Safety Maturity Explained: 4 States to Test Ownership

Safety maturity describes how consistently an organization turns its stated safety expectations into decisions, controls, and learning at the point of work. It matters when a good policy exists but supervisors still face pressure, unclear ownership, or weak evidence that the control works.

Safety maturity is the distance between what an organization says safety should look like and what its people can reliably do under normal operational pressure. The four states below are an editorial diagnostic, not a certification scale, so leaders can locate the gap and choose evidence that makes the next improvement visible.

Definition

Formal systems provide an important foundation. ISO 45001:2018 describes an occupational health and safety management system that manages risks and improves performance, while the ILO-OSH 2001 guidelines connect policy, organization, planning, implementation, evaluation, and improvement. Neither source turns maturity into a single universal ladder, which is why a useful diagnosis must stay close to work conditions.

The Health and Safety Executive culture guidance also treats culture as something visible in the way work is organized and challenged, rather than as a slogan on a wall. A mature organization therefore does more than pass an audit. It makes the safer decision easier to recognize, resource, and repeat.

4 states of safety maturity

1. Declared

In the declared state, leadership communicates strong expectations and the organization can produce policies, training records, and inspection schedules. The system may look complete because its documents are orderly, although the worksite still depends on individual goodwill when production changes the plan.

Typical evidence includes high completion rates, polished campaigns, and meetings that discuss safety in general terms. The diagnostic question is whether a supervisor can name the decision owner, the escalation route, and the field evidence that would show a control is present.

2. Controlled

In the controlled state, the organization has translated expectations into procedures, permits, risk reviews, and defined checks. People know what should happen, and leaders can identify deviations that require correction.

The weakness is that control may still depend on inspection timing. A procedure can be followed during an audit and bypassed during a rushed restart, which means the next test should examine how the system behaves when time, staffing, or equipment availability become difficult.

3. Integrated

In the integrated state, safety decisions are built into planning, maintenance, procurement, production, and contractor management. The EHS function provides expertise and challenge, while the operating leaders who control the conditions also own the decision.

OSHA describes leading indicators as proactive measures that reveal whether safety and health activities are working. That principle becomes useful here when the indicators are connected to decisions, such as whether unresolved concerns receive resources, whether critical controls are verified in the field, and whether managers remove recurring causes.

4. Owned

In the owned state, people do not wait for an annual campaign or an EHS reminder before addressing a material exposure. Teams can raise a concern, explain the operational choice, and see who will decide what changes next.

Ownership does not mean the safety department disappears, and it does not mean every decision becomes informal. It means accountability sits with the people whose choices shape the exposure, while leaders preserve the technical support, authority, and review rhythm that keep the system credible.

How to differentiate the states in practice

A useful review compares the written process with one recent decision. Choose a restart, maintenance delay, contractor change, or production deviation, then trace what happened from the first signal to the final action. If the record cannot show who decided, what evidence was considered, or how the result was verified, the organization is not yet operating at the state its policy claims.

When to use this diagnostic

Use the four states when a survey score, audit result, or leading indicator looks positive but leaders still hear about workarounds, delayed escalation, or recurring exposure. The model is especially useful before a management review because it shifts the conversation from whether the system exists to whether the system changes work.

Do not convert the states into a target score. Use them to select the next proof. A declared organization may need field verification. A controlled organization may need operating ownership. An integrated organization may need to test whether its decisions remain reliable across shifts, contractors, and production pressure.

Headline Podcast explores this gap through real conversations about leadership and safety. Explore the podcast and share the conversation with a safety leader who needs evidence beyond the dashboard.

Related reading: Safety Management System Explained: 4 Operating Layers.