Question 1 of 7: Accident Causation Beyond Operator Error, OHSA Compliance Costs, and Uncovering Unsafe Conditions

Question 1: Accident Causation Beyond Operator Error, OHSA Compliance Costs, and Uncovering Unsafe Conditions (20 marks: 7/7/6)

Question text not reproduced: the examination questions are © Engineers and Geoscientists BC. Open the official past paper (linked at the top of this page) to read the question, then follow the worked solution below.

(i) Areas Beyond Operator Error, and the Rise of System Safety Engineering

The traditional view of accident causation focused almost entirely on the "unsafe act" of the person at the point of failure. Modern accident theory recognizes that operator error is only the last, most visible link in a much longer chain, and that failure equally originates in areas the operator never controls:

• Design deficiencies — inadequate factors of safety, poor ergonomics, missing guards or interlocks, components specified for the wrong duty cycle.
• Manufacturing and material defects — flawed castings, incorrect heat treatment, out-of-tolerance parts that pass inspection.
• Maintenance failures — deferred preventive maintenance, wrong replacement parts, inadequate lockout/tagout during servicing.
• Management system failures — absent or unenforced procedures, inadequate training, production pressure that overrides safety rules, poor supervision and communication.
• Environmental and organizational factors — poor lighting, noise, extreme temperature, understaffing, shift-work fatigue.

Recognizing that the "system" — design, manufacturing, maintenance and management — is as much a cause of accidents as the individual worker gave rise to System Safety Engineering (also called Systems Safety), formalized first in the U.S. aerospace/defence industry (MIL-STD-882) and adopted broadly across engineering practice, including the Canadian process and manufacturing sectors. System safety engineering treats safety as a designed-in system property, applied across the entire life cycle of a product or facility — concept, design, construction, operation, maintenance, and decommissioning — rather than as a behavioural add-on at the operator level. Its defining tools are proactive hazard-analysis techniques (preliminary hazard analysis, fault tree analysis, failure modes and effects analysis, job safety analysis — each examined further in Question 2) applied iteratively as the design matures, so that hazards from every contributing area (design, materials, process, human factors, and management) are identified and controlled before hardware is built and put into service, rather than being discovered only after an accident has already occurred.

(ii) Costs of OHSA Compliance That Smaller Employers Object To

Occupational health and safety legislation (in Canada, the various provincial/territorial Occupational Health and Safety Acts — Ontario's is literally titled the OHSA — supported by regulations, CSA standards such as Z1002, and enforced with the backing of Workers' Compensation systems) imposes real, ongoing costs on employers. Smaller companies (roughly 20–250 employees) most often object to the following categories, because the same absolute dollar figure is proportionally far heavier on a small firm's overhead than on a large one:

• Engineering control costs — machine guarding, ventilation retrofits, noise abatement, upgraded electrical/interlock systems — often capital expenditures a small firm cannot amortize over as large a production volume as a large firm can.
• Training and program-administration costs — mandatory orientation, WHMIS/hazard-communication training, joint health-and-safety committee time, record-keeping and documentation, all of which consume paid staff hours without directly generating output.
• Personal protective equipment — purchase, fitting, and periodic replacement (respirators, hearing protection, fall-arrest gear) across the whole workforce.
• Medical surveillance and monitoring — audiometric testing, exposure monitoring for chemical/noise/radiation hazards, and the specialist services (occupational hygienists, physicians) needed to run them.
• Compliance/inspection overhead and insurance — time lost to regulatory inspections and corrective-action follow-up, and workers' compensation/insurance premiums that rise with claims history regardless of firm size.
• Opportunity cost of production downtime — line stoppages for retrofits, permit-required work (e.g., confined-space entry), and incident investigations.

The objection is rarely that the standards are unnecessary in principle; it is that a small employer cannot spread a largely fixed compliance cost over as large a revenue base as a large employer, so the cost per unit of output — and hence the perceived return on investment — looks disproportionate, especially when the benefit (accidents that did not happen) is invisible and hard to attribute directly to the expenditure.

(iii) Uncovering the Unsafe Conditions Behind an Unsafe Act

An accident is conventionally modelled as the coincidence of an unsafe act (what the person did) and an unsafe condition (what the environment/equipment allowed). Because the unsafe act is what an untrained investigator sees first, the underlying unsafe condition is easy to miss unless the investigation deliberately digs for it. The condition is uncovered by:

1. Structured incident investigation — going beyond "who did what" to ask why the act was possible at all: was a guard missing, a warning device disabled, a procedure unwritten or unenforced, lighting inadequate?
2. Root-cause analysis techniques — the "5-Whys," fault tree analysis, and fishbone (cause-and-effect) diagrams that trace the immediate act back through contributing conditions to management-system root causes.
3. Proactive hazard identification — routine workplace inspections, job safety analysis of each task, and near-miss/close-call reporting systems that surface unsafe conditions before they combine with an unsafe act to produce a loss.
4. Employee input — workers performing the task daily are often the first to recognize a condition (a worn guard, a bypassed interlock, an awkward reach) that a periodic inspection would miss; joint health-and-safety committees formalize this channel.
5. Audit of the management system itself — checking whether procedures exist, are current, are trained on, and are actually followed in practice (a documented rule that is routinely ignored is itself an unsafe condition).

The pattern common to all five is the same: treat the unsafe act as a symptom, not the diagnosis, and trace it back through the physical, procedural, and organizational conditions that made the act possible or even likely.