Normalization of Deviance: 8 Indicators Leaders Miss
Normalization of deviance turns repeated shortcuts into accepted work. Learn 8 indicators leaders miss before unsafe drift hardens into culture.

Key takeaways
- 01Diagnose repeated exceptions as culture evidence, because a shortcut that survives 30 repetitions has already moved beyond individual behavior and into management tolerance.
- 02Audit near-miss quality before celebrating volume, especially when reports avoid control degradation, SIF precursors, and production-pressure decisions in high-risk work.
- 03Require supervisors to document 4 fields for every exception: missing control, compensating measure, authority, and expiry time before work continues.
- 04Compare clean dashboards with field knowledge every month, since underreported drift often appears first as contradiction, not as injury or recordable loss.
- 05Use Andreza Araújo's Safety Culture Diagnosis approach to connect surveys, permits, observations, and leadership decisions into one practical evidence trail.
ILO reports that nearly 3 million people die each year because of work-related accidents and diseases, which means weak signals are rarely harmless background noise. This article shows the 8 indicators that reveal normalization of deviance before a team turns unsafe shortcuts into accepted work.
Why small deviations become a culture problem
Normalization of deviance happens when repeated exceptions stop looking like exceptions, even though the underlying exposure has not changed. In safety culture, the danger is not only the first shortcut, but the 30th time the shortcut works without visible injury and gets silently approved by supervisors, peers, and planning routines.
As Andreza Araújo argues in Safety Culture: From Theory to Practice, culture is measured less by declared values than by the behaviors that survive pressure. A company can have ISO language, posters, toolbox talks, and signed procedures while the real operating norm rewards speed, silence, and improvisation.
HSE explains that risk management requires identifying hazards, deciding who may be harmed, and taking action to control the risk. The gap starts when those 3 duties remain on paper while crews learn that production deadlines, informal permission, and clean dashboards matter more than control integrity.
1. Procedures are treated as references, not operating limits
Procedures become a normalization risk when workers treat them as background reference material instead of live operating limits. ISO 45001:2018 requires organizations to plan, implement, control, and maintain processes needed for the occupational health and safety management system, which makes repeated field deviation a management issue, not a documentation detail.
The common mistake is to blame the operator who bypassed the step. James Reason's Swiss Cheese Model gives a better lens because repeated bypasses usually point to latent failures in planning, supervision, staffing, design, or schedule pressure. Across 25+ years leading EHS at multinationals, Andreza Araújo has seen that tolerated deviation often starts as an exception approved by a competent person under pressure.
Leaders should audit 10 recent permits, work orders, or task plans and compare the written method with what happened in the field. When 3 or more files show the same informal workaround, the right response is not another reminder campaign, but a formal redesign of the process, control, or resource level.
2. Near misses are counted by volume instead of quality
Near-miss systems normalize deviance when the dashboard rewards the number of reports but ignores whether reports expose serious precursors. A site can receive 200 low-value near misses in a quarter and still miss the single recurring deviation that could produce a fatal event.
The better question is whether the system captures weak signals with enough specificity to trigger control change. The article on near-miss quality expands this distortion because volume can make learning look active while the same hazard remains untouched.
EHS managers should separate reports into 3 buckets: housekeeping observations, control degradation, and SIF precursors. If the second and third buckets stay thin while production areas keep reporting easy items, the culture is probably filtering discomfort before it reaches decision-makers.
3. Supervisors approve exceptions without writing the risk decision
Supervisory exception approval becomes dangerous when leaders authorize a workaround verbally but leave no record of the risk trade-off. A 2-minute verbal clearance may feel practical, although it hides who accepted the exposure, which control was degraded, and how long the deviation remained open.
In The Illusion of Compliance, referenced in English as Andreza Araújo's critique of compliance without culture, the central warning is that paperwork can satisfy the audit while real risk is negotiated elsewhere. That is exactly how normalized deviation survives inspection.
Require every exception to name the missing control, the compensating measure, the person with authority to approve, and the expiry time. If a supervisor cannot write those 4 fields clearly, the exception is not controlled enough to proceed.
4. Clean metrics contradict what field leaders quietly know
Clean metrics become suspect when reported performance improves while field leaders privately describe pressure, shortcuts, or declining control quality. The danger is visible when TRIR, LTIFR, or inspection closure rates improve for 6 months, yet supervisors can name the same unresolved hazards by memory.
This is why underreporting in safety is not only a reporting problem. It is a culture signal whose strongest evidence may be the mismatch between official dashboards and informal field knowledge.
Leaders should run a monthly contradiction review with 5 questions: which risk is missing from the dashboard, which control is weaker than reported, which crew has stopped reporting, which exception is repeated, and which number would look worse if field evidence were included.
5. Production pressure has no visible stop rule
Production pressure becomes a normalization engine when the organization has targets, recovery plans, and escalation routines for output, but no equally visible stop rule for degraded controls. If the only measurable deadline is the production deadline, the field eventually learns which promise matters.
ISO specifies that ISO 45001 provides a management structure for occupational health and safety risks and performance improvement. That structure loses force when the planning meeting treats safety as a constraint to manage around rather than a condition for work release.
Every high-risk task should have 3 stop conditions written before work starts, such as missing isolation verification, changed weather, or loss of supervision. When stop conditions are explicit, crews do not need to negotiate basic control integrity under deadline pressure.
6. Rework is accepted as normal learning
Rework becomes a safety culture warning when the same errors, missing parts, late permits, or incomplete isolations recur and leaders describe them as normal learning. A process that needs correction every week is not learning; it is teaching people that poor preparation is part of the job.
During the PepsiCo South America tenure, where the accident ratio fell 50% in 6 months, Andreza Araújo learned that operational discipline improves when leaders remove recurring friction rather than asking crews to compensate for it. That lesson matters because normalization often hides inside routine rework.
Track rework by cause, not by department. If 4 consecutive shutdowns repeat the same planning failure, the safety decision is no longer about worker attention, but about whether leadership will change planning quality before the next exposure.
7. Safety rituals continue after they stop changing risk
Safety rituals normalize deviance when meetings, posters, campaigns, and toolbox talks continue even after they no longer change exposure. A 15-minute talk that never changes the permit, control, resource, or sequence can become cultural decoration.
The related analysis on safety rituals shows why ceremony is not the same as control. The trap is subtle because rituals make leaders feel present while the real deviation remains embedded in how work is planned and released.
Keep a ritual only if it produces a decision record. A pre-job conversation should change at least 1 control, reject 1 unsafe assumption, or confirm 1 field condition that was uncertain before the crew met.
8. Surveys show confidence while evidence shows drift
Culture surveys become misleading when confidence scores rise while field evidence shows tolerated drift. A site can score 82% positive perception on leadership commitment and still allow repeated deviations in maintenance, logistics, or contractor work.
EU-OSHA publishes ESENER survey evidence on how European workplaces manage safety, health, and worker participation. Surveys are useful, although they need field verification because perception can improve faster than control discipline.
In more than 250 cultural-transformation projects supported by Andreza Araújo's team, the practical lesson is consistent: survey results must be cross-checked against permits, observations, incident precursors, and supervisor decisions. The article on safety climate survey blind spots goes deeper into that verification problem.
Comparison: declared control vs normalized deviation
| Decision point | Declared control | Normalized deviation | Corrective leadership move |
|---|---|---|---|
| Permit release | All controls verified before work | Work starts while 1 control is promised later | Block release until the missing control is closed or formally replaced |
| Near-miss review | Reports expose weak signals | Reports protect volume targets | Score SIF precursor quality, not only count |
| Supervisor exception | Risk decision is documented | Verbal approval becomes the real system | Require 4 written fields for every exception |
| Executive dashboard | Metrics reflect exposure | Clean rates hide silent drift | Add contradiction review and field verification |
For a senior leader, the practical test is simple enough to run in 30 days: choose 5 high-risk routines, read the last 10 records for each, and ask whether the documented control matched the field condition. The answer will usually reveal more about culture than another generic commitment statement.
Each month without a deviation review gives informal work more authority than the written system, while the organization keeps investing in indicators that arrive after exposure has already been accepted.
Conclusion
Normalization of deviance is not a frontline attitude problem; it is a leadership signal that exceptions, clean dashboards, and production pressure have started to define the real safety culture.
For practitioners ready to diagnose this pattern with structure, Safety Culture Diagnosis by Andreza Araújo offers a practical route from perception evidence to field verification. If your operation needs a culture diagnostic, executive workshop, or transformation roadmap, talk to Andreza Araújo at Andreza Araújo.
Frequently asked questions
What is normalization of deviance in safety culture?
How can EHS managers detect normalization of deviance early?
Why do clean safety metrics sometimes hide normalized risk?
What is the difference between normalization of deviance and complacency?
Which safety culture articles should I read next?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.