Depending on how long the store had been operating; it might actually be down to mostly not being a screw up.
“Don’t lose your scissors” is one of those problems that’s trivial enough that you can get away with just winging it most of the time, unless particularly disorganized; which makes it tempting to just wing it because what do you mean a formalized custody tracking system and unique serialization over a pair of scissors? At which point you are kind of screwed if you do manage to lose your scissors and don’t have a systematic procedure to fall back on.
It’s the problems that look at least as nasty as they are, and are at least somewhat nasty, that present less temptation to substitute ordinary competence for well thought out formal process.
That said, probably sucks to be them right now; even things that an auditor wouldn’t deem worth nitpicking under normal circumstances have a habit of looking real bad in a post-incident report.
