1.3 Safety Culture, Just Culture & Occurrence Reporting

1.3 Safety Culture, Just Culture & Occurrence Reporting

In high-reliability organizations such as commercial aviation, safety cannot be guaranteed solely through mechanical redundancy, digital automation, or strict procedural manuals. The ultimate operational barrier against catastrophic error is an organization's Safety Culture. Within aviation maintenance environments governed by EASA Part-145, cultivating an open, trusting, and fair reporting culture is essential for identifying latent systemic hazards before they result in an accident.

Concept and Anatomy of Safety Culture

A widely used definition of safety culture, from the UK Health and Safety Commission's ACSNI study group, is: "The product of individual and group values, attitudes, perceptions, competencies, and patterns of behaviour that determine the commitment to, and the style and proficiency of, an organization's health and safety management."

According to the seminal framework developed by Professor James Reason, an effective, mature safety culture is not an abstract slogan; it is an integrated socio-technical system built upon five interdependent sub-cultures:

1. Informed Culture: A culture in which those who manage and operate the system have current, comprehensive knowledge about the human, technical, environmental, and organizational factors that determine the safety of the system as a whole. An informed culture relies on continuous data collection and systematic risk analysis.
2. Reporting Culture: An organizational climate in which frontline operational personnel (technicians, certifiers, storekeepers) are prepared, willing, and encouraged to report their own errors, near misses, procedural discrepancies, and safety hazards without fear of retribution.
3. Just Culture: The critical engine and linchpin of the reporting culture. An atmosphere of trust in which people are encouraged and rewarded for providing essential safety-related information, but in which they are also clear about where the boundary must be drawn between acceptable honest error and unacceptable culpable behavior.
4. Flexible Culture: An organizational capability that allows the company to reconfigure its decision-making hierarchy in the face of high-tempo operational demands, emerging crises, or unexpected technical anomalies. In a flexible culture, decision-making authority shifts away from traditional bureaucratic managers down to the operational specialists who possess the greatest technical expertise on the shop floor.
5. Learning Culture: The organizational competence to draw appropriate, actionable conclusions from safety information systems, coupled with the management will to implement major structural, procedural, and resource reforms to permanently eliminate identified hazards.

Principles of Just Culture: Distinguishing Error from Culpability

In the early development of human factors programs, some advocates promoted a "no-blame culture." However, aviation safety experts quickly realized that an absolute no-blame approach is unworkable and dangerous: total blanket immunity breeds complacency and protects willful negligence or sabotage, which completely erodes workforce trust.

A Just Culture replaces the naive no-blame concept with an equitable, transparent standard. Article 2(12) of Regulation (EU) No 376/2014 defines it as a culture in which front-line operators or other persons are not punished for actions, omissions or decisions that are commensurate with their experience and training, but in which gross negligence, wilful violations and destructive acts are not tolerated. It recognizes that skilled, experienced maintenance technicians will inevitably commit unintentional cognitive errors due to the inherent constraints of human perception, memory, and information processing. At the same time, it maintains accountability for reckless misconduct.

The Spectrum of Human Performance

To apply Just Culture objectively, maintenance managers and quality auditors must classify actions according to intentionality and culpability:

• Unintentional Errors (Non-Culpable):
  • Slips: Attentional failures where the action executed does not match the intended action (e.g., reaching for a 1/2-inch socket and accidentally grabbing a 7/16-inch socket; turning a torque wrench clockwise when intending counter-clockwise).
  • Lapses: Memory failures where an intended action is omitted or forgotten (e.g., being interrupted by a phone call during a filter change and forgetting to re-insert the lockwire).
  • Mistakes: Knowledge-based or rule-based cognitive failures where the action proceeds as planned, but the plan itself is flawed due to incorrect information, incomplete training, or ambiguous maintenance manual procedures.
• Violations (Context-Dependent Culpability):
  • Routine / Situational Violations: Deviations from procedures that have become widespread "shop floor norms" because the official procedure is unwieldy, unworkable, or management lacks the proper tools or stands to comply. These represent organizational latent conditions rather than individual malice.
  • Exceptional Violations: Isolated deviations committed in unusual, high-pressure circumstances to resolve an emergency.
• Culpable Misconduct (Unacceptable):
  • Gross Negligence: An extreme, conscious disregard of an obvious, substantial, and unjustifiable safety risk (e.g., intentionally signing off a duplicate inspection on an elevator control cable without looking at the assembly).
  • Wilful Misconduct / Sabotage: Deliberate acts intended to cause damage or endanger aircraft safety.
  • Substance Impairment: Reporting for safety-critical maintenance duties under the influence of alcohol, illicit drugs, or unapproved psychoactive medications.

Reason's Substitution Test

To prevent outcome bias (judging the culpability of an act based solely on how severe the final accident was), investigators use the Substitution Test, proposed by Neil Johnston and popularised by James Reason:

"Could an equally qualified, experienced, and well-motivated technician have made the same error in the same operational circumstances?"

During an internal safety investigation, two or three certified peers are presented with the exact environmental context (e.g., 04:00 night shift, ambient temperature, confusing manual diagram, missing special tooling, urgent commercial departure deadline). If the peers agree that they could reasonably have committed the same error under those conditions, the investigation must treat the event as a systemic deficiency (latent condition) rather than an individual disciplinary matter.

Occurrence Reporting: Regulation (EU) No 376/2014 & EASA Part-145

To ensure that safety data is systematically collected across the European aviation network, the European Parliament and Council enacted Regulation (EU) No 376/2014 on the reporting, analysis, and follow-up of occurrences in civil aviation, supplemented by Commission Implementing Regulation (EU) 2015/1018.

Within approved maintenance organizations, occurrence reporting is embedded into EASA Part-145 under 145.A.60 (Occurrence reporting) and modernized Safety Management System (SMS) regulations under 145.A.202 (Internal safety reporting scheme).

Reporting Streams & Key Provisions

• Internal Safety Reporting Scheme (145.A.202): Every Part-145 approved organization must establish an internal confidential reporting system that allows all employees to report hazards, near misses, incidents, and maintenance discrepancies. This system must provide feedback to reporters on actions taken.
• Mandatory Occurrence Reporting (MOR): Certain serious discrepancies that endanger or could endanger flight safety must be reported to the competent authority and, where the rules or contracts require it, to other organisations such as the operator or the design approval holder. Examples include:
  • Cracks, delamination, or permanent deformation in primary aircraft structure exceeding allowable manual limits.
  • Significant contamination or loss of engine oil, fuel, or hydraulic fluid.
  • Disconnection, incorrect rigging, or jamming of primary flight control or engine control systems.
  • False fire warnings or uncontained powerplant rotor bursts.
  • Severe damage resulting from foreign object debris (FOD) or unapproved parts installation.
• 72-Hour Reporting Timeline: Article 4(7) of Regulation (EU) No 376/2014 requires reports within 72 hours of becoming aware of the occurrence, unless exceptional circumstances prevent it, and point 145.A.60 applies the same clock to a Part-145 organisation's reports to the competent authority.
• Statutory Non-Punitive & Confidentiality Protections: Article 16 of Regulation (EU) No 376/2014 establishes protections for reporters:
  • Protection from prejudice (Article 16(9)): Employees and contracted personnel who report, or who are mentioned in reports, shall not suffer prejudice from their employer on the basis of the information reported.
  • Limits on proceedings (Article 16(6) and (7)): Without prejudice to national criminal law, Member States refrain from instituting proceedings for unpremeditated or inadvertent infringements that come to their attention only because they were reported, and information in occurrence reports shall not be used against the reporter or persons mentioned in disciplinary or administrative proceedings.
  • Exceptions (Article 16(10)): The protections do not apply to wilful misconduct, or to a manifest, severe and serious disregard of an obvious risk and profound failure of professional responsibility that causes foreseeable damage or seriously compromises aviation safety.
  • Data de-identification: Personal details of the reporter and persons mentioned in the report must be separated from technical details to maintain confidentiality.

Just Culture Culpability Decision Matrix

Worked Maintenance Scenario: Reporting a Crossed Torque Value

During a line maintenance night shift, a Category B1 certifying technician is replacing an integrated drive generator (IDG) on a CFM56 powerplant. The maintenance manual specifies a tightening torque of 35 Nm (Newton-meters) for the V-band coupling clamp.

The technician selects a dual-scale click-type torque wrench from the tool crib. Due to poor illumination under the engine cowl and fatigue from consecutive night shifts, the technician reads the imperial scale (foot-pounds) instead of the metric scale (Newton-meters) and sets the dial to 35 ft-lbs (which equals approximately 47.5 Nm—a 36% over-torque condition). The technician torques the clamp until it clicks, safety-wires the bolt, signs the CRS, and releases the aircraft.

Four hours later, while having breakfast at home, the technician suddenly recalls that the AMM table had two columns and realizes the scale was set in ft-lbs rather than Nm. Over-torquing a V-band clamp can induce stress-corrosion microcracks or shear the trunnion during thermal expansion at takeoff power, risking an in-flight IDG separation and oil loss.

The Just Culture Response:

1. The technician immediately calls the maintenance operations center (MOC) and submits an internal safety report under Part-145.A.202.
2. The MOC intercepts the aircraft at its outstation destination before departure. The maintenance team replaces the over-stressed V-band clamp and verifies the assembly.
3. The safety quality department initiates an internal investigation and applies Reason's Substitution Test. Two other certified B1 engineers confirm that the dual-scale wrench dial has tiny, confusing graduations that are difficult to distinguish under ramp lighting conditions.
4. Because the technician committed an honest cognitive slip and reported it voluntarily, zero disciplinary action is taken.
5. The organization applies systemic corrective action: the tool crib quarantines all dual-scale torque wrenches and replaces them with digital, single-unit torque tools that display clear metric units, permanently eliminating the latent hazard.

Exam Pitfalls / Common Traps

• Trap 1: Believing Just Culture means complete immunity from discipline. Exam questions often test whether a Just Culture protects all actions. A Just Culture does not protect wilful violations, sabotage, substance abuse, or gross negligence. It specifically protects unintentional human errors and honest reporting.
• Trap 2: The occurrence reporting timeline. Candidates frequently confuse the EASA Part-145 and Regulation (EU) No 376/2014 reporting deadline. The legal timeline for reporting a qualifying occurrence to the competent authority is 72 hours from the moment the organization becomes aware of the event, not 24 hours, 48 hours, or 7 days.
• Trap 3: Assuming voluntary reporting is only for minor events. While Mandatory Occurrence Reporting (MOR) covers defined critical safety items, Voluntary Occurrence Reporting (VOR) captures hazards, latent traps, and near misses before they manifest as accidents. Both are protected by confidentiality and non-punitive legal guarantees.