The Pattern Most Leaders Only Notice in Retrospect
Most organizations I've worked with - inside as an operator, outside as a consultant - have at least one story that follows the same arc.
Three years ago, when the team was 30 people, somebody noticed something didn't quite work. A process was clunky. A handoff was awkward. One person was carrying too much critical knowledge. It was a real observation, but it didn't feel urgent. Two engineers and a project manager could have fixed it in a week.
Nobody fixed it. Other priorities won.
Today, the team is 200 people. The same gap is now a transformation initiative - cross-functional, executive-sponsored, budgeted in the hundreds of thousands, scheduled for the second half of next year. The compliance team has opinions. Legal has opinions. The CTO and COO have opinions. It will take eight months, and at the end of it, the organization will have closed a gap they could have closed in a week three years ago.
This is one of the most consistent patterns I see in organizational scaling, and few teams plan for it.
The 10x Rule, Stated Plainly
Every organizational problem you don't catch at the current scale costs roughly 10x more to fix at the next one.
The number is a heuristic, not a measurement. The slope varies by problem type, and the figures below are illustrations, not data. The order of magnitude matches what I have seen in my own work:
- A process gap at 30 employees: $10,000 and 2 weeks to fix.
- The same gap at 150 employees: $50,000-100,000 and 6 weeks.
- The same gap at 1,000 employees: $500,000 to several million and 6 months.
The cost of finding the gap grows far more slowly with scale: an assessment takes weeks at any size. That asymmetry is the economic argument for prevention. The cost of detection grows slowly; the cost of remediation grows steeply.
Where the "10x" comes from
It is an old rule of thumb, not a result I derived. Two lineages sit behind it:
- Software defects. Barry Boehm's Software Engineering Economics (1981) reported that the cost of fixing a defect rose steeply the later it was found, based mainly on large projects. A 2017 study of 171 projects (Menzies, Nichols, Shull and Layman, Empirical Software Engineering) found no evidence that later fixes were consistently or substantially more expensive. The effect is real in some settings and absent in others.
- Quality costs. The 1-10-100 rule, put forward by George Labovitz and Yu Sang Chang in Making Quality Work (1992), holds that a problem costs about 1 to prevent, 10 to correct, and 100 to leave unfixed. It is a management heuristic, not an empirical finding.
Neither source measured organizations growing from 30 to 150 to 1,000 people. I apply the same shape of argument to that setting, and the multiple will differ from company to company. Use it to decide when to look, not to forecast a number.
Why It Works That Way: Three Compounding Forces
The 10x ratio isn't magic. It's the product of three forces that scale together as organizations grow.
1. Stakeholder Count Grows Faster Than Headcount
At 30 employees, fixing a process gap means convincing the founder and maybe one team lead. At 150, the same fix touches at least three department heads, requires sign-off from someone in operations and someone in finance, and probably needs to be communicated to everyone affected. At 1,000, the fix requires a steering committee, formal change management, a communication plan, and weekly status updates to a VP.
This isn't bureaucracy for its own sake. It's a real consequence of more people having real stakes in the outcome. But coordination cost does not grow in step with headcount. Brooks's The Mythical Man-Month (1975) pointed out that n people have n(n-1)/2 possible communication channels, so 10 people have 45 and 30 people have 435.
2. Dependent Systems Multiply Around the Broken Pattern
When a broken process exists for years, the organization builds around it. Workarounds get documented. Adjacent systems develop assumptions about how the broken thing behaves. People hire specifically to deal with the consequences.
By the time the broken pattern reaches the next scale, it's not one process anymore - it's a process plus thirty workarounds, six job descriptions written to compensate for it, and twelve adjacent systems that assume the broken behavior is normal.
Fixing the original process at this point means changing twelve systems. Or, more commonly, building a fortieth workaround and accepting that the original gap will never get fixed at all.
3. Switching Costs Calcify Around the Status Quo
Behavioral economists call it the endowment effect: in experiments by Kahneman, Knetsch and Thaler (Journal of Political Economy, 1990), people valued objects they owned above what they would pay to acquire the same objects. Organizations show a similar pattern at scale: people hold on to processes they own.
At 30 employees, nobody is deeply invested in the current process - it's only existed for a year. At 1,000, the current process is what people have built their work identity around. They've taught it to new hires. They've defended it in performance reviews. The political cost of admitting it's broken is now high.
Add to this the practical cost: retraining hundreds of people, changing tooling that integrates with five other systems, communicating the change to thousands of customers. Each of these costs rises with scale, and they compound each other.
The Three Categories of Findings
In every honest organizational assessment, findings fall into three categories. Each has different prevention economics and different remediation paths.
Leaks
Leaks are where time, money, and attention drain quietly. Nobody is in pain because of any single instance - but the cumulative drain over months and years is enormous.
Common leaks:
- Process inefficiencies. A 14-step reconciliation that should be 4. A weekly meeting that costs 30 person-hours and produces no decision. An approval chain with three people who don't actually approve, they just exist in the chain because they always have.
- Tool fragmentation. Six different communication tools because no team wanted to give up theirs. Four CRM-adjacent systems with overlapping data. Two reporting platforms that disagree on the numbers.
- Decision delays. Decisions that should take a day take a week because the right person is in too many meetings to read the brief.
- Handoff failures. Work passes between teams and loses context each time. The receiver re-does discovery the sender already completed. Quality drops, timelines slip.
Leaks are dangerous because they're invisible. Nobody is loudly complaining. The organization just feels heavier than it should, and people start to assume that's normal at this size.
Bottlenecks
Bottlenecks are where work piles up and waits. Unlike leaks, bottlenecks are visible - but the visibility is often misdirected. The team blames the bottleneck on workload, when the real cause is structural.
Common bottlenecks:
- Founder dependencies. The founder personally closes every enterprise deal, personally interviews every senior hire, and personally makes every product trade-off. The pitch frames it as "founder-led excellence." The reality: the company has no business after the founder.
- Single approval points. One head of legal who has to sign off on every contract. One CFO who has to approve every PO over $5,000. One head of engineering who has to review every architectural decision.
- Manual reconciliation. Critical data moves between systems by hand. A person spends 20 hours a week reconciling what could be automated, but the automation has never been prioritized.
- Knowledge silos. One person knows how the system works. Three other people kind of know parts. Everyone else has no idea. If the one person leaves, the organization loses months recovering.
Bottlenecks are usually solvable at the current scale. The reason they persist is political: solving them requires giving up authority or admitting the workload was unsustainable. Founders especially struggle with this.
Risks
Risks are where systems are fragile but no one's measuring. The organization is one bad event away from significant disruption, and almost nobody on the leadership team has a clear picture of how bad it would be.
Common risks:
- Architectural debt. The platform was built for 100,000 users. It now serves 1,000,000. It still works, but only because of constant emergency interventions. One bad deploy could take it down for days.
- AI compliance gaps. AI tools were rolled out by individual teams without privacy impact assessments. Customer data has been processed through third-party services that haven't been DD'd. The regulator will eventually ask. The answer will not be good.
- Regulatory exposure. The processes that compliance signed off on three years ago no longer match what teams actually do. Audit trails have gaps. If a regulator asks for specific records, the organization can't produce them.
- Talent concentration. Three people understand the most critical system. Two of them have been at the company for less than a year. Retention risk is enormous and nobody is measuring it.
Risks are the most expensive to ignore because the worst-case outcome is not a slow drain or a visible bottleneck - it's a discrete event that disrupts the business. Compliance audit findings. A platform outage during the holiday peak. An AI privacy violation that becomes public.
The Decision Framework: When to Assess
The 10x Rule implies that earlier is always cheaper. But "always" doesn't help leaders decide when, specifically, to invest in an assessment.
The most useful trigger is the next scaling moment.
Assessments are most valuable when there's still time to act on findings before the change happens. The cheap-fix window stays open until the scaling event begins. Once the event is in motion, every gap not yet fixed becomes a constraint on the event itself.
Scaling Moments That Predict Cost-of-Inaction Spikes
- Hiring sprint. Moving from 30 to 60 employees in 6 months. Onboarding processes that worked at 30 will collapse. Knowledge transfer will fail without explicit structures.
- Product launch. A new product line, market entry, or major release. Every existing process that wasn't designed to handle the new scope will be exposed.
- Fundraise. A new round, especially a growth round, changes the board's expectations. Gaps that were acceptable for "we're still figuring it out" stop being acceptable.
- AI rollout. Engineering uses AI; now business and operations want to. Adoption gaps, governance gaps, and use-case selection gaps will all surface during the rollout - too late to design around them.
- Compliance milestone. An audit, a new regulatory regime, an enterprise customer's security review. Risks that were tolerable become unacceptable.
- Pre-investment (for VCs). Operational, technical, and AI readiness gaps in a target company. After the wire, they become problems the portfolio owns. Findings describe execution readiness and are not investment advice.
For each of these moments, the assessment should ideally happen 3-6 months before the event. That leaves time to act on the cheap and medium-cost findings, and to scope (or descope) any structural findings that require a longer remediation.
What Operator-Led Assessment Looks Like in Practice
The methodology I use is built around three phases: discovery, mapping, and prioritization.
Phase 1: Cross-Functional Discovery
Typical duration: weeks 1-2 of the 6-week engagement. Actual time depends on company size, stakeholder availability, and process complexity.
Structured interviews with 8-15 stakeholders. Not just executives - the goal is multi-perspective coverage of where work actually breaks down.
Typical interview targets: business owners (the people whose work might change), operations leaders, data and engineering leadership, plus representatives from risk, legal, security, and compliance. Each interview lasts 45-60 minutes and focuses on three questions: what does the work actually look like, where does it break down, and what would change if the next scaling moment hit tomorrow.
Alongside interviews, I review whatever documentation exists - process maps, org charts, system architecture diagrams, recent post-mortems. The gap between documented reality and lived reality is itself a finding.
Phase 2: Pattern Mapping
Typical duration: weeks 3-4. Larger or more regulated environments take longer.
Synthesis of interview findings into the three categories: leaks, bottlenecks, risks. Each finding gets a written description, an owner (who needs to act), an estimated impact (in time, money, or risk exposure), and a remediation cost estimate.
Pattern recognition is the part I bring from operating. I compare what I see to what I've seen break in similar organizations at similar scales, based on experience inside fintech, digital banking, and adtech operations.
Phase 3: Prioritization and Action Plan
Typical duration: weeks 5-6. Output: a written portfolio with findings tiered by impact, urgency, and cost of inaction.
Findings are ranked by impact, urgency, and cost of inaction at the next scale. The output is a written portfolio with three tiers:
- Cheap fixes. Do now. Single team, weeks not months, no executive sponsorship required.
- Medium fixes. Scope and schedule before the scaling event. Cross-functional but not transformational. Requires alignment but not a budget battle.
- Structural fixes. Require executive sponsorship and a transformation budget. These are the ones that, by the 10x heuristic, get much more expensive if left until after the scaling event. The action plan flags them, sizes them, and recommends the right time and sponsor.
The deliverable is a written report, not slideware. Decision-ready. Built for action, not for filing.
The Cost-of-Detection Stays Flat. The Cost-of-Remediation Doesn't.
The argument rests on the shape of the two costs, not on a promised return. What an assessment saves depends entirely on what it finds and whether the team acts on it.
The Scale Readiness Assessment is scoped to your budget. The same logic applies to operational due diligence for investors: the cost of looking before the wire is small next to the cost of remediation on a portfolio company that could not execute its plan. Operational due diligence is an execution-readiness view of the team and operation. It is not investment advice, and the investment decision stays with the investor.
The hard part is making the decision to assess before the pain is visible - because by the time the pain is visible, the cheap-fix window has closed.
Where to Start
If your organization is approaching a scaling moment - hiring sprint, product launch, fundraise, AI rollout, or compliance milestone - the highest-leverage move is an assessment before the event, not during it.
Three entry points by audience:
- Operational Due Diligence - if you're a VC, angel investor, or family office evaluating a target. Scoped to your budget and timeline. Operational, technical, and AI readiness assessment. An execution-readiness view, not investment advice.
- Scale Readiness Assessment - if you're a CEO or exec team approaching a scaling moment. Scoped to your budget (up to 10 people), scaling with team size. 6-week operator-led diagnostic across people, processes, and technology, plus a prioritized action plan.
- Interim and fractional product and program management - if a launch, a migration or an AI rollout has no owner. Priced per job, or a monthly fee for fractional work.
About the author: May Mor is a developer, product manager, and organizational consultant. She holds an M.Sc in Intelligent Systems (AI) from Afeka School of Engineering and is certified in Organizational Consulting and Coaching from Bar-Ilan University. Her operator background includes 10+ years inside fintech, digital banking, and adtech - building the onboarding that scaled with an R&D team growing from 30 to 150 developers, and credit and risk infrastructure for 500K+ loan requests. She runs Scale with May: interim and fractional product and program management for tech companies, and operational due diligence for investors.
Sources
- Boehm, B. W., Software Engineering Economics, Prentice-Hall, 1981. Cost-to-fix data by development phase, mainly from large projects.
- Labovitz, G. and Chang, Y. S., Making Quality Work, 1992. Origin of the 1-10-100 rule, a management heuristic.
- Menzies, T., Nichols, W., Shull, F. and Layman, L., "Are delayed issues harder to resolve? Revisiting cost-to-fix of defects throughout the lifecycle", Empirical Software Engineering, 2017. 171 projects; no consistent delayed-issue effect found.
- Kahneman, D., Knetsch, J. L. and Thaler, R. H., "Experimental Tests of the Endowment Effect and the Coase Theorem", Journal of Political Economy, 98(6), 1990.
- Brooks, F. P., The Mythical Man-Month, Addison-Wesley, 1975. The n(n-1)/2 communication-channels formula.
- The dollar figures at 30, 150, and 1,000 employees are illustrations from the author's experience, not published data.
Related Reading
- Enterprise AI Transformation: The Operator's Playbook - The 5-stage framework for moving from AI experiments to AI as operating model in regulated industries.
- Pre-Investment Due Diligence: A Builder's Eye View - The AI readiness assessment lens applied to pre-investment DD for VCs.
- The Operator-Consultant Method - The four-phase methodology behind every engagement.
- AI Readiness Assessment: A Practical Guide - The diagnostic frame for AI maturity.
May Mor
Interim and Fractional Product and Program Manager for tech companies. Full-stack developer, then product and program management, then the organizational work. M.Sc in AI, 10+ years across fintech, digital banking, and adtech (built the onboarding for an R&D team growing from 30 to 150 developers; credit and risk infrastructure for 500K+ loan requests). Full bio →