How opportunity shapes offending

Behaviour is not only about the person

After an incident, attention naturally turns to the offender: who were they, what did they want and which warning signs were missed? Those questions matter, but they are incomplete when they hide the conditions that made the act possible.

Routine activity theory, introduced by Lawrence Cohen and Marcus Felson, looks at the convergence of a likely offender, a suitable target and the absence of capable guardianship. It does not explain every motive. It helps explain why particular places, times, assets and workflows concentrate opportunities.

Organizations cannot control every intention. They can influence access, accountability, operational visibility, evidence and response time.

Opportunity is a system, not simply an unlocked door

Opportunity may be physical, digital, administrative or social. It emerges when a valuable asset is easy to reach, a control can be bypassed without a trace, an anomaly is reviewed weeks later or no one knows who must respond.

Risk also changes over time. A secondary entrance may be controlled during the day and nearly invisible at shift change. A process may work with the usual team and fragment during a replacement. A shared file may feel efficient until too many people have broad permissions.

• Target: what has value, is exposed or can be diverted?
• Access: who can reach it, with what effort and under which conditions?
• Guardianship: which human or technical control can actually notice a deviation?
• Trace: does the action leave usable evidence tied to a person, place and time?
• Response: who receives the signal and how quickly can they act?

Study routines before adding controls

Opportunities often sit inside ordinary work: opening and closing, key handover, agent replacement, receiving a delivery, approving a payment, correcting a report or responding to an alarm. Useful analysis follows the complete journey.

Compare the written procedure with real work. Where do people bypass a slow step? When does accountability change hands? Which information arrives late? Which alerts are so frequent that they no longer attract attention? Observation reveals weaknesses that documents alone cannot show.

The purpose is not to make every action suspicious. It is to find where one person can act, approve and erase; where control depends on memory; or where a known anomaly has no owner.

Reduce opportunity without paralysing operations

A sound control is proportional to risk and embedded in the workflow. It raises the effort or likelihood of detection without imposing the same level of monitoring everywhere.

• Limit access by role, time and location.
• Separate sensitive steps such as requesting, authorizing, executing and reconciling.
• Keep understandable logs and review them against specific risk scenarios.
• Make exceptions visible, including emergency access, replacements, corrections and cancellations.
• Assign escalation thresholds, an owner and a response time.
• Test controls against realistic situations and improve what fails in practice.

The most sophisticated control is not necessarily the strongest. A control that people understand, apply and verify consistently often reduces opportunity more effectively.

Opportunity is not a single cause

Saying that opportunity influences offending does not mean everyone exposed to an opportunity will offend. Motives, norms, personal constraints, social context and organizational culture also matter.

This nuance avoids two mistakes: believing one control eliminates risk, and turning prevention into generalized suspicion. Strong prevention combines a healthy workplace, clear rules, credible reporting channels and controls focused on risky processes.

The question is not only “who could do this?” It is also “what in our operation would make this easy, discreet or repeatable?” That question produces practical and often fairer action.