We have robust checking procedures here involving setter, scrutineer, external examiner, and final sign off, but unfortunately even this did not prevent the mistake on this occasion.
Usually, one examiner is an academic from the candidate's own university department (but not one of the candidate's supervisors) and the other is an external examiner from a different university.
