Human Factors, Safety Culture and Behaviour

Introduction and Context

Industrial safety is often described in terms of machines, guards, procedures and personal protective equipment. These controls are essential, but incidents also arise from how people perceive risk, make decisions, communicate, learn, respond to fatigue and work within organisational systems. Human factors is the discipline concerned with the interaction among people, technology, tasks, the physical environment and organisational arrangements.

A contemporary safety-management approach does not ask only, “Who made the mistake?” It also asks: Was the task understandable? Was the equipment reliable? Was the worker competent and adequately supervised? Were production pressures realistic? Could a warning be seen and understood? Did the organisation learn from earlier events? These questions shift attention from blame to prevention while preserving accountability for reckless or intentional violations.

For production managers, human factors are particularly important because production systems combine time pressure, shift work, maintenance activities, automation, contractors, changing priorities and interdependent teams. Safe performance therefore depends on both individual behaviour and the conditions created by management.

Learning Objectives

After studying this chapter, the learner should be able to:

1. Explain human error, violations, fatigue, competence and communication as safety issues.
2. Distinguish active failures from latent organisational conditions.
3. Evaluate safety culture and safety climate using appropriate evidence.
4. Apply safety leadership, worker participation and behavioural-safety principles.
5. Design effective training, toolbox talks, signage and PPE-management arrangements.
6. Analyse an incident without relying on simplistic blame.
7. Recommend practical methods for improving safety culture and measuring progress.

1. Human Factors in Industrial Work

Human performance is shaped by capability, motivation and the work system. A worker may know the correct procedure yet perform poorly because of inadequate lighting, confusing controls, excessive workload, poor supervision or a defective tool. Conversely, a well-designed system can make the safe action the easy and natural action.

Important human-factor domains include:

• Physical factors: noise, temperature, lighting, vibration, manual handling and workplace layout.
• Cognitive factors: attention, memory, perception, decision-making and situation awareness.
• Organisational factors: staffing, schedules, priorities, supervision, maintenance planning and communication.
• Social factors: teamwork, trust, peer influence, reporting behaviour and leadership.
• Individual factors: competence, health, experience, stress, fatigue and personal protective behaviour.

Human factors should not be interpreted as a claim that people are inherently unreliable. People adapt intelligently to imperfect systems. However, adaptations that appear efficient in the short term can create risk when they become normal practice.

Human Error and Unsafe Acts

Human error is a failure of an action or decision to achieve the intended outcome. It is not a single category. Common forms include:

• Slip: an action does not proceed as intended, such as pressing the wrong control.
• Lapse: a memory or attention failure, such as omitting a step.
• Mistake: the plan itself is inappropriate, often because of inadequate knowledge or incorrect assumptions.
• Violation: a deliberate deviation from a rule or procedure. Violations may be routine, situational or exceptional.

A useful distinction is between error and violation. An error is generally unintentional; a violation involves choosing not to follow a known requirement. Nevertheless, the organisational context matters. If a procedure is impossible to complete within the production schedule, repeated “violations” may indicate poor system design rather than simple worker misconduct.

A fair investigation asks four questions:

1. What action or decision occurred?
2. What immediate conditions made it possible?
3. What organisational conditions allowed those circumstances to persist?
4. What controls can prevent recurrence?

Active and Latent Conditions

An active failure has an immediate effect, such as bypassing an interlock or selecting the wrong isolation point. A latent condition is a hidden weakness created earlier, such as inadequate training, poor equipment design, unrealistic staffing or an ineffective audit system. Latent conditions may remain unnoticed until they combine with an active failure.

This layered view is often illustrated by the “Swiss cheese” model: defences such as design safeguards, procedures, supervision and PPE each have weaknesses or “holes.” An incident occurs when the weaknesses temporarily align. The model is valuable because it discourages the assumption that one person caused the entire event. It should not, however, be used mechanically; investigations must be supported by evidence.

2. Fatigue, Stress and Fitness for Work

Fatigue is a reduced capacity for physical or mental performance caused by insufficient sleep, extended wakefulness, workload, illness, monotonous work or disruption of normal biological rhythms. Fatigue can reduce vigilance, slow reaction time, impair memory and increase risk-taking.

Sources of Fatigue

Common industrial causes include:

• night and rotating shifts;
• long duty periods or excessive overtime;
• insufficient recovery time between shifts;
• physically demanding work;
• heat, noise and vibration;
• sleep disorders, illness or medication;
• repetitive monitoring and low stimulation; and
• personal stress or commuting demands.

Fatigue management should be treated as a system responsibility, not solely as a worker’s personal problem. Controls may include risk-based shift design, limits on overtime, planned breaks, task rotation, adequate staffing, hydration, suitable lighting and confidential fitness-for-work processes.

Fatigue risk is not eliminated by asking workers to “be careful.” Supervisors should identify high-risk periods, particularly early morning hours, shift changes, emergency call-outs and extended maintenance shutdowns. Workers should be able to report fatigue without automatic punishment, while organisations must control deliberate misuse of fatigue provisions.

Stress also affects safety. Excessive demand, low control, bullying, unclear roles and poor support can increase distraction and reduce reporting. A psychologically safe workplace permits workers to raise concerns, admit uncertainty and stop unsafe work without humiliation or retaliation.

3. Competence, Training and Learning

Competence is the demonstrated ability to apply knowledge, skills, judgement and attitudes to perform a task safely and effectively. Attendance at a course is not evidence of competence. Competence requires suitable instruction, supervised practice, assessment and periodic verification.

A practical competence system includes:

1. Job and risk analysis: identify tasks, hazards, critical controls and required decisions.
2. Competence criteria: specify observable performance standards.
3. Instruction: provide relevant technical and safety knowledge.
4. Practice: allow supervised performance in realistic conditions.
5. Assessment: use observation, questioning, simulation or practical demonstration.
6. Authorisation: permit independent work only when requirements are met.
7. Reassessment: review competence after incidents, process changes, long absence or a defined period.

Training should address both routine and non-routine work. A maintenance technician may be competent in normal isolation but inexperienced in simultaneous operations, confined spaces or unexpected stored energy. A production operator may know the standard start-up but not how to respond to a control-system alarm.

Training effectiveness should be evaluated at several levels: participant learning, workplace behaviour, quality of risk controls and safety outcomes. Accident frequency alone is a weak measure because incidents are relatively rare and may be influenced by exposure. Observation, assessment results, quality of permits, near-miss reports and worker feedback provide additional evidence.

4. Communication, Supervision and Teamwork

Communication is a safety control. It transfers information about hazards, changes, abnormal conditions, responsibilities and control status. Communication failures commonly occur during shift handovers, contractor coordination, maintenance isolation, emergency response and changes to production plans.

Effective Safety Communication

Effective communication is:

• clear and specific rather than vague;
• timely, especially before work begins;
• two-way, allowing confirmation and questions;
• appropriate to language, literacy and technical knowledge;
• documented where traceability is important; and
• verified at the point of work.

For critical instructions, use closed-loop communication: the sender gives the instruction, the receiver repeats or confirms it, and the sender verifies the meaning. This is especially important for isolation boundaries, crane signals, process changes and emergency commands.

A shift handover should cover plant status, abnormal conditions, work in progress, isolations, permits, temporary controls, alarms, outstanding defects and changes to risk. A simple handover form is useful, but it must support conversation rather than replace it.

Supervision

Supervision is more than monitoring output. A competent supervisor allocates work, confirms capability, checks critical controls, coaches workers, responds to concerns and intervenes when conditions change. Excessive supervision can undermine initiative, while insufficient supervision leaves inexperienced workers unsupported.

Supervisors influence safety culture through everyday behaviour. If a supervisor ignores an unguarded machine while criticising minor PPE omissions, workers receive a clear message about the organisation’s real priorities. Visible, consistent and respectful leadership is therefore more influential than slogans.

5. Safety Culture and Safety Climate

Safety culture refers to shared values, assumptions, beliefs and practices concerning risk and safety within an organisation. Safety climate is the more immediate perception employees have of how safety is prioritised at a particular time. Culture is deeper and more stable; climate can change quickly after a management change, serious incident or production crisis.

A positive safety culture is demonstrated when:

• leaders allocate resources for risk control;
• production and safety objectives are integrated rather than treated as opposites;
• workers report hazards and near misses without fear;
• lessons are implemented and communicated;
• procedures reflect actual work;
• supervisors challenge unsafe conditions consistently; and
• contractors and temporary workers receive equivalent protection.

A weak culture may exhibit blame, under-reporting, normalisation of deviations, excessive reliance on PPE, poor maintenance and a gap between written policy and actual practice.

Culture must be assessed through multiple sources. Useful evidence includes worker interviews, anonymous surveys, field observations, audit findings, quality of investigations, corrective-action closure and patterns in overtime or maintenance backlogs. A high number of reports does not necessarily mean poor safety; it may indicate trust and good reporting. Measures must therefore be interpreted in context.

Safety Culture Maturity

A simple maturity perspective identifies several stages:

Maturity models are useful for discussion but should not be treated as precise scientific rankings. An organisation may be mature in one department and reactive in another.

6. Safety Leadership and Worker Participation

Safety leadership is the process of influencing people and systems so that risk is controlled as a normal part of work. It includes setting expectations, providing resources, making decisions consistent with stated values and learning from experience.

Senior leaders establish priorities through strategy, investment and accountability. Middle managers translate those priorities into staffing, maintenance plans and operating decisions. Front-line supervisors make the culture visible through daily interactions. All three levels are necessary.

Effective leadership practices include:

• conducting meaningful workplace visits;
• asking about critical risks rather than only checking housekeeping;
• removing obstacles to safe work;
• recognising constructive reporting and intervention;
• investigating system causes;
• applying fair and consistent accountability; and
• communicating what changed as a result of worker input.

Worker participation improves hazard recognition because workers understand how tasks are actually performed. Participation may occur through safety committees, risk assessments, permit reviews, improvement teams, near-miss investigations and stop-work authority. Consultation must be genuine: asking for opinions without providing feedback produces cynicism.

A just culture distinguishes among human error, at-risk behaviour and reckless behaviour. Human error usually calls for consolation, redesign or coaching. At-risk behaviour calls for understanding incentives, correcting norms and reinforcing controls. Reckless behaviour, involving conscious disregard of substantial risk, may require disciplinary action. The categories must be applied fairly and with reliable evidence.

7. Behavioural Safety: Use and Limitations

Behavioural safety focuses on observable actions and the conditions that influence them. A typical process is to define critical behaviours, observe work, provide immediate feedback, analyse patterns and improve the work system.

For example, a lifting observation may examine whether workers inspect slings, remain outside the suspended-load zone, use agreed signals and stop when visibility is lost. The purpose is not to count faults for punishment but to identify barriers and strengthen safe performance.

A sound behavioural-safety programme should:

• involve workers in selecting behaviours;
• focus on high-risk controls, not trivial appearances;
• use observations for learning rather than surveillance;
• protect confidentiality where appropriate;
• address equipment and organisational causes; and
• avoid implying that injuries are solely caused by worker choices.

A limitation is behavioural reductionism: the belief that safety can be achieved by changing individual behaviour while leaving design, staffing and management systems unchanged. Behavioural observations complement, but do not replace, engineering controls, maintenance, competence management and legal compliance.

8. Toolbox Talks, Signage and PPE Management

Toolbox Talks

A toolbox talk is a short, task-focused discussion conducted before or during work. An effective talk links the immediate task to its hazards and controls. It should normally include the job scope, changes from normal conditions, critical energy sources, roles, emergency arrangements, PPE, stop-work criteria and questions from the team.

A useful structure is:

1. State the task and expected outcome.
2. Ask workers what could go wrong.
3. Confirm controls using the hierarchy of controls.
4. Allocate responsibilities and communication methods.
5. Check understanding and record attendance or actions.

Toolbox talks become ineffective when they are copied repeatedly, delivered as lectures or used to compensate for poor design. The facilitator should adapt the discussion to weather, staffing, simultaneous operations, equipment condition and recent learning.

Safety Signage

Signs support, but do not replace, physical controls and instruction. A good sign is visible, unambiguous, durable, located at the decision point and understandable to the intended audience. Sign systems commonly distinguish prohibition, warning, mandatory action, safe condition and fire or emergency equipment. Local legislation and recognised standards should govern colours, symbols and placement.

Too many signs create visual noise. Signs should be reviewed when equipment, process layout or risk changes. Symbols should be tested with the workforce, particularly where literacy or language differences exist.

PPE Management

PPE is the last line of defence in the hierarchy of controls. It is appropriate when risks remain after elimination, substitution, engineering and administrative controls have been considered. Effective PPE management includes hazard-based selection, compatibility, correct fit, user training, inspection, cleaning, storage, replacement and disposal.

Management should never treat PPE issuance as proof that risk is controlled. Respiratory protection, for example, may require medical evaluation, fit testing, maintenance and a written programme. Eye protection must be compatible with helmets, hearing protection and face shields. Damaged or contaminated PPE must be removed from service.

9. Measuring and Improving Safety Culture

No single indicator captures safety culture. A balanced measurement system combines leading and lagging indicators.

A basic incident rate can be expressed as:

Here, K is a chosen normalising constant, such as 200,000 or 1,000,000 hours, depending on the reporting convention. The numerator and denominator must use the same scope and period. The rate is useful for comparison only when definitions, exposure and reporting practices are consistent. It should not be used alone to judge safety performance.

Improvement follows a learning cycle:

1. identify hazards and critical controls;
2. assess risk and prioritise action;
3. implement controls using the hierarchy of controls;
4. verify whether controls work in practice;
5. learn from deviations, near misses and successes; and
6. revise the system when conditions change.

Incident investigations should reconstruct what happened, identify barriers that failed or were absent, examine work-as-imagined versus work-as-done, and assign actions to responsible owners with deadlines. Actions should be prioritised toward design and system improvements rather than relying only on retraining or reminders.

10. Applied Case: Maintenance Isolation Failure

Background

The following is an illustrative case. A packaging plant planned maintenance on a conveyor and its associated hydraulic unit. The work was scheduled during a short production stoppage. A maintenance technician, an operator and a contractor were involved.

Problem

The technician isolated the electrical supply but did not identify stored hydraulic pressure. During removal of a guard, the conveyor moved unexpectedly and caused a serious hand injury. The permit had been signed, and the operator had attended a toolbox talk.

Analysis

The immediate failure was incomplete isolation. Further examination found several contributing conditions:

• the isolation procedure listed electrical sources but not hydraulic energy;
• the equipment drawing was outdated;
• the contractor had not received site-specific isolation training;
• the supervisor was managing simultaneous production tasks;
• the permit form encouraged signatures but did not require energy-by-energy verification;
• a previous near miss involving residual pressure had not been communicated; and
• the shutdown window created pressure to start quickly.

The event was therefore not adequately explained by saying that the technician “forgot.” A lapse occurred, but the system made the lapse more likely and did not provide a strong recovery barrier.

Approach and Solution

The plant formed a worker-management review team. It mapped all energy sources, updated drawings, installed clearly labelled isolation points, introduced a try-and-test verification step, revised the permit, and required a competent person to confirm zero energy before guard removal. Contractors received site induction and task-specific verification. Supervisors were given authority to extend the shutdown when isolation could not be confirmed.

The team also created a short pre-maintenance discussion requiring workers to identify electrical, hydraulic, pneumatic, gravitational and thermal energy. The previous near miss and the corrective actions were shared across shifts.

Outcome

Follow-up observations found improved completion of isolation checks and more frequent reporting of unclear energy boundaries. The plant did not treat the absence of a subsequent injury as proof of success; it verified control performance through field observations, permit reviews and worker interviews.

Learning Points

1. A signed permit is not equivalent to a safe isolation.
2. Competence must be demonstrated in the actual task and site context.
3. Time pressure is an organisational risk factor.
4. Near misses are valuable only when lessons reach people who perform similar work.
5. Engineering and verification controls are stronger than reminders alone.

11. Governance, Ethics and Contemporary Developments

Safety decisions involve ethical duties to prevent foreseeable harm, respect worker dignity and provide truthful information. Organisations should protect workers who report concerns, maintain confidentiality where appropriate and avoid manipulating statistics. Contractor workers, agency workers and new employees should not receive lower standards of protection.

Digital technologies can support human performance. Mobile permits, electronic shift handovers, wearable fatigue alerts, computer-based training, digital maintenance records and AI-assisted video analytics may improve visibility and consistency. However, technology introduces risks: surveillance may damage trust; algorithms may misclassify behaviour; personal data may be misused; and automated alerts may create alarm fatigue. Human review, transparent governance, cybersecurity, data minimisation and worker consultation are essential.

Automation also changes the nature of error. Operators may become complacent during long periods of monitoring, then face high cognitive demand during abnormal events. Designers and managers should consider alarm quality, manual fallback, training in degraded modes and the allocation of responsibility between people and automated systems.

Challenges and Limitations

Human-factor programmes can fail when they become slogans, compliance exercises or blame disguised as observation. Culture surveys may be affected by fear, response bias or temporary events. Incident rates can improve because reporting decreases rather than because risk decreases. Training can be overused when the real problem is poor design. Behavioural programmes can focus on visible PPE compliance while neglecting high-consequence energy hazards.

The remedy is triangulation: combine interviews, observations, records, performance data and worker participation. Apply the hierarchy of controls, distinguish evidence from assumptions, and review whether corrective actions changed the conditions that produced risk.

Chapter Summary

Human performance is shaped by the interaction of people, equipment, tasks and organisational conditions. Errors include slips, lapses and mistakes, while violations are deliberate deviations whose causes must still be examined. Active failures may be enabled by latent conditions such as poor design, inadequate training, production pressure or weak supervision.

Fatigue, stress and fitness for work affect attention, judgement and reaction. Competence requires demonstrated performance, not merely attendance at training. Effective communication is clear, timely, two-way and verified, particularly during handovers, permits and isolation. Safety culture concerns shared values and practices; safety climate reflects current perceptions of organisational priorities.

Safety leadership requires consistent decisions, resources, fair accountability and visible learning. Worker participation strengthens hazard recognition and ownership. Behavioural safety can improve observable critical actions, but it must not replace engineering and organisational controls. Toolbox talks, signage and PPE are useful supporting controls when they are task-specific, understandable and properly managed.

A balanced measurement system uses leading, lagging and contextual indicators. Incident investigations should identify failed barriers and system conditions rather than assign simplistic blame. Ethical governance requires truthful reporting, protection from retaliation, equitable contractor treatment and responsible use of digital technologies.

Key Terms

Human factors: The study of interactions among people, technology, tasks, environment and organisation.

Human error: An unintentional failure of an action or decision to achieve its intended outcome.

Slip: An incorrect execution of an otherwise intended action.

Lapse: A memory or attention failure that causes an omission.

Mistake: An inappropriate plan, judgement or decision.

Violation: A deliberate departure from a rule or procedure.

Active failure: An unsafe act with an immediate effect.

Latent condition: A hidden system weakness that may contribute to an incident.

Fatigue: Reduced physical or mental capacity arising from insufficient recovery or excessive demand.

Competence: Demonstrated ability to apply knowledge, skill and judgement safely.

Safety culture: Shared values, assumptions and practices concerning safety.

Safety climate: Workers’ current perceptions of how safety is prioritised.

Safety leadership: Influence used to establish and maintain effective risk control.

Worker participation: Involvement of workers in identifying risks and improving controls.

Behavioural safety: A method that uses observation and feedback to improve critical behaviours.

Toolbox talk: A brief, task-focused safety discussion at or near the workplace.

PPE: Personal protective equipment used to control residual exposure.

Closed-loop communication: Communication in which a message is repeated or confirmed and its meaning verified.

Just culture: An approach that distinguishes human error, at-risk behaviour and reckless behaviour fairly.

Review Questions

5 Short Answer Questions

1. Distinguish a slip, lapse, mistake and violation.
2. What is the difference between an active failure and a latent condition?
3. Why is attendance at training insufficient evidence of competence?
4. State four characteristics of effective safety communication.
5. Why should PPE be regarded as the last line of defence?

5 Long Answer Questions

1. Explain how fatigue affects industrial safety and describe a system-based fatigue-management programme.
2. Discuss the relationship between safety culture and safety climate, including methods for assessing each.
3. Explain the role of supervisors and senior managers in establishing a positive safety culture.
4. Describe how a behavioural-safety programme can be designed without becoming a blame-based system.
5. Discuss the strengths and limitations of leading and lagging safety indicators.

3 Analytical / Application Questions

1. A plant has frequent minor hand injuries despite repeated PPE training. Analyse possible human, equipment and organisational causes and recommend controls using the hierarchy of controls.
2. During a night shift, an experienced operator bypasses a difficult-to-reset alarm because production is behind schedule. Analyse the event using human error, fatigue, supervision and organisational-pressure concepts.
3. Design a toolbox talk and verification process for maintenance on equipment containing electrical, pneumatic and gravitational energy. Explain how you would evaluate whether the process is effective.

Multiple Choice Questions with Answers

Question 1

Which statement best describes a latent condition?

A. An unsafe act that immediately causes harm

B. A hidden organisational or design weakness that can enable an incident

C. An intentional violation by a worker

D. A physical injury reported after an incident

Correct Answer: B. A hidden organisational or design weakness that can enable an incident

Question 2

Which example is a lapse?

A. Pressing the wrong control while intending to press another

B. Choosing an unsuitable isolation strategy because of incorrect knowledge

C. Forgetting to complete a required isolation step

D. Deliberately bypassing a guard to save time

Correct Answer: C. Forgetting to complete a required isolation step

Question 3

What is the strongest reason for using closed-loop communication during critical work?

A. It eliminates the need for written records

B. It confirms that the message was received and understood

C. It allows supervisors to avoid direct observation

D. It reduces the number of people involved in a task

Correct Answer: B. It confirms that the message was received and understood

Question 4

Which practice provides the best evidence of competence?

A. Signing an attendance sheet at a lecture

B. Reading a procedure independently

C. Demonstrating the task safely under realistic conditions

D. Having long experience in an unrelated task

Correct Answer: C. Demonstrating the task safely under realistic conditions

Question 5

Which is a leading safety indicator?

A. Number of injuries that have already occurred

B. Number of completed critical-control verifications

C. Total compensation paid for incidents

D. Number of days lost after an injury

Correct Answer: B. Number of completed critical-control verifications

Question 6

Why can a high number of near-miss reports indicate a positive safety climate?

A. It proves that no hazards exist

B. It may show that workers trust the reporting system

C. It means production targets are being exceeded

D. It demonstrates that PPE is unnecessary

Correct Answer: B. It may show that workers trust the reporting system

Question 7

Which control should generally be preferred over relying only on PPE?

A. A warning poster

B. A verbal reminder

C. An engineering safeguard that isolates the hazard

D. A disciplinary notice

Correct Answer: C. An engineering safeguard that isolates the hazard

Question 8

What is the main weakness of behavioural safety when applied narrowly?

A. It cannot involve workers

B. It may focus on individual actions while ignoring system and design causes

C. It prevents observation of work

D. It makes engineering controls illegal

Correct Answer: B. It may focus on individual actions while ignoring system and design causes

Question 9

In the illustrative maintenance case, why was the signed permit inadequate?

A. Permits are never useful for maintenance

B. The permit did not ensure that all energy sources had been identified and verified

C. The contractor had no technical knowledge at all

D. The conveyor had no electrical supply

Correct Answer: B. The permit did not ensure that all energy sources had been identified and verified

Question 10

In the incident-rate formula, why is a normalising constant used?

A. To remove all uncertainty from the data

B. To compare incident experience across different amounts of exposure

C. To convert injuries into financial costs

D. To prove that culture is improving

Correct Answer: B. To compare incident experience across different amounts of exposure