Safety Indicators and Metrics: 5 Blind Spots That Hide Control Drift
A diagnostic F1 article for EHS managers and C-level leaders who need to tell activity counts from real control evidence before the dashboard creates comfort.

Key takeaways
- 01A useful safety indicator must show control strength, the right owner and the decision that should change when the number moves.
- 02Activity counts can rise while exposure stays the same, so more reporting is not proof of better safety.
- 03Metrics need data ownership, process ownership and decision ownership, or they only describe risk instead of governing it.
- 04Field verification is the fastest way to test whether the dashboard still matches the worksite.
- 05In 30 days, leaders can freeze the top indicators, write decision rules, sample records and verify the field before they trust the dashboard again.
A safety dashboard can look active while the operation still misses control drift. The real failure is not a lack of data, but a lack of decision logic that tells leaders what to change when the number moves.
The ILO and WHO still describe work-related harm at a scale measured in millions, which is why a dashboard that only counts activity can calm leaders for the wrong reason. Across more than 250 cultural transformation projects, Andreza Araujo has seen the same pattern repeat: the site reports more, the meeting looks busier, and the exposure barely changes. In Safety Culture: From Theory to Practice, the point is simple. Repeated decisions define culture more than the number on the screen.
This article is for C-level leaders, EHS managers and safety analysts who own the monthly review. If the dashboard is full but the field still surprises people, the problem is usually not the amount of reporting. It is that the metric system is rewarding motion instead of control.
What a strong indicator should do before anyone celebrates it
A useful safety indicator should do three things. It should show whether a control is holding, show who can act on the result, and show what decision should change if the signal weakens. If it does not do those three things, it may still be a record of work, but it is not yet a useful management signal.
That is the own thesis behind this article. The market often assumes that more observations, more audits or more closed actions equal better safety. The hole in that logic is that activity can rise while exposure stays the same, because a count records motion, not barrier strength.
James Reason helps here because latent conditions rarely announce themselves with a loud number. They live in the gaps between the declared rule and the daily decision. A metric that never reaches those gaps can look clean while the real risk drifts in plain sight.
Blind spot 1: the number counts activity instead of exposure
The first blind spot appears when the dashboard counts things people do, but not the risk those actions change. Inspections, talks, training sessions and observations all look productive, yet none of them proves that the hazard is smaller unless the control itself was verified.
That is why the article on leading indicators that look preventive matters here. A metric can grow while the worksite remains unchanged. When leaders mistake participation for protection, the dashboard becomes an attendance record with a safety label.
The trap is seductive because it feels disciplined. More entries, more charts and more green cells create the impression of control. In practice, the site may only be better at documenting effort than at reducing exposure. The same pattern shows up in KPI theater, where the score improves faster than the work condition.
Blind spot 2: nobody owns the number after the meeting
The second blind spot appears when the metric has a reporting owner but no decision owner. EHS may publish the number, operations may review it, and the site leader may praise the trend, yet nobody is named to change the condition that the number reveals. In that setup, the metric describes risk without governing it.
The useful test is simple. Ask who owns the data, who owns the process and who owns the decision. If those three roles collapse into one vague responsibility, the dashboard is already weaker than it looks. It may be accurate, but it is not managerial.
This is where Andreza Araujo's practical experience matters. In more than 250 cultural transformation projects, the same weakness appears in different clothes: people believe the system is managed because it is reported. In reality, a reported number without a named decision path is just a shared observation.
Blind spot 3: field verification never happens
The third blind spot appears when the score is trusted without a field check. A completed checklist or a closed action can prove that someone used the system, but not that the control works under normal pressure. If the site never samples the work area, the dashboard can drift away from reality and nobody notices until an event forces the conversation.
The article on safety dashboard blind spots hiding fatal risk takes this one step further, because a dashboard without verification can become a comfort device. It tells leaders the process is healthy while the field keeps its own logic.
A better routine is to sample a few records and then walk the site. If the indicator says the control improved, ask workers what changed in the task, what changed in the tool, and what changed in the sequence. If nobody can name a field change, the metric may only be describing paperwork. That is also why the article on the KPI owner review matters, because the review should force field proof before the team celebrates a trend.
Blind spot 4: thresholds exist but decision rules do not
The fourth blind spot appears when a dashboard uses colors, targets or thresholds, but no one has defined the action that follows the result. A red cell without a response rule is decoration. It may look serious, but it does not move work, resources or supervision.
The article on how to run a safety KPI owner review in 14 days is relevant because it makes the missing link visible. If the metric changes and the decision stays the same, then the score is not a control trigger. It is only a report.
For fast-moving exposures, that delay matters. A monthly review can be too slow for work that needs same-shift action. If the team needs three meetings to decide what one weak signal means, the metric system is lagging behind the hazard it claims to manage.
Activity reporting vs control reporting
The difference becomes obvious when the same number is asked to do two different jobs. Activity reporting tells the organization that work happened. Control reporting tells the organization that the condition changed in a way that matters for exposure.
| Dimension | Activity reporting | Control reporting |
|---|---|---|
| What it counts | Tasks, events and completions | Barrier quality, field change and verification |
| Who acts on it | No one clearly named | One process owner and one decision owner |
| What a change means | More or less activity | More or less control strength |
| How leaders read it | As evidence of effort | As evidence of risk movement |
| What happens next | The meeting continues | The work plan changes |
This is also where the market often overreaches. A clean report is not the same as a safer site. A busier dashboard is not the same as a stronger barrier. The table exists to stop that confusion before it turns into a management habit.
What the C-level leader should ask in the next review
The next monthly review should not start with "How did the numbers go?" It should start with "What changed in the field because this number changed?" That question forces the team to connect the metric to a decision, which is the only reason the metric deserves board time.
C-level leaders should also ask who would be embarrassed if the number deteriorated, who would act within 24 hours, and what field proof would show that the response worked. These questions sound simple, but they expose whether the metric is connected to authority or only to reporting.
For a more detailed monthly structure, the article on the KPI owner review gives a practical sequence. Use that sequence to separate numbers that inform decisions from numbers that merely fill slides.
What to change in 30 days
Start by freezing the top five indicators that the executive team already sees. For each one, write the owner, the decision rule, the field proof and the escalation path. If any metric cannot pass that test, redesign it or retire it before it becomes a ritual.
Then sample three records per indicator and visit one location where the signal should be visible. The test is not whether the dashboard says green. The test is whether the field can prove the control changed. That is the difference between reporting and management.
In Safety Culture: From Theory to Practice, Andreza Araujo argues that repeated decisions define what the organization truly values. A metric system is one of those decision machines. If it rewards activity without control, it will train the site to look busy instead of becoming safer.
The next step is a short one. Choose one metric, assign one owner, define one field proof and enforce one decision rule. If you want support, start with Andreza Araujo at andrezaaraujo.com and move the dashboard back toward control.
Frequently asked questions
What makes a safety indicator useful?
Why do safety dashboards become misleading?
What is the fastest way to test metric quality?
Who should own a safety metric?
Which Andreza Araujo resource helps with dashboard review?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.