Contemporary Safety Glossary

Modern concepts for operational learning, human performance, resilience, critical risk, and worker wellbeing.

Important Distinctions

Do not confuseDistinction
Psychological safety and psychological health and safetyPsychological safety concerns interpersonal risk-taking. Psychological health and safety concerns the wider design and management of work and psychosocial hazards.
Verification and validationValidation establishes that a control is capable and suitable. Verification confirms that it is currently present and effective.
Safety culture and safety climateCulture concerns deeper shared assumptions and patterns. Climate is a more immediate, measurable perception of priorities and practices.
Error and misconductError is unintentional. Misconduct involves a choice and must still be assessed in context and addressed fairly.
Resilience and copingResilience is a system capability. It should not be used to normalize overload or transfer responsibility for poor work design to individuals.
Safety-II and abandoning Safety-ISafety-II adds learning from successful normal work. It does not remove the need for compliance, hazard control, or event response.

Glossary

4

4Ds: Dumb, Dangerous, Difficult, or Different

LEARNING TEAMS PRACTICE
A conversational framework for asking workers what about the work does not make sense, creates or could create danger, is hard to do reliably, or differs from the normal plan or method.
Application note: Use it to surface weak signals and operational knowledge during field conversations. It is not a compliance inspection checklist.

4Ls: Liked, Lacked, Longed For, or Learned

OPERATIONAL-LEARNING PRACTICE
A structured reflection on what people valued, what was missing, what they wished had been available, and what they learned during a task, shift, or project.
Application note: Use after work to capture both strengths and improvement needs, not only deviations or failures.

A

Adaptive capacity

RESILIENCE ENGINEERING
The resources and abilities that allow people and systems to adjust effectively when conditions vary, plans no longer fit, or surprises occur.
Application note: Capacity may include time, staffing, competence, equipment, information, authority, coordination, and usable procedures.

After-action review

OPERATIONAL LEARNING
A structured discussion after an activity that compares what was expected with what occurred, explores why, and identifies what should be sustained or changed.
Application note: Keep the review curious and evidence-based. Do not turn it into a disguised search for fault.

As low as reasonably practicable (ALARP)

RISK MANAGEMENT
A principle under which risk is reduced until further reduction would be grossly disproportionate to the additional benefit, subject to applicable law.
Application note: ALARP is not permission to accept avoidable risk. Its legal meaning varies by jurisdiction and should not be imported casually into Canadian requirements.

B

Behavior-Based Safety (BBS)

TRADITIONAL SAFETY APPROACH
An approach that focuses on observing and modifying frontline workers’ unsafe behaviors and reinforcing safe behaviors, typically through structured observation checklists and feedback.
Application note: BBS assumes most incidents stem from unsafe worker behavior. Contemporary approaches (HOP, Safety Differently) instead treat behavior as shaped by system conditions, and use BBS’s behavior focus cautiously alongside broader work-design and organizational factors.

C

Capacity

HOP / RESILIENCE
The available ability of a person, team, control, or system to meet the demands placed on it under current and foreseeable conditions.
Application note: Safety improves when capacity is matched to demand and when approaching limits are visible early.

Chronic unease

HIGH RELIABILITY ORGANIZING
A disciplined concern that serious failure remains possible even when recent performance has been good.
Application note: It supports questioning, verification, and attention to weak signals without creating constant alarm.

Cognitive demand

HUMAN FACTORS
The mental work required to perceive information, maintain attention, remember, decide, coordinate, and act.
Application note: Assess cognitive demand as a property of the work and its conditions, not simply as a worker weakness.

Complex adaptive sociotechnical system (CASTS)

SYSTEMS THINKING
A system in which people, technology, procedures, organizations, goals, and environments interact and adapt, producing behaviour that cannot be understood by examining parts in isolation.
Application note: Outcomes emerge from relationships, feedback, competing goals, and changing conditions. Linear cause-and-effect explanations are often incomplete.

Context

HOP
The conditions surrounding performance that shape what actions seem possible, sensible, or necessary at the time.
Application note: Examples include goals, production pressure, staffing, fatigue, equipment state, information quality, supervision, norms, incentives, and prior experience.

Control reliability

CRITICAL-RISK MANAGEMENT
The degree to which a control can be depended upon to perform its required function when needed and under the conditions in which work occurs.
Application note: Presence alone is not reliability. Consider suitability, availability, functionality, use, degradation, and independence.

Critical control

CRITICAL-RISK MANAGEMENT
A control that is essential to preventing a material unwanted event or reducing its consequences, and whose absence or failure would materially increase risk.
Application note: Critical controls require defined performance requirements, ownership, verification, and action when ineffective.

Critical-control validation

CRITICAL-RISK MANAGEMENT
The process of establishing that a selected critical control is capable of controlling the material unwanted event under the intended operating conditions.
Application note: Validation asks whether it is the right control and whether it can work. It is generally performed when controls are selected or changed.

Critical-control verification

CRITICAL-RISK MANAGEMENT
The process of confirming, at a specified time and place, that a critical control is present, functional, and meeting its performance requirements.
Application note: Verification asks whether the control is working now. It should produce action, not merely a completed form.

Critical step

WORK PLANNING
A step in a task where an error, omission, or loss of control could cause a serious consequence or make recovery difficult.
Application note: Critical steps deserve explicit preparation, role clarity, control checks, and a pause or hold point where warranted.

D

Drift

SYSTEMS SAFETY
The gradual movement of practices, conditions, or risk boundaries away from the original design or safe operating envelope, often through small adaptations that individually appear reasonable.
Application note: Drift is easier to see across time and across the system than in a single worker’s action.

E

Efficiency-thoroughness trade-off (ETTO)

RESILIENCE ENGINEERING
The practical trade-off between being more efficient and being more thorough when time, information, attention, or resources are limited.
Application note: The concept explains why normal adjustments can support success in one situation and contribute to failure in another.

Emergent risk

COMPLEX SYSTEMS
Risk that develops through changing interactions, conditions, or adaptations and is not fully identifiable from individual components in advance.
Application note: Manage it through monitoring, worker feedback, change awareness, and the capacity to respond, not solely through static hazard registers.

Error-likely situation

HUMAN PERFORMANCE
A combination of task demands and conditions that increases the probability of error.
Application note: Common contributors include unfamiliarity, time pressure, ambiguity, interruptions, high workload, poor interfaces, infrequent tasks, and weak feedback.

Error tolerance

HOP / DESIGN
The ability of a system to prevent ordinary human errors from causing serious harm and to support detection and recovery when errors occur.
Application note: Error-tolerant design uses barriers, constraints, feedback, recoverability, and defence against single-point failure.

Event learning

CONTEMPORARY INVESTIGATION
A learning process that examines an event in its operational and organizational context to understand how conditions, decisions, adaptations, and controls combined to produce the outcome.
Application note: Its purpose is to improve the system, not merely identify non-compliance or assign a root cause.

F

First story

HOP / INVESTIGATION
The initial, simplified account of an event, often centred on what a person did or failed to do.
Application note: Treat it as a starting point. Deeper learning requires reconstructing the context and local reasoning that made the actions understandable.

FRAM (Functional Resonance Analysis Method)

RESILIENCE ENGINEERING METHOD
A method, developed by Erik Hollnagel, for modelling how everyday variability in ordinary functions can combine and resonate to produce both successful outcomes and unwanted events, without assuming linear cause-and-effect.
Application note: FRAM is used to map how work functions actually depend on and vary with one another, revealing how normal performance variability can amplify into unexpected outcomes.

G

Graceful extensibility

RESILIENCE ENGINEERING
The ability of a system to stretch its capacity near a boundary by recruiting or coordinating additional resources when existing capacity is insufficient.
Application note: It is different from simple robustness. It concerns how a system adapts when predefined responses are no longer enough.

H

Heinrich’s Triangle (Heinrich’s Law)

HISTORICAL SAFETY MODEL
A model, originally proposed by Herbert Heinrich in the 1930s, proposing a fixed ratio between minor incidents, near misses, and serious injuries, often used to argue that reducing minor events reduces serious ones.
Application note: The specific ratios lack robust empirical support and the model assumes low- and high-consequence events share the same causes. Contemporary practice treats it as a historical influence, not a reliable predictive tool — see Serious injury and fatality (SIF) prevention.

High reliability organizing (HRO)

ORGANIZATIONAL RELIABILITY
Ongoing organizing practices used to remain alert and responsive in hazardous, uncertain operations.
Application note: Common features include preoccupation with failure, reluctance to simplify, sensitivity to operations, commitment to resilience, and deference to relevant expertise.

Hindsight bias

DECISION AND EVENT ANALYSIS
The tendency, after knowing an outcome, to see it as more foreseeable and preventable than it appeared beforehand.
Application note: Counter it by reconstructing what information was available, how uncertain it was, and what competing demands existed at each decision point.

Human and Organizational Performance (HOP)

CONTEMPORARY SAFETY FRAMEWORK
A way of understanding performance that treats human error as normal, behaviour as shaped by context, and organizational response as a major influence on learning and improvement.
Application note: HOP is not a no-accountability approach. It redirects attention from blame toward conditions, capacity, controls, learning, and fair response.

Human error

HUMAN FACTORS
An action or decision that unintentionally differs from what was intended, expected, or required.
Application note: Human error describes an outcome of behaviour. By itself, it does not explain why the event occurred or what should be changed.

J

Just Culture

FAIR ACCOUNTABILITY
An approach to organizational response that seeks learning and fairness by considering intent, choices, context, system contributions, and the organization’s own responsibilities.
Application note: It is neither blame-free nor a fixed decision tree. Deliberate misconduct may require accountability, while ordinary error calls for learning and system improvement.

L

Learning from normal work

SAFETY-II / OPERATIONAL LEARNING
The study of routine work, including successful performance, to understand how people manage variability and how the system usually produces acceptable outcomes.
Application note: Because most work succeeds, normal work provides far more information about system functioning than incidents alone.

Learning review

OPERATIONAL LEARNING
A facilitated review focused on understanding how work made sense, how conditions shaped performance, and what can strengthen future work.
Application note: The label is often used instead of investigation when the intended posture is learning rather than fault finding, but legal reporting duties still apply.

Learning Team

OPERATIONAL LEARNING
A facilitated group process in which people with relevant operational knowledge explore how work is actually done, what makes it successful or difficult, and where system improvements are possible.
Application note: Learning Teams can be reactive, routine, or prospective. Participants are sources of expertise, not subjects of interrogation.

Local rationality

HOP / SYSTEMS THINKING
The principle that people’s actions usually make sense to them at the time, given their goals, knowledge, experience, constraints, and perception of the situation.
Application note: Understanding local rationality explains behaviour without excusing deliberate misconduct.

M

Margin

RESILIENCE ENGINEERING
The remaining space between current operating conditions and a boundary beyond which performance degrades or control may be lost.
Application note: Useful systems make shrinking margins visible and provide options to slow, stop, add resources, or reconfigure work.

Material unwanted event (MUE)

CRITICAL-RISK MANAGEMENT
An event with the potential to produce a fatality, life-altering injury or illness, major environmental harm, or other material loss.
Application note: MUEs provide the organizing link between critical risks, credible pathways, and critical controls.

N

Near miss

TRADITIONAL SAFETY REPORTING
An event that could have resulted in harm or loss but did not, due to timing, position, or other chance factors.
Application note: Near misses are valuable sources of learning, but their absence does not indicate safety, and their presence does not indicate imminent danger — see Weak signal and Operational learning for more contemporary framings of the same underlying information.

The New View

CONTEMPORARY SAFETY PHILOSOPHY
A term, associated with Sidney Dekker, contrasting a traditional (“Old View”) perspective that treats human error as a cause requiring correction, with a systems perspective that treats error as a symptom of deeper organizational and design conditions.
Application note: The New View underlies Safety Differently, HOP, and Safety-II. It does not mean removing all individual accountability, only relocating the primary search for explanation from the individual to the system.

O

Operational learning

CONTEMPORARY SAFETY PRACTICE
Deliberate learning from real work as it unfolds and from the people who perform it, including adaptations, trade-offs, successful recoveries, difficulties, and surprises.
Application note: It complements audits and incident investigations by examining the ordinary conditions that create both success and vulnerability.

Organizational justice

PSYCHOSOCIAL RISK / CULTURE
Workers’ perceptions of fairness in outcomes, decision processes, interpersonal treatment, and access to information.
Application note: Fairness affects trust, reporting, participation, psychological health, and willingness to contribute operational knowledge.

P

Performance mode

HUMAN PERFORMANCE
A pattern of cognitive control used to perform work, commonly described as skill-based, rule-based, or knowledge-based.
Application note: The applicable mode influences likely errors and suitable defences. Unfamiliar or ambiguous work relies more heavily on effortful knowledge-based reasoning.

Performance variability

RESILIENCE ENGINEERING
The normal variation in how people and systems perform as they adjust to changing demands and incomplete information.
Application note: Variability is not automatically non-compliance. The same adaptive behaviour may help work succeed or, in different conditions, combine with other factors to produce harm.

Potential serious injury or fatality (PSIF)

SERIOUS-INJURY PREVENTION
An event or exposure that could reasonably have caused a fatality or life-altering injury even though the actual outcome was less severe or no harm occurred.
Application note: PSIF classification should be based on credible potential, not the worst imaginable outcome.

Precursor

PROACTIVE RISK MANAGEMENT
A condition, change, signal, or pattern that may precede a loss of control or serious event.
Application note: Precursors are useful only when the organization defines how they will be recognized, escalated, and acted upon.

Psychological health and safety

ISO 45003 / PSYCHOSOCIAL RISK
The protection and promotion of psychological health through the way work is designed, organized, managed, and experienced.
Application note: It concerns prevention of work-related psychological injury and ill health, not only access to wellness programs after harm occurs.

Psychological safety

TEAM AND ORGANIZATIONAL CLIMATE
A shared belief that it is safe to take interpersonal risks such as asking questions, admitting uncertainty or mistakes, challenging a decision, or raising a concern.
Application note: Psychological safety does not mean comfort, agreement, low standards, or protection from accountability.

Psychosocial hazard

OCCUPATIONAL HEALTH
An aspect of work design, management, environment, or social interaction that has the potential to cause psychological or physical harm.
Application note: Examples include excessive demands, low control, role conflict, inadequate support, bullying, harassment, poor change management, and organizational injustice.

Psychosocial risk

OCCUPATIONAL HEALTH
The combination of the likelihood of exposure to psychosocial hazards and the severity of harm that may result.
Application note: Manage psychosocial risk through the occupational health and safety system, prioritizing changes to work and organizational conditions over individual coping interventions.

R

Resilience engineering

SYSTEMS SAFETY DISCIPLINE
A field concerned with how systems sustain required operations under expected and unexpected conditions by developing the abilities to respond, monitor, learn, and anticipate.
Application note: Resilience is not simply recovery after failure or asking workers to cope with poor conditions.

Restorative response

RESTORATIVE JUST CULTURE
A forward-looking response to harm that asks who was affected, what they need, whose obligations those needs create, and how trust and functioning can be repaired.
Application note: It complements fact finding and legal duties by addressing the human and relational consequences of events.

Risk important action

CRITICAL-RISK MANAGEMENT
A human action whose correct and timely performance is important to establishing, maintaining, or restoring control of a serious hazard.
Application note: Treat these actions like other critical controls by defining conditions for success and verifying that people have the capacity to perform them.

Root cause (analysis)

TRADITIONAL INVESTIGATION METHOD
An investigation approach that seeks a single, or small number of, underlying cause(s) presumed to explain an event, often visualized through techniques such as the “5 Whys” or fishbone diagrams.
Application note: Complex sociotechnical events rarely have one root cause. Contemporary event learning treats causation as multiple, contributing, and interacting, rather than isolatable to one root.

S

Safety clutter

CONTEMPORARY SAFETY MANAGEMENT
Safety procedures, documents, roles, or activities that consume resources but do not contribute meaningfully to operational safety.
Application note: Clutter often develops through duplication, over-generalization, and over-specification. Remove it carefully, based on evidence and legal obligations.

Safety culture

ORGANIZATIONAL CULTURE
The safety-related aspects of the broader organizational culture, reflected in shared assumptions and patterns of behaviour about risk, authority, work, reporting, and response.
Application note: Culture is not a program, score, slogan, or something owned only by workers. It is shaped strongly by leadership decisions and organizational systems.

Safety climate

MEASUREMENT
Workers’ current perceptions of how safety is prioritized and enacted in their work environment.
Application note: Climate is more readily measured and can change faster than deeper culture. A survey is a snapshot, not a complete diagnosis.

Safety Differently

CONTEMPORARY SAFETY PHILOSOPHY
An approach that views people as a source of insight and adaptive capacity, focuses on enabling successful work, and defines safety as more than the absence of negative events.
Application note: It challenges excessive bureaucracy and control but does not reject standards, engineering, regulation, or accountability.

Safety-I

SAFETY SCIENCE
A perspective that defines safety mainly as the absence or reduction of adverse outcomes and therefore concentrates on identifying and preventing things that go wrong.
Application note: Safety-I remains necessary for hazards, controls, compliance, and event response, but gives an incomplete view when used alone.

Safety-II

SAFETY SCIENCE
A perspective that examines how everyday performance produces successful outcomes under varying conditions and seeks to strengthen the system’s capacity for success.
Application note: Safety-II complements rather than replaces conventional prevention, controls, and compliance.

Serious injury and fatality (SIF) prevention

CRITICAL-RISK MANAGEMENT
A risk strategy that concentrates attention on hazards, exposures, pathways, and control failures capable of causing fatalities or life-altering harm.
Application note: It avoids assuming that reducing high-frequency minor injuries will automatically control low-frequency, high-consequence events.

Second victim

POST-EVENT SUPPORT
A worker or professional who experiences psychological distress after involvement in an adverse event, particularly when they believe their actions contributed to harm.
Application note: The term highlights support needs, although some affected patients and families object to its wording. Use person-centred language where appropriate.

Sensemaking

ORGANIZATIONAL PSYCHOLOGY
The ongoing process by which people interpret ambiguous or unfolding situations by noticing cues, constructing plausible explanations, and updating understanding as events develop.
Application note: Associated with Karl Weick’s work on organizing. Understanding how people made sense of a situation at the time is central to understanding their decisions and actions.

Sharp end and blunt end

HUMAN FACTORS / SYSTEMS SAFETY
A distinction between the “sharp end,” where people directly perform safety-critical work, and the “blunt end,” the regulators, managers, designers, and organizations that shape the resources, constraints, and conditions of that work.
Application note: Understanding events requires looking at both ends. Blunt-end decisions (staffing, scheduling, budgets, procedures) often explain sharp-end performance more than individual sharp-end choices do.

Stop-work authority

OPERATIONAL CONTROL
The explicit authority and practical ability to pause work when conditions are unsafe, uncertain, or outside agreed limits.
Application note: Authority is meaningful only when workers can use it without retaliation and when the organization responds promptly and constructively.

Situational awareness

HUMAN FACTORS
A person’s perception of relevant elements in the environment, comprehension of what they mean, and projection of their status in the near future.
Application note: Situational awareness is dynamic and shaped by workload, fatigue, interface design, and experience. Loss of situational awareness is a symptom of conditions, not simply an individual lapse.

STKY: Stuff That Kills You

PLAIN-LANGUAGE CONCEPT
A plain-language label for hazards and energy sources capable of causing death or permanently life-altering harm.
Application note: Use it to sharpen attention on critical risk without allowing the shorthand to replace precise hazard, pathway, and control analysis.

Swiss cheese model

TRADITIONAL ACCIDENT CAUSATION MODEL
A model, developed by James Reason, depicting organizational defences as layers with imperfect, shifting holes; an accident occurs when holes across multiple layers momentarily align.
Application note: The model remains useful for illustrating defence-in-depth, but its static, linear imagery can understate how defences and conditions continuously interact and adapt in real operations — see Resilience engineering.

System condition

SYSTEMS THINKING
A feature of the work system that influences performance, such as staffing, design, priorities, tools, procedures, interfaces, incentives, maintenance, or communication.
Application note: System conditions often persist across events and affect many people, making them important targets for improvement.

Systems thinking

CONTEMPORARY SAFETY FOUNDATION
A way of understanding outcomes as products of interactions among people, technology, tasks, organizations, goals, and environments over time.
Application note: It shifts analysis from isolated causes toward relationships, feedback, constraints, trade-offs, and system behaviour.

T

Threat and error management

OPERATIONAL RISK MANAGEMENT
A proactive approach that anticipates threats, recognizes that errors will occur, and builds defences to trap, mitigate, and recover before consequences develop.
Application note: Originally developed in aviation, the logic applies broadly to dynamic operational work.

Total Worker Health

WORKER WELL-BEING
A NIOSH approach that integrates protection from work-related safety and health hazards with promotion of worker well-being.
Application note: It prioritizes healthy work design and organizational conditions rather than relying mainly on individual wellness or resilience programs.

Trade-off

OPERATIONAL DECISION MAKING
A practical balancing of competing goals or limited resources, such as safety, quality, production, time, cost, and workload.
Application note: Trade-offs are unavoidable in work. The objective is to make them visible, bounded, and supported rather than deny that they occur.

TRUST: There, Risk Reduced, Usable, Stays Reliable, Trade-offs

CRITICAL-CONTROL CONVERSATION
A five-part prompt for examining whether a critical control is present, actually reduces the relevant risk, can be used in real work, remains reliable, and is affected by competing demands or trade-offs.
Application note: TRUST deepens a field verification conversation. It does not replace technical validation, inspection, testing, or required records.

U

Unsafe act

TRADITIONAL SAFETY CLASSIFICATION
A classification, from traditional safety models, describing an action by a worker that is judged, often after the fact, to have deviated from a safe standard or expectation.
Application note: Classifying an act as “unsafe” after an outcome is known is vulnerable to hindsight bias. Contemporary practice examines the local rationality that made the action sensible at the time.

W

Weak signal

ANTICIPATORY SAFETY
Fragmentary, ambiguous, or low-intensity information that may indicate developing risk, changing conditions, or declining control effectiveness.
Application note: Examples include recurring workarounds, small control defects, unusual combinations of conditions, unresolved concerns, and growing difficulty completing work as planned.

Work as disclosed

OPERATIONAL LEARNING
The account of work that people provide when asked, influenced by trust, audience, memory, language, and the perceived consequences of disclosure.
Application note: It is valuable but not identical to work as done. Psychological safety and skilled inquiry affect what becomes visible.

Work as done (WAD)

SAFETY-II / RESILIENCE ENGINEERING
How work is actually carried out in context, including adjustments, workarounds, sequencing, collaboration, and trade-offs.
Application note: Understanding WAD requires engagement with workers and observation of real conditions, not simply comparison with procedures.

Work as imagined (WAI)

SAFETY-II / RESILIENCE ENGINEERING
How designers, leaders, planners, regulators, or procedure writers believe work is or should be performed.
Application note: A gap between WAI and WAD is not automatically worker failure. It may reveal outdated assumptions, missing resources, or necessary adaptation.

Work as prescribed

WORK DESIGN
The formal version of work expressed in laws, policies, procedures, permits, plans, and instructions.
Application note: It is one part of work as imagined and should be tested for usability against real operational conditions.

Work design

PSYCHOSOCIAL RISK / HUMAN FACTORS
The organization of tasks, roles, schedules, workload, autonomy, technology, information, relationships, and resources that shapes how work is experienced and performed.
Application note: Good work design controls physical, cognitive, and psychosocial risk at its source.

Workarounds

OPERATIONAL LEARNING
Informal adaptations that people make to accomplish work when procedures, tools, or conditions do not fit the actual demands of the task.
Application note: Workarounds are a rich source of information about the gap between work as imagined and work as done, and often represent skill and problem-solving rather than mere non-compliance.

Worker participation

OH&S MANAGEMENT SYSTEMS
Meaningful involvement of workers and, where applicable, worker representatives in decisions and activities that affect occupational health and safety.
Application note: Participation requires access to information, time, influence, and protection from retaliation. Consultation without influence is weak participation.

Z

Zero Harm (Vision Zero)

SAFETY GOAL-SETTING PHILOSOPHY
Organizational commitments and campaigns aiming for no work-related fatalities, injuries, or harm.
Application note: Supporters see these goals as a statement of values that drives investment in safety; critics argue they can encourage underreporting, unrealistic messaging, or a narrow focus on outcome metrics rather than the conditions that produce them.

Source Framework

This glossary synthesizes concepts rather than reproducing formal definitions verbatim. The sources below provide the principal foundations. Practice-specific shorthand (4Ds, 4Ls, STKY, TRUST) is identified as such in the entries above.

  • ISO 45001:2018. Occupational health and safety management systems.
  • ISO 45003:2021. Psychological health and safety at work.
  • ISO 45004:2024. Guidelines on occupational health and safety performance evaluation.
  • International Council on Mining and Metals. Critical Control Management: Good Practice Guide.
  • NIOSH. Total Worker Health and the Hierarchy of Controls Applied to Total Worker Health.
  • Rae, Provan, Weber, and Dekker (2018). Safety clutter: the accumulation and persistence of safety work that does not contribute to operational safety. https://doi.org/10.1080/14773996.2018.1491147
  • Woods (2018). The theory of graceful extensibility: basic rules that govern adaptive systems. https://doi.org/10.1007/s10669-018-9708-3
  • Weick and Sutcliffe. Managing the Unexpected: Sustained Performance in a Complex World. Source for high reliability organizing concepts.
  • Hollnagel. Safety-I and Safety-II and resilience engineering literature. Source for performance variability, ETTO, and the four potentials for resilient performance.
  • U.S. Department of Energy. Human performance improvement and integrated safety management guidance.
  • Sutton, Lyth, Robinson, Bryant, and Conklin. 4Ds for HOP and Learning Teams: A practical how-to guide to facilitate learning from everyday work, critical and dynamic risks with the 4Ds. Source for the 4Ds framework.

Editorial Note

Contemporary safety terminology is not perfectly standardized. Different industries and authors sometimes use the same term differently. Organizations should select and consistently apply the definitions that best support their legal obligations, operational realities, and management-system architecture.