Safety Culture: 4 Rituals That Make Control Look Stronger Than It Is
Safety culture is revealed by the decisions that survive pressure, not by the rituals that look reassuring. These four rituals can make weak control appear mature.
Key takeaways
- 01Safety activity signals attention, but a control must be tested under the conditions in which exposure occurs.
- 02A safety walk is incomplete when its observations stop at assignment instead of reaching a verified decision.
- 03Pre-shift communication cannot create readiness when equipment, staffing, authority, or sequencing remain unresolved.
- 04Dashboards and recognition programs should be judged by the decisions and control changes they produce.
- 05Leaders can test any safety ritual by tracing its input, decision, authority, evidence, and feedback.
Safety culture is the pattern of decisions an organization repeats when work becomes difficult, urgent, or expensive. Rituals such as safety walks, opening talks, dashboards, and recognition events can support that culture, but they do not prove that exposure is controlled. The proof appears when leaders test whether those rituals change equipment, staffing, sequencing, authority, and follow-up.
A site can hold a polished safety meeting in the morning and release a poorly controlled job before lunch. It can complete thousands of observations while leaving the same design weakness untouched. It can report high participation and still teach supervisors that production pressure outranks a concern whenever the schedule slips.
That gap matters because visible activity is easier to count than control quality. Across more than 250 cultural transformation projects supported by Andreza Araujo, the practical question has remained consistent. What did the organization decide differently after the ritual, and what evidence shows that the decision changed the work?
James Reason's work on organizational accidents helps explain why the question must reach beyond individual behavior. A ritual may be performed correctly while latent weaknesses remain in planning, supervision, maintenance, procurement, or escalation. Edgar Schein's view of culture adds another test, because the repeated response to pressure teaches people what the organization truly values.
Why safety activity is not the same as safety control
Safety activity is visible work that signals attention. Control is a barrier whose condition can be checked under the circumstances in which exposure occurs. The two can reinforce each other, although they are not interchangeable.
A safety walk may reveal a missing guard, but the control improves only when someone with authority restores the guard and verifies it before the task resumes. A dashboard may show that inspections were completed, but the decision quality improves only when the inspection result changes priority, resources, or operating limits.
The distinction is especially important for leaders who inherit a mature-looking system. A clean calendar can hide weak decisions when every ritual is measured by attendance, completion, or presentation quality. The first diagnostic question should therefore be, “What operating condition did this ritual change?” If the answer is unclear, the ritual is probably functioning as reassurance rather than control.
Ritual 1: The safety walk that ends at observation
A safety walk becomes ceremonial when the walk itself is treated as the deliverable. Leaders visit the field, ask a few questions, record observations, and leave with a full list that no one has the authority or time to resolve.
The ritual looks strong because it creates contact between management and the worksite. It also produces photographs, records, and a sense that leadership is present. Yet presence does not remove a line-of-fire exposure, correct a defective design, or protect the time needed for a supervisor to coach a new operator.
Test the walk by tracing one observation to its consequence. Identify the original condition, the accountable decision maker, the temporary protection, the permanent fix, and the evidence that the fix worked under normal pressure. When the record stops at “action assigned,” the organization has measured intention rather than control.
The useful safety walk is not the one with the longest checklist. It is the one whose findings reach a decision that changes the work, with a verification date that matches the speed of the exposure. A critical barrier should not wait for the same review cadence as a low-consequence housekeeping issue.
Ritual 2: The opening talk that substitutes communication for readiness
Pre-shift talks are valuable when they clarify the task, the changed conditions, and the authority to pause or escalate. They become weak when a message is delivered regardless of whether the team has the equipment, competence, staffing, or time needed to perform the job.
The ceremony often sounds responsible. The supervisor reads the topic, asks for questions, collects signatures, and starts the shift. The team may still lack a tested rescue route, a replacement component, a clear interface with a contractor, or a decision about conflicting priorities.
Readiness cannot be announced into existence. Ask the supervisor to show what changed because of the talk. Did the sequence change? Was a control repaired? Did the team reject the original plan because the field condition was different? Did someone receive authority to stop the job without waiting for a distant approval?
When the answer is no, keep the communication but do not call it control verification. A talk can align attention, whereas readiness requires evidence that the task can be executed safely in the conditions that actually exist.
Ritual 3: The dashboard that rewards completion instead of protection
Dashboards become ceremonial when the easiest numbers dominate the discussion. Completion rates, training hours, inspections, and meeting attendance may all be useful, but none of them automatically shows that a serious exposure became less likely or less severe.
The problem is not that activity indicators are false. The problem is that they can become the only evidence leaders see. A site may report every inspection as complete while the same critical control fails repeatedly because the inspection does not test function, availability, or performance during the task.
A stronger dashboard connects activity to a decision boundary. For each important indicator, ask what result should trigger additional resources, a work pause, a design review, or executive escalation. Then sample the underlying evidence rather than accepting the aggregate number as proof.
This is where the distinction between leading indicators and dashboard theater becomes practical. A useful measure changes what a leader does next. If the number rises or falls without changing a decision, it may be describing the management system rather than protecting the workforce. Leaders can use the leading-indicator diagnostic to test whether an early signal still reaches an operating response.
Ritual 4: Recognition that praises reporting without checking learning
Recognition programs can strengthen a culture when they reward people for identifying exposure, helping a colleague, or improving a control. They become ceremonial when the award is attached to reporting volume, polished storytelling, or visible enthusiasm rather than to a verified improvement.
A high reporting count may indicate trust, although it can also indicate that the same hazard is recurring. A low count may reflect stable work, or it may show that people have learned that reporting creates delay, criticism, or no response. The number alone does not settle the question.
Recognition should therefore follow the decision trail. What was reported? What did the responsible leader decide? Which control changed? Was the person who raised the concern told what happened? Did the organization check whether the new arrangement worked during the next period of pressure?
When recognition stops before those questions are answered, the organization rewards the appearance of participation. That can teach employees to optimize the story instead of improving the condition, especially when leaders celebrate activity more consistently than they verify results.
How leaders can test a ritual before calling it mature
Each ritual should pass the same five-part test, even when the format is different. The test is simple enough for a plant manager to use during a weekly review and specific enough to expose cosmetic compliance.
- Input: What information about the work entered the ritual, and who supplied it?
- Decision: What decision was made because that information was available?
- Authority: Could the person responsible for the condition change it, or was the action assigned to someone without control?
- Evidence: What proves that the barrier or work condition changed?
- Feedback: How did the team learn what happened after the concern, observation, or result was raised?
The test should be applied to a small sample, not to every record. Choose one recent safety walk, one pre-shift talk, one dashboard exception, and one recognition event. Follow each from input to verified consequence. The disagreements you find are often more useful than another aggregate score.
A mature system can tolerate a ritual that produces no immediate change when the reason is explicit. The team may decide that the condition is acceptable, that another control is stronger, or that the exposure needs monitoring rather than intervention. What matters is that the decision, owner, evidence, and next review are visible.
What to change when a ritual is mostly ceremony
Do not cancel every ritual as soon as it reveals a weakness. The better response is to redesign the connection between the ritual and the decision it is supposed to support.
First, remove measures that reward volume without consequence. Then define the evidence that must accompany a critical observation or exception. Give the responsible role enough authority to change the condition, and create an escalation route when the decision exceeds that role.
Leaders should also protect the time required for verification. A control that is “closed” only because the record was updated is not closed in the field. The person who performs the work should be able to describe what changed and what to do when the new arrangement no longer fits.
The safety-culture survey diagnostic is useful here because reported confidence should be compared with observed decisions, not treated as a substitute for them. The gap between what people say and what the work permits is often the first sign that a ritual has become stronger than the control underneath it.
How this changes the leader's weekly review
A weekly review does not need more ceremony. It needs a few questions that force activity to meet evidence. Ask which ritual produced a meaningful decision, which critical exposure remained unchanged, and where a person was asked to own an outcome without having authority over the condition.
Review one unresolved item in the field rather than reading every completed action. Invite the supervisor and the worker who performs the task to explain the current arrangement. If their descriptions differ from the dashboard, treat the difference as decision evidence rather than as a reporting defect.
Across Andreza Araujo's executive EHS experience, including more than 25 years in multinational operations, the strongest cultural shifts have not come from adding another campaign. They have come from making the response to evidence clearer, faster, and more credible for the people who must work within the system.
Conclusion: make the ritual prove the control
Safety rituals are useful when they help an organization notice exposure, make a decision, and verify the result. They become dangerous when their completion creates confidence that the underlying work has not earned.
Leaders should judge a safety walk, opening talk, dashboard, or recognition event by the change it produces under pressure. If the ritual cannot show who decided, what changed, and what evidence confirms the change, it is a communication activity that still needs a control connection.
Andreza Araujo's book Safety Culture: From Theory to Practice develops this difference between declared culture and operating culture. Explore Andreza Araujo's safety leadership resources for further guidance on turning visible commitment into field-level practice.
FAQ
What is a safety ritual? A safety ritual is a repeated activity that signals attention to safety, such as a safety walk, pre-shift talk, dashboard review, or recognition event. It supports control only when it changes a decision or verifies a working barrier.
Why can safety rituals create false confidence? They can create false confidence when completion, attendance, or reporting volume is treated as proof that exposure fell. Visible activity is easier to count than control performance, so leaders must trace the activity to a verified change.
How can a leader tell whether a safety walk is effective? Trace one observation from the original condition to the accountable decision, the control change, and field verification. If the record ends at an assigned action, the walk has not yet demonstrated effectiveness.
Are safety dashboards useless? No. Dashboards are useful when their indicators have clear decision boundaries and the underlying evidence is sampled. A dashboard becomes weak when it reports activity without showing what leaders do when the result changes.
Should organizations stop safety recognition programs? Not necessarily. Recognition can reinforce useful reporting and control improvement, although it should follow the decision trail and verified result rather than reward volume or polished presentation alone.
Frequently asked questions
What is a safety ritual?
Why can safety rituals create false confidence?
How can a leader tell whether a safety walk is effective?
Are safety dashboards useless?
Should organizations stop safety recognition programs?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.