Safety Leadership

Safety Leadership: 6 Gaps That Keep Critical-Risk Decisions Outside the Board Pack

A board can receive accurate safety data and still miss the decisions that keep critical risk controlled. This diagnostic identifies six gaps that hide unresolved exposure, weak ownership, and delayed action from executive oversight.

By 7 min read
leadership scene showing safety leadership 6 gaps that keep critical risk decisions outside the board — Safety Leadership: 6

Key takeaways

  1. 01A board pack can be numerically accurate while omitting the unresolved decisions that determine whether critical controls remain dependable.
  2. 02The most important governance gaps concern exposure, decision rights, evidence quality, temporary measures, field reality, and expiry dates.
  3. 03A critical-risk decision belongs in executive oversight when the authority, funding, design, or operating boundary required to control it exceeds the local team mandate.
  4. 04Safety leadership improves when the board sees the decision required, the consequence of delay, the evidence available, and the owner who can close the call.
  5. 05The purpose of a stronger board pack is not to add more safety metrics. It is to make unresolved risk harder to hide behind completed actions and stable averages.

A board pack can show a favorable incident trend, a high percentage of completed actions, and a green compliance dashboard while a critical-risk decision remains unresolved. The problem is not always inaccurate reporting. More often, the reporting system is answering a narrower question than the board believes it is answering.

When the pack shows what happened but not what leaders still need to decide, executive oversight arrives after exposure has become an operating condition. In Make The Difference: Be a Leader in Health and Safety, Andreza Araujo treats safety leadership as a practical responsibility for shaping decisions, not as a communication exercise performed after the work is already planned. A board cannot govern a risk it cannot see in decision form.

Why a complete safety dashboard can still hide an incomplete decision

Safety data is useful when it changes attention and action. It becomes misleading when a stable average is allowed to stand in for control reliability. A low injury rate does not show whether a critical barrier is available today, whether a temporary arrangement has an expiry date, or whether the person who owns the exposure can stop the work.

James Reason's work on organizational accidents helps explain the gap. Harm becomes more likely when latent conditions, local decisions, and absent defenses line up, even though each individual record may look acceptable. A board pack that reports only outcomes can describe the past while leaving the conditions that shape the next serious event outside the decision room.

The board does not need every field detail. It does need a trustworthy view of the decisions that exceed local authority. Six recurring gaps make that view incomplete.

Gap 1: The pack reports exposure outcomes but not exposure decisions

Incident rates, restricted cases, audit findings, and corrective-action closure are outcome views. They show what the organization recorded, but they do not necessarily show what the organization has chosen to do about a serious exposure that has not yet produced harm.

A useful board question is not only, “What happened this month?” It is also, “Which critical exposure still requires a decision?” The answer may involve a machine guard that needs redesign, a contractor interface that lacks a clear control owner, or a maintenance backlog that keeps a temporary barrier in service.

The distinction matters for Serious Injuries and Fatalities, where low frequency can create false reassurance. A board should see the exposure pathway, the current control, and the decision required to strengthen or replace it. Without those fields, the pack rewards the absence of a recorded event rather than the quality of prevention.

Gap 2: Decision rights disappear behind shared accountability

Many packs use collective language such as “the team is reviewing,” “the business is addressing,” or “operations and EHS are aligned.” Those phrases can sound collaborative while leaving no individual with the authority to change the condition.

Safety leadership becomes visible when the report names the decision owner and explains what that person can change. The owner may control capital, production sequencing, engineering design, contractor selection, staffing, or the authorization to stop work. EHS can challenge evidence and coordinate assurance, although the operating authority must remain visible.

When a decision has no named authority, meetings multiply without closing the exposure. The board should treat that absence as a governance gap because a risk with no decision owner has no reliable route to resolution.

Gap 3: Completion status replaces evidence quality

A completed action can mean that a document was revised, a training session was delivered, or a work order was closed. None of those events proves that the intended control is available, understood, and effective under current conditions.

The board pack should distinguish administrative completion from control evidence. Evidence may include a field verification, a functional test, an observation of the task, a maintained design standard, or a review showing that the control survived a change in equipment, staffing, schedule, or contractor interface.

This is not an argument for adding more paperwork. It is an argument for asking what evidence supports the decision. A record that cannot change the authorization, sequence, resource, or operating boundary is weak evidence for a critical control, even when the record is complete.

What the pack may showWhat leaders still need to knowDecision implication
Action marked completeWas the control tested in the work it is meant to protect?Keep the action closed only when effectiveness is verified.
Training marked completeCan the team recognize and execute the control under pressure?Review task evidence rather than treating attendance as assurance.
Audit finding reducedDid the change remove the exposure or only improve the record?Escalate repeated findings that return in another form.
Temporary measure acceptedWho checks it, when does it expire, and what replaces it?Require an explicit decision before the temporary state becomes normal.

Gap 4: Temporary controls are presented as stable controls

Temporary measures are often necessary, but they create a second risk when the board sees them as evidence that the permanent control already exists. A manual check, additional supervision, restricted access, or shortened work window can reduce exposure while the organization completes a redesign.

The governance failure begins when the temporary measure has no expiry condition, no named checker, and no statement of what would make it unacceptable. Once the arrangement survives several reporting cycles, people adapt around it. The exception becomes the operating method, although the organization continues to describe it as temporary.

A board pack should show the age of each material temporary measure, the exposure it covers, its verification result, and the decision required to remove or replace it. A long-lived temporary control is not automatically unsafe, but it is never neutral. Its continued use deserves an explicit decision.

Gap 5: Field conditions are separated from executive decisions

Critical-risk decisions are frequently made from summaries that have traveled through several reporting layers. Each layer compresses detail, which is reasonable for executive governance, although compression can remove the operational fact that changes the decision.

The board may need to know that a control is technically specified but difficult to access, that a permit is issued before isolation is independently verified, or that supervisors are compensating for a design weakness through extra presence. These details explain whether the intended control can survive real work.

A practical safeguard is to connect each material decision to recent field evidence. The evidence does not need to be a long narrative. It can be a verified observation, a failed functional test, a control-availability review, or a direct statement of the operating constraint that prevents the designed control from working.

Andreza Araujo's experience across more than 25 years of executive EHS work supports a simple leadership principle. The closer a decision is to serious exposure, the less acceptable it is to rely on a distant proxy for control reality. The board should not run the field, but it should know when field evidence contradicts the dashboard story.

Gap 6: The pack shows open items without showing the cost of delay

An open item is not automatically urgent, and an old item is not automatically important. The missing information is the consequence of waiting. If the decision is delayed another month, what exposure continues, what work remains constrained, what temporary measure becomes harder to sustain, and what new information could make the decision different?

Without a consequence-of-delay field, unresolved items compete for attention by political force, meeting time, or the confidence of the person presenting them. That is a weak basis for executive governance. A critical-risk decision should be prioritized by the exposure it leaves in place and by the authority required to remove it.

The board can ask four questions whenever an item returns for a second review:

  • What changed in the exposure since the last review?
  • What evidence was gained, and what remains unknown?
  • Which decision right or resource is still missing?
  • What will happen if the item is deferred again?

Repeated deferral is itself a signal. It can indicate that the proposal is poorly defined, that the wrong authority is in the room, that the control is unaffordable under the current design, or that leaders have not agreed on the boundary at which work must stop.

What a decision-ready board pack should contain

A decision-ready safety section is not a longer dashboard. It is a compact view of unresolved choices that can materially change exposure. Each item should identify the critical-risk pathway, the current control state, the decision required, the accountable authority, the evidence supporting the current view, the consequence of delay, and the date when implementation will be verified.

Those fields create a stronger conversation because they separate information from accountability. They also make it easier to see when a local team is being asked to manage a problem that requires design authority, capital, commercial intervention, or a change in production planning.

The board should protect the difference between challenge and substitution. Directors can ask whether the evidence is credible, whether the decision owner has authority, and whether the residual exposure is understood. They should not replace the operating leader's technical judgment with a remote instruction that ignores the task conditions.

How leaders can close the governance gap this quarter

Start with the next board cycle by selecting a small set of unresolved decisions linked to serious exposure. Choose items where the current control depends on a temporary arrangement, where decision rights cross functions, or where the evidence has not been tested close to the work.

For each item, write the decision in one sentence. “Approve funding for the engineered isolation redesign,” “change the operating boundary until the guard is verified,” and “assign one accountable owner for contractor rescue readiness” are decisions. “Improve safety performance” is not.

Then record the evidence that supports the current state and define the verification point that will show whether the decision changed the work. This prevents the board from celebrating approval while the field condition remains unchanged.

Andreza's book Make The Difference: Be a Leader in Health and Safety is a useful companion for leaders who want to connect visible leadership with practical action. Headline Podcast also brings executives and safety practitioners into conversations about the choices that shape real workplaces. Explore the podcast and its safety leadership conversations.

Safety leadership is not proven by the amount of safety information in a board pack. It is proven by whether the pack makes the right decisions visible early enough for leaders to change exposure before harm occurs.

Topics safety leadership critical risk board oversight risk governance decision quality executive safety safety culture

Frequently asked questions

What is a critical-risk decision in safety leadership?
A critical-risk decision is a choice that can change whether people remain exposed to a serious injury or fatality pathway. It may involve stopping work, funding an engineered control, changing a design, accepting residual risk, changing an operating boundary, or assigning authority to act.
Why can a board pack miss serious safety risk?
A board pack often emphasizes lagging outcomes, completed actions, and aggregated indicators. Those views can remain stable while unresolved control decisions, temporary measures, repeated exceptions, and weak field evidence continue to shape exposure.
What should a board ask about critical-risk decisions?
The board should ask which critical-risk decisions remain open, who has authority to close them, what evidence supports the current control, how long a temporary measure has been active, what changed in the work, and what consequence follows if the decision is delayed again.
Should every safety issue appear in the board pack?
No. Board attention should focus on decisions whose consequence, resource requirement, cross-functional effect, or authority exceeds the operating level that currently owns them. Routine issues can stay in local governance when their controls are effective and their decision rights are clear.
How can leaders improve board-level safety oversight?
Replace a purely status-based safety section with a decision view. Show the exposure, the required call, the control evidence, the accountable authority, the age of the unresolved item, and the verification date that will prove the decision changed work.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI