Psychological Safety

5 insights from Episode 7 with Rodney Rocha

Rodney Rocha's Episode 7 shows how reversed burden of proof, softened warnings, and retaliation against dissent turn safe enough into false comfort.

By 5 min read
open-dialogue team scene on 5 insights from episode 7 with rodney rocha — 5 insights from Episode 7 with Rodney Rocha

Key takeaways

  1. 01Treat safe enough as a decision standard, because the burden of proof can drift from the system to the messenger when leaders reward quiet updates.
  2. 02Audit every warning for the point where hierarchy weakens it, since a message that loses force on the way up is already a control failure.
  3. 03Map micro-retaliation after each escalation, because a delayed answer, a joke, or a skipped invite can teach people that honesty has a price.
  4. 04Compare incident review notes with speak-up records, then check whether the same concern was softened, delayed, or dismissed before the event.
  5. 05Use Andreza Araujo's safety culture work, especially A Day Not To Forget, as the diagnostic lens when silence keeps outrunning truth.

Rodney Rocha's Episode 7 is not a tribute to courage alone. It is a field lesson in what happens when an organization asks people to prove safety only after the burden of proof has already been reversed.

For leaders, the hard question is not whether someone spoke up. It is whether the system created a place where truth could travel without losing force, which is the question Andreza Araujo keeps pressing across 25+ years in EHS and more than 250 cultural-transformation projects. As Andreza Araujo argues in A Day Not To Forget, silence becomes dangerous when fear is treated as normal.

Why "safe enough" is a leadership test

OSHA describes incident investigation as a process for finding causes and preventing recurrence, which is exactly why the decision standard has to be settled before the review starts. If the site only asks whether a task looks safe enough, it has already moved the burden away from those who set the work.

In Rodney Rocha's quote, "Our profession's culture is to show it's safe enough to operate," the key word is culture, not engineering detail. The episode exposes a management habit whose effect is to make doubt look like overreaction.

Across 25+ years leading EHS at multinationals, Andreza Araujo has seen that weak questions are often punished more quickly than weak controls, which is why the first silence appears at the human layer and the loss appears later at the technical layer. That same pattern is explored in the article on incident evidence status before causal review.

What Rodney Rocha says about the burden of proof

The second quote, "If you lose people to fear and intimidation, you've lost valuable information," explains why suppression is an operational defect. When a witness expects punishment, the organization loses the signal that could have changed the decision.

This is where micro-retaliation matters. A raised eyebrow, a delayed reply, a joke in the next meeting, or a missing invite can tell a person that the safest choice is quiet. The article on micro-retaliation shows how small penalties add up into silence.

During the PepsiCo South America Foods turnaround, where the accident ratio fell 50% in 6 months, the lesson was the same: weak reporting systems do not stay weak because people lack concern; they stay weak because leaders do not reward honesty. In more than 250 cultural-transformation projects, Andreza Araujo has seen that the first fear is rarely dramatic. It is usually social or administrative, which means the company can create it without ever issuing a formal threat.

Why warnings weaken on the way up

Rodney Rocha's story shows that warnings do not always travel with the same strength as the facts that created them. A message can start as a direct technical concern, then become softer, shorter, or easier to dismiss by the time it reaches the people who can act.

That pattern is familiar in safety-climate work, which is why the article on survey signals versus field proof matters here. Climate surveys can show that people say the right words, but they do not prove that a supervisor will protect the messenger when the message is inconvenient.

ISO 45001:2018 describes a system in which roles, controls, competence, and performance evaluation must fit together. ISO describes ISO 45001:2018 as an occupational health and safety management system standard, which means the burden of proof belongs to the system, not to the worker who notices the failure.

How silence becomes a control failure

James Reason's work on latent failures helps here, because silence usually appears where earlier design choices have already narrowed what people feel safe to say. The warning does not vanish by itself; it is translated by hierarchy, time pressure, and habits that reward calm over truth.

The documentary A Day To Remember and Andreza Araujo's A Day Not To Forget make the same point from a mining lens: people can mark a site as safe enough on paper while the reality is different. That is why the article on A Day To Remember and unsafe workplaces belongs in the same conversation.

When silence becomes routine, a team starts to think that no complaint means no hazard. That is false, and it is especially dangerous in situations where the warning sits with one person whose voice matters more than the later summary. Across 30+ countries, Andreza Araujo has seen the same pattern: the more visible the hierarchy, the more carefully truth must be protected.

NIOSH recommends the hierarchy of controls, which is useful here because the highest control is sometimes the decision to stop normalizing the weak signal. A warning that keeps shrinking on the way up is already telling leaders where their control system is thin.

Proof standards: safe enough versus unsafe enough

The table below contrasts two operating logics. One asks the messenger to prove danger, while the other asks leadership to prove that the control is still credible.

QuestionSafe enough logicStronger logic
Who carries the burdenThe person raising concernThe people who designed and approved the task
What happens to doubtIt gets softened or delayedIt triggers verification
What the hierarchy hearsManage the issue locallyEscalate the uncertainty
What leaders reviewClean status updateEvidence of control, timing, and consequence
What becomes normalSilence with a smileTruth with protection

A board that reviews only the clean version is reading a report, not governing a risk. That distinction is the same one the article on control health versus TRIR versus SIF exposure explores at executive level. When the operating picture is filtered too early, the company starts to manage comfort instead of exposure.

Recommendation

Run a 30-day test on one high-risk escalation path. Pick 1 concern that was softened, 1 concern that was ignored, and 1 concern that changed a decision, then trace who heard it, who protected it, and who acted within 24 hours.

The test should name a supervisor, a manager, and one executive sponsor, because the value of the episode lies in the handoff between levels, not in the existence of a polished reporting form. BLS records occupational injury and illness data, but this review is about whether your own organization turns truth into action before the next event.

For teams that need a deeper diagnostic lens, Andreza Araujo's safety culture work, especially A Day Not To Forget, gives the right starting point.

What leaders should do after listening

Leaders should leave the episode with one assignment: read the last 10 escalations and mark which ones lost force before they reached a decision maker. If the pattern is obvious, the problem is not the next speech; it is the culture that rewrites truth on the way up.

Then compare those cases with the internal article on incident investigation labels before causal review, because the first label determines whether the team learns or defends. Rodney Rocha's warning still holds: tell the truth, and empower others to tell the truth too.

Listen to the full conversation at Rodney Rocha on Headline Podcast.

Topics headline-podcast psychological-safety incident-investigation speak-up organizational-silence

Frequently asked questions

What does proving it safe enough mean?
It means the organization assumes a task is acceptable unless someone can show otherwise. That sounds practical until weak signals, uncertainty, and dissent are treated as noise. Rodney Rocha's episode shows the hidden cost: when the burden of proof sits with the person who notices the risk, the system starts normalizing doubt. The stronger standard is to ask whether the control is still credible, whether the uncertainty is understood, and who owns the next decision.
Why do warnings weaken as they move up the hierarchy?
Warnings weaken because every layer can add its own filter, whether through time pressure, language, politics, or simple habit. A direct technical concern can become a softer update by the time it reaches a decision maker. That is why leaders need a clear route for escalation and a visible habit of protecting the messenger. The episode matters for supervisors and directors alike, because the weakness is not only in the message. It is in the system that edits the message on the way up.
How do I know micro-retaliation is happening?
Micro-retaliation shows up in small penalties that make speaking feel expensive: a cold reply, a missed meeting invitation, a smile that turns into sarcasm, or a label that follows the person after the concern. Those acts may look minor in isolation, but they train the team fast. If the same person who spoke up is later excluded from key conversations, the organization is teaching silence. Andreza Araujo has seen this pattern in many cultural-transformation projects, where the first fear is social rather than formal.
What is the difference between psychological safety and incident investigation?
Psychological safety is the condition that lets people raise concerns without expecting humiliation or punishment. Incident investigation is the later process of understanding what happened, why the controls failed, and what must change. The two are connected, but they are not the same. If the first is weak, the second gets poor information. If the second is weak, the organization learns the wrong lesson. Andreza Araujo's *A Day Not To Forget* is useful here because it treats silence as part of the event, not as a detail after the event.
Where should leaders start after this episode?
Start with one recent concern that was softened before it reached a decision maker. Reconstruct the path, name every handoff, and ask where the signal lost force. Then test whether the same pattern appears in speak-up logs, closeout notes, and meeting minutes. That exercise is small, but it reveals whether truth can travel in your organization. For teams that want a deeper diagnostic lens, Andreza Araujo's safety culture work offers a strong next step.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI