When Safety Looks Good on Paper but Fails in the Field

The comfort of a complete system

A mature safety system needs policies, procedures, risk assessments, permits, records and assurance. Without them, expectations become inconsistent and important decisions disappear into memory. The problem begins when the production of documents becomes confused with the production of safety. A site can have a current procedure, a signed checklist and a high audit score while a bypassed trip, degraded barrier or impractical isolation remains in the field. Paper describes the intended system. It does not demonstrate that the operational system is working.

How bureaucracy becomes the product

Gregory Smith uses the idea of ‘paper safety’ to examine how organizations can become highly successful at satisfying bureaucratic demands while losing contact with operational risk. This does not mean forms are useless. It means incentives matter. If leaders reward closure rates, document counts and audit scores, teams learn to optimize those outputs. Corrective actions may be closed administratively, duplicated hazards may be reclassified, and inspections may focus on what is easy to record instead of what is capable of causing catastrophic harm.

Audit scores are not field conditions

An audit normally samples conformity against defined criteria. It can establish whether a process exists and whether records support its use. It cannot, by itself, establish that every critical control will perform on demand. A strong score may coexist with weak isolation discipline, lifting plans that do not match the crane configuration, or confined-space rescue arrangements that have never been exercised. Management assurance asks whether the system is designed and implemented. Operational assurance asks whether the barrier is available and effective at the point of work. Leaders need both.

Recognizing paper safety

Warning signs include rapidly rising documentation with no comparable increase in field verification, recurring overdue temporary controls, identical inspection findings across different work areas, and action systems dominated by low-consequence housekeeping items. Another signal is a gap between what managers hear and what crews experience. If every dashboard is green but workers describe missing equipment, rushed planning or routine workarounds, the discrepancy deserves investigation rather than dismissal.

A better assurance conversation

Leaders should select a small number of material risks and trace them from the boardroom to the job. Ask what could produce a fatal or life-changing outcome, which controls prevent or mitigate it, who owns each control, how its performance standard is defined, and what direct evidence shows it is working today. Then verify a sample in the field with the people doing the work. The goal is not to catch workers out. It is to test whether the organization’s assumptions survive contact with operations.

What leaders should do differently

Keep the documentation that makes work repeatable and accountable, but reduce duplication and make every required record serve a decision. Separate system audits from critical-control verification. Report degraded controls and temporary risk acceptance visibly, even when doing so makes a dashboard less attractive. Review the quality of action closure, not only timeliness. Most importantly, treat disagreement between paper and practice as useful intelligence. A credible safety system is not one that always looks complete. It is one that detects where it is incomplete before people are harmed.

Compare the paperwork with the job

Choose a process that scores well on paper and test it against one live job. Compare the permit, risk assessment and procedure with the equipment, people and conditions at the workface. Ask workers which parts help and which parts they work around. Treat each contradiction as evidence to examine, not an automatic fault by the worker.

Questions that test documentary assurance

Which document claims a control is present? Can the team show that control working? What information is copied without being checked? Which approval adds delay without reducing risk? What field evidence would cause leaders to revise the current audit conclusion?

A complete form is not a working control

Documents support safe work when they describe and control the job. A complete form is not evidence that the hazard is controlled.

Sources & Further Reading

Author/editor: Myaser HSE Hub Editorial

Last reviewed: August 4, 2026

Disclaimer: This article provides general HSE education. Apply applicable law, standards, engineering judgment and competent professional advice to your specific operation.