Safety Culture

Safety Culture: 4 Frictions That Reveal When Ownership Stops at the Audit

A safety culture becomes fragile when audit ownership ends at the report. These four frictions show where leaders must reconnect evidence, decisions, and field control.

By 6 min read
corporate environment depicting safety culture 4 frictions that reveal when ownership stops at the audit — Safety Culture: 4

Key takeaways

  1. 01An audit can identify a gap without creating an owner who changes the work.
  2. 02The first friction appears when findings are assigned to EHS even though another function controls the exposure.
  3. 03The second friction appears when closure is accepted as evidence of activity rather than proof that the control works in the field.
  4. 04The third and fourth frictions involve weak escalation and weak learning, which allow exceptions to survive after the report is closed.
  5. 05Leaders strengthen culture by connecting every material finding to a decision owner, field proof, escalation rule, and review of recurrence.

The audit report is clean, the action tracker is green, and the site leadership team has moved to the next agenda item. Yet the same exposure appears during a field visit three weeks later. Nothing mysterious happened. Ownership ended when the finding entered the system.

That distinction matters because a safety culture is not measured by how reliably an organization produces evidence of review. It is measured by whether evidence changes decisions, work conditions, and the behavior leaders tolerate when production pressure rises. Across 25+ years leading EHS in multinational operations, Andreza Araujo has treated this gap as a cultural signal rather than an administrative defect.

Key Takeaways

  • An audit can identify a gap without creating an owner who changes the work.
  • EHS should coordinate evidence and challenge weak responses, while the function that controls the exposure owns the change.
  • Closure is credible only when field evidence shows that the control works under the conditions that created the finding.
  • Escalation must protect material findings from being diluted by routine action-management language.
  • Recurring findings are culture evidence because they show what the organization has learned to accept.

Why audit completion is not the same as control

An audit is a structured way to compare expected conditions with observed conditions. It is valuable because it creates visibility, a decision trail, and a basis for prioritization. It becomes misleading when the organization treats the existence of the report as proof that the risk has been controlled.

James Reason's work on organizational accidents helps explain why this failure persists. A visible deviation is often connected to earlier decisions about design, staffing, maintenance, supervision, or production priorities. If the response fixes only the visible symptom, the latent condition remains available to recreate the same exposure.

The practical question is therefore not whether the audit found the issue. The question is whether the organization gave the issue to the person who can change its conditions, required proof that the change works, and retained enough memory to prevent the same gap from returning under a different name.

Friction 1: EHS receives the finding but cannot change the exposure

The first friction appears when every finding is assigned to the safety team, even though operations, engineering, maintenance, procurement, or human resources controls the relevant decision. This arrangement feels efficient because EHS understands the standard and can update the tracker quickly. It is weak because the team with the clearest technical view may not have authority over the work.

A missing guard, an understaffed shift, an unsuitable contractor specification, and an unreliable emergency route do not share the same decision owner. When they all become EHS actions, the organization converts a management problem into a coordination task. The tracker stays active while the exposure stays operational.

Leaders should test ownership with one sentence. Ask which person can change the condition without requesting permission from the person assigned to close it. If the answer is unclear, the finding has not reached its real owner.

Friction 2: Closure evidence proves activity instead of protection

The second friction appears when closure means that a procedure was revised, a training record was uploaded, or a purchase order was issued. Those actions may be necessary, although none proves that the control works where people perform the task.

Credible closure requires a chain of evidence. The organization must show what changed, who verified the change, how the control performs during ordinary variation, and what happens when the control is unavailable. A new procedure that nobody uses is not a control. A new barrier that is routinely bypassed is not a restored barrier.

Andreza Araujo's book Safety Culture: From Theory to Practice makes this practical distinction central to cultural diagnosis. Leaders should compare the declared method with the operated method, because the distance between them reveals whether the change has reached the work or remained inside the management system.

Friction 3: Escalation language hides material risk

The third friction appears when a serious exposure is described with the same language used for a minor housekeeping issue. “Action open,” “monitor,” and “include in the next review” can be reasonable phrases in context, but they become dangerous when they erase consequence, urgency, or decision authority.

A material finding needs an explicit escalation threshold. The threshold should state which conditions require senior review, who can pause the work, what temporary protection is acceptable, and when the decision expires. Without those fields, the organization asks the action owner to negotiate urgency alone, often while competing with schedule and budget pressure.

The board or executive team does not need every audit detail. It does need to see findings whose control depends on capital, staffing, design change, or a decision to accept exposure temporarily. That visibility turns safety culture into governance rather than presentation quality.

Friction 4: Repeated findings are recorded but not interpreted

The fourth friction appears when recurring findings are counted as separate events instead of recognized as evidence of a system pattern. The wording may change from “blocked emergency exit” to “poor access to emergency equipment,” while the underlying decision remains untouched.

Recurring findings deserve a different review. Leaders should compare the original evidence with the latest evidence, identify what was promised, locate where the promise failed, and ask which assumption made the response seem sufficient. That review is not a search for a more persuasive corrective-action sentence. It is a test of organizational memory.

When recurrence is treated as a cultural signal, the discussion becomes more honest. Perhaps the control is incompatible with the work design. Perhaps the owner has responsibility without authority. Perhaps the site closes findings before testing them under peak demand. Each explanation points to a different decision, which is why repetition should trigger analysis rather than another generic reminder.

How leaders reconnect audit evidence to field control

Leaders can repair these frictions without creating another layer of paperwork. Start with a small sample of material, overdue, or recurring findings and trace each one through four questions.

  1. Which operational decision created or maintained the exposure?
  2. What changed in the work, equipment, staffing, or authorization process?
  3. What field evidence proves that the new control works under pressure?
  4. What escalation occurs if the control is unavailable or the finding returns?

The answers should be reviewed by the decision owner in the work area, not only by the person who administers the audit system. This is where a cultural diagnosis becomes useful. The organization can see whether accountability is attached to authority, whether verification is attached to reality, and whether leaders respond to recurrence with curiosity or irritation.

A simple ownership test for the next leadership review

Review questionWeak signalStronger signal
Who owns the change?EHS is listed because it manages the tracker.The function controlling the exposure accepts the decision.
What proves closure?A document, training record, or purchase order.Field evidence shows the control works during real work.
When does the issue escalate?The owner decides when the delay feels uncomfortable.A defined threshold sets authority, timing, and temporary protection.
What happens when it returns?The action is reopened with the same wording.Recurrence triggers a review of the original assumption and decision.

This table is not a maturity score. It is a conversation device. If a leadership team cannot answer the questions with evidence, it should resist calling the finding closed, regardless of what the software status says.

FAQ about audit ownership and safety culture

What does it mean when safety ownership stops at the audit? It means the organization completes the inspection or audit process, but the operational owner does not change the condition that created the exposure. The report is closed while the field remains dependent on the same weak control.

Who should own an audit finding? The owner should be the person with authority over the process, equipment, staffing, budget, or work design that must change. EHS can coordinate evidence and challenge weak responses, but it should not absorb ownership that belongs to operations or engineering.

How can leaders test whether an action is really closed? Leaders should ask what changed in the work, what evidence proves the new control operates under normal pressure, and whether the person exposed to the risk can describe the change. A completed task in a system is not enough.

Why do repeated audit findings damage safety culture? Repeated findings teach people that reporting does not reliably change conditions. Over time, the organization may keep its audit score while losing confidence that leaders will act on evidence.

What is the first repair when audit ownership is weak? Select one overdue or recurring finding and review it with the operational decision owner in the work area. Trace the finding from evidence to decision to field proof, then make the missing handoff visible.

A safety culture becomes credible when the organization can show that evidence changes ownership, ownership changes decisions, and decisions change the work. The audit is only the beginning of that chain. If the report is the last place where responsibility is visible, leaders should not call the process mature yet. Keep exploring the leadership and safety conversations at Headline Podcast.

Topics safety-culture audit-ownership field-verification risk-ownership leadership headline-podcast

Frequently asked questions

What does it mean when safety ownership stops at the audit?
It means the organization completes the inspection or audit process, but the operational owner does not change the condition that created the exposure. The report is closed while the field remains dependent on the same weak control.
Who should own an audit finding?
The owner should be the person with authority over the process, equipment, staffing, budget, or work design that must change. EHS can coordinate evidence and challenge weak responses, but it should not absorb ownership that belongs to operations or engineering.
How can leaders test whether an action is really closed?
Leaders should ask what changed in the work, what evidence proves the new control operates under normal pressure, and whether the person exposed to the risk can describe the change. A completed task in a system is not enough.
Why do repeated audit findings damage safety culture?
Repeated findings teach people that reporting does not reliably change conditions. Over time, the organization may keep its audit score while losing confidence that leaders will act on evidence.
What is the first repair when audit ownership is weak?
Select one overdue or recurring finding and review it with the operational decision owner in the work area. Trace the finding from evidence to decision to field proof, then make the missing handoff visible.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI