M&A Safety Due Diligence: 6 Gaps Boards Miss

Acquisition teams can review revenue, debt, customers and litigation while leaving fatal-exposure risk buried in plant routines that never reached the data room. This article defines 6 safety due-diligence gaps boards should close before a transaction prices a company without understanding the occupational risk it is buying.

M&A safety due diligence is the review of occupational safety exposure, controls, reporting quality and leadership accountability before a merger, acquisition or major investment closes. It tests whether the target's low injury rate reflects real control strength or only weak reporting, deferred capital and unmanaged serious injury potential.

Why does safety due diligence fail before the deal closes?

Safety due diligence fails before close when the review treats EHS as a compliance appendix instead of a material-risk inquiry. In the United States, BLS reports 5,070 fatal work injuries in 2024, which means workplace risk remains financially and morally material even when a target company presents a clean recordable-injury trend.

The gap is not that lawyers ignore safety. The gap is that legal diligence often asks whether permits, logs and policies exist, while operational diligence asks whether high-energy work is controlled under real production pressure. A buyer can inherit a serious exposure profile that was never visible in the adjusted EBITDA story.

On the Headline Podcast, Andreza Araujo and Dr. Megan Tranter bring leaders into real conversations about the point where safety becomes a leadership decision. M&A is one of those points because the board is not only buying assets. It is buying the target's habits, shortcuts, deferred engineering decisions and reporting culture.

1. The target's low TRIR becomes a false comfort

A low TRIR should start questions during acquisition diligence, not end them. OSHA recordkeeping data can show useful patterns, although OSHA explains that reportable and recordable categories depend on defined outcomes, which means high-energy exposures can remain invisible until a serious event crosses a reporting threshold.

The most dangerous mistake is reading a 3-year injury trend as if it were a direct proxy for fatality potential. A target with low recordables may still run frequent work at height, hazardous energy isolation, forklift-pedestrian interaction, hot work, confined-space entry or contractor activity under controls that are weak but not yet tested by consequence.

Boards should require a second view beside TRIR: task exposure, SIF potential, control health and reporting quality. The Headline article on control health versus TRIR expands that board-metric shift because the buyer needs to know which risks are quiet, not only which risks already created cases.

2. Data-room documents hide field control weakness

Data-room documents can prove that a safety system exists while hiding whether the system works in the field. ISO 45001:2018, which ISO specifies as an occupational health and safety management-system standard, requires planning, operation, auditing and management review, but a buyer still has to test execution at the point of work.

As Andreza Araujo argues in Safety Culture: From Theory to Practice, culture appears in what leaders reinforce, tolerate and inspect. A target may upload procedures, training matrices and audit certificates while supervisors normalize bypasses, contractors improvise permits and maintenance teams work around equipment that should have been redesigned years earlier.

The diligence team should sample high-risk tasks, not only documents. Ask for recent permits, completed isolation records, contractor supervision evidence, abnormal-event logs and closure proof for critical findings. If the target cannot connect documents to field verification within 10 business days, the buyer has learned something more useful than a certificate could show.

3. Deferred safety CapEx is treated as normal maintenance

Deferred safety CapEx becomes an acquisition risk when the target has postponed engineering controls that protect people from severe exposure. A buyer may price maintenance backlog and asset reliability, yet miss the fact that unfunded guarding, ventilation, vehicle separation or isolation upgrades are not ordinary upkeep.

Across 25+ years leading EHS in multinational companies, Andreza Araujo has seen that leaders often accept temporary administrative controls because the injury numbers have not yet embarrassed the business case. That habit becomes dangerous in M&A because the buyer inherits not only the equipment but also the budget logic that kept the exposure alive.

Before close, request the last 3 capital cycles of rejected or deferred safety projects, then classify each request by severity potential, exposure frequency and control reliability. The review should connect directly with safety CapEx blind spots, since deal value changes when prevention requires capital immediately after acquisition.

4. Contractor and temporary-worker risk stays outside valuation

Contractor and temporary-worker exposure can sit outside valuation even when those workers perform the target's highest-risk tasks. OSHA's severe-injury program, which OSHA states began on January 1, 2015, covers amputations, inpatient hospitalizations and eye loss, but a buyer needs to understand who is actually exposed before a severe report appears.

The common diligence package separates employees, contractors, agencies and service providers for legal reasons, but the risk does not respect those administrative boundaries. Shutdown work, cleaning, construction, maintenance, logistics and specialized technical services can create the highest fatality potential while staying peripheral to the target's culture narrative.

Ask for contractor hours, incident classification rules, prequalification standards, supervision ratios, permit participation and stop-work evidence. If contractor events are discussed as vendor problems rather than site-risk signals, the buyer should treat that language as cultural evidence, not as reassurance.

5. What reporting culture should buyers test?

Buyers should test whether the target reports weak signals before people are hurt, because low event volume can mean excellent control or organizational silence. The practical test is the ratio between high-potential near misses, corrective-action aging, supervisor observations and recordable outcomes across at least 24 months.

In more than 250 cultural transformation projects, Andreza Araujo observes that reporting quality changes when leaders make bad news usable instead of punishable. Co-host Dr. Megan Tranter often connects this issue to leadership clarity because a team will not tell the truth about risk if the first reaction is blame, budget denial or reputation defense.

Diligence should include interviews that ask how the site reacts to near misses, who sees high-potential events and which corrective actions remain open past their promised date. The buyer can also compare the target's voice climate with Headline's article on safety silence motives, since silence before close becomes integration trouble after close.

6. Integration planning ignores safety decision rights

Safety decision rights must be assigned before Day 1 because acquisition integration changes authority, budgets, reporting lines and escalation paths. When the buyer waits until after close, supervisors may keep old shortcuts while corporate leaders assume the new governance model is already operating.

Antifragile Leadership (Araujo) describes pressure as a test of whether leaders learn, adapt and strengthen the system. M&A creates exactly that pressure. The target's EHS manager may lose direct access to executives, procurement may renegotiate contractors, operations may accelerate synergies and the board may expect rapid financial capture, all while risk ownership is being rewritten.

Before close, define who can stop high-risk work, who approves temporary controls, who escalates unresolved SIF exposure, who owns deferred CapEx and who signs residual-risk acceptance. That governance map should connect to safety decision rights so the buyer does not discover authority gaps during the first serious incident.

Comparison: legal diligence vs safety-risk diligence

Legal diligence asks whether the target can show compliance evidence, while safety-risk diligence asks whether the buyer is inheriting uncontrolled severe exposure. Both reviews matter, although they answer different questions and should not be collapsed into one document request list.

Each acquisition week spent treating safety as a document review allows weak controls to move into the buyer's operating model, where the same exposure becomes harder to price, harder to govern and harder to explain after harm occurs.

How should the board use these 6 gaps before signing?

The board should use these 6 gaps as a pre-close challenge to management, not as an EHS checklist delegated to the end of the transaction. Ask whether the target's low injury rate is credible, whether field controls were verified, whether deferred safety CapEx changes valuation and whether Day 1 decision rights are already assigned.

Headline Podcast exists as the space where leadership and safety come together to shape better workplaces and better lives. In M&A, that promise becomes practical when leaders refuse to buy a culture they have not tested, price a risk they have not seen or integrate an exposure no one has authority to stop.