Human Factors, Safety Culture, and Organisational Risk

Introduction

Fire safety is often described in terms of physical hazards, ignition sources, fire protection systems and emergency procedures. These are essential, but they do not operate independently of people and organisations. A correctly designed fire alarm may fail to protect occupants if it is isolated, poorly maintained or misunderstood. A safe work procedure may be ineffective if workers are not competent, are fatigued, or feel pressured to complete production targets. A fire door may be technically sound yet routinely wedged open by staff.

Human factors and organisational risk analysis examine how people interact with equipment, tasks, procedures, information and management systems. The purpose is not to blame individuals. Rather, it is to identify conditions that make error more likely and to strengthen the barriers that prevent a small failure from becoming a major fire event.

In this chapter, human factors means the physical, psychological, social and organisational characteristics that influence human performance and safety. Organisational risk refers to risk created or intensified by policies, leadership decisions, resource allocation, communication arrangements, contractor management and organisational change.

Learning Objectives

By the end of this chapter, the learner should be able to:

1. Explain the relationship between human performance, safety culture and fire risk.
2. Evaluate competence, behaviour, fatigue, communication and procedural compliance.
3. Identify organisational weaknesses that can defeat fire prevention and protection barriers.
4. Assess contractor control, management of change and maintenance culture.
5. Apply structured methods to investigate human and organisational contributors to fire events.
6. Recommend practical, proportionate and ethically sound improvements.

1. Human Factors in Fire Safety

Human factors include everything that affects how a person performs a task. They may be grouped into four interacting categories:

Human error is not a single condition. It may involve an unintentional action, such as pressing the wrong control, or an intentional deviation, such as bypassing a permit requirement. Intentional deviations are not necessarily reckless. Workers may adapt procedures because the written process is impractical, equipment is unavailable, or production expectations conflict with safety requirements.

A useful distinction is between:

• Slips and lapses: errors in execution or memory, such as selecting the wrong switch or forgetting to close a fire door.
• Mistakes: errors in planning or judgment, such as believing that a combustible liquid is safe to store near a heat source.
• Violations: deliberate departures from a rule or procedure, ranging from routine shortcuts to serious disregard of controls.

This classification helps investigators select suitable controls. Training may help with a knowledge-based mistake, but it is unlikely to solve a violation caused by impossible production targets or poor equipment design.

2. Safety Culture and Safety Climate

Safety culture is the shared pattern of values, beliefs, expectations and practices through which an organisation manages safety. It is expressed through decisions and behaviour, not through slogans alone. Safety climate is the current perception of employees about how seriously safety is treated. Climate can be measured through surveys and interviews; culture is broader and develops over time.

A positive fire-safety culture normally includes:

• visible leadership commitment;
• adequate staffing, equipment and maintenance resources;
• open reporting of defects and near misses;
• fair treatment after mistakes;
• consistent enforcement of critical controls;
• learning from incidents and weak signals;
• worker participation in risk assessment;
• respect for contractors and temporary workers;
• willingness to stop unsafe work.

A poor culture may be revealed by statements such as “we have always done it this way,” “the alarm only causes interruptions,” or “maintenance can repair it after the inspection.” These statements indicate normalisation of deviance: an unsafe condition becomes accepted because it has not yet caused a serious consequence.

The hierarchy of organisational influence

Fire events can be understood through several levels of influence:

1. Government and regulatory context: laws, codes, inspection expectations and economic pressures.
2. Organisational decisions: policy, budgeting, staffing, design and priorities.
3. Supervisory conditions: work planning, permit control, shift handover and monitoring.
4. Preconditions: fatigue, poor communication, inadequate tools or confusing layouts.
5. Unsafe acts: errors, omissions or violations.
6. Defences: alarms, sprinklers, compartmentation, emergency response and evacuation.

This layered view prevents investigators from stopping at “operator error.” The operator may be the final visible link in a chain of earlier decisions.

3. Competence, Training and Behaviour

Competence is more than attendance at a training session. It combines knowledge, practical skill, judgment and the ability to apply these reliably under real conditions. A competent fire watch, for example, should understand ignition sources, combustible materials, fire extinguisher limitations, alarm arrangements, emergency communication and stop-work authority.

A competence assurance system should include:

1. Role definition: identify the fire-safety tasks and responsibilities attached to each job.
2. Competence criteria: specify the knowledge and practical performance required.
3. Initial assessment: verify capability before independent work.
4. Supervised practice: provide coaching in realistic conditions.
5. Refresher training: update knowledge after time, incidents or changes.
6. Reassessment: check competence periodically and after poor performance.
7. Records: maintain evidence of training, assessment and authorisation.

Training is ineffective when it is generic, delivered in an unfamiliar language, disconnected from the workplace or assessed only by attendance. Practical exercises should include alarm activation, extinguisher selection, evacuation routes, assembly arrangements and reporting of defects.

Behaviour is shaped by consequences. If a worker is praised for meeting output targets while ignoring a blocked escape route, the organisation has communicated that production is more important than safety. Conversely, supervisors who stop work when a hot-work permit is incomplete create a strong behavioural signal.

A just culture distinguishes between human error, at-risk behaviour and reckless behaviour. Human error requires system improvement and coaching. At-risk behaviour requires removal of incentives and better supervision. Reckless behaviour may require disciplinary action. Treating all three identically discourages reporting and conceals system weaknesses.

4. Fatigue, Workload and Fitness for Duty

Fatigue reduces vigilance, working memory, reaction speed, decision quality and the ability to detect abnormal conditions. It is especially significant during night shifts, extended shifts, rapid rotation between shifts and emergency response. Fatigue can contribute to missed alarms, incomplete inspections, incorrect isolation and poor evacuation decisions.

Important fatigue contributors include:

• insufficient sleep or disrupted sleep;
• long duty periods and overtime;
• night work and early starts;
• monotonous monitoring tasks;
• high heat, noise or physical effort;
• illness, medication or personal stress;
• commuting after a long shift.

Fatigue risk management should combine organisational and individual measures. Organisational measures include realistic staffing, controlled overtime, suitable shift rotation, rest breaks, task rotation and supervision during high-risk periods. Individuals should report when they are not fit for safety-critical work, but the organisation must ensure that reporting fatigue does not result in unfair punishment.

Fatigue controls should be risk-based. A worker inspecting a sprinkler pump room at night may require different controls from an office employee working late. Critical tasks should be scheduled when alertness is highest where practicable, and additional verification should be used during periods of predictable low alertness.

5. Communication and Information Management

Fire safety depends on accurate information moving between the right people at the right time. Communication failures may occur during routine operations, shift handover, maintenance, emergency response or organisational change.

Effective communication has five characteristics:

• Accuracy: information reflects the actual condition.
• Completeness: relevant hazards, impairments and limitations are included.
• Clarity: language and symbols are understandable to the recipient.
• Timeliness: information arrives before action is required.
• Confirmation: the receiver demonstrates that the message was understood.

A shift handover should identify fire protection impairments, hot-work activities, isolation of alarms or suppression systems, unusual storage conditions, outstanding defects and changes in occupancy. “No issues” is not an adequate handover when the inspection has not been completed.

Communication may be written, verbal, visual or digital. Safety-critical messages should not depend solely on informal conversation. Permit systems, impairment tags, control-room logs and formal handover records provide traceability. However, paperwork is not a substitute for direct communication when an immediate hazard exists.

During an emergency, communication should identify the nature and location of the fire, people at risk, actions already taken, access restrictions and whether emergency systems are operating. Messages must be concise and use agreed terminology. Multilingual workplaces may require translated procedures, pictograms and competent interpreters.

6. Contractor and Interface Control

Contractors may introduce unfamiliar equipment, materials, work practices and hazards. Common fire risks include hot work, temporary electrical systems, combustible waste, modification of fire compartments, impairment of alarms and poor housekeeping.

Contractor control is a lifecycle process:

1. Prequalification: assess competence, experience, insurance, safety performance and supervision.
2. Scope definition: identify fire hazards, interfaces and responsibilities before work begins.
3. Induction: explain alarms, escape routes, permits, emergency contacts and site rules.
4. Coordination: integrate contractor activities with operations, maintenance and other contractors.
5. Permit control: authorise hot work, confined-space work, electrical isolation and other high-risk activities.
6. Monitoring: inspect performance and verify controls in the field.
7. Close-out: remove temporary materials, restore fire systems and record outstanding actions.

Responsibility cannot be transferred simply by writing “the contractor is responsible” in a contract. The site operator retains responsibilities for coordination, emergency arrangements and control of conditions under its authority. Interfaces must be explicit: who isolates the alarm, who verifies restoration, who controls combustible waste and who authorises restart?

7. Management of Change

Change is a frequent source of organisational risk. A new process, chemical, building layout, production rate, occupancy pattern, contractor, shift system or software control can alter the fire-risk profile.

Management of change (MOC) is a structured process for identifying and controlling these effects. A practical MOC review asks:

• What is changing, and why?
• Which fire hazards or ignition sources will be introduced?
• Will existing detection, suppression, compartmentation or evacuation arrangements remain adequate?
• Are procedures, drawings, training and emergency plans affected?
• Are permits, maintenance schedules and inspection frequencies still suitable?
• Who approves the change and who verifies completion?
• What temporary risks exist during implementation?

A change should not be considered complete when equipment is installed. It is complete only when safeguards are available, documentation is updated, personnel are competent and the residual risk is accepted by an authorised person.

Temporary changes deserve special attention. Examples include disabling a fire alarm during construction, storing materials in a corridor, using temporary heaters or operating with a damaged fire door. Temporary conditions frequently become permanent through inattention. They should have an owner, expiry date, compensating controls and regular review.

8. Maintenance Culture and Fire Protection Reliability

Maintenance culture describes the attitudes and practices governing the inspection, testing, repair and restoration of equipment. Fire protection systems are safety barriers; their failure may remain invisible until a fire occurs.

A sound maintenance system includes:

• risk-based preventive maintenance;
• legally required inspection and testing;
• competent technicians;
• defect prioritisation;
• controlled isolation and impairment procedures;
• timely repair and verification;
• accurate records;
• management review of overdue work;
• learning from repeated failures.

A green status indicator or completed checklist does not prove that a system will perform under fire conditions. Maintenance quality should be verified through functional tests, sampling, independent inspection and review of trends. Repeated defects in the same pump, detector or emergency light may indicate a design, procurement or management problem rather than isolated technician error.

When a protection system is unavailable, the organisation should assess the affected risk and apply compensating measures, such as fire watch, restrictions on hot work, reduced occupancy, temporary extinguishing equipment or suspension of hazardous operations. The impairment should be communicated to affected personnel and formally cleared after restoration and testing.

9. Procedural Compliance and Work-as-Done

Procedures describe intended work, while work-as-done is what actually occurs. The difference may arise because procedures are unclear, outdated, too complex, unavailable, inconsistent with equipment or incompatible with operational pressures.

Procedural compliance should therefore be assessed through observation and discussion, not document review alone. Useful questions include:

• Can workers locate and understand the procedure?
• Does it reflect the actual equipment and sequence?
• Are decision points and stop-work criteria clear?
• What happens when conditions differ from the procedure?
• Are deviations authorised and recorded?
• Do supervisors reinforce the critical steps?

Critical fire controls should be few, clear and verifiable. For example, a hot-work procedure may require removal or protection of combustibles, isolation of nearby detectors where justified, suitable extinguishing equipment, a fire watch during and after work, and formal area release. Each control needs an accountable person and a verification method.

Audits should avoid becoming a search for paperwork alone. A completed form can coexist with unsafe conditions. Field verification, worker interviews, photographs, equipment tests and trend analysis provide stronger evidence.

10. Organisational Weaknesses and Barrier Analysis

A barrier is a measure intended to prevent an initiating event or limit its consequences. Examples include material controls, separation, permits, detection, suppression, emergency communication and evacuation management.

Barrier analysis asks:

1. What initiating event could occur?
2. Which preventive barriers should stop it?
3. Which mitigating barriers should limit harm?
4. Who owns each barrier?
5. How is barrier availability verified?
6. What organisational conditions could weaken it?

A useful semi-quantitative expression is:

where R is a risk score, L is a likelihood category and C is a consequence category. This is not a universal physical law. It is a prioritisation tool used only when the organisation defines consistent categories and applies them transparently. The result has no meaningful unit, and scores from different risk matrices should not be compared without understanding their definitions.

For example, if a site assigns a likelihood score of 3 and a consequence score of 4, then:

The score of 12 does not predict that a fire will occur or that twelve people will be harmed. It indicates a priority according to that site's matrix. Professional judgment, legal requirements and the adequacy of critical barriers must also be considered.

The Swiss-cheese model illustrates how multiple weaknesses can align: inadequate training, a defective detector, poor handover and blocked access may combine to allow a small fire to grow. No single failure necessarily causes the event; the loss of several layers creates the pathway.

11. Investigating Human and Organisational Contributions

An investigation should establish what happened, why it happened and how recurrence will be prevented. It should preserve evidence and avoid premature blame.

A disciplined investigation normally includes:

1. Immediate control of hazards and care for affected people.
2. Preservation of the scene, records, alarms, access logs and equipment.
3. Development of a factual timeline.
4. Identification of failed or absent barriers.
5. Interviews conducted respectfully and separately where appropriate.
6. Examination of procedures, training, maintenance, staffing and communications.
7. Identification of immediate, underlying and root organisational causes.
8. Development of corrective actions with owners and due dates.
9. Verification that actions are effective.

The “five whys” method can help explore causation, but it should not force every event into one linear cause. Fire events often have interacting causes. Fault-tree, event-tree, barrier and timeline methods may provide a more realistic analysis.

Corrective actions should follow the hierarchy of controls. Design changes, automatic protection and physical separation are generally more reliable than warnings and training alone. If training is recommended, the investigation should explain why training is capable of controlling the identified failure.

12. Illustrative Case Study: Hot Work in a Warehouse

Background

A maintenance contractor was repairing a steel frame above a warehouse storage area. The work required grinding and intermittent welding. The warehouse contained cardboard packaging and plastic products. The site had a hot-work permit system and an automatic detection system.

Problem

During the afternoon shift, sparks ignited concealed combustible dust and packaging fragments. A smoke detector in the affected zone had been isolated because it was producing false alarms during construction. The isolation had not been entered clearly in the shift handover. The contractor’s fire watch left the area briefly to obtain equipment. The fire was discovered by a warehouse worker after smoke spread.

Analysis

The immediate ignition source was hot work, but the organisational analysis identified several contributors:

• The permit did not require confirmation that isolated detectors had compensating controls.
• The contractor induction was brief and did not explain the isolation procedure.
• The fire watch role was not defined during breaks.
• Combustibles had not been removed from the elevated work area.
• The impairment register was incomplete.
• Supervisors faced pressure to complete the repair before the next shipment.
• The post-work fire watch period was not specified clearly.

The event was therefore not adequately explained by saying that the fire watch “failed.” The system allowed work to continue with weakened detection and incomplete control of combustible materials.

Approach and solution

The organisation suspended hot work, restored detection, and inspected the area. It revised the permit to require a documented impairment assessment, physical protection of combustibles, named fire-watch relief, and a defined post-work monitoring period. Contractors received a practical induction and supervisors were authorised to stop work. The impairment register was integrated with the control-room handover. A later audit used field observations rather than permit records alone.

Outcome

The revised controls reduced ambiguity about responsibility and made critical barriers visible. The site also introduced a rule that work affecting fire protection systems required approval from the responsible fire-safety coordinator. The principal learning was that contractor competence, maintenance status, communication and production pressure must be analysed together.

13. Governance, Ethics and Contemporary Practice

Fire safety has ethical as well as technical dimensions. Organisations have duties to protect employees, contractors, visitors, emergency responders and members of the public. Ethical practice requires honest reporting of impairments, fair treatment of workers who raise concerns and avoidance of misleading compliance claims.

Governance arrangements should define accountability at board, senior management, site management and supervisory levels. Indicators should include both outcomes, such as fires and injuries, and leading measures, such as overdue critical maintenance, repeated permit deviations, alarm impairments and unresolved near misses.

Digital maintenance systems, mobile permit applications, wearable devices and analytics can improve visibility. Artificial intelligence may help identify patterns in work orders, alarm activations or inspection findings. However, technology does not remove the need for competent judgment. Poor data, automation bias, privacy concerns and cybersecurity weaknesses can create new risks. Digital alerts should have clear ownership and escalation rules.

Contemporary organisations should also consider ageing infrastructure, supply-chain disruption, hybrid work, extreme weather, energy-storage systems and increasingly complex contractor networks. These developments can change occupancy, maintenance access, ignition sources and emergency response requirements.

14. Practical Evaluation Framework

A diploma-level fire-risk assessor can evaluate human and organisational factors by using the following sequence:

1. Understand the operation: processes, occupancy, shifts, materials and contractors.
2. Map critical fire barriers: prevention, detection, suppression, containment and evacuation.
3. Examine competence: roles, authorisations, practical assessment and language needs.
4. Assess work conditions: workload, fatigue, access, lighting, noise and time pressure.
5. Review communication: handovers, alarms, signage, permits and escalation.
6. Check contractor interfaces: responsibilities, induction, supervision and close-out.
7. Review change: recent modifications, temporary arrangements and residual risk.
8. Evaluate maintenance culture: impairments, overdue tasks, testing and restoration.
9. Compare procedure with practice: observe work and interview personnel.
10. Prioritise actions: strengthen weak barriers, assign owners and verify effectiveness.

The assessor should record evidence, not merely opinions. Evidence may include observations, interviews, records, photographs, test results, training assessments and trend data. Findings should be proportionate to risk and linked to specific controls.

Chapter Summary

Human and organisational factors strongly influence whether fire hazards are controlled and whether fire protection barriers function when needed. Competence depends on knowledge, practical ability, judgment and verification. Behaviour is shaped by leadership, incentives and the practicality of procedures. Fatigue, workload and poor communication can make errors more likely, particularly during night work, emergencies and shift handovers.

Contractor control requires prequalification, clear interfaces, induction, permit management, supervision and close-out. Management of change ensures that new processes, equipment, occupancy patterns and temporary conditions do not invalidate existing fire controls. A positive maintenance culture treats alarms, suppression systems, compartmentation and emergency equipment as critical barriers rather than administrative items.

Effective investigation looks beyond the final unsafe act to supervisory conditions, organisational decisions and failed defences. Semi-quantitative risk scores can support prioritisation, but they do not replace professional judgment or legal duties. The most reliable improvement strategy combines strong design and physical barriers with competent people, clear communication, fair accountability, effective maintenance and continuous learning.

Key Terms

Human factors: Physical, psychological, social and organisational influences on human performance.

Organisational risk: Risk created or increased by organisational decisions, systems and conditions.

Safety culture: Shared values, beliefs and practices concerning safety.

Safety climate: Employees’ current perceptions of the organisation’s safety priorities.

Competence: The knowledge, skills, judgment and ability required to perform safely.

Human error: An unintentional failure of action, memory or decision.

Violation: A deliberate departure from an established rule or procedure.

Fatigue: Reduced physical or mental performance caused by insufficient recovery or demanding conditions.

Communication failure: Inaccurate, incomplete, unclear, late or misunderstood information.

Contractor control: Processes used to manage external organisations and their work.

Management of change: A structured method for assessing and controlling the effects of change.

Maintenance culture: Organisational attitudes and practices governing equipment upkeep and reliability.

Safety barrier: A control intended to prevent an event or reduce its consequences.

Impairment: A condition in which a safety system or barrier is unavailable or degraded.

Normalisation of deviance: Acceptance of unsafe conditions because they have not yet caused serious harm.

Just culture: An approach that distinguishes human error, at-risk behaviour and reckless conduct.

Work-as-imagined: How work is expected to occur according to plans and procedures.

Work-as-done: How work actually occurs under real operating conditions.

Near miss: An event that could have caused harm or loss but did not.

Residual risk: Risk remaining after controls have been implemented.

Review Questions

Short Answer Questions

1. Distinguish between a slip, a mistake and a violation.
2. What is the difference between safety culture and safety climate?
3. List four factors that may contribute to fatigue.
4. Why is contractor responsibility not completely transferred by a contract?
5. State two purposes of management of change.

Long Answer Questions

1. Explain how organisational decisions can weaken fire-safety barriers, using suitable examples.
2. Describe a competence assurance system for personnel who conduct hot-work activities.
3. Discuss the relationship between maintenance culture, system impairment and fire consequences.
4. Explain how communication should be managed during shift handover and emergency response.
5. Compare human error, at-risk behaviour and reckless behaviour within a just-culture approach.

Analytical / Application Questions

1. A factory repeatedly finds fire doors wedged open despite training and warning signs. Analyse the likely human and organisational causes and recommend stronger controls.
2. A contractor must work near an isolated fire detection zone during a night shift. Develop a practical control plan covering competence, permit control, fatigue, communication, fire watch and restoration.
3. An incident investigation concludes that an operator failed to inspect a blocked escape route. Identify additional evidence and organisational questions required before accepting operator error as the main cause.

Multiple Choice Questions with Answers

Question 1

Which statement best describes human factors in fire safety?

A. Only the physical design of firefighting equipment

B. The physical, psychological, social and organisational influences on performance

C. The financial cost of fire protection systems

D. The number of fire extinguishers installed

Correct Answer: B. The physical, psychological, social and organisational influences on performance

Question 2

What is a characteristic of a positive safety culture?

A. Near misses are concealed to protect performance statistics

B. Production targets always override safety controls

C. Workers can report hazards and management acts on the information

D. Procedures are enforced only after an accident

Correct Answer: C. Workers can report hazards and management acts on the information

Question 3

Which example is a lapse?

A. Choosing an unsuitable storage method after considering the options

B. Deliberately bypassing a permit requirement

C. Forgetting to close a fire door after passing through it

D. Rejecting a procedure because it is impractical

Correct Answer: C. Forgetting to close a fire door after passing through it

Question 4

Which control is most directly associated with fatigue risk management?

A. Increasing overtime without review

B. Providing realistic staffing and suitable rest periods

C. Removing all emergency drills

D. Replacing practical assessment with attendance records

Correct Answer: B. Providing realistic staffing and suitable rest periods

Question 5

What should a fire-safety shift handover include?

A. Only the names of employees on duty

B. Only completed routine paperwork

C. Fire-system impairments, hazardous work and outstanding defects

D. A general statement that operations are normal

Correct Answer: C. Fire-system impairments, hazardous work and outstanding defects

Question 6

Which is an essential stage of contractor control?

A. Allowing contractors to create their own emergency arrangements without coordination

B. Prequalification, induction, monitoring and close-out

C. Transferring every legal and operational responsibility to the contractor

D. Avoiding permits to reduce administrative delays

Correct Answer: B. Prequalification, induction, monitoring and close-out

Question 7

What is the principal purpose of management of change?

A. To prevent all organisational change

B. To assess whether changes alter hazards, controls or competence needs

C. To replace maintenance inspections

D. To reduce the number of emergency procedures

Correct Answer: B. To assess whether changes alter hazards, controls or competence needs

Question 8

A risk matrix assigns likelihood L = 3 and consequence C = 4. Using R = L × C, what is the risk score?

A. 7

B. 12

C. 16

D. 34

Correct Answer: B. 12

Question 9

Why should an investigation look beyond operator error?

A. Operators can never contribute to incidents

B. The final error may have been shaped by training, design, supervision or organisational decisions

C. Physical fire evidence is never useful

D. All incidents are caused by equipment failure

Correct Answer: B. The final error may have been shaped by training, design, supervision or organisational decisions

Question 10

Which action is generally a stronger corrective measure than a warning sign alone?

A. Redesigning the process to physically separate combustibles from ignition sources

B. Increasing the length of a written warning

C. Asking workers to remember the hazard

D. Issuing a verbal reminder after each shift

Correct Answer: A. Redesigning the process to physically separate combustibles from ignition sources