Safety Culture

Normalization of Deviance: 8 Indicators Leaders Miss

Normalization of deviance turns repeated shortcuts into accepted work. Learn 8 indicators leaders miss before unsafe drift hardens into culture.

By 6 min read
corporate environment depicting normalization of deviance 8 indicators leaders miss — Normalization of Deviance: 8 Indicators

Key takeaways

  1. 01Diagnose repeated exceptions as culture evidence, because a shortcut that survives 30 repetitions has already moved beyond individual behavior and into management tolerance.
  2. 02Audit near-miss quality before celebrating volume, especially when reports avoid control degradation, SIF precursors, and production-pressure decisions in high-risk work.
  3. 03Require supervisors to document 4 fields for every exception: missing control, compensating measure, authority, and expiry time before work continues.
  4. 04Compare clean dashboards with field knowledge every month, since underreported drift often appears first as contradiction, not as injury or recordable loss.
  5. 05Use Andreza Araújo's Safety Culture Diagnosis approach to connect surveys, permits, observations, and leadership decisions into one practical evidence trail.

ILO reports that nearly 3 million people die each year because of work-related accidents and diseases, which means weak signals are rarely harmless background noise. This article shows the 8 indicators that reveal normalization of deviance before a team turns unsafe shortcuts into accepted work.

Why small deviations become a culture problem

Normalization of deviance happens when repeated exceptions stop looking like exceptions, even though the underlying exposure has not changed. In safety culture, the danger is not only the first shortcut, but the 30th time the shortcut works without visible injury and gets silently approved by supervisors, peers, and planning routines.

As Andreza Araújo argues in Safety Culture: From Theory to Practice, culture is measured less by declared values than by the behaviors that survive pressure. A company can have ISO language, posters, toolbox talks, and signed procedures while the real operating norm rewards speed, silence, and improvisation.

HSE explains that risk management requires identifying hazards, deciding who may be harmed, and taking action to control the risk. The gap starts when those 3 duties remain on paper while crews learn that production deadlines, informal permission, and clean dashboards matter more than control integrity.

1. Procedures are treated as references, not operating limits

Procedures become a normalization risk when workers treat them as background reference material instead of live operating limits. ISO 45001:2018 requires organizations to plan, implement, control, and maintain processes needed for the occupational health and safety management system, which makes repeated field deviation a management issue, not a documentation detail.

The common mistake is to blame the operator who bypassed the step. James Reason's Swiss Cheese Model gives a better lens because repeated bypasses usually point to latent failures in planning, supervision, staffing, design, or schedule pressure. Across 25+ years leading EHS at multinationals, Andreza Araújo has seen that tolerated deviation often starts as an exception approved by a competent person under pressure.

Leaders should audit 10 recent permits, work orders, or task plans and compare the written method with what happened in the field. When 3 or more files show the same informal workaround, the right response is not another reminder campaign, but a formal redesign of the process, control, or resource level.

2. Near misses are counted by volume instead of quality

Near-miss systems normalize deviance when the dashboard rewards the number of reports but ignores whether reports expose serious precursors. A site can receive 200 low-value near misses in a quarter and still miss the single recurring deviation that could produce a fatal event.

The better question is whether the system captures weak signals with enough specificity to trigger control change. The article on near-miss quality expands this distortion because volume can make learning look active while the same hazard remains untouched.

EHS managers should separate reports into 3 buckets: housekeeping observations, control degradation, and SIF precursors. If the second and third buckets stay thin while production areas keep reporting easy items, the culture is probably filtering discomfort before it reaches decision-makers.

3. Supervisors approve exceptions without writing the risk decision

Supervisory exception approval becomes dangerous when leaders authorize a workaround verbally but leave no record of the risk trade-off. A 2-minute verbal clearance may feel practical, although it hides who accepted the exposure, which control was degraded, and how long the deviation remained open.

In The Illusion of Compliance, referenced in English as Andreza Araújo's critique of compliance without culture, the central warning is that paperwork can satisfy the audit while real risk is negotiated elsewhere. That is exactly how normalized deviation survives inspection.

Require every exception to name the missing control, the compensating measure, the person with authority to approve, and the expiry time. If a supervisor cannot write those 4 fields clearly, the exception is not controlled enough to proceed.

4. Clean metrics contradict what field leaders quietly know

Clean metrics become suspect when reported performance improves while field leaders privately describe pressure, shortcuts, or declining control quality. The danger is visible when TRIR, LTIFR, or inspection closure rates improve for 6 months, yet supervisors can name the same unresolved hazards by memory.

This is why underreporting in safety is not only a reporting problem. It is a culture signal whose strongest evidence may be the mismatch between official dashboards and informal field knowledge.

Leaders should run a monthly contradiction review with 5 questions: which risk is missing from the dashboard, which control is weaker than reported, which crew has stopped reporting, which exception is repeated, and which number would look worse if field evidence were included.

5. Production pressure has no visible stop rule

Production pressure becomes a normalization engine when the organization has targets, recovery plans, and escalation routines for output, but no equally visible stop rule for degraded controls. If the only measurable deadline is the production deadline, the field eventually learns which promise matters.

ISO specifies that ISO 45001 provides a management structure for occupational health and safety risks and performance improvement. That structure loses force when the planning meeting treats safety as a constraint to manage around rather than a condition for work release.

Every high-risk task should have 3 stop conditions written before work starts, such as missing isolation verification, changed weather, or loss of supervision. When stop conditions are explicit, crews do not need to negotiate basic control integrity under deadline pressure.

6. Rework is accepted as normal learning

Rework becomes a safety culture warning when the same errors, missing parts, late permits, or incomplete isolations recur and leaders describe them as normal learning. A process that needs correction every week is not learning; it is teaching people that poor preparation is part of the job.

During the PepsiCo South America tenure, where the accident ratio fell 50% in 6 months, Andreza Araújo learned that operational discipline improves when leaders remove recurring friction rather than asking crews to compensate for it. That lesson matters because normalization often hides inside routine rework.

Track rework by cause, not by department. If 4 consecutive shutdowns repeat the same planning failure, the safety decision is no longer about worker attention, but about whether leadership will change planning quality before the next exposure.

7. Safety rituals continue after they stop changing risk

Safety rituals normalize deviance when meetings, posters, campaigns, and toolbox talks continue even after they no longer change exposure. A 15-minute talk that never changes the permit, control, resource, or sequence can become cultural decoration.

The related analysis on safety rituals shows why ceremony is not the same as control. The trap is subtle because rituals make leaders feel present while the real deviation remains embedded in how work is planned and released.

Keep a ritual only if it produces a decision record. A pre-job conversation should change at least 1 control, reject 1 unsafe assumption, or confirm 1 field condition that was uncertain before the crew met.

8. Surveys show confidence while evidence shows drift

Culture surveys become misleading when confidence scores rise while field evidence shows tolerated drift. A site can score 82% positive perception on leadership commitment and still allow repeated deviations in maintenance, logistics, or contractor work.

EU-OSHA publishes ESENER survey evidence on how European workplaces manage safety, health, and worker participation. Surveys are useful, although they need field verification because perception can improve faster than control discipline.

In more than 250 cultural-transformation projects supported by Andreza Araújo's team, the practical lesson is consistent: survey results must be cross-checked against permits, observations, incident precursors, and supervisor decisions. The article on safety climate survey blind spots goes deeper into that verification problem.

Comparison: declared control vs normalized deviation

Decision pointDeclared controlNormalized deviationCorrective leadership move
Permit releaseAll controls verified before workWork starts while 1 control is promised laterBlock release until the missing control is closed or formally replaced
Near-miss reviewReports expose weak signalsReports protect volume targetsScore SIF precursor quality, not only count
Supervisor exceptionRisk decision is documentedVerbal approval becomes the real systemRequire 4 written fields for every exception
Executive dashboardMetrics reflect exposureClean rates hide silent driftAdd contradiction review and field verification

For a senior leader, the practical test is simple enough to run in 30 days: choose 5 high-risk routines, read the last 10 records for each, and ask whether the documented control matched the field condition. The answer will usually reveal more about culture than another generic commitment statement.

Each month without a deviation review gives informal work more authority than the written system, while the organization keeps investing in indicators that arrive after exposure has already been accepted.

Conclusion

Normalization of deviance is not a frontline attitude problem; it is a leadership signal that exceptions, clean dashboards, and production pressure have started to define the real safety culture.

For practitioners ready to diagnose this pattern with structure, Safety Culture Diagnosis by Andreza Araújo offers a practical route from perception evidence to field verification. If your operation needs a culture diagnostic, executive workshop, or transformation roadmap, talk to Andreza Araújo at Andreza Araújo.

Topics normalization-of-deviance safety-culture risk-perception production-pressure ehs-manager leadership

Frequently asked questions

What is normalization of deviance in safety culture?
Normalization of deviance in safety culture is the process by which repeated departures from safe work standards become accepted as normal. The exposure does not become safer, but people stop treating it as abnormal because previous repetitions did not cause visible harm. Leaders should treat recurring exceptions as evidence about the operating culture, not as isolated worker choices that need only another reminder.
How can EHS managers detect normalization of deviance early?
EHS managers can detect it early by comparing written procedures with field execution, reviewing exception approvals, checking near-miss quality, and asking supervisors which controls are routinely negotiated. If the same workaround appears across 3 or more jobs, the issue is no longer a one-time deviation. It needs process redesign, authority clarification, or resource correction before the next high-risk task starts.
Why do clean safety metrics sometimes hide normalized risk?
Clean safety metrics can hide normalized risk when they measure reportable outcomes but miss degraded controls, weak signals, and informal exceptions. TRIR or LTIFR may improve while workers quietly accept missing controls. Andreza Araújo's diagnostic approach compares perception, field evidence, and leadership decisions so a clean dashboard is tested against the way work is really done in daily operations. This is why field verification must sit beside the executive dashboard.
What is the difference between normalization of deviance and complacency?
Complacency is usually described as reduced alertness, while normalization of deviance is a cultural process in which exceptions become accepted operating practice. Complacency may affect attention, but normalized deviation affects decisions, supervision, planning, and what the organization rewards. That makes it a leadership and system issue, not only a mindset issue for workers. The corrective action should therefore change conditions, not only attention.
Which safety culture articles should I read next?
Read about safety climate survey blind spots, near-miss quality, and underreporting in safety. Those topics connect directly to normalization of deviance because they show how organizations can look controlled while field evidence says exposure is growing. Together, they form a practical audit trail for EHS managers and senior leaders who need to test culture against controls. Start with those clusters when planning internal audits.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI