Safety Culture

Risk Communication Explained: 4 Questions That Keep Bad News Actionable

Risk communication protects people only when field evidence reaches decision authority and returns as a visible response. This explainer uses four questions to keep bad news actionable.

By 5 min read
corporate environment depicting risk communication explained 4 questions that keep bad news actionable — Risk Communication E

Key takeaways

  1. 01Risk communication connects an observed exposure with a control decision and a visible response.
  2. 02The strongest messages describe what was observed instead of replacing evidence with a risk label.
  3. 03Every report should identify the control that is expected to prevent harm and the role that can change the condition.
  4. 04Feedback is part of control because workers need to know what changed and what remains uncertain.
  5. 05Leaders can improve communication by reviewing recurring reports through four questions rather than adding another form.

Risk communication fails when information moves without a decision attached to it. A worker reports a damaged guard, a supervisor forwards the message, and a dashboard records the event, yet nobody can say who must act before the exposure remains in the operation.

The practical test is not whether the organization communicates often. It is whether the message preserves the seriousness of the risk, reaches the person with authority, and produces a visible response that workers can recognize.

Risk communication is the structured exchange of information about hazards, controls, uncertainty, and decisions between the people who observe exposure and the people who can change its conditions. It matters because bad news protects people only when it remains specific, reaches the right authority, and returns to the field as action.

What does risk communication mean in workplace safety?

Risk communication connects observation with responsibility. It includes the first report, the clarification that follows, the decision about control, and the feedback that tells the affected team what changed. A notice on a bulletin board is communication, but it is not necessarily risk communication if no one knows whether the exposure is controlled.

ISO 45001:2018 treats communication as part of the occupational health and safety management system, which means the organization must define what it communicates, when it communicates, and how it receives relevant information. The standard does not turn communication into a slogan. It makes communication part of how the system operates.

Why does bad news lose value between the field and leadership?

Bad news loses value when the message becomes less precise at every handoff. “The area is unsafe” may become “minor housekeeping issue” in a meeting summary, even though the original observation involved an unguarded movement zone. The language softens, the owner becomes unclear, and the response is delayed.

James Reason’s work on latent failures helps explain why this matters. A weak reporting chain can hide the conditions that allow an exposure to repeat, especially when the final record describes the symptom while omitting the decision, resource, or design choice that sustained it.

Andreza Araujo’s The Illusion of Compliance, translated from A Ilusão da Conformidade, provides a useful brand lens for this problem. A complete form can create the appearance of control while the underlying decision remains untouched. Risk communication must therefore preserve the link between evidence and action.

Question 1: What exactly was observed?

The first question separates evidence from interpretation. A useful report identifies the task, location, condition, energy, exposure, and people who could be affected. It does not require a long narrative, but it must be concrete enough for another person to verify the situation.

“Unsafe lifting” is too broad to guide a decision. “The suspended load passed over the access path while two contractors were inside the marked area” gives the receiving supervisor a condition to inspect and a reason to control the interface immediately.

The common trap is asking for a conclusion before asking for an observation. When a worker is required to label an event as low, medium, or high risk before describing what happened, the label can replace the evidence that leaders need.

Question 2: Which control is supposed to prevent harm?

Every message about risk should identify the control that is expected to keep people safe. The control may be a guard, isolation, exclusion zone, staffing rule, permit condition, alarm, design feature, or recovery plan. Naming it turns a general concern into a testable question.

The supervisor should ask whether the control exists, whether it is available at the point of work, and whether the team knows how failure would be recognized. A control that exists only in a procedure is not equivalent to a control that is visible, accessible, and verified in the task.

In more than 250 cultural transformation projects supported by Andreza Araujo, the practical distinction is whether leadership intent changes repeated operating decisions. Communication becomes credible when the reported concern leads someone to inspect the control rather than merely close the record.

Question 3: Who has authority to change the condition?

Information does not become actionable until responsibility is specific. The person who notices a hazard may have authority to pause the task, while the person who can redesign the equipment, change staffing, approve cost, or alter the production plan may sit elsewhere.

That difference should appear in the communication itself. Name the immediate stabilizing action, the decision owner, and the escalation path if the owner cannot respond within the required window. This protects the reporting worker from carrying a system problem that they cannot solve alone.

The phrase “management will review” is not an owner. A useful message names a role, a decision, and a time for the next update. When those details are absent, the organization may continue communicating while postponing the decision.

Question 4: What will workers see after the message?

Feedback is the proof that communication reached the operating system. Workers should be able to see whether the task stopped, the barrier changed, the procedure was revised, the equipment was repaired, or the risk was accepted by the authority defined in the organization’s process.

This does not mean every report receives the preferred outcome. A technically defensible decision can still disappoint the person who raised the concern. The critical requirement is that the reasoning, authority, and remaining exposure are made clear enough to support the next safe decision.

A leader can test this loop by returning to the affected crew and asking what changed, what remains uncertain, and what would trigger another pause. If the team cannot answer, the communication cycle is incomplete.

How should supervisors communicate an urgent risk?

Urgent communication should be short enough to use under pressure and specific enough to guide the next action. State the exposure, the immediate protective step, the control that failed or is missing, the person who must decide, and the time of the next update.

Do not bury the urgent condition beneath background history. Context matters, although the first sentence should help the receiver decide whether work must stop, people must move, or a barrier must be restored before the task continues.

OSHA’s Recommended Practices for Safety and Health Programs connect management leadership with worker participation. That connection is practical during escalation because the person who sees the exposure and the person who controls the resources must be able to exchange information without turning urgency into blame.

What is the difference between communication and evidence of control?

Communication onlyEvidence of control
A message was sent to a distribution list.The control owner inspected the condition and recorded the decision.
The issue was entered into a tracking system.The work changed, the barrier was restored, or the remaining exposure was formally accepted.
The reporter received a generic thank-you.The affected crew received a specific explanation and knows what to do next.
A monthly dashboard shows closure.Field verification shows that the exposure is no longer present or is being actively managed.

The distinction protects leaders from measuring activity instead of control. A high volume of messages may indicate attention, but it cannot prove that the organization changed the conditions that produced the messages.

How can a leader improve risk communication this week?

Choose one recurring exposure and review the last three reports with the people who raised them. For each report, answer the four questions in order, then identify where the message lost evidence, ownership, or feedback.

Use the review to change one field in the reporting process or one conversation in the escalation routine. The goal is not to add another form. It is to make the next report more precise and the next decision easier to verify.

Andreza Araujo’s work on safety culture and leadership focuses on the choices that become visible when operations face pressure. Explore Andreza Araujo’s safety resources, including Safety Culture: From Theory to Practice, and visit Headline Podcast for further conversations about safety decisions.

Topics safety-culture risk-communication worker-voice safety-leadership field-evidence control-verification

Frequently asked questions

What is risk communication in workplace safety?
Risk communication is the structured exchange of information about hazards, controls, uncertainty, and decisions between the people who observe exposure and the people who can change its conditions.
What should a safety risk message include?
A useful message includes the observed condition, the people or task exposed, the control that should prevent harm, the decision owner, the immediate protective action, and the next feedback point.
Who is responsible for risk communication?
Responsibility is shared. Workers provide field evidence, supervisors stabilize the task, process owners maintain controls, and leaders provide the authority and resources needed to change conditions.
How can leaders know whether communication worked?
Leaders can verify whether the affected crew can explain what changed, which control now applies, who owns the remaining decision, and what would trigger another pause or escalation.
Is a closed safety report proof that risk is controlled?
No. Closure proves that a record reached a workflow milestone. Control requires field evidence that the exposure changed, the barrier was restored, or the remaining risk was formally decided by the proper authority.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI