Barrier Analysis Explained: 5 Checks Before RCA

OSHA describes incident investigation as a way to identify hazards and shortcomings in safety and health programs, but many reports still jump from injury to operator behavior without testing the controls in between. This explainer gives EHS managers five checks that make barrier analysis useful before RCA hardens into a weak conclusion.

Definition

Barrier analysis is an incident investigation method that identifies the controls that should have stopped energy, exposure, decision drift, or harm, then tests whether each control was missing, weak, bypassed, late, or unsupported.

The method is useful because RCA often starts too late. If the team begins with a cause label, the investigation can miss the practical question that matters most to a supervisor: which barrier failed to interrupt the event sequence while there was still time to recover?

As Andreza Araujo argues in Sorte ou Capacidade, glossed for English readers as Luck or Capability, serious events should not be read as bad luck or isolated mistakes. They are usually the visible end of tolerated conditions, weak verification, incomplete learning, and management decisions that allowed exposure to persist.

5 checks that make barrier analysis useful before RCA

Barrier analysis should be done before the team writes the cause statement, because the cause statement becomes political once the report circulates. These five checks keep the investigation close to evidence, field reality, and control quality.

1. Check the energy path

The first check is to name the energy, agent, or exposure that reached the person, asset, or environment. Mechanical energy, gravity, pressure, electricity, chemical exposure, heat, moving equipment, and violence risk each demand a different control story.

This is where incident timeline building protects the analysis. When the team reconstructs sequence, time, position, decisions, and evidence quality, barrier failure becomes visible as a chain rather than a slogan.

Across 25+ years leading EHS at multinationals, Andreza Araujo has seen that weak investigations often describe what the worker did but fail to map the energy that made the action harmful. The practical correction is simple: draw the path of harm before naming any human cause.

2. Check the expected barrier

The second check is to ask which barrier should have interrupted the path. A barrier may be physical, engineered, procedural, supervisory, competency-based, alarm-based, permit-based, or organizational, although not all barrier types deserve equal confidence.

A guard, interlock, isolation point, rescue plan, exclusion zone, permit hold point, field verification, and competent supervision do not have the same strength. A laminated procedure can guide work, but it cannot absorb energy; a well-designed interlock can stop movement even when attention fails.

In more than 250 cultural-transformation projects supported by Andreza Araujo's team, one recurring trap is treating every documented control as if it were a real barrier. Barrier analysis forces the team to test whether the control existed in the work, not only in the procedure.

3. Check barrier condition at the moment of work

The third check is to determine whether the barrier was present, functional, understood, and available at the exact moment exposure occurred. A control that exists during audits but disappears during maintenance, night shift, contractor work, or production pressure is not a dependable barrier.

This is where scene control after an incident matters. If equipment position, damaged parts, permit versions, photos, CCTV, witness memory, and electronic records are not protected early, the team may never know whether the barrier was absent or merely assumed.

The thesis is uncomfortable but necessary. Many organizations do not suffer from a lack of written controls; they suffer from poor barrier health, where the control degrades gradually until normal work depends on improvisation.

4. Check why the barrier lost authority

The fourth check is to separate barrier failure from worker failure. A barrier can lose authority because it is hard to use, slow, unavailable, contradicted by production goals, poorly maintained, ignored by supervisors, or never explained in practical language.

James Reason's Swiss Cheese Model remains useful here because it connects visible actions with latent weaknesses in design, planning, maintenance, competence, procurement, and leadership routines. The visible act matters, but it should not become a shortcut that ends the investigation.

50% accident reduction in six months during Andreza Araujo's PepsiCo South America tenure came from leadership attention, cultural diagnosis, operating discipline, and field execution moving together. Barrier authority depends on that same combination, because a control ignored by the line is a control in name only.

5. Check whether the action strengthens the barrier

The fifth check is to reject corrective actions that do not change the barrier. Retraining, awareness campaigns, posters, and reminders may support memory, but they rarely repair a missing isolation point, weak permit flow, poor supervision, uncontrolled interface, or defective engineering control.

The action plan should say which barrier will be added, redesigned, verified, simplified, or escalated. That is why first-hour evidence preservation matters, since evidence tells the team whether the barrier failed mechanically, administratively, culturally, or through decision pressure.

For EHS managers, the practical test is blunt. If the same job is repeated next Monday, what will physically, procedurally, or managerially stop the same exposure from reaching the worker again?

Barrier analysis vs RCA

Barrier analysis and RCA are not competitors. Barrier analysis clarifies what failed in the control system, while RCA explains why those failures were allowed to exist, persist, or repeat.

When to use barrier analysis

Barrier analysis fits best when the event involved high energy, SIF potential, repeated near misses, contractor interface, permit-to-work failure, LOTO weakness, working at height, mobile equipment, confined space, chemical exposure, or any situation where a single behavior explanation would be too thin.

The method also works for low-consequence events with high potential severity. If a dropped object misses a worker by one meter, the actual outcome is mild, although the barrier question is serious: what stopped the fatality, and was that stop a designed control or luck?

250+ companies across 30+ countries have shaped Andreza Araujo's safety culture work, and the pattern is consistent. Investigations improve when leaders stop asking only who made the last decision and start asking which barrier was trusted without proof.

Conclusion

Barrier analysis makes RCA stronger because it tests the control system before the organization settles on a cause. The five checks are practical: map the energy path, identify the expected barrier, test its condition, explain why it lost authority, and make sure the corrective action strengthens it.

If your team needs to move from incident narratives to verified control improvement, Andreza Araujo's safety culture diagnostics and ACS Global Ventures consulting can help connect evidence, RCA, and field execution. Start with Andreza Araujo.