Safety Culture: 3 Distortions That Make Compliance Look Like Control

A safety culture can look healthy while the controls that protect high-consequence work are quietly losing credibility. The warning appears when employees complete every required form, attend every assigned session, and still rely on workarounds that the formal system does not acknowledge.

That gap matters because compliance records describe what the organization expected to happen, while risk is shaped by what people can actually do under production pressure. A leadership team that treats completed activities as proof of control may be measuring administrative order instead of operational protection.

Why can compliance look stronger than the control itself?

Compliance is useful when it confirms that a requirement is understood, resourced, and applied in the conditions for which it was designed. It becomes misleading when the organization rewards completion without checking whether the underlying barrier still works in the field.

ISO 45001:2018 requires organizations to establish, implement, maintain, and continually improve an occupational health and safety management system. That language does not reduce a safety culture to documents. It requires leaders to connect planning, operational control, participation, evaluation, and improvement.

A completed inspection is evidence that an inspection occurred. It is not, by itself, evidence that the hazard was controlled, that the owner had authority to act, or that the corrective action survived the next shift.

James Reason's work on latent conditions helps explain why this gap persists. The visible act may be a missed check, but the conditions that made the missed check normal can include conflicting targets, poor equipment access, weak supervision, or a procedure that no longer fits the task.

Distortion 1: activity volume is treated as control strength

The first distortion appears when leaders infer protection from the amount of safety activity. More observations, meetings, audits, and training hours can create a reassuring dashboard, even though none of those activities proves that a critical barrier is available when the exposure occurs.

A plant may report that every supervisor completed a weekly safety walk. The stronger question is whether those walks changed a decision before high-risk work began. If the record shows conversations but no control changes, the organization has measured attention rather than prevention.

A leading measure should connect to a decision, an owner, and a verification point. “Training completed” is an activity measure. “Operators can stop the task when the isolation boundary is unclear, and supervisors verify that intervention before restart” is closer to a control signal.

Leaders should separate three data layers. The first shows whether the program operated. The second shows whether exposure changed. The third shows whether the most serious credible consequence became less likely because a named barrier was strengthened.

Distortion 2: a clean audit is mistaken for a safe operation

An audit can be technically correct and still miss the condition that matters most. Auditors usually see a selected sample, a prepared explanation, and a short window of work. The risk may appear during an unplanned change, a contractor interface, a night shift, or a task that the written procedure does not describe well.

Audit quality improves when the review compares four forms of evidence. The formal requirement shows the intended method. Direct observation shows the method being used. Records show what changed over time. Worker explanations reveal where the formal method becomes difficult, slow, or impossible to execute.

That comparison exposes a dangerous form of agreement. Everyone can describe the procedure correctly because the organization has trained the language, while the real task follows a different sequence. The audit then confirms shared vocabulary instead of verifying the barrier.

A leader who wants a more useful review should ask what would force the team to depart from the approved method today. The answer may involve staffing, access, equipment condition, permit timing, maintenance backlog, or a production commitment. Each answer points to a control that should be tested in operation rather than accepted on paper.

Distortion 3: visible discipline is confused with decision quality

Safety culture is often judged by what can be seen quickly. People wear the required equipment, attend the briefing, sign the permit, and follow the expected language. Those behaviors matter, but they can coexist with poor decisions when the person closest to the hazard lacks time, information, or authority.

Decision quality depends on the conditions surrounding the decision. A supervisor may know that a lift plan has changed, yet continue because the crane is already positioned and the delivery window is closing. A maintenance technician may recognize that an energy source is not fully isolated, yet proceed because the isolation boundary is unclear and the escalation route is slow.

The cultural question is not whether the organization displays discipline during normal work. It is what happens when the safe option creates delay, cost, or disagreement. If the pause is treated as a personal failure, the system teaches people to preserve appearances. If the pause triggers a prompt technical review, the system turns dissent into a control.

Andreza Araujo's book The Illusion of Compliance, based on A Ilusão da Conformidade, distinguishes declared conformity from protection that remains effective under pressure. The distinction is especially important for leaders who receive polished reports from operations that have not been tested at the point of risk.

What evidence shows that compliance has replaced control?

Leaders do not need another generic culture survey to detect this pattern. They need questions that connect records with operating reality.

The stronger interpretation is harder to produce because it requires ownership after the activity ends. It also creates uncomfortable information, which is why a leadership team must decide in advance how it will respond when field evidence contradicts the dashboard.

How should an EHS manager test the gap in one operating week?

An EHS manager can run a focused review without launching a large campaign. Select one high-consequence task that occurs across shifts, identify the formal controls, and observe the task at more than one point in the operating cycle.

• Compare the written method with the sequence used by experienced workers and new workers.
• Ask which step is most often delayed, skipped, or adapted, and why that adaptation is useful.
• Trace one concern from discovery to decision, including who could approve a temporary control.
• Review whether the supervisor had enough time, competence, and authority to stop or redesign the task.
• Return to the team with the control change, the owner, and the date on which effectiveness will be checked.

The review should not become a hunt for individual fault. Its purpose is to identify where the management system makes the approved method less workable than the workaround. That is the point at which a culture problem becomes a design problem that leaders can address.

How do leaders keep the correction from becoming another ritual?

A correction becomes another ritual when it produces a new form, briefing, or promise without changing the conditions that generated the gap. The organization then adds visible discipline while preserving the original exposure.

Effective follow-through has a narrower shape. The owner names the decision that must change, the operating team confirms what will be different, and a field check tests the new condition after the work has returned to normal pressure. If the control fails, the response is redesign rather than another reminder.

Workers need to hear what happened to the concern they raised, which decision changed, and who remains accountable. A safety culture becomes credible when people can see that inconvenient information changes work, not just meeting minutes.

Leaders can deepen this practice through the five decisions that reveal when compliance has replaced control and by comparing it with the six blind spots that make operational change unsafe.

What does this mean for senior leadership?

Senior leaders do not need to inspect every task, but they do need to govern the quality of evidence reaching the decision table. A dashboard that reports activity without exposure, ownership, and verification can make a weak control system appear mature.

Across 25+ years of executive EHS experience, Andreza Araujo has positioned safety culture as an operating system rather than a communication campaign. Her experience, including a documented 50% accident-ratio reduction at PepsiCo South America in six months, should not be converted into a promise that one intervention produces the same result elsewhere. It supports a sharper leadership principle: outcomes improve when leaders change the conditions that shape repeated decisions.

The board and executive team should ask whether safety information is reaching them early enough to influence work. If every report arrives after closure, every metric is aggregated beyond action, and every concern is translated into a training request, the organization is protecting the appearance of control.

How can a safety culture become more credible?

A credible safety culture is not the one with the most completed activities. It is the one that makes weak controls visible, gives people a workable way to respond, and verifies whether leadership decisions changed the exposure.

When compliance records are treated as evidence rather than proof, leaders can distinguish attendance from competence, closure from effectiveness, and visible discipline from decision quality. That shift moves safety culture from declared intent toward control that survives real work.