How Rodney Rocha Thinks About Bad News Reaching Leaders
Rodney Rocha's Columbia lessons show why leaders must protect bad news, preserve its meaning, and turn it into a safety control.

Key takeaways
- 01Preserve the original warning before summarizing it for senior review.
- 02Define the evidence boundary that makes continuation safe enough.
- 03Test the information path before assigning responsibility for the final action.
- 04Give the person who speaks a visible response and protection from retaliation.
- 05Listen to Rodney Rocha's full Headline Podcast conversation and apply the protocol to one live decision.
Episode 7 of the Headline Podcast, published on October 9, 2025, featured Rodney Rocha, the retired NASA chief engineer who worked on the Columbia debris assessment team. His argument changes the incident-investigation question from “What failed?” to “How did important information lose its force before a leader could act on it?”
Bad news is a safety control when an organization can receive it early, preserve its meaning, and give it to the person with authority to change the decision.
Why is bad news a safety control?
Bad news is a safety control when a concern, anomaly, or dissenting interpretation reaches the right decision-maker before the exposure becomes irreversible. The value is not in collecting more reports. It is in protecting the information's meaning as it moves from the point of work to the authority that can pause, redesign, resource, or escalate the response.
Many incident systems measure whether a concern was logged, but logging is only the first handoff. The harder test is whether the original concern remained visible after it passed through a supervisor, a technical review, a program meeting, and an executive decision.
Rodney Rocha described this risk on Headline Podcast through the experience of Columbia. His point is useful far beyond aerospace because every plant, project, and maintenance program contains a version of the same chain. A warning can be technically correct at the front line and still become harmless language by the time it reaches the person who controls the schedule.
Headline co-host Andreza Araujo and Dr. Megan Tranter framed the show as a place for real conversations with constantly learning people. That stance matters here because bad news cannot be improved by a polished form alone. It improves when leaders make the truth safer to carry.
What did Columbia reveal about information loss?
The Columbia investigation showed why incident learning must include organizational conditions, not only the final physical failure. The Columbia Accident Investigation Board examined the February 1, 2003 loss of the shuttle and its seven crew members through a seven-month investigation supported by 13 board members, more than 120 investigators, and thousands of NASA and contractor personnel.
The scale of that review is a useful warning for smaller investigations. A short report that names one failed component may be accurate about the last event while missing the decision path that allowed the hazard to remain acceptable. The official NASA Technical Reports Server record for the Columbia Accident Investigation Board report preserves the source material that leaders should use when studying that distinction.
NASA's later knowledge-sharing work also treats Columbia as an organizational learning problem, not a story about one person's mistake. The NASA lessons-from-Columbia paper describes why accepted practices and information-sharing routines deserve investigation after a major event.
For a site investigation team, the practical implication is direct. Reconstruct not only what the equipment did, but also what each decision-maker knew, when they knew it, what uncertainty remained, and what prevented the concern from changing the plan.
How does the burden of proof shape escalation?
The burden of proof determines whether a team must prove that a hazard is unsafe or prove that the work is safe enough to continue. When evidence is incomplete, demanding certainty from the person raising the concern gives the organization permission to continue by default.
Rocha explained the problem in a concise phrase, “show it's safe enough to operate.” That standard sounds cautious, but it can become weak when the team has little information and treats the absence of proof as proof of acceptability. The better question is whether the available evidence supports the decision boundary the organization is about to cross.
OSHA's root-cause analysis guidance for incident investigations makes a related point by directing employers toward underlying, system-related reasons rather than stopping at the immediate trigger. The same logic applies before an incident, when an unresolved warning should be treated as decision evidence rather than as an argument that has not yet been won.
A supervisor can make this concrete with three fields in the escalation record. State the concern, state the evidence that supports it, and state what decision remains unsafe to make while the evidence is incomplete. Those fields stop a warning from being reduced to a vague request for “more review.”
Why do warnings weaken as they climb?
Warnings weaken when each layer of the organization removes context, uncertainty, or ownership in order to make the message easier to approve. A technical concern becomes a schedule issue, a schedule issue becomes a communication issue, and the original risk disappears inside a neutral summary.
Rocha told the podcast, “If you lose people to fear and intimidation, you've lost valuable information.” The sentence describes an information-control failure as much as a culture failure. Fear changes what people say, but hierarchy can also change what others hear, especially when a senior decision has already been signaled.
The first control is to preserve the source language. Copy the concern into the decision record before summarizing it, identify the person or team that raised it, and keep the technical uncertainty visible. A leader should be able to compare the final decision with the original warning without relying on memory.
Andreza Araujo's book Safety Culture: From Theory to Practice is useful as a companion to this discipline because it connects stated values with operating routines. In the Headline context, the question is not whether the organization says people may speak. It is whether the record shows that speaking changed what leaders did.
What should an incident review test first?
An incident review should test the information path before it assigns responsibility for the final action. The first questions should identify the warning, the receiver, the decision owner, the evidence available at each step, and the point where the message stopped changing the work.
OSHA's incident-investigation guidance recommends looking beyond a single factor and communicating findings to managers, supervisors, and workers. That approach matters because a corrective action that reaches only the investigation file has not yet changed the control system.
Use a five-part evidence check. What was observed? What interpretation was offered? Who received it? What authority did that person have? What action followed within the next 24 hours? The last question creates a time boundary that exposes whether the organization responded or merely acknowledged.
Link the review to the Headline guide on evidence gaps that turn a near miss into a reassuring story. The related problem is not a lack of paperwork. It is the gap between evidence that exists and evidence that changes a control.
What changes when leaders ask for truth instead of reassurance?
Leaders receive better decisions when they ask for the strongest case against continuation, not only the evidence that supports the preferred plan. This question creates room for dissent without requiring the person raising it to defeat the entire project or prove a future failure in advance.
| Reassurance-seeking review | Truth-seeking review |
|---|---|
| “Can we proceed?” | “What would make proceeding unsafe?” |
| Summarizes the concern after discussion | Preserves the original concern before discussion |
| Asks the challenger to prove failure | Names the evidence needed to justify continuation |
| Closes when a manager accepts the explanation | Closes when the control, owner, and review boundary are verified |
This is not an argument for endless analysis. It is a decision-quality rule for moments in which the consequence is serious and the evidence is incomplete. NASA's official Columbia investigation overview helps readers distinguish the physical cause from the broader organizational findings that shaped the response.
Headline co-host Andreza Araujo often returns to the difference between a safety promise and a safety decision. That difference is visible when a leader can state what evidence would change the decision and can show who owns the next test.
How can leaders protect the person who speaks?
Leaders protect the person who speaks by separating the quality of the information from the convenience of the message. A concern can be incomplete, technically wrong, or poorly timed, yet still deserve a professional response because early uncertainty is exactly when a high-consequence decision needs scrutiny.
Rocha's advice on the episode was simple, “Tell the truth, and empower others to tell the truth too.” In practice, empowerment requires more than permission. The person who raises the concern needs a named owner, a visible response, and protection from informal retaliation while the issue is being evaluated.
Review the last five escalations every month. Check the time to acknowledgement, the time to decision, whether the original concern was preserved, and whether the person who raised it received the outcome. Those four fields give leaders a more useful view than a count of reports alone.
The Headline article on voice climate and speak-up routes offers a complementary way to test whether the route is real. If the route ends at acknowledgement, the organization has created a mailbox, not a control.
Recommendation
Build a bad-news protocol around the next safety-critical decision, not around the next incident. Require the decision owner to record the original concern, the evidence available, the evidence still missing, the authority to pause or redesign the work, and the time of the next review.
Give supervisors one escalation path that does not depend on personal courage, and review the path every 30 days using real examples. If the same warning is repeatedly softened, delayed, or returned to the person who raised it, treat that pattern as a control failure.
Andreza Araujo and Dr. Megan Tranter created Headline Podcast for conversations that keep learning visible. Rodney Rocha's episode is valuable because it shows that truth-telling is not an abstract virtue. It is an operational barrier that protects decisions from incomplete information.
When a high-consequence concern has no named decision owner, no evidence boundary, or no review time, the work is already operating on an unmeasured assumption.
Listen to the full conversation, and ask one question before your next review closes: what warning would we wish we had protected earlier?
Frequently asked questions
What does Rodney Rocha teach about bad news in safety?
How can leaders stop warnings from weakening as they move upward?
What should an incident investigation review first?
How does the burden of proof affect escalation?
Where can I hear the full Rodney Rocha conversation?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.