Occupational Safety

4 Myths About Emergency Drills That Leave High-Risk Sites Unready

Emergency drills do not prove readiness when they only rehearse a script. These four myths show why high-risk sites need exercises that test decisions, communications, resources, and recovery under realistic pressure.

By 6 min read
industrial scene illustrating 4 myths about emergency drills that leave high risk sites unready — 4 Myths About Emergency Dri

Key takeaways

  1. 01A completed drill does not prove readiness when the exercise follows a script that removes uncertainty from the response.
  2. 02Evacuation time matters, but leaders also need evidence that people can recognize the trigger, communicate the decision, and account for everyone who may be exposed.
  3. 03A tabletop exercise, functional drill, and full-scale exercise answer different questions, so one format cannot replace the others.
  4. 04Emergency preparedness becomes credible when the site tests degraded conditions, unavailable resources, conflicting information, and recovery decisions.
  5. 05The best post-drill action changes a response barrier, assigns an owner, and sets a verification date rather than merely scheduling more training.

A high-risk site can complete every scheduled emergency drill and still be unready for the event that matters. The exercise may have started at a convenient time, used a known scenario, relied on fully available supervisors, and ended before the response team had to make a difficult choice.

That gap matters because emergency readiness is not a performance staged for observers. It is the capacity to detect a threat, make a defensible decision, communicate under pressure, protect people who are not in the room, and recover when the original plan no longer fits the conditions. OSHA 29 CFR 1910.38 requires an emergency action plan for covered general-industry situations, but a written plan is only one part of that capability.

Andreza Araujo has repeatedly connected prevention quality with the decisions that become visible when conditions change. Her book The Illusion of Compliance is useful here because a completed form can create confidence without proving that the intended control works. The same warning applies to emergency exercises.

Why a completed drill is not proof of readiness

An exercise produces evidence only when its objective is clear. If leaders ask the team to evacuate, they may learn something about alarm recognition and movement. They may learn very little about shelter-in-place decisions, external coordination, resource constraints, or how the incident commander responds when two sources provide different information.

The exercise design should therefore state what decision or barrier is being tested. A site might test whether a supervisor can stop work before an expanding release reaches a normally safe area, or whether the accountability process can identify a contractor who moved to a muster point different from the one on the roster. The scenario is useful when it exposes a decision that the written plan assumes but the operation has not demonstrated.

Myth 1: A fast evacuation means the site is prepared

Evacuation time is visible, easy to compare, and often celebrated. It is also incomplete. People can leave quickly while the alarm remains ambiguous, the route bypasses a hazard, or the accountability process fails to identify who is still inside.

OSHA 1910.38 expects an emergency action plan to cover reporting procedures, evacuation procedures, critical operations, accounting for employees, rescue or medical duties, and contact roles. Those elements are connected. A fast movement time cannot compensate for a weak notification chain or an inaccurate roster.

The better test combines time with decision quality. Ask whether the correct alarm was recognized, whether people knew where to go when the primary route was unavailable, whether supervisors challenged an unsafe instruction, and whether the final accountability report included contractors and visitors. The result should show which part of the response held, not just how quickly the crowd moved.

Myth 2: Repeating the same scenario creates confidence

Repetition can build familiarity, but it can also train people to wait for a cue that will not exist during a real emergency. When everyone knows the location, timing, message, and expected sequence, the exercise may measure memory rather than readiness.

A high-risk operation needs variation that remains controlled and safe. The facilitator can change the unavailable route, delay a key contact, introduce a missing contractor, or provide a report that conflicts with the first alarm. The goal is not to surprise people for entertainment. It is to test whether the organization can recognize when the original response no longer matches the hazard.

Andreza Araujo's work on safety culture places responsibility on the leadership system that shapes behavior. A team that has only rehearsed the ideal path has not been given enough opportunity to practice escalation, challenge, or adaptation within defined limits. Confidence should come from tested capability rather than familiarity with the script.

Myth 3: More training will fix every exercise finding

Training is an appropriate response when people lack the knowledge or skill required for the task. It is a weak response when the exercise reveals a broken radio, an inaccessible shutdown point, an outdated contact list, a blocked route, or an unclear authority to order a shelter-in-place action.

Those findings belong to different owners. A communications failure may require equipment, coverage, or a backup channel. A route problem may require layout changes and control of temporary storage. An unclear decision right may require leadership agreement that is visible before the next shift begins.

The post-exercise review should ask what had to be true for the response to work and which condition made that difficult. If the answer points to design, maintenance, staffing, information, or authority, the corrective action must reach that layer. A refresher course can be included, but it should not become the automatic substitute for a stronger barrier.

Myth 4: The drill ends when the emergency is contained

Many exercises stop after evacuation, isolation, or initial medical response. That endpoint can hide the decisions that determine whether the site returns to work safely. Leaders still need to manage evidence preservation, contractor communication, family or community messaging, equipment status, fatigue, temporary controls, and the authorization to restart.

The Chemical Safety Board's investigation work shows why response and recovery cannot be separated from the conditions that created the event. A site may control the immediate hazard while leaving the underlying uncertainty unresolved. If the exercise never reaches the restart decision, the organization has not tested whether production pressure can overtake caution.

A recovery objective does not require turning every drill into a prolonged simulation. It requires the team to define the next decision after immediate control, identify who owns it, and state what evidence is needed before normal work resumes. That short extension often reveals more about leadership quality than another routine evacuation.

What a useful emergency exercise should test

A practical exercise begins with one high-consequence question. It could ask whether the site can account for people during a power failure, whether a supervisor can escalate a release when the control room is overloaded, or whether a maintenance crew can stop a restart when the isolation record is incomplete.

The design should then define the expected evidence. That evidence may include a correct notification, a named decision owner, a verified route, a documented accountability result, an effective backup communication, or a restart authorization based on a known condition. The exercise leader should record what happened, which assumption failed, and which decision changed as a result.

Response layerQuestion to testEvidence of readiness
DetectionDid the right person recognize the trigger?The signal was identified and escalated without relying on one individual.
DecisionWho could stop, evacuate, shelter, or isolate?Authority was known at the point of work.
CommunicationWhat happened when the primary channel failed?A backup route carried the message to affected groups.
AccountabilityCould the site identify everyone exposed?Employees, contractors, visitors, and missing people were reconciled.
RecoveryWhat evidence allowed work to restart?A named owner confirmed that the critical condition was controlled.

The table is not a universal scorecard. It is a prompt for choosing evidence that matches the hazard. A confined-space rescue, a chemical release, and a severe-weather shelter event require different demonstrations, even though all three depend on clear authority and reliable communication.

What to do after the next drill

Start the review with the difference between the expected response and the observed response. Do not begin by asking who failed. Ask which assumption was wrong, which barrier was missing, and which decision became difficult because the system did not provide enough support.

Then convert the finding into an owned change. The action should name the condition to be corrected, the person who can correct it, the evidence that will show improvement, and the date of a follow-up verification. If the exercise found that contractors could not hear the alarm in a remote area, the proof should involve that area and those workers rather than another classroom attendance list.

Headline Podcast conversations often return to the same leadership test: can people make a safer decision when the situation becomes inconvenient? Emergency drills are valuable when they answer that question honestly. They are weak when they only confirm that a planned performance can be repeated.

For more practical guidance on safety culture, leadership, and prevention, visit the Headline Podcast and explore Andreza Araujo's work, including Safety Culture: From Theory to Practice and A Day Not To Forget.

Conclusion: emergency readiness is demonstrated when a high-risk site can detect the threat, make the right decision, communicate through failure, account for people, and authorize recovery with evidence. A drill that tests only speed can leave the most important weakness untouched.

Topics emergency drills emergency preparedness occupational safety OSHA 1910.38 crisis leadership high-risk operations

Frequently asked questions

What is the purpose of an emergency drill?
An emergency drill tests whether people, systems, and leaders can make the required decisions under defined conditions. It should reveal weaknesses in detection, notification, evacuation, accountability, command, resources, or recovery instead of serving only as attendance evidence.
Does a fast evacuation prove emergency readiness?
No. A fast evacuation can be useful evidence, but it does not prove that the alarm was understood, the right people were notified, access routes remained available, contractors were accounted for, or leaders could manage a conflicting signal. Readiness requires a wider set of observations.
How often should a company conduct emergency drills?
The frequency should follow applicable requirements, the emergency action plan, site risk, workforce turnover, changes in equipment or layout, and the findings from previous exercises. A fixed calendar is not enough when the risk profile or response organization has changed.
What should be measured during an emergency exercise?
Measure the decisions and controls that matter for the scenario, including detection, notification, escalation, route availability, accountability, communications, resource access, handoffs, and the time required to stabilize the situation. The right measures depend on the hazard and the intended response.
What should happen after an emergency drill?
The team should compare expected and observed performance, identify which barrier failed or was missing, assign an accountable owner, define evidence of correction, and verify the change in a later exercise or field check. A report that only recommends refresher training leaves the main lesson unresolved.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI