www.irishrail.ie managing the risk of organisational accidents peter cuffe chief safety &...

61
www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail [email protected] International Railway Safety Conference 2007 Goa, India

Upload: steven-mccall

Post on 26-Mar-2015

215 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

www.irishrail.ie

Managing the Risk of Organisational Accidents

Peter CuffeChief Safety & Security Officer

Irish Rail

[email protected]

International Railway Safety Conference 2007

Goa, India

Page 2: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Railway Organisation

Safety Professionals

Society

Page 3: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Individual Accidents– A specific persons– Agent and victim– Limited scope

Organisational Accidents– Multiple causes– Many people– Devastating consequences– Often a product of technological innovation

Page 4: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Organisational Accidents are the result of

highly complex coincidenceswhich are rarely foreseen

by those involved.They are unpredictable because of

the large number of causes and the spread of information

over all the participants

Page 5: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International
Page 6: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Cost of Protection greatly exceeds the dangers

Page 7: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Cost of Protection greatly exceeds the dangers

Protection falls far short

of required level

Page 8: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Better defences convert to improved

production

Page 9: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Better defences convert to improved

production

Post Accident response measures

Page 10: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Better defences convert to improved

production

Post Accident response measures

Relaxation with further improved

production

Page 11: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Better defences convert to improved

production

Post Accident response measures

Relaxation with further improved

production

Catastrophic Disaster

Page 12: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Examples of Improved Production

• Invention of the Davy Lamp– Extract coal from

more dangerous areasMine accidents increased

• Introduction of Marine Radar– Travel faster in fog or busy waters

Marine history littered with “radar assisted” collisions

Page 13: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Dangers of the Un-Rocked Boat

A lengthy accident-free periodSteady erosion of protection

Easy to “forget to fear” Increasing production,

without extended defences, will erode safety margins

Page 14: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Production v Protection

Partnership is rarely equal– Production creates the resources for protection

Process managers have production skillsProduction information is:

Direct, Continuous & Easily Understood

Page 15: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Production v Protection

Partnership is rarely equal– Successful Protection shown by

Absence of Negative Outcomes– Information is indirect or intermittent– Hard to interpret, often misleading– Awareness often driven by accident

or near-miss

Page 16: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Defences

Create Understanding & AwarenessGive Clear Guidance on Safe OperationAlarms & Warnings of imminent dangerRestore System to a Safe StateInterpose Barriers between Hazards & LossesContain & Eliminate HazardsProvide Means of Escape & Rescue

Page 17: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Defences

Create Understanding & AwarenessGive Clear Guidance on Safe OperationAlarms & Warnings of imminent dangerRestore System to a Safe StateInterpose Barriers between Hazards & LossesContain & Eliminate HazardsProvide Means of Escape & Rescue

Defences-in-depth, successive layers, specific sequence

Page 18: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International
Page 19: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International
Page 20: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International
Page 21: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Holes are continuously moving

Defences can be deliberately removed:-Maintenance-Testing-During Failures

Page 22: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International
Page 23: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International
Page 24: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International
Page 25: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International
Page 26: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International
Page 27: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Latent Conditions

Poor DesignGaps in SupervisionUndetected Manufacturing DefectsMaintenance FailuresUnworkable ProceduresClumsy AutomationPoor TrainingInadequate Tools & Equipment

Page 28: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Active Failures v Latent Failures

• Immediate Effect• Shortlived Effect• Committed at the

“sharp” end, at the human-system interface

• Lie Dormant• No Impact until

local interaction• Spawned in the

organisation• Pervasive

Page 29: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

In aviation, there are foreseeable hazards:

Gravity,Weather, Mountains,

and Human Fallibility

Page 30: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Human Error v Non-Compliance

Error - an intrinsic part of the Human Condition

Error - distractionError – loss of situational awarenessError - deliberate

We all learn by “trial and error”– Necessary to push limits to establish

system characteristics

Page 31: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

We cannot change the Human Condition, but we can change

the Conditions under which Humans work.

Page 32: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Investigations

• Who ?• What ?• Where ?• When ?

• Why ?

Page 33: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

PRISMA

• Choose “Top Event” (Accident or Near-Miss)

• Determine Direct Causes• Determine Preceding Causes• Stop when the Facts Stop• Stop at limits of Organisational Control

Page 34: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

PRISMA – 23 Categories

• 4 x Technical• 5 x Organisational• 3 x Staff, Knowledge based• 6 x Staff, Rule based• 2 x Staff, Skill based• 1 x Customers• 1 x Public• 1 x Unclassifiable

Page 35: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

PRISMA – 23 Categories

• 4 x Technical• 5 x Organisational• 3 x Staff, Knowledge based• 6 x Staff, Rule based• 2 x Staff, Skill based• 1 x Customers• 1 x Public• 1 x Unclassifiable

Rasmussen’s SRK Model

Page 36: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Knowledge based Behaviour

• Unexpected or new situations• High attention level• Problem identification and solving• Situational awareness• Understanding of Process• Analytical ability

Page 37: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Rule based Behaviour

• Recognition of situation• Pattern identification• Medium attention demand• Training to ensure correct rule

application

Page 38: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Skill based Behaviour

• Reflex/automatic reactions• Long learning process• Low attention demand• Triggered by environmental signals• Unlearning very difficult• Stress resistant• Error prevention by environmental

change, not by altered behaviour

Page 39: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

PRISMA – 23 Categories

• Technical– External– Design (Ergonomics)– Construction/Maint.– Material (further

research required)

• Organisational– External– Supervision– Rules/Procedures– Management Priorities– Culture

Page 40: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

PRISMA – 23 Categories

• Knowledge Based– External– Process Status/

Characteristics (eg current permits to work)

– Improper Goals (eg making up for lost time by speeding)

• Rule Based– License/Certified

Competency– Incorrect Permits or

other Safeguards– Pre-work Status Check

not done– Work sequence

incorrect or incomplete– Failure to monitor other

system characteristics– Failure to use correct

resources

Page 41: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

PRISMA – 23 Categories

• Skill Based– Intentional

(eg typing error)– Unintentional

(eg leaning against controls)

• Customer(eg Inebriated passenger)

• Public(eg Suicide)

• Unclassifiable(eg Act of God)

Page 42: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

Poor staff instruction

Incomplete supervision

Culture of shortcuts

Time pressure

Page 43: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

Poor staff instruction

Incomplete supervision

Culture of shortcuts

Time pressure

Page 44: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

Poor staff instruction

Incomplete supervision

Culture of shortcuts

Time pressure

Page 45: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

Poor staff instruction

Incomplete supervision

Culture of shortcuts

Time pressure

Page 46: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

Poor staff instruction

Incomplete supervision

Culture of shortcuts

Time pressure

Page 47: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

Poor staff instruction

Incomplete supervision

Culture of shortcuts

Time pressure

Page 48: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

Poor staff instruction

Incomplete supervision

Culture of shortcuts

Time pressure

Page 49: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

Poor staff instruction

Incomplete supervision

Culture of shortcuts

Time pressure

Page 50: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

Poor staff instruction

Incomplete supervision

Culture of shortcuts

Time pressure

Page 51: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

OS Incomplete supervision

Culture of shortcuts

Time pressure

Page 52: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

OS OS Culture of shortcuts

Time pressure

Page 53: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

OS OS OC Time pressure

Page 54: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Causal TreePassing train caught cable and dragged

along platform

Cable draped over platform

Train on adjacent track

- Context

Staff unaware thatcable should not

be placed on plat. Plan not followed

OS OS OC OM

Page 55: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

PRISMA Applied to Chemical Industry, Healthcare and Railway (SPADs)

• Analysis 1: Historic investigation findings were re-classified into PRISMA terms.

• Analysis 2: The same incidents re-analysed with PRISMA, using existing Inspectorate files.

• Analysis 3: New incidents were analysed with PRISMA, using appropriate data gathering.

Page 56: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

0%10%20%30%40%50%60%70%80%90%

100%

Analysis1

Analysis2

Analysis3

Analysis1

Analysis2

Analysis3

Analysis1

Analysis2

Analysis3

Chemical industry Health care Railways

Study

Technical factors Organisational factors Human factors Other

PRISMA Applied to Chemical Industry, Healthcare and Railway (SPADs)

Page 57: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

0%10%20%30%40%50%60%70%80%90%

100%

Analysis1

Analysis2

Analysis3

Analysis1

Analysis2

Analysis3

Analysis1

Analysis2

Analysis3

Chemical industry Health care Railways

Study

Technical factors Organisational factors Human factors Other

PRISMA Applied to Chemical Industry, Healthcare and Railway (SPADs)

Page 58: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

0%10%20%30%40%50%60%70%80%90%

100%

Analysis1

Analysis2

Analysis3

Analysis1

Analysis2

Analysis3

Analysis1

Analysis2

Analysis3

Chemical industry Health care Railways

Study

Technical factors Organisational factors Human factors Other

PRISMA Applied to Chemical Industry, Healthcare and Railway (SPADs)

Page 59: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Reliability is InvisibleReliable outcomes are constant

There is nothing to pay attention toWe see nothing so ‘nothing’ is

happeningAnd nothing will continue to happen.

This is a deceptive diagnosis –Dynamic inputs create stable outcomes

Safety is a Dynamic Non-Event

Page 60: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Accidents do not occur because we gamble and lose,

but because we do not believe that the accident about to occur

is at all possible

Page 61: Www.irishrail.ie Managing the Risk of Organisational Accidents Peter Cuffe Chief Safety & Security Officer Irish Rail peter.cuffe@irishrail.ie International

Accidents do not occur because we gamble and lose,

but because we do not believe that the accident about to

occur is at all possible