cooler’s temperature sensor crosses the threshold at 9:40. A work order creates itself, classified P1 by asset type and reading. The system identifies the refrigeration vendors qualified for that site — verified certifications, active after-hours agreement, current rate card — and dispatches to the highest-scored one with an automated notification carrying the site access details and the not-to-exceed authorization. No answer in fifteen minutes? The escalation rule moves to the next vendor. The site manager gets a status notification, not a research project. The duty COO gets pinged only because the spend will cross the threshold that requires human sign-off — the one decision in the chain that actually warrants judgment.
Dave finds out Monday. The cooler was fixed by 11:30 Saturday night, by the right vendor at the contracted rate, and the entire event — readings, dispatch, response time, cost — is in the asset’s history, where it informs the next repair-versus-replace decision instead of evaporating.
Notice what the system did not replace: the judgment call on spend. Escalation rules exist to deliver decisions to humans, not to remove humans. What got removed was the dependence on one human’s availability for the parts that never needed judgment in the first place — the lookup, the routing, the chasing. The same separation that makes adding headcount the wrong fix for coordination makes automated dispatch the right fix for resilience.
Temperature sensors cross the FDA code threshold, automatically creating a P1 work order linked to the asset’s history.
The system sequentially contacts pre-qualified vendors based on active after-hours agreements and current rate cards without relying on memory.
Human judgment is only required for exceptions, such as approving spends that cross predefined capital thresholds.
That distinction — process that runs itself, decisions that route to people — is the operating principle Sweven FM is built on, because the Saturday-night story was told to us, in some version, by nearly every operator we interviewed.
The 30-Second Audit
Picture your worst plausible failure, at your most important site, at the worst hour of the week. Now count how many people in your operation could get the right vendor moving without calling anyone first. If the answer is one — you already know who — that’s not a team. That’s a single point of failure with good intentions.
Sources:
- IFMA — FM Pulse Survey and operational benchmarks: https://www.ifma.org
- FDA Food Code — cold-holding requirements (walk-in cooler context): https://www.fda.gov
- McKinsey & Company — maintenance operating model research: https://www.mckinsey.com