Understanding your process data, filtering the good from the bad and detecting when there are true problems coming to light should not be like hand-sorting grains of rice.
Yet I hear this question frequently, “We have a large database and we would like to ……..?”
When I ask what processes are being measured and what data are tied to the process’ outcome, the answers are often very vague if not delayed with a, “I will get back with you, good question.”
Now most of us our good at tracking outcomes (often because we are required by Regulations) like:
… number of defects
… costumer complaints
… OSHA recordables
… Sentinel Events
With tracking outcomes however, comes the data merging error that hides the fact that all rice does not come from the same fields and cannot always be included in the same analysis. For example:
… we had a wonderful month with lower injuries in July per assigned employees.
Problem: Cannot compare the number of employees assigned in July with the other months because we had a 2 week plant shutdown.
… we count all defect opportunities and perform frequent audits but the leading indicators do not seem to predict the change.
Problem: Not all audits are created equal. Often leading indicator metrics are too global and general. In other words, “just plain rice”. When you see indicators change but there is no correlation to your lagging output metrics, stop and Go Out And Look (GOAL) at the tasks being performed to identify the correct leading metrics.
This is just the tip of the iceberg when looking at wrong data collection thoughts. Just remember just because you collect lots of data does not mean this a good thing…. you just get more grains of salt to sift through.
Below are two presentations to dig a little deeper in this thought process.
I also found it interesting that many of the investigators said that performing a good investigation and seeing people jobs get better (safer) was reward enough.
However, if managers want good investigations, shouldn’t they be rewarding what they want? Isn’t this basic management?
Therefore, one major improvement that management should consider for improving investigations is to start a systematic evaluation of investigations and rewards for good investigations.
The Associated Press reported that MSHA cited Massey Energy for failing to report 20 accidents at the Upper Big Branch Mine. These violations were found as part of the investigation into the accident earlier this year that killed 29 workers.
The story also says:
“Separately, MSHA said Tuesday it is fining a Massey Energy subsidiary more than $542,000 for violations that contributed to a fatal accident at a Virginia mine in 2009.
The accident occurred Aug. 20, 2009, when the mine was owned by Cumberland Resources, which Massey acquired in April.”
. . . . .
Once again, finding and fixing the causes of accidents before a major accident happens could have saved lives and big bucks!
Most of this cost ($17 billion) was for direct costs associated with increased patient care due to the error.
In other words, medical facilities had a $17 billion increase in revenue because they made mistakes.
Until recently, insurance and medicare/medicaid paid for correcting errors. Thus the only financial incentive to reduce errors was to reduce malpractice claims.
Because malpractice claims were not soon and certain, the incentive to improve systematically just didn’t exist.
This may be changing because Medicare/Medicaid and some insurers are starting to eliminate payment for at least some types of errors. Thus, medical facilities will have a financial incentive to prevent these errors.
We’ll watch to see how this improvement goes based on economic incentives.
By the way … these costs don’t include medication errors.
If you are at a medical facility and would like to learn more about improving performance and stopping sentinel events, consider attending the TapRooT® Summit in San Antonio, TX, on October 27-29, 2010.
The EHS & Safety News America reported that a safety manager was indicted for one count of involuntary manslaughter after a fatality at a facility in Ohio.
For an individual. involuntary manslaughter carries a maximum penalty of up to five years in jail and a $10,000 fine.
Two TapRooT® trained former detectives will share information you need to know about dealing with the aftermath of a fatality.
After the course (October 25-26 in San Antonio), consider attending the TapRooT® Summit to learn best practices to prevent fatalities at your facilities. For more Summit information, see:
USA Today published an article about the recent crash that killed ex-Senator Ted Stevens and the hazards of flying to remote locations in Alaska.
The story mentioned several reasons for improving safety in Alaska but missed one. What is the one they missed? TapRooT®.
Back in 2002 we licensed The Medallion Foundation to teachTapRooT® and use it to investigate aviation accident in Alaska.
Then in 2003, we licensed the FAA in Alaska to use TapRooT® for accident investigations.
Now they cooperate in their investigative efforts to improve aviation safety in Alaska.
How has TapRooT® Helped improve Alaska aviation safety? Attend the TapRooT® Summit and find out. Dennis Ward, Executive Director of the Medallion Foundation and a certified TapRooT® Instructor, will present “Improving Performance by Analyzing Multiple Aviation Accidents for Common Causes” in the Investigation, Troubleshooting, and Root Cause Analysis Track. His talk explains the use of TapRooT® to find deeper meaning from the analysis of multiple accidents.
This is part of The Medallion Foundation’s efforts to improve the safety culture of the aviation industry in Alaska. Their web site has the following information:
“The Medallion Foundation is a non-profit organization promoting aviation safety through systems enhancements by providing management resources, training, and support to the aviation community. Our mission of reducing aviation accidents is fostered by research, analysis, education, auditing, and advocacy of Safety Management Systems and higher flight-training standards.”
It also says:
“The Medallion Foundation provides specific training classes, one-on-one company mentoring, and auditing in conjunction with and supplemental to the Five-Star / Shield programs. Courses such as System Safety, Safety Officer, Flight Risk Management, and TapRooT® Root Cause Analysis are offered as prerequisites for the Star Programs.”
OK … I added the emphasis on TapRooT®. But hearing how Dennis used TapRooT® to find significant Generic Causes of accidents from their root cause analysis, will help you understand why I put emphasis on using TapRooT® as a fundamental part of any improvement program.
I was just looking at a “Best Practice” from a nuclear utility about
trending …
Oh No!
I saw lot’s of “bad practices” listed as best practices.
What happens if you adopt a bad practice as a good practice? You get bad result! And when those bad results are related to trending it means that you will waste effort responding to trends that don’t exist and miss trends that do exist.
I won’t say which nuclear utility it was, but you need to be careful when accepting advice about trending – I’ve seen lot’s of bad practices out there.
Let’s talk about just a few of the “bad practices” that were recommended in this industry “best practice” …
1) They mentioned Pareto Charts but didn’t mention the 80/20 rule (Pareto Principle) that it is based on and how it controls the use of Pareto Charts for choosing which targets to attack first. This could lead to choosing items to improve that really are NOT that significant.
2) They recommend pie charts and matrixes to analyze data. I would never recommend using these as the appropriate Pareto Chart would be much better (and you only have to learn a single method for analysis).
3) For trending over time they recommended a mixture of techniques including making “trend lines” with linear, second order, third order, and fourth order polynomial approximations. This will lead to false trends and management knee-jerk reactions. (Just what you are trying to avoid.)
4) They then made a graph that looked like an XmR Chart or Process Behavior Chart but they didn’t provide the proper mathematical methods for setting the Upper Control Limit (UCL) which we call an Upper Process Limit (UPL).
They said:
“The UCL for each trending category and subcategory is set by mutual agreement between the trend group and the line organization responsible for the program, process, or issue that category or subcategory represents. Organizations typically started with initial UCL calculated on the basis of the mean over a specified time frame (usually 18 months) plus two standard deviations above the mean …”
Ahhh! This is exactly what Dr. Deming said NOT to do. Management arbitrarily setting and changing limits.
The 3 sigma limits were proven by extensive testing by Dr. Walter Shewhart back in the 1930’s. This has been accepted by quality experts around the world. Why would the nuclear industry “best practice” choose a different basis (and not explain how they chose to derive it). All this new standard will do is cause more “false alarms” and more knee-jerk reactions.
5) They didn’t show any appropriate techniques for trending infrequent data. This can lead to missing serious trends and management believing that they can’t detect trends in infrequently occurring data. (And thus even more knee-jerk reactions.)
Why is this bad practice that is represented as a good practice so troubling? Because we have been teaching best practice trending techniques based on a foundation of science and accepted math for over a decade. Everyone in the nuclear industry should now have someone at their plant that understands these advanced trending techniques. Yet no one has challenged this false “best practices.” Some are probably thinking about adopting it!
Where can you learn the advanced trending techniques that can help you understand and improve your facility’s performance? At this pre-Summit course:
Don’t miss this course that is only offered once a year.
Also, please don’t think that this course is ONLT for nuclear industry root cause analysis trending. It will work in any industry. We’ve had attendees appy it at:
Hospitals
Mines
Oil Refineries
Oil Platforms
Manufacturing Facilities
Chemical Plants
Utilities (fossil and transmission & distribution)
Almost everyone would agree that backlogs of incident investigations and corrective actions are BAD. Imagine if you have another accident while you are waiting for a corrective action to be completed.
Therefore a measurement of the backlog could be used as a performance measure.
But how do you measure “backlog”?
Let’s start with incident investigation backlog.
First, one measure is the oldest outstanding root cause analysis. But one hard investigation doesn’t necessarily mean that you have a bad program.
Therefore, second, people tend to measure the average time to complete an investigation. This could be measured using a twelve month rolling average.
But an average time doesn’t say much about the total number of investigations outstanding. So some use the total number of investigation not completed as a program measure.
One additional idea is to measure the total number of investigations overdue (beyond some standard for completion (i.e., 30 days or 90 days).
Who knew measuring backlog could be so hard?
Corrective action (improvement) backlog is very similar … Longest outstanding item, average time to complete an item, total number of outstanding items, and total number overdue.
Actually, measuring all of these is a good idea. And trending them using advanced trending techniques is a great idea! (Training on advanced trending techniques is available prior to the Summit in October.)
Come and learn best practices in Behavior Change and Stopping Human Error at the 2010 TapRooT® Summit. Sign up for this track and be part of these dynamic best practice sessions. (Read bios of the presenters on the Summit website):
Combining TapRooT® with INPO’s Error Prevention Tools to Improve Human Performance
Rob Fisher and Ron Pryor will discuss how Alcoa Davenport Works improved performance by using TapRooT® tools to identify vulnerabilities, and known error reduction techniques to reduce the probability of events related to human errors.
Influencing Without Authority
Chris Vallee will be leading this interactive lecture and workshop. Ever heard these statements:
If only management would do the right thing!
The employees will not follow the rules unless being watched!
If the EHS/HSE department were not placed under XXXX in the Organization, I could get something done!
Management supports every corrective action after an incident happens.
Guess what? You have more control and influence than you realize:
1. Learn about influence Networks that make sense (it is not always about the job title).
2. Learn how to perform a Stakeholder Analysis (it is amazing how different this is from your actual company’s organizational chart).
3. Discuss live examples where it worked.
4. Decide what your next step is to influence without authority.
Practice Fixing Human Performance & Behavior Problems: An Interactive Exercise Session
Chris will also be leading this workshop … a time to put it all together. Here’s what attendees will work on:
1. Listing burning issues and discussing:
What’s been tried
What worked
What did not work
2. Based on what’s learned that week, you’ll identify what may be the gap between the issue AND solution.
Be prepared to dig deeper than the surface
Work with your industry AND outside industry peers
Work with the available* Behavior and Human Error presenters
(* some presenters are only present the day of their presentation)
Plan a follow up session
Coaching Skills to Sustain Behavior Change
Executive Coach Jennifer Mounce is returning to the Summit for the second year. Participants walk away from this session with coaching skills and a coaching model that can be used in any work environment to support creating behavioral change in the workplace.
Human Factors & Behavior Change Best Practices
Ralph Brickey will be presenting Ideas for Changing Behavior When Working Outside Western Culture. This session will explore issues of working with conflicting cultural thought when seeking to establish norms for investigations and implementing change in other cultures. Through a simple exercise participants will first examine a few of their own western “norms” and then apply these in a case study involving an investigation of a confined space incident that resulted in the deaths of two workers in an eastern culture.
But that’s not all for this session, Tom Brower will also be presenting Practical Human Factors Lessons Learned.
Measuring Fatigue Using FACT
Rainer Gutkuhn from Circadian Technologies will be presenting this best practice session. There is now a global body of scientific evidence that shiftwork in the 24/7 workplace is a high risk occupational safety exposure, and that the development of Fatigue Risk Management Systems (FRMS) has emerged as the internationally accepted standard for managing the inherent costs, risks and liabilities of shiftwork. This session will review the new ANSI standard for FRMS in refining and petrochemical industries, as well how the other industries as diverse as Aviation, Railroads, Mining and Utilities are implementing Corporate FRMS systems as a continuous improvement process. It will also provide examples of fatigue management tools that can provide the analytics needed to ensure the success of programs for optimizing shiftworker health, safety and quality of life.
Using Mistake Proofing to Stop Human Error
Dr. John Grout will present how significant injuries are avoided and dollars are saved by companies around the world when they implement simple ideas that either eliminate the chance for a mistake to occur or make a mistake easy to detect. This concept (and the techniques that generate these simple fixes) is called Mistake-Proofing. It is also known as Poka-Yoke (pronounced POH-kah YOH-kay). This session will help you find practical, effective ways to remove the opportunities for error. What will you learn?
· Why we make mistakes
· Basic concepts of mistake-proofing
· Where mistake-proofing works well and where it does not
· Where mistake proofing fits in your quality or safety toolbox
· How to create poka-yokes that solve quality or safety problems
Lesson Learned About Human Factors & Generic Causes from Recent Airline Incidents
Brian Crawford and Ken Turnbull will present this session about recent airline incidents and lessons learned.
“Safety Culture” has been a topic of increasing interest since the term was first used in the report on the Chernobyl accident.
In 2004, the Institute of Nuclear Power Operations (INPO) published “Principles for a Strong Nuclear Safety Culture.” It outlines INPO’s expectations for utilities to maintain a strong, positive safety culture. See the document here:
From the INPO report, the principles for a strong nuclear safety culture are:
1. Everyone is personally responsible for nuclear safety.
2. Leaders demonstrate commitment to safety.
3. Trust permeates the organization.
4. Decision-making reflects safety first.
5. Nuclear technology is recognized as special and unique.
6. A questioning attitude is cultivated.
7. Organizational learning is embraced.
8. Nuclear safety undergoes constant examination.
These are similar to the Nuclear Regulatory Commissions work on nuclear safety culture, a sample of which is contained in this document:
Organizational learning (which includes root cause analysis) is my favorite safety culture topic. Here’s a quote from the above NRC document:
“The organization maintains a continuous learning environment in which opportunities to improve safety and security are sought out and implemented. For example, individuals are encouraged to develop and maintain current their professional and technical knowledge, skills, and abilities and to remain knowledgeable of industry standards and innovative practices. Personnel seek out and implement opportunities to improve safety and security performance.”
I added the bold to the text. And let me highligft it even more…
How do YOU demonstrate a good safety culture? For organizational learning, how do YOU:
Maintain your skills?
Remain knowledgeable of industry standards?
Learn new innovative practices?
And do you do this ONLY in your industry or do you look for learning across industries to find best practices?
Those who have attended the Summit and one of the pre-Summit special courses know that it’s a great place to maintain and advance your skills, network across industries, and learn best practices from around the world.
Therefore attending the Summit is a great way to show that you are supporting a strong safety culture.
Don’t contribute to a bad safety culture … Sign up for the Summit today. Register here:
I was talking to a root cause analyst the other day and they couldn’t see how budget cuts could cause a major accident (like BP Deepwater Horizon or BP Texas City). I had trouble explaining it because the cause-effect relationship is not direct.
Then I was talking to someone that wanted to attend the TapRooT® Summit. They said they couldn’t attend because the company had a new initiative to “cut costs.”
That got me thinking …
What if that person needed to attend the Summit because they were going to learn some best practice that could improve performance at their facility and prevent a major accident? If they don’t attend, they don’t learn. Then the accident is NOT prevented. Cost cutting has caused a major accident and nobody will ever know.
If you were thinking about attending the Summit but have had trouble because of budget cuts, ask again. Don’t let a budget cut stop you from your destiny – attending the Summit to prevent a major accident at your facility.
That small saving by not attending the Summit might be an expensive mistake that costs your company millions (or even billions) of dollars.
Associated Press reports that China’s mines have not suddenly become “safe” after China’s Premier ordered mining managers to go down in the mines with the miners.
The article says:
“State media have noted with surprising sharpness that none of the dead seemed to have been mine managers or bosses.”
“‘Who knew that every boss who goes into the shaft is a god: Flooding, explosions, whatever it is, they can always fly free,’ the official Xinhua News Agency said in a pointed commentary Tuesday.”
The other way the government has chosen to improve safety is to arrest management at mines with accidents.
Since neither of these tactics have improved safety … maybe it is time that someone try advanced root cause analysis? Perhaps Chinese mines could learn from this TapRooT® Success Story:
Of course, major accidents have bad outcomes. Now, many CEO’s should feel less secure after the recent BP Deepwater Horizon accident outcomes.
What and I talking about? Tony Hayward is “Standing Down” and accepting retirement after his leadership was questioned (see the BBC report at http://www.bbc.co.uk/news/business-10434908).
Previous BP CEO, Lord Browne, also “stood down” after the BP Texas City accident and a lawsuit over court testimony (personal in nature and not related to his BP work).
There are heated debates in many quarters about the criminal and personal liability that CEO’s should have for accidents at their companies, these developments should make CEO’s think about the risks that their employees face and their efforts to improve safety and environmental performance.
We already know that the BP Deepwater Horizon and BP Texas City accidents were preventable. We already know how to set up a world class performance improvement program. We already know how to apply advanced root cause analysis to analyze small problems and prevent big ones.
A CEO should make sure that his/her company is applying these improvement techniques and stopping major accidents before they happen.
What if they don’t?
They risk following in the footsteps of Lord Browne and Tony Hayward.
..”About one-fourth of the problems were things like infections and eye abrasions in contact lens wearers. These are sometimes preventable and can result from wearing contact lenses too long without cleaning them.”
..”Other common problems found by researchers at the U.S. Food and Drug Administration include puncture wounds from hypodermic needles breaking off in the skin while injecting medicine or illegal drugs; infections in young children with ear tubes; and skin tears from pelvic devices used during gynecological exams in teen girls.”
..”The most serious problems involved implanted devices such as brain shunts for kids with hydrocephalus (water on the brain); chest catheters for cancer patients receiving chemotherapy at home; and insulin pumps for diabetics. Infections and overdoses are among problems associated with these devices. Only 6 percent of patients overall had to be hospitalized.”
…”Malfunction and misuse are among possible reasons”
I read the article and then asked “AND”? There is so much more information that needs to be collected and compared.
… “is there damage with this equipment for children and adults?”
… “is there a difference between different manufacturers for the same types of equipment?”
…”what allowed 70,000 incidents to occur without having the root causes listed already?” …. yes I know there are patient and company privacy issues but that is not a good excuse!
One of the biggest trends in quality improvement was the term “The Cost of Poor Quality” tied with “Zero Defects”, with many COPQ financial models popping up in many Fortune 500 companies. In the safety world there was a similar drive with the term Cost of Compensation tied with “Zero Injuries” and OSHA driven recordables to be tracked.
The Quality Iceberg
The Safety Iceberg
Yet the focus for both safety and quality were lead by lagging visible indicators. In other words good or bad, the findings are just too late. You march your troops with the “Zero Defects” and “Zero Injuries” flags raised and once you reach your destination you turn around and see who and what equipment you have left.
Now don’t get me wrong, identifying and being able to comprehend the end damage is a vital part of the process and unfortunately not realized by some. It is just NOT where you should focus your drive and effort.
So what now you may ask? “Build quality in… do not inspect quality in!”
The phrase above often goes to deaf ears because it is misunderstand. “If you do not assess the quality of your work, then how do you know if it is to standards,” people would ask. “I have to trust everybody’s work?” In the safety world the phrase “Safety must be part of every action we do,” is often trumpeted. But how?!
Start with these 3 steps first:
1. First things first, Quality and Safety are NOT silo’s and they should work together. Setting up a task that can be worked efficiently, correctly and safely by employees is a combined goal and SHOULD NOT be competing goals.
To save money, many companies do not cross-train employee’s from different departments. Why not if it makes sense? For example, while many of our clients started using TapRooT® Root Cause Analysis in their safety departments first, the more people saw the process used, the more operations and facilities come onboard for the same training.
Now this cross-training concept also works in the opposite direction. As the quality department leaders started working with the safety, quality tools from Stakeholder Analysis to Force Field Analysis were also shared with the safety department. After all, inside all world class companies are different departments that are all part of the same company with one goal.
2. Building Quality and Safety into a process starts in the beginning stages of planning but can be recovered after the employees try to use an existing process (it just costs more time and money!).
When our clients use our Root Cause Analysis process to investigate defects and incidents it soon becomes apparent that the opposite of each one of our root causes are best practices that can be implemented proactively.
While most Quality Experts are excellent at mapping out front end value streams, process maps and spaghetti maps, there is often a gap in knowledge of research and industry best practices in human engineering, communication, procedures, training and work direction. So if you were a Quality Professional and had access to multiple experts in front of you everyday, would you utilize them? Here is small list of courses that can give you best practice access: Best Practice Courses
3. No process, no matter how well designed is perpetually stable and it must be audited/assessed periodically based on risk for unknown and known changes…. note: this is not the same thing as “inspecting in quality”!
This is one of the most misunderstood ingredients relating to Inspections.
If you have a hold point inspection that must be completed by an Independent Inspector BEFORE a task can be completed or a part received or shipped, you are admitting that you have a high risk potential that is not capable of being completely mistake proofed.
– OR-
You have a process or task where you have not truly identified the human and equipment behaviors with their associated Root Causes, and have decided that it is worth spending the extra money and time to inspect instead of fixing the problem. You refuse to build in quality.
Now this is not saying that you should not target high risk tasks proactively and continually audit or assess these areas to ensure nothing has changed or is different. This type of inspection must still occur.
TQM, TQC, TOC, PDCA, Six Sigma, Lean, Lean Sigma, MBO, 8D… just to mention a few Quality Programs many in the world of Quality have been exposed to…. but is it the name of or the effectiveness of the process that make a good Quality Improvement Program? Seems like a silly question until you have lived in the world of change.
…..”Six Sigma is not the same as TQM”
…. “Lean Six Sigma is definitely better than Six Sigma”
…. “Is it a Lean Project or a Six Sigma Project?”
Each new buzz was normally preceded by a period of frustration, low morale and a loss money followed by blame or a feeling of hopelessness. Often employee’s were also taught the term of “empowerment” which led to suggestions with no follow up by management. Each time a new process with a new name was introduced, we would “throw the baby out with the bath water.” So a new name was also perceived by many as reinventing the wheel in the name of rebuilding an Effective Quality Program.
So why reinvent the wheel? Why not forgot the name, identify the strengths and weaknesses of your current quality program processes and improve what really needs to be improved. This is the proper way to spend your money and time for the best return on investment and acceptance of your employees.
So the burning platform, pain and frustration felt by many in charge of ensuring quality processes sustain, is still a current issue addressed by many professionals that I met at ASQ World Conference this year. They were not arguing on whether it was 8D or Lean Six Sigma. The good thing is that many are realizing that numerous tools and processes previously divided into opposing teams can be combined without a large new program investment.
With that said one area of common interest by many at the ASQ Conference was Root Cause Analysis. The interest was not in how to calculate significance or sigma level because most there could calculate these with their eyes closed. The interest was in how to reduce bias, widen root cause perspectives and to add more qualitative substance behind the numbers. There were two Root Cause Booths at the conference….. guess whose booth had the most traffic, the TapRooT® Booth where we were able to share a portion of our process that could easily be combined with all the current processes listed above to gain more value and quality sustainability.
Every other week on this blog, I will dig a little deeper into current Quality Program frustrations. To help guide these posts to your quality needs, please chime in and post your issue of the week.
When we first released the new TapRooT® Book, I published a copy of the Table of Contents. After my article last week, some people have been asking, “What’s in the new TapRooT® Book?” To find out, go to this link:
“Meanwhile, company officials continued hammering home the message on costs. Mr. Shaw, the Gulf of Mexico head, made the point at a meeting for top managers in Phoenix in April 2008. His aim, according to an internal BP communication, was to instill a ‘much stronger performance culture’ in the organization, based on strictly managing costs and ‘this notion that every dollar does matter.’”
- – -
“A former BP engineer who retired last year said the Gulf of Mexico operation under Mr. Shaw became focused on meeting performance targets, which determined bonuses for top managers and low-level workers alike. The engineer says even small costs got targeted: BP no longer provided food at lunch meetings, and eliminated the fruit bowls that were offered as part of a healthy-living drive a few years earlier.”
- – -
Talking about pipeline leaks in Alaska … “The state [Alaska] also said it was ‘deeply concerned with the timeliness and depth of the incident investigation’ conducted by BP. It took four months to provide a report that other oil companies typically submit in two weeks.”
- – -
“Some think the cost drive affected safety. Workers had ‘high incentive to find shortcuts and take risks,’ says Ross Macfarlane, a former BP health and safety manager on rigs in Australia who was laid off in 2008. ‘You only ever got questioned about why you couldn’t spend less—never more.’ BP vigorously denies putting savings ahead of safety.”
- – -
“In a different context, BP had questioned the impact of its cost-cutting in the Gulf. After the 2008 incident on the Atlantis platform, BP’s internal report warned of lax safety oversight and tight budgets.”
“It concluded: ‘A key question to ask, especially with apparently minor and disconnected defects, is ‘What’s the worst thing that could happen?””
What does it take to maintain your TapRooT® Instructor certification? Every two years you must attend the TapRooT® Summit and one of the pre-Summit Courses.
Why? Because instructors need to understand the latest improvements in TapRooT® & not let their improvement skills rust away. TapRooT® Instructors are training the leaders of performance improvement in their companies. They need to continually sharpen their skills. After all, Capt. William Rodriguez said:
“If you’re not peddling, you’re going downhill.”
The Summit provides the knowledge that TapRooT® Instructors need by sharing the latest best practices as well as getting the latest 2-Day TapRooT® Course PowerPoint® slides (update your TapRooT® Course License).
But what about the pre-Summit Course? See the list at:
Instructors will especially appreciate the Advanced TapRooT® Techniques Course that teaches advanced ideas for defining causal factors (the hardest part of the TapRooT® System). They will also want to attend the Getting the Most from Your TapRooT® Software Course to learn the new Version 5 TapRooT® Software and the great new interface that reinforces the 7-Step Investigation Process that they teach in the 2-Day Course. Or they might pick one of the other courses that is really focused on a problem that their site is experiencing.
No matter what course you pick, you will learn skills that will help you lead your company’s improvement effort and you will maintain your TapRooT® Instructor Certification.
Then, of course, there is the Certified TapRooT® Instructor Track at the Summit. Linda Unger and I work hard to make sure that it includes very special session to help TapRooT® Instructors improve their skills and become even more valuable assets to their company.
This year the TapRooT® Certified Instructor Track includes:
TapRooT® Instructor Update (you get the new PowerPoint slides)
Legal Aspects of TapRooT® Investigations
What’s New in the TapRooT® Software
What Makes a Good Instructor Great?
Ideas for Leading Investigation Teams
TapRooT® User Best Practices
Police Tips for Leading Investigation Teams
Leadership Responsibilities for Each Step of the TapRooT® 7-Step Process
Planning Your Improvements
And don’t forget the five great Keynote Speakers that include Jeff Skiles, the Co-Pilot who helped land the “Miracle on the Hudson.”
Plus there are many chances for networking, benchmarking, and having fun.
Go to the Summit web site to get more information and to register:
I asked: “Do we need to wait for the completion of the Presidential Commission’s investigation to learn from the BP Deepwater Horizon Accident?”
OK … I know I will make some people mad with this answer but … Here’s the answer none-the-less.
NO – WE DON’T NEED TO WAIT TO LEARN.
First, let me say that as the many official investigations continue, we will learn more about the technical details of what happened. The equipment failures that cause the failure of the blowout preventer. The details of the tests that were performed and misused to justify replacing the mud with seawater. The design basis for the well design and construction decisions that turned out to be inadequate to prevent a blowout.
These are things that we will learn with time.
Thus, people aren’t completely wrong when they say – “Wait until the official investigations are completed.” “We don’t want to jump the gun and jump to conclusions without the facts.”
That’s sentiment is well and good.
But, they are missing my point.
We already know enough about some parts of the accident to be able to learn some important lessons. Lessons that we need to learn RIGHT NOW.
The first, and biggest, thing we can learn is that SAFETY CULTURE MAKES A DIFFERENCE.
We already knew that drilling in deepwater is dangerous. We knew this before the BP Deepwater Horizon accident. We certainly know it now.
The risk of a failure in deepwater is more than the risk of drilling on land or in shallow water. The deeper you go, the more complex it gets. Also, the higher the technology that you use. These facts make it more important to understand what makes a high reliability organization tick – what produces a good safety culture for these demanding environments.
I think everyone will agree with the previous paragraph.
Yet, BP did NOT take extra precautions in designing or constructing the well being drilled by the Deepwater Horizon. In fact (and we know this to be a fact from testimony already given), they didn’t take precautions that other companies take and are “standards” for drilling in deepwater.
What shortcuts did they take? Here are five that I think have already been proven:
1. The choice of the cheaper, but less safe design using a single liner for well completion. BP says this design had longevity advantages. But it was mainly FASTER and CHEAPER. This choice obviously was not about safety first. A well that experiences a catastrophic failure doesn’t need to be designed to last longer.
2. Using too few hangers to center the casing. I’m not a drilling expert but the experts TOLD BP that the six hangers were WAY TOO FEW and would make it almost impossible to get a good cement job.
3. Failure to circulate the mud fully prior to cementing. Fully circulating the mud is required by an API standard. Not circulating the mud fully was a safety shortcut (but it saved them time and, therefore, money).
4. Failure to run a cement bond log. If this was a standard well and everything had gone right, you might skip this safety step. But on a well that is deep, with a single casing, with too few hangers, and with a bad first test, skipping this test was inexcusable. They were leaving safety to luck. And they ran out of luck that day.
5. Failure to deploy the casing hanger lockdown sleeve. I haven’t heard why this wasn’t done. But BP and the Coast Guard/MMS investigators already know about it. I just haven’t been able to find the testimony (which is on line).
These are facts.
Of course, BP argues that MMS approved these shortcut. But errors at MMS don’t mean that BP was right and had a safe well design. The mistakes at MMS, if and when they occurred, are just additional failed safeguards that allowed the accident to progress.
Therefore, I’m not saying that these are all the shortcuts. There are MORE.
I’m saying that these shortcuts are sufficient to prove that, at least for this well’s safety, BP’s practices WERE NOT to make safety the highest priority.
The question remaining is … “Is this the BP culture or were the people drilling this well ‘outliers’ – rouge engineers and supervisors who were working outside BP’s culture.”
This is where I make a fairly safe assumption.
This well was so deep and so important that it couldn’t (and shouldn’t) slip underneath the radar of BP’s management. Fairly senior management (maybe not the CEO, but certainly some high up folks) must have known about the design decisions. In fact, I believe investigators will be able to show significant management pressure to get the well complete and move on to the next well. This pressure – without enough consideration for safety as an overriding priority – is the current safety culture at BP.
Thus even though they talk about ” …focusing on safety like a laser” and “We don’t do anything unless it is safe.” … the reality, which is reflected by the practices in the field, is quite different.
When I heard the BP America President say in Congressional testimony that:
“We don’t do anything unless it is safe.”
I knew that he didn’t really understand safety. Why? Because safety is never absolute. Everything we do has some risk.
Therefore, we can learn NOW. We can learn that SAFETY CULTURE IS IMPORTANT.
And there are important lessons that are common practice in high reliability organizations that all organizations facing high risk, high complexity operations must learn.
How do I know about these lessons?
I worked in a high reliability organization. The Nuclear Navy. And I “got it.”
I also studied human factors and organizational design and I understand why a high reliability organization function successfully.
But obviously, not everyone gets it.
I say obviously because repeated major accidents are proof that somebody doesn’t get it.
Therefore, from the “evidence” of their repeated serious accidents, I conclude that BP senior management doesn’t get it.
What can I do? I’m going to share what I know with anyone willing to listen and learn. BP if they are willing. Or any other company that faces potentially catastrophic damage if they are not highly reliable.
At the 2010 Summit in San Antonio on October 27-29, I will provide two presentations that takes learning about safety culture and performance improvement to the next level.
The first talk is a Keynote address to the entire Summit audience titled:
“Taking Improvement to the Next Level”
I already have part of this presentation developed but I’m adding to it daily. If you are responsible for improving safety, quality, equipment reliability, or production, you need to be at this talk.
The second talk is much more focused on safety culture and the secrets behind a high reliability organization. It is titled:
“Lessons Learned About Excellence & Safety From Admiral Rickover”
This presentation takes the PhD complexity of safety culture and high reliability organizations and makes it understandable and practical. This presentation details what’s made the Nuclear Navy work for all these years. It’s the secrets that Admiral Rickover understood (and many others in the Navy didn’t understand).
This second presentation is part of the Improvement Program Track. if you are interested in high reliability organizations and safety culture, make sure to sign up for it when you register for the Summit.
So, here is my overall advice …
Don’t wait to learn.
Start reviewing the facts that are available now and learn as much as you can as fast as you can.
Also, plan to attend the Summit in October (register now). The lessons you can learn there are too important to miss. They can help you save lives, your company’s reputation, and all sorts of headaches.
“A year after the deadliest accident in Metro’s history, the transit authority’s safety record has worsened, and officials acknowledge that there has been too little progress.”
Most investigators agree that blame makes an accident investigation more difficult. If someone thinks they are going to be blamed (and perhaps fired), they often provide less information than if they were in a non-blame environment.
Might the same concept be true for companies?
For example, did sending the Attorney General to the Gulf to start a criminal investigation of BP make BP less cooperative?
If you were a senior executive and you might face charges (environmental or corporate manslaughter), would you be open in a Congressional hearing?
It seems we are in the middle of “blame season” for the BP/Transocean Deepwater Horizon accident. But there is so much that could be learned about how an organization can prevent people putting cost and time pressure above safety. It seems a shame that blame should get in the way.
I understand the need for justice and the desire to punish corporate criminals, but if we start down this road, are we missing a chance to learn and prevent similar corporate culture accidents in the future?
“Exxon Mobil Corp. had spent $180 million by 2006 trying to drill the world’s deepest offshore well and walked away before finishing.”
“Company engineers concluded that the 30,000-foot well in the Gulf of Mexico’s Blackbeard West formation was just too risky. They were following the company’s rigorous safety system that was created after the Exxon Valdez oil tanker crashed.”
”’We basically decided that the well could not be safely continued based on what was in the well,’ said Exxon spokeswoman Cynthia Bergman.”
“At the time, analysts complained that the Irving-based oil giant didn’t have the guts to drill. But compare the $180 million cost to the roughly $3 billion Exxon spent on the Valdez spill, or the tens of billions that BP PLC will spend cleaning up the mess after a rig exploded in the Gulf of Mexico.”
I keep seeing comments by BP, other oil executives, and even environmental activists that we have to wait until the investigation is complete before we take action to prevent future spills in the Gulf.
Oil execs say that the proposed six month deepwater drilling moratorium is overkill. They believe they already have safeguards in place that go beyond the actions taken by BP. They argue that waiting for a final investigation is an unnecessary waste of time and a burden for those who will lose their jobs. They also explain that if rigs are moved to other non-US locations, that drilling could be disrupted for years.
However, environmental activists are saying the the drilling moratorium should cover all offshore drilling activities and should be extended until the blue ribbon Presidential Commission has completed their work. It took the CSB three years to complete their investigation of the BP Texas City explosion. Could we really wait three years to resume offshore drilling?
To me, it seems that there is lots of information already available. People who know our TapRooT® Instructors/Facilitators can understand how in a couple of weeks a dedicated, facilitated team could have a preliminary set of causal factors determined, identify areas where there is any uncertainty, and identify the root causes of problems where uncertainty is limited. This would provide significant learning without waiting years. The lessons could provide a basis for resuming drilling with interim compensatory corrective actions to assure better safety and environmental stewardship. I hate to see people lose their jobs and environmentally sound drilling be put off for no good reason.
What do you think? Do we have to wait for a Presidential Commission to learn? Or are there lessons learned that could be analyzed and applied now?
Let me know your thoughts by leaving a comment here.
Good morning. I sincerely want to thank NPRA’s Director, Lara Swett, for inviting me to join you this morning in what we all know is going to be a difficult but necessary conversation about a crisis in our nation’s refineries.
I appreciate the opportunity to speak to so many of you at one time, about a subject that’s important to all of us, and particularly now. The timing of this conference has turned out to be astoundingly fortunate — fortunate because this conversation and the remedies we all need to talk about can’t wait any longer.
The ringing in your ears an hour or two ago wasn’t just the alarm clock by your bed. It was a wake-up call for everyone in your business.
The headlines of refinery worker injuries and deaths on the job and of OSHA’s stepped-up inspections are sounding an alarm about an industry-wide problem — a problem that we are obliged to address.
Bluntly speaking: Your workers are dying on the job and it has to stop.
Speaking a little more gently, I want you to know that Labor Secretary Hilda Solis and OSHA Assistant Secretary David Michaels asked me to convey their appreciation to the safety and health professionals attending this conference. They… and I… realize that you strive every day to make sure your fellow workers go home safe and sound.
While you don’t always get credit for doing your job — how often do you hear “thank you” when no one gets hurt? — OSHA recognizes that you are America’s quiet heroes and you deserve our thanks.
After BP-Texas City, Have We Learned Anything?
Now, in spite of your efforts, we have to acknowledge that something is desperately wrong. The status quo isn’t working.
In the past three months alone, 58 workers have died in explosions, fires and collapses at refineries, coal mines, an oil drilling rig, and a natural-gas-fired power plant construction site.
OSHA is particularly concerned about the recent number of serious incidents at refineries that have scalded, burned or struck down your fellow workers. We are tracking these catastrophes and looking for trends — including problems resulting from aging facilities.
Since the BP Texas City explosion in 2005, OSHA has counted over 20 serious incidents in refineries across the country.
Last year, OSHA completed an investigation of a naphtha piping failure and release, in which the resulting explosion and fire seriously injured three workers; two other workers, relatively young at 49 and 53 years old, died. One of these two workers was killed in the explosion; the other struggled for 13 days in the hospital before dying from severe burns. Within the unit where this rupture occurred, OSHA discovered multiple pipes that were operating below their retirement wall thickness. In fact, the very line that ruptured had previously ruptured and had to be replaced a decade earlier. As this tragedy makes clear, this type of breakdown maintenance is simply unacceptable. Good mechanical integrity programs are absolutely essential to safe refinery operation.
In 2007, water freezing in liquid propane piping resulted in a jet fire and a rapid evacuation of the entire refinery. Three workers, aged 33, 35, and 42 were seriously burned and hospitalized. Investigators found that a Process Hazard Analysis team had recommended installing remotely operable shut-off valves, yet the recommendation was improperly closed as “complete” by the previous owner. In fact, the valves had not been installed at all. The lack of these shut-off valves impeded workers’ ability to control the propane release before it ignited. The refinery learned a hard lesson: It is essential to rigorously follow up on PHA findings to ensure that hazards are adequately controlled. Failure to abate serious hazards can have deadly consequences.
In 2008, at another facility, an explosion in a hydrocracking unit blew the head off a process water filter. The debris struck and killed a foreman; he was 53 and had been with the company for 30 years. OSHA’s investigation revealed that an inadequate start-up procedure had allowed hydrogen gas and air to accumulate in the top of the filter where it was likely ignited by pyrophoric deposits. OSHA learned that some operators had recognized the hazard and used an undocumented alternate approach that was actually safer, but the procedure had never been updated to incorporate the safer practice. The result of following the faulty procedure was a violent explosion and the needless death of a refinery worker – and a reminder that having safe, complete, and accurate operating procedures is essential to safe operations in process units.
What do these incidents have in common? They point to process safety-related problems and, most likely, systemic safety and health problems — in the company and in the entire industry.
Three Concepts for Change
In the brief time we have together this morning, I’m going to present you with three concepts that I believe can help you, as safety professionals, to save more workers’ lives.
First: Effective process safety programs and strong workplace health and safety culture are critical for success in preventing catastrophic events
Second: This industry needs to learn from its mistakes. We know the major causes and we know the remedies. Systemic reform is needed now.
Third — and I’m not telling you anything you don’t already know: Numbers don’t tell the whole story. Focusing on low DART rates alone won’t protect you from disaster. New metrics are needed.
Now, let’s explore these ideas a bit more.
Let’s look at Concept Number One: Effective process safety management systems and workplace safety culture are critical for success in preventing catastrophic events.
I’m sure you are familiar with the Baker Panel Report issued after the BP Texas City explosion. The panel dedicated considerable space to the importance of effective process safety systems and the need to build a strong corporate safety culture.
Process safety failures are typically low-frequency but high-consequence events. Our PSM systems have to be strong, and we can’t wait until we have an incident to discover that they were not.
To ensure strong PSM systems, we need to do a better job of identifying useful leading indicators. We all know the warning that “past performance is no guarantee of future success.” This is particularly true of the low-frequency, high-impact events that process safety programs guard against.
The petrochemical industry must continue to develop and track leading indicators to measure the performance and continuously improve process safety management systems. Recent work by the Center for Chemical Process Safety and API is a good start.
However, real progress will come when companies and industry groups can talk to the press about their progress on valid metrics instead of holding up their injury and illness rates after a disaster.
What it comes down to is organizational culture. To paraphrase Professor Andrew Hopkins (whose work you should all be reading), workplace culture is not just an educational program that gets everyone to be more risk aware and think “safety first.” Hopkins and the Center for Chemical Process Safety have defined culture simply as “the way we do things around here.”
What I’m talking about is a set of practices that define the organization and influence the individuals who make up the organization. It goes without saying, but I’ll say it anyway: Organizational safety culture must come from the top.
Next: Concept Number Two: This industry must learn from its mistakes.
OSHA has had in place a Refinery Process Safety Management (PSM)-National Emphasis Program (NEP) for nearly three years — since July 2007. Consequently, we are deeply troubled by the significant lack of compliance we are finding in our inspections, and with the number of serious refinery problems that continue to occur.
Time and again, our inspectors are finding the same violations in multiple refineries, including those with common ownership — a clear indication that concerns and findings are not being communicated across corporations or throughout the industry or even within different units in the same refinery.
Consistently throughout the course of the Refinery NEP,
we have found that over 70 percent of the citations fall into the top four PSM elements:
Mechanical Integrity
Process Safety Information
Operating Procedures
Process Hazard Analysis
Let’s talk about these top four elements:
In MECHANICAL INTEGRITY, problems include failure to perform inspections and tests, and failure to correct deficiencies in a timely manner. This is a particular concern given the aging of refineries in the United States.
PROCESS SAFETY INFORMATION, including failure to document compliance with Recognized and Generally Accepted Good Engineering Practices to keep process safety information up to date, and to document the design of emergency pressure relief systems.
OPERATING PROCEDURES: failure to establish and follow procedures for key operating phases, such as emergency shutdowns, and using inaccurate or out-of-date procedures.
PROCESS HAZARDS ANALYSIS, including lack of attention to human factors and facility siting, and failing to address PHA findings and recommendations in a timely manner– or, all too often, failing to address them at all.
A year ago, OSHA sent a letter to every petroleum plant manager in the country, informing them of these frequently cited hazards. Yet, a year after that letter went out, our inspectors are still finding the same problems in too many facilities.
I urge you to take advantage of this information, and to treat our stepped-up inspections under the NEP as an opportunity — to increase your focus on Process Safety Management to reduce the number and severity of process incidents in your facilities.
Finally, Concept Number Three: The problem with numbers.
In any business or organization, one of the problems we find when trying to measure performance is determining how and what we measure. Companies have good tools for measuring and managing personal, or “hard hat” safety, and the refining and chemical sectors have generally done well in this area.
Unfortunately, as we’ve discovered, having good numbers on your OSHA 300 logs doesn’t correlate with having an effective process safety program. The classic example of this is BP-Texas City, which had very good injury and illness numbers prior to the 2005 explosion. That tragedy, of course, revealed serious process safety and workplace culture problems at the facility.
Don’t misunderstand me: We need to keep reporting and tracking the numbers — DART rates are useful — but you must not let those numbers lull you into a false sense of security. Looking only at these numbers doesn’t warn us about pending doom from cutting corners on process safety.
Now, this is not new information for any of you, nor is it new to us or the press. But it is extremely upsetting. I cannot say too strongly to industry leaders: Stop boasting about your safety records when you’re literally putting out fires. You’re only undermining your credibility.
In the real world, people are connecting the dots and the picture they have formed of the petroleum industry treatment of their workers and the environment isn’t pretty.
It hasn’t escaped the notice of the press that BP executives were on the Deepwater Horizon celebrating its excellent safety record, nor that many of the workers killed at BP Texas City had just finished a meeting touting their safety record. There’s a message here.
Faced with the bashing this industry is getting daily in the news, with continual replays of graphic images of fires and explosions, you all need to understand: Continuing to tout favorable safety rates while workers are dying doesn’t make you look like serious employers and doesn’t make NPRA look like a serious organization.
Boasting about the great safety record of refinery industry while widows and children are planning funerals doesn’t make you sound like a serious organization.
And giving awards to your members based solely on a lack of slips, trips and falls doesn’t make you look like a serious organization.
If you want to be taken seriously, you need to act like an organization that recognizes there are serious problems and an organization that is seriously addressing those problems.
Playing the circular “blame game” with contractors isn’t earning your industry any respect, either.
Dismissing a steady string of similar, deadly catastrophes as isolated, rare, or unpredictable incidents isn’t credible — not to OSHA, not to Congress, and not to the public.
When your company has become a nightly punching bag for late night talk shows gags, making your entire industry look like a joke — you know you’re in trouble. Ask Toyota.
Now I feel that I can be frank with you because OSHA isn’t completely innocent either. Until recently, OSHA has based its refinery targeting system on DART rates as well. Clearly we need to change this. We need to find a better way to target problem refineries so that we aren’t wasting our time or your time inspecting refineries that don’t have major problems.
But to the extent we continue to use DART rates as one factor in our targeting mechanism, we need to make sure that they’re accurate. That’s why we’re paying special attention to safety incentive and discipline programs that have been shown to discourage workers from reporting injuries and illnesses.
Here’s another problem: Our targeting system was based only on the injury and illness rates of refinery employers; it did not include refinery contractors who may make up a large part of the workforce and employ workers who do some of the most dangerous work in the refineries. Unless we take the safety of the entire refinery workforce in account — no matter who the employer is or what industry code they fall under — we will miss many of the most important indicators.
And unless we are looking at the entire refinery workforce, we will not be able to accurately assess the safety of the refinery industry.
We want to work with you and other stakeholders like unions and experts to find a better way to target problem refineries for more attention. Identifying problems before they become tragedies is the right thing to do for refinery workers and refinery owners.
Similarly, be careful not to let risk assessments convince you that something can’t happen. We’ve witnessed several recent incidents caused by events that companies believed were not “credible” — the current oil spill in the Gulf of Mexico, for example.
Because the consequences of a single failure in your facilities can be catastrophic, management must establish systems that ensure that every process operates safely. Process Safety is all about solving systems problems.
And watch out for the small things — the “tip of the iceberg” principle. The few problems you do see, particularly at higher management levels, are probably a fraction of the problems you don’t see below the surface. Follow up on close calls and unusual circumstances; these can point to underlying problems that, if not addressed, could lead to tragedy.
And look at your number of close calls; we will. If your near-miss incidents do not significantly outnumber your actual incidents, your incident investigation program is probably ineffective.
Ask yourselves: Do your workers feel they can report close calls without repercussions? This is a tough one, but it’s a real measure of the culture at your facilities.
Take a broader perspective when performing your risk assessments. Good numbers and seemingly long odds of experiencing injuries or fatalities lead to complacency and failing to adequately mitigate risks.
Monitor any complacency that you see, anywhere along your company’s hierarchy. Beware the words “that’ll never happen” or “the risk is too small to worry about.” Believe me: When you hear these words, that’s the time to worry.
Think about all the PHAs you’ve conducted at your facilities. Ask yourselves: Did your teams conducting these analyses look to identify, evaluate and control ALL hazards, or did they look over their shoulders — maybe hedging on some of the difficult decisions because they believed that management would not support their conclusions? Are you confident in your answer to this question? — because the answer to this question is one of the foundation blocks of a strong PSM program.
I challenge you to go back to your plant personnel, have a frank discussion about your expectations and ask this question. You might be surprised by what you hear.
Finally on this point, I’m not just speaking to BP or their Texas City Refinery. The Baker Panel made no findings about companies other than BP, but the Panel stated that it was “under no illusion that the deficiencies in process safety culture, management, or corporate oversight identified in the Panel’s report are limited to BP.”
The Baker report went on to say that when refining and chemical companies understand and apply these principals — to their safety cultures, to process safety management systems and to corporate oversight mechanisms — the safety of the world’s refineries, chemical plants, and other process facilities will be improved and lives will be saved.
Working with Industry
Dr. Michaels recently met with the leadership of NPRA, the American Petroleum Institute and the United Steelworkers. They discussed OSHA’s concerns with the poor process safety performance in the refining sector and initiated the process of addressing the mutual problems that I just discussed.
I’m pleased that NPRA is planning a workshop this summer to share data and ratchet up industry commitment to improve refinery safety.
We are looking forward to working with you, other industry associations, labor unions and experts in this field.
You can expect to see OSHA collaborating more with NIOSH, EPA and other agencies to address the worker health and safety problems in your industry — and in other industries as well. The chemical industry has many of the same widespread problems that boil down to a few pervasive compliance violations across multiple facilities and across the industry.
Together, we can develop a more effective system for targeting problem hazards and problem worksites, and addressing the problems that we have identified.
Historic Turning Point
You can make this conference a historic turning point for your industry by resolving to practice prevention at every site, at every level. I urge you:
Learn from your worksites’ mistakes and others’ mistakes
Share best practices and success stories with each other, with NPRA, with OSHA and other agencies.
Develop and track new metrics that give a truer picture of your problems and progress.
Transform the safety and health culture of your worksites. Make PSM count.
We all know that the worst time to develop workable, effective solutions is in the midst of a crisis. Let’s work together now to find workable solutions before any more people get hurt — and let’s not take another six months or a year to fix what’s fixable now.
CSB Releases New Hot Work Safety Video Emphasizing Effective Hazard Evaluations
and Gas Monitoring Procedures Around Storage Tanks
Washington, DC, June 7, 2010 – The U.S. Chemical Safety Board (CSB) today released a 14-minute safety video warning of the hazards of welding and other hot work activities in and around storage tanks containing flammable materials.
Entitled “Dangers of Hot Work,” the video presents key lessons from the CSB’s hot work safety bulletin, released on March 4, 2010, in Wausau, Wisconsin, near the Packaging Corporation of America (PCA) facility where three workers were killed in July 2008 during a hot work-related explosion.
Hot work is defined as burning, welding, or similar spark-producing operations that can ignite fires or explosions. Since the release of the CSB hot work safety bulletin last March, there have been at least an additional eleven hot work accidents resulting in five fatalities and 14 hospitalizations. Included in these events is the explosion and fire at the Navajo Refining Company that killed two workers and injured two others in Artesia, New Mexico, where a crew of insulators was reportedly working on a crude oil storage tank.
The video uses 3-D computer animations to depict three hot work accidents at Partridge-Raleigh, an oil production site in Central Mississippi; the Bethune Waste Water Treatment Plant in Daytona Beach, Florida; and the Motiva Enterprises Refinery in Delaware City, Delaware.
The video also features an interview with John Capanna, who suffered burns over ninety percent of his body following a hot work accident while he performed maintenance activities at a refinery in New Jersey in 1979.
Mr. Capanna warns: “Don’t think that something this tragic couldn’t happen to you or somebody you love. This could happen to anybody.”
Also featured in the video is Casey Jones, the wife of crane operator Clyde Jones, who was fatally burned at the Bethune Waste Water Treatment Plant in January 2006.
Mrs. Jones says, “As a wife, I just assumed that he had a normal, everyday 7:00 to 3:30, Monday through Friday job, safe as my job. I would have never dreamed in a million years he would have been killed in an explosion.”
Hot work accidents occur throughout many industries in the U.S., including food processing, pulp and paper manufacturing, oil production, fuel storage, and waste treatment. CSB Investigations Supervisor Donald Holmstrom states in the video, “We typically hear about hot work accidents weekly. It has become one of the most significant types of incidents the CSB investigates, in terms of deaths, in terms of frequency.”
Emphasizing key lessons from the safety bulletin, Chairman Bresland states, “Hazard assessments and combustible gas detectors should be routinely used to identify and monitor for flammable atmospheres before and during hot work. Effective gas monitoring will save lives.”
The video is available for viewing and downloading on the CSB’s website as well as the agency’s YouTube channel. Free DVD’s can be requested by completing the online request from www.csb.gov.
The CSB investigation of the explosion at Packaging Corporation of America remains ongoing; a final report with formal safety recommendations is expected later this year.
For more information, contact the Director of Public Affairs Dr. Daniel Horowitz, 202-261-7613, cell 202-441-6074; Sandy Gilmour, 202-261-7614, cell 202-251-5496, or Hillary Cohen, 202-267-3601, cell 202-446-8094.
I learned the lesson I am sharing in this article while investigating an oil platform fire back in the mid-90’s. But the recent congressional testimony of executives from BP, Transocean, and Halliburton brought the lesson back to mind.
These lessons are NOT just for people in the petroleum industry. They apply to all industries where a major accident could cause loss of life, damage to the company’s reputation (ie, Toyota’s accelerator problems), or a major financial loss.
After a major accident, there are NO clean hands. There is blame enough for everyone. If you are in the chain of command of the organization that had the accident, you WILL be seen as PART OF THE PROBLEM.
It’s not my fault … YOU are to blame!
Finger pointing is counter productive. Managers may be able to point out others that share the blame, but they won’t be able to get rid of their share of the blame.
This is true even for the “blessed” level of the corporation. CEOs, Presidents, and Senior Vice Presidents can usually avoid blame for lesser mistakes. But when a major accident – multiple lives lost, extensive environmental damage, and/or a big hit to the company’s reputation and finances – occurs, even the corporate elite can’t escape the blame from the press and politicians.
That’s why the minor amount of finger pointing by executives at the BP / Transocean / Halliburton hearings only seems to make people more upset. They wanted these executives to accept their responsibility for things that have obviously gone wrong.
BP should have lead the way by taking responsibility for the accident. BP should have admitted that their performance was unacceptable. And BP should have then shown that they were ready to lead the way – for the whole industry – when developing solutions to keep this kind of accident from happening ever again anywhere else.
Statement I proposed for Lamar McKay, President of BP Americas…
“Chairman Bingaman, ranking member Murkowski, and members of the committee, representatives of the press, and people of American and around the world, I come here today with a heavy and contrite heart for the accident that I have allowed on my watch.
First, let me apologize to the families and loved ones of the 11 workers who were killed in the initial explosion on the Deepwater Horizon. Their loss is tragic and unacceptable and I pledge here that I will do everything in my power to discover the root causes of the fatal blast so that we can learn from it and ensure that it never happens again.
Second, I would like to apologize to the people impacted by the subsequent release of oil from our well. We at BP are responsible for the environmental damage. BP will pay all valid claims without regard to any liability caps. We will do this because we feel it is our responsibility to compensate those who have been harmed.
The extent of this spill is larger than anything we thought possible. The fact that it happened means that our preparations and measures to prevent the accident were insufficient. We should have been better prepared for the unimaginable. We are currently bringing all the resources we can to bear on stopping the spill and mitigating the damage of the oil that is being released.
Furthermore, we pledge to take the lessons we have learned in the spill response and continue to research ways that we can be even more prepared if something of this nature happens again. Our goal is to find the root causes of the spill and prevent it. But we should never again be caught unprepared if the unthinkable happens.
At BP, we believe there will be a need for a reasonably priced source of oil for decades to come. We pledge our best efforts to finding and recovering this oil without loss of life or unacceptable environmental damage. By allowing the current accident to occur, we have failed our shareholders, employees, and the American people. For this we are sorry and we hope to be able to prove to you that we can changed course so that we won’t fail again.
As for plans to prevent future accidents, we have put together a team of experts in deepwater oil exploration and root cause analysis to find the causes of this failure. They will be given complete access to all records and personnel to determine what went wrong, how it went wrong, and why it went wrong. The goal of this investigation is not to point fingers and attribute blame. Rather, the goal is to find out how we can improve our performance so that an accident like this one NEVER happens again. Not at BP. Not at any other exploration site around the world.
It is too early to tell exactly what caused the explosion that killed 11 people and started this environmental accident, but I can say that the fact that it happened means that things went wrong. Somewhere down the well, barriers that we thought were sufficient to prevent the blowout failed. Also, the blowout preventer didn’t prevent a blowout. And our planned emergency response efforts were insufficient to deal with the size and scope of the spill that we now face. I am sure that all of these problems could have been prevented if we had foreseen the outcome. Unfortunately, we didn’t. That is a fact that we wish we could change but we can’t.
What we can do is to understand why bad decisions were made so that we can avoid bad decisions in the future. We want to know any mistakes that were made in sealing the well. If industry practices were followed, why they failed. If industry practices were not followed, why that occurred. If we should have preceded differently, we need to find out what went wrong and how we can do to do it right next time. We need to understand why the blowout preventer didn’t function as intended. We also need to understand what we need to do to be better prepared for a large spill.
What I can pledge to you is that BP wants to redeem our reputation. We pledge to become the safest, most environmentally benign oil producer in the world. We pledge to lead efforts to develop safer methods for deepwater drilling and to share the practices across our industry. We will work with our contractors and suppliers to establish much more reliable blowout preventers. We will lead an industry effort to establish an emergency preparedness and response capability up to the challenge of a spill of this size even though we plan to never have anything like this happen ever again.
After my fellow industry colleges have had the chance to share their thoughts about the accident, I would be happy to answer questions about our efforts to discover and eliminate the root causes of this accident and our current efforts to stop the spill and mitigate the environmental damage done.
So to close, thank you for this forum that we can start to express our sincere regret for our past performance and explain how we can start to redeem ourselves with efforts to lead progress in understanding and improving the safety and environmental performance of our company.“
At this point, Mr. McKay would have to really have a plan. BP would have to really be performing a thorough, accurate, critical root cause analysis using advanced root cause analysis tools that aren’t looking to place blame. Tools that have advanced human performance, organizational performance, and equipment performance evaluation methods. They would have to really be committed to leading the industry and taking actions to change the culture that has lead to a string of accidents across BP’s business units.
Maybe that is too much to ask. BP management may not be capable of this critical analysis – admitting that they were wrong and need to change BP’s culture.
Also, some of you might think that MARK IS CRAZY. No executive would take this kind of responsibility. Think of future lawsuits. Think of the corporate liability.
But I believe that the company is already guilty by the fact that an “unthinkable” accident has happened. Only if this was a terrorist act or a case of sabotage, could BP escape blame. Since there is no evidence of this, BP will be found to have made mistakes that contributed to the accident. You can count on that.
So my conclusion is that defensive management … management that points fingers at others … management that rejects or doubts their responsibility … can’t successfully lead the change efforts that are needed to improve performance and prevent future accidents of this magnitude.
Eventually these defensive managers WILL lose their jobs because they can’t change something they are defending.
In other words, management all up and down the line – from BP’s CEO to BP’s Company Man on the rig, must recognize their responsibility and their need to lead change or the Management System root causes (which there will be in an accident of this magnitude) will not be fixed.
Thus my conclusion …
YOU ARE EITHER LEADING THE SOLUTION …
OR YOU ARE PART OF THE PROBLEM.
Of course, after a major accident it is customary that managers will lose their jobs. The first target are those managers on the rig that made decisions the night of the accident. Next, the next level of management up the chain at BP and Transocean. But more senior management should also be worried. The complete management chain – from the Refinery Business Unit Manager to the CEO – eventually resigned or were let go after the BP Texas City explosion.
I believe the ONLY way that managers in this predicament can save their job is to claim their responsibility and then be seen as STRIDENTLY LEADING the change needed to prevent future accidents.
Now for your ideas and comments …
IS MARK CRAZY?
Should management not only admit errors but actually claim their share of the blame?
Can leading positive change save a corporate manager’s job?
Is pointing fingers and shifting blame a better survival strategy?
Is sincerely apologizing and accepting blame too dangerous?
Charles Perrow, Sociology Professor Emeritus, Yale University
Author of Normal Accidents
From the article:
“Regulation, regulation, regulation. Until the U.S. can make the switch to renewables, insists professor and author Charles Perrow, regulation is the best way to prevent disasters like the Gulf oil spill. …“
I’ve always liked Dr, Perrow’s work (even though he doesn’t get all of the technical details exactly right in accidents). His views on system complexity, robust systems, and resiliency were ahead of the times back in the 80’s. He’s a prophet in these areas.
Now he’s recommending more regulation and conversion to renewable technologies.
Here’s a quote:
“This is capitalism and it has to be heavily regulated where there are chances of large catastrophes. Because otherwise profit concerns will push managers to take risks that we should not be willing to take. Whenever there can be a large catastrophe — 100 or more of what they call ‘prompt’ deaths, 1,000 ’soon’ deaths, or irretrievable environmental damage — then you need regulations.“
Perrow’s technical assessment (when he get’s away from sociology and into engineering) aren’t as prophetic. So, I doubt somewhat his suggestions about changing technologies to solve problems (from oil and coal to wind and solar). Carbon taxes and carbon capture may solve some problems, but what new problems will they create?
But the article is a short, good read. An interesting viewpoint to consider.
Dr. David Michaels, Assistant Secretary of Labor for OSHA, held an on-line discussion about incentive programs. You can listen to his discussion here. He discussed the fact that many safety incentive programs do not enforce the correct behaviors. His example was a pizza party at the end of the week for any division which has no reported injuries. This is a pretty common type of incentive program. He was specifically targeting injury prevention, but it could be expanded to included production bonuses, etc. Let’s examine this a little closer.
First of all, does this pizza party encourage safer behavior during the week? People are not normally trying to hurt themselves, and so probably already have some level of attention to their own personal safety. I doubt that an extra slice of pizza on Friday will make any appreciable difference in my safety consciousness on Tuesday. Therefore, there is no new incentive toward safer behavior due solely to the offer of the pizza.
So what are we really encouraging with these types of programs? Non-reporting! There are numerous ways that this is actually manifested. There can be overt threats from co-workers to not report an injury. There are more subtle feelings of letting down their co-workers that make people automatically want to hide injuries. A boss whose semi-annual evaluation is determined (in part) by his department’s injury rate may either overtly or subtly “recommend” non-reporting.
OSHA appears to be struggling with this issue, and at least seems to recognize that these can be problems. We discuss Soon, Certain, Positive rewards when trying to change peoples’ behaviors, and these guidelines can be used when developing your own SMARTER corrective actions.
I’d like your thoughts on what programs you’ve seen that actually work. For example, a program that rewards employees for identifying potentially hazardous situations is a much more proactive method of lowering injury rates and raising safety awareness and compliance.
What else have you seen that encourages safe work practices? What Soon, Certain, Positive incentives have you seen that enforce safe behaviors?
Watch the video. Do you think anything was learned?
I know, this video teaches us how good the “train avoidance training” was that we gave the worker. Now all we have to do is teach the rest of the employees how to leap out of the way at the last second!
At some conferences, 90% of what you get is the networking. You meet some great people and take home some new “best practices” that you can apply at your facility.
At some conferences, 90% of what you get comes from the great keynote speakers. They inspire you to go back to work and accomplish even more.
At some conference, 90% of what you get is from the breakout sessions. The small group interactions, lessons learned, and best practice sharing in these smaller sessions can really be helpful in developing an improvement initiative.
Why can’t you have all three? Who knows. But finding all three together is really uncommon.
I attend a lot of conferences. Seven to ten a year. More than most people. (Who can afford the time?) But I do it to stay on top of the latest improvement initiatives. And here is what I’ve found. There is one conference that has all three every time it is held … The TapRooT® Summit.
You get the 90% networking and the 90% great keynote speakers and the 90% amazing breakout sessions that are the highlights of most conferences all in one conference.
That’s 90% + 90% + 90% = 270%!!!
170% more than your average conference.
Ok … You may think that Mark is going nuts. After all, what conference has 170% more than other conferences? Well then, lets look at each of the percentages for proof.
Part of the purpose of the Summit is to send you back to work inspired to to your best. Who is better to inspire you than Jeff Skiles, the co-pilot of the Miracle on the Hudson flight. As the Summit’s closing keynote speaker, Jeff will tell his amazing story that includes lessons of teamwork, adaptability, training, and preparation that helped them make it through that day. Don’t miss this chance to learn from his experience and shake his hand.
What does it take to keep young workers safe? Do these same lessons apply to all employees? That’s what you will hear about and think about when our opening keynote speaker, Candace Carnahan, tells her story. She learned a difficult lesson about safety at an early age. She will share that lesson with everyone at the Summit. It’s a message that anyone with young employees needs to hear. Don’t miss it!
Finding the root causes of your problems and developing effective fixes is only half the battle. If you want to really improve performance, you need to get the improvements implemented. That’s why I chose an improvement implementation expert, Don Harrison, to be a Keynote Speaker. He is President of Implementation Management Associates and the developer of the Accelerating Implementation Methodology (AIM). And Don will speak about one of the most difficult aspects faced by people leading improvement efforts … Getting Sponsorship Right. So if you need senior management support for your improvement program and getting improvements implemented, you can’t afford to miss his talk.
Everyone knows that blame is counter productive when trying to improve performance. But what if you we a patient at a hospital and you were almost killed? The sentinel event required extensive rehab so that your life was disrupted for almost a year. Would you be empathetic? Or would you want to strike back? Would you sue over the error? What if the hospital didn’t seem to be telling you the truth? Would this make you mad? As an investigator of accidents, you often have to deal with people who are impacted by the accident – either those who were hurt or those who are being seen as “at fault.” That’s why you need to hear Linda Kenney’s story. You will hear see Linda eventually understood what happened, learned to work with those who “caused” the damage, and took this event and made it into something positive (for her and for the people who “caused” the damage she suffered). It’s an amazing story that will get you to think beyond just the root causes of an accident to the impact accidents can have on people.
I’ll be one of the Keynote Speakers at the 2010 TapRooT® Summit. And I’ll be talking about an important topic for all TapRooT® Users – Taking Improvement to the Next Level. Over the past couple of years, I’ve come to understand that many TapRooT® Users attend their initial TapRooT® Training and expect that that is all they need to do to have excellent root cause analysis and an outstanding performance improvement program. But those people are wrong. They have taken an important first step, but the journey is still at it’s beginning. To achieve excellence, they need to do more. And that’s what I’m going to share. The steps one must take to achieve excellence in their performance improvement journey using TapRooT®. If you are a TapRooT® User somewhere along your journey to excellence, don’t miss this keynote address. And if you don’t use TapRooT®? The lessons are just as applicable. Don’t miss this keynote address.
OK … I think this gets more than 90% … I think it gets 100%. But, being one of the speakers, I may be biased. What do you think?
NETWORKING
I’ve had many TapRooT® Summit participants tell me that the networking at the TapRooT® Summit is the best they have every experienced at any conference they have ever attended. And I know the reason why. We work hard to make it the best networking conference on the planet.
What do we do? You’ll have to be there to experience it, but I’ll give you some clues.
First, we start out with a networking exercise to get each participant to meet a minimum of three new people that they share something in common with. I personally assign these introductions for every Summit participant.
(Reception) (Golf)
Next, we sponsor two events – the Summit Reception and the Summit Golf – to help people get to meet even more folks on an informal basis. Both are great ways to find new friends.
Third, we even make lunch a networking event by letting you pick your favorite TapRooT® Instructor (or maybe a TapRooT® Instructor that you have never met) to sit with at lunch.
Fourth, several of the best practice sessions are organized to encourge even more networking.
Fifth, there really are great people to meet at the Summit. Speakers and participants alike! And because the Summit is not a “mega-conference” … you really can find people and meet them (and shake hands with and talk to speakers).
And finally, because we emphasize networking so much, everyone participates in it and makes it easy. Introductions happen spontaneously. If someone doesn’t know you, they ask who you are and what you do. And you will find meeting new people easier and more fun than you ever have before at any other conference.
How do I know that I’m right about the networking being so good? Listen to what just a few of the attendees had to say (and this is just a sample – double click each video to play):
(Quicktime Format .mov)
(.mp4 format)
(.mp4 format)
Do you agree that this deserves a 100% score (not just 90%)? I do. But read on…
TECHNICAL/BREAKOUT/BEST PRACTICE SESSIONS
When we first started planning Summits back in 1994, we worked to make each of the technical sessions full of new best practices, great ideas, and sharing of lessons learned. As the Summit developed over the years and additional tracks were added (there are 9 tracks this year), we have continued to make these sessions full of content that people interested in the topics of each track need.
Just look at these tracks and then see the Summit Schedule and look at the sessions in the track that you think you would like to attend the most and see how applicable the sessions are to your improvement efforts:
Safety & Risk Management
Behavior Change & Stopping Human Error
TapRooT® Certified Instructor
Investigation, Troubleshooting, & Root Cause Analysis
Wow! They are some great tracks aren’t they. But there’s more. You can mix and match to customize your Summit experience. You can pick from sessions from several tracks to develop Your Track – just like you want it.
But that’s not all. There are also “Special Topics” to choose from that are in addition to the sessions in the tracks. These Special Topics include:
Prioritizing Improvements (Mark Paradies)
What Does Management Need To Know About Root Cause Analysis (Kevin Palardy)
You can add these special topic sessions to your custom schedule to make the Summit even more significant to your improvement efforts.
To make this even more impressive, many of the speakers could have been Keynote Speakers. The problem is that we just have too many great speakers to fit them all into the five keynote slots. You might find dozens of the talks that are good enough to fill a Keynote slot, but here are some that I know would do the trick:
Bill Sirois: Measuring Fatigue Using FACT
Dr. John Grout: Using Mistake Proofing to Stop Human Error
Jennifer Mounce: Coaching Skills to Sustain Behavior Change
Brian Crawford: Lessons Learned about Human Factors & Generic Causes from Recent Airline Incidents
Karen West: Legal Aspects of Tap[RooT® Investigations
George Burk: Quality in Life & Work
Major General Doug Rob: High Performance Ideas for Leading Improvement
Brad Towe: Self Improvement for Your Future
Dr. Beverly Chiodo: Character Driven Success
Bill Nixon: Leading Successful Investigations: Drawing on UK Experience
Keith Recsky: Lifecycle of an Incident
And that’s just a sample. I can’t list them all or I’d list every session!
Again, don’t just take my word for it. Here is what people have to say about the quality of these sessions (in a .mp4 format video – double click to play):
Another 100%? I think so.
So maybe the formula should be:
100% + 100% + 100% = 300%
That makes the TapRooT® Summit 200% better than other conferences that you might attend.
That’s three times as good!
Even though you might not agree with my math … You get the idea.
So get the approvals you need and get signed up! You can’t afford to miss this Summit!
But I don’t think we learned all that we could from that blog article. So, I’m going to resume the discussion and learning here.
Instead of continuing with the blame focussed arguments of the previous post, I’d like readers to consider this …
If you have to develop corrective actions that would keep this accident from EVER happening again, what Safeguards would you use?
Let’s do a simple Safeguards Analysis to get this process started.
The Hazard?
A moving vehicle .
The Target?
The pedestrian.
The current Safeguards:
The driver seeing the pedestrian and taking actions to avoid them (no matter when the pedestrian steps out).
The pedestrian looking both ways before crossing a road to avoid any traffic.
The first safeguard is impacted by driver training, laws, driver attention, driver distraction, visibility, and many other factors.
The second safeguard is impacted by pedestrian alertness, laws, visibility, the “walk”/”Don’t Walk” lights (or lack thereof) and many other factors.
If we want to stop this accident from ever happening again, do we just concentrate on making the two existing safeguards better? Or do we look at other safeguards or removing the Hazard or the Target?
In this example, the Gwinnett police decided to make an example of Lori Reineke by prosecuting her for vehicular homicide. What do you think? Will this stop these kinds of accidents from happening again by getting drivers to be more alert? Can drivers be totally alert all the time to avoid a pedestrians that walk in front of them?
Another angle could be to focus on pedestrians. To try to make them more alert. (Do you remember your mother’s warnings to look both ways before you cross the street?) Perhaps we could install additional auditory warnings if a sensor detected a moving pedestrian when the “don’t walk” sign is lit?
It would be pretty difficult to remove the Hazard. We probably can’t remove all vehicles from the road.
Also, it is difficult to remove the target. We probably can’t eliminate pedestrians.
What about maintain separation? Can we have pedestrian overpasses (underpasses) to keep pedestrians and traffic separated?
Or should we try to reduce the impact? How slow should the speed limit be? What about airbags in the bumper that deploy when a pedestrian impact is just about to occur?
Now you are starting to think about Safeguards … and not just placing blame.
What do you think? What kind of additional safeguards can we find? Leave your ideas here.
Also, do you think we can meet our goal of “never” having this kind of accident happen again?
Politicians always talk about protecting the environment. Why not do something about it.
Instead of selling drilling leases just based on the amount bid by an oil company, why not also put in a factor that considers the company’s environment and safety record?
Company’s with a poor environment and safety record would have to pay more to get a lease. Thus the cost of poor safety would be much more evident.
Company’s that work hard to maintain a clean record would be rewarded by lower costs for drilling rights.
What do you think? Could it work? Is it an idea whose time has come?
“The Deepwater Horizon oil rig that caught fire and sank in the Gulf of Mexico last week may cost insurers and reinsurers $1.6 billion, according to estimates by JPMorgan Chase & Co.“
Of course, that’s what insurance is for. To insure against loss.
Wouldn’t it be better to spend less to prevent loss by being proactive? If the budget for prevention was 10% of the actual cost of the loss, I bet this accident could have been prevented. What company – even in the oil business – is spending $160,000,000 on their improvement program.
Of course, that assumes that the estimate of $1.6 Billion is correct. My guess is the total cost (beyond insurance coverage) will be much more.
Maybe it’s time to consider PROACTIVE improvement rather than just insurance.