A company is a complex system where decision making takes place in many connections and under various circumstances. Safety is only one of a number of requirements managers must consider when choosing among actions. Decisions relating to safety issues vary considerably in scope and character depending on the attributes of the risk problems to be managed and the decision maker’s position in the organization.

Much research has been undertaken on how people actually make decisions, both individually and in an organizational context: see, for instance, Janis and Mann (1977); Kahnemann, Slovic and Tversky (1982); Montgomery and Svenson (1989). This article will examine selected research experience in this area as a basis for decision-making methods used in management of safety. In principle, decision making concerning safety is not much different from decision making in other areas of management. There is no simple method or set of rules for making good decisions in all situations, since the activities involved in safety management are too complex and varied in scope and character.

The main focus of this article will not be on presenting simple prescriptions or solutions but rather to provide more insight into some of the important challenges and principles for good decision making concerning safety. An overview of the scope, levels and steps in problem solving concerning safety issues will be given, mainly based on the work by Hale et al. (1994). Problem solving is a way of identifying the problem and eliciting viable remedies. This is an important first step in any decision process to be examined. In order to put the challenges of real-life decisions concerning safety into perspective, the principles of rational choice theory will be discussed. The last part of the article covers decision making in an organizational context and introduces the sociological perspective on decision making. Also included are some of the main problems and methods of decision making in the context of safety management, so as to provide more insight into the main dimensions, challenges and pitfalls of making decisions on safety issues as an important activity and challenge in management of safety.

The Context of Safety Decision Making

A general presentation of the methods of safety decision making is complicated because both safety issues and the character of the decision problems vary considerably over the lifetime of an enterprise. From concept and establishment to closure, the life cycle of a company may be divided into six main stages:

1. design
2. construction
3. commissioning
4. operation
5. maintenance and modification
6. decomposition and demolition.

Each of the life-cycle elements involves decisions concerning safety which are not only specific to that phase alone but which also impact on some or all of the other phases. During design, construction and commissioning, the main challenges concern the choice, development and realization of the safety standards and specifications that have been decided upon. During operation, maintenance and demolition, the main objectives of safety management will be to maintain and possibly improve the determined level of safety. The construction phase also represents a “production phase” to some extent, because at the same time that construction safety principles must be adhered to, the safety specifications for what is being built must be realized.

Safety Management Decision Levels

Decisions about safety also differ in character depending on organizational level. Hale et al. (1994) distinguish among three main decision levels of safety management in the organization:

The level of execution is the level at which the actions of those involved (workers) directly influence the occurrence and control of hazards in the workplace. This level is concerned with the recognition of the hazards and the choice and implementation of actions to eliminate, reduce and control them. The degrees of freedom present at this level are limited; therefore, feedback and correction loops are concerned essentially with correcting deviations from established procedures and returning practice to a norm. As soon as a situation is identified where the norm agreed upon is no longer thought to be appropriate, the next higher level is activated.

The level of planning, organization and procedures is concerned with devising and formalizing the actions to be taken at the execution level in respect to the entire range of expected hazards. The planning and organization level, which sets out responsibilities, procedures, reporting lines and so on, is typically found in safety manuals. It is this level which develops new procedures for hazards new to the organization, and modifies existing procedures to keep up either with new insights about hazards or with standards for solutions relating to hazards. This level involves the translation of abstract principles into concrete task allocation and implementation, and corresponds to the improvement loop required in many quality systems.

The level of structure and management is concerned with the overall principles of safety management. This level is activated when the organization considers that the current planning and organizing levels are failing in fundamental ways to achieve accepted performance. It is the level at which the “normal” functioning of the safety management system is critically monitored and through which it is continually improved or maintained in face of changes in the external environment of the organization.

Hale et al. (1994) emphasize that the three levels are abstractions corresponding to three different kinds of feedback. They should not be seen as contiguous with the hierarchical levels of shop floor, first line and higher management, as the activities specified at each abstract level can be applied in many different ways. The way task allocations are made reflects the culture and methods of working of the individual company.

Safety Decision-Making Process

Safety problems must be managed through some kind of problem-solving or decision-making process. According to Hale et al. (1994) this process, which is designated the problem-solving cycle, is common to the three levels of safety management described above. The problem-solving cycle is a model of an idealized stepwise procedure for analysing and making decisions on safety problems caused by potential or actual deviations from desired, expected or planned achievements (figure 1).

Figure 1. The problem-solving cycle

Although the steps are the same in principle at all three safety management levels, the application in practice may differ somewhat depending on the nature of problems treated. The model shows that decisions which concern safety management span many types of problems. In practice, each of the following six basic decision problems in safety management will have to be broken down into several subdecisions which will form the basis for choices on each of the main problem areas.

1. What is an acceptable safety level or standard of the activity/department/company, etc.?
2. What criteria shall be used to assess the safety level?
3. What is the current safety level?
4. What are the causes of identified deviations between acceptable and observed level of safety?
5. What means should be chosen to correct the deviations and keep up the safety level?
6. How should corrective actions be implemented and followed up?

Rational Choice Theory

Managers’ methods for making decisions must be based on some principle of rationality in order to gain acceptance among members of the organization. In practical situations what is rational may not always be easy to define, and the logical requirements of what may be defined as rational decisions may be difficult to fulfil. Rational choice theory (RCT), the conception of rational decision making, was originally developed to explain economic behaviour in the marketplace, and later generalized to explain not only economic behaviour but also the behaviour studied by nearly all social science disciplines, from political philosophy to psychology.

The psychological study of optimal human decision making is called subjective expected utility theory (SEU). RCT and SEU are basically the same; only the applications differ. SEU focuses on the thinking of individual decision making, while RCT has a wider application in explaining behaviour within whole organizations or institutions—see, for example, Neumann and Politser (1992). Most of the tools of modern operations research use the assumptions of SEU. They assume that what is desired is to maximize the achievement of some goal, under specific constraints, and assuming that all alternatives and consequences (or their probability distribution) are known (Simon and associates 1992). The essence of RCT and SEU can be summarized as follows (March and Simon 1993):

Decision makers, when encountering a decision-making situation, acquire and see the whole set of alternatives from which they will choose their action. This set is simply given; the theory does not tell how it is obtained.

To each alternative is attached a set of consequences—the events that will ensue if that particular alternative is chosen. Here the existing theories fall into three categories:

• Certainty theories assume the decision maker has complete and accurate knowledge of the consequences that will follow on each alternative. In the case of certainty, the choice is unambiguous.
• Risk theories assume accurate knowledge of a probability distribution of the consequences of each alternative. In the case of risk, rationality is usually defined as the choice of that alternative for which expected utility is greatest.
• Uncertainty theories assume that the consequences of each alternative belong to some subset of all possible consequences, but that the decision maker cannot assign definite probabilities to the occurrence of particular consequences. In the case of uncertainty, the definition of rationality becomes problematic.

At the outset, the decision maker makes use of a “utility function” or a “preference ordering” that ranks all sets of consequences from the most preferred to the least preferred. It should be noted that another proposal is the rule of “minimax risk”, by which one considers the “worst set of consequences” that may follow from each alternative, then selects the alternative whose worst set of consequences is preferred to the worst sets attached to other alternatives.

The decision maker elects the alternative closest to the preferred set of consequences.

One difficulty of RCT is that the term rationality is in itself problematic. What is rational depends upon the social context in which the decision takes place. As pointed out by Flanagan (1991), it is important to distinguish between the two terms rationality and logicality. Rationality is tied up with issues related to the meaning and quality of life for some individual or individuals, while logicality is not. The problem of the benefactor is precisely the issue which rational choice models fail to clarify, in that they assume value neutrality, which is seldom present in real-life decision making (Zey 1992). Although the value of RCT and SEU as explanatory theory is somewhat limited, it has been useful as a theoretical model for “rational” decision making. Evidence that behaviour often deviates from outcomes predicted by expected utility theory does not necessarily mean that the theory inappropriately prescribes how people should make decisions. As a normative model the theory has proven useful in generating research concerning how and why people make decisions which violate the optimal utility axiom.

Applying the ideas of RCT and SEU to safety decision making may provide a basis for evaluating the “rationality” of choices made with respect to safety—for instance, in the selection of preventive measures given a safety problem one wants to alleviate. Quite often it will not be possible to comply with the principles of rational choice because of lack of reliable data. Either one may not have a complete picture of available or possible actions, or else the uncertainty of the effects of different actions, for instance, implementation of different preventive measures, may be large. Thus, RCT may be helpful in pointing out some weaknesses in a decision process, but it provides little guidance in improving the quality of choices to be made. Another limitation in the applicability of rational choice models is that most decisions in organizations do not necessarily search for optimal solutions.

Problem Solving

Rational choice models describe the process of evaluating and choosing between alternatives. However, deciding on a course of action also requires what Simon and associates (1992) describe as problem solving. This is the work of choosing issues that require attention, setting goals, and finding or deciding on suitable courses of action. (While managers may know they have problems, they may not understand the situation well enough to direct their attention to any plausible course of action.) As mentioned earlier, the theory of rational choice has its roots mainly in economics, statistics and operations research, and only recently has it received attention from psychologists. The theory and methods of problem solving has a very different history. Problem solving was initially studied principally by psychologists, and more recently by researchers in artificial intelligence.

Empirical research has shown that the process of problem solving takes place more or less in the same way for a wide range of activities. First, problem solving generally proceeds by selective search through large sets of possibilities, using rules of thumb (heuristics) to guide the search. Because the possibilities in realistic problem situations are virtually endless, a trial-and-error search would simply not work. The search must be highly selective. One of the procedures often used to guide the search is described as hill climbing—using some measure of approach to the goal to determine where it is most profitable to look next. Another and more powerful common procedure is means-ends analysis. When using this method, the problem solver compares the present situation with the goal, detects differences between them, and then searches memory for actions that are likely to reduce the difference. Another thing that has been learned about problem solving, especially when the solver is an expert, is that the solver’s thought process relies on large amounts of information that is stored in memory and that is retrievable whenever the solver recognizes cues signalling its relevance.

One of the accomplishments of contemporary problem-solving theory has been to provide an explanation for the phenomena of intuition and judgement frequently seen in experts’ behaviour. The store of expert knowledge seems to be in some way indexed by the recognition cues that make it accessible. Combined with some basic inferential capabilities (perhaps in the form of means-ends analysis), this indexing function is applied by the expert to find satisfactory solutions to difficult problems.

Most of the challenges which managers of safety face will be of a kind that require some kind of problem solving—for example, detecting what the underlying causes of an accident or a safety problem really are, in order to figure out some preventive measure. The problem-solving cycle developed by Hale et al. (1994)—see figure 1—gives a good description of what is involved in the stages of safety problem solving. What seems evident is that at present it is not possible and may not even be desirable to develop a strictly logical or mathematical model for what is an ideal problem-solving process in the same manner as has been followed for rational choice theories. This view is supported by the knowledge of other difficulties in the real-life instances of problem solving and decision making which are discussed below.

Ill-Structured Problems, Agenda Setting and Framing

In real life, situations frequently occur when the problem-solving process becomes obscure because the goals themselves are complex and sometimes ill-defined. What often happens is that the very nature of the problem is successively transformed in the course of exploration. To the extent that the problem has these characteristics, it may be called ill-structured. Typical examples of problem-solving processes with such characteristics are (1) the development of new designs and (2) scientific discovery.

The solving of ill-defined problems has only recently become a subject of scientific study. When problems are ill-defined, the problem-solving process requires substantial knowledge about solution criteria as well as knowledge about the means for satisfying those criteria. Both kinds of knowledge must be evoked in the course of the process, and the evocation of the criteria and constraint continually modifies and remoulds the solution which the problem-solving process is addressing. Some research concerning problem structuring and analysis within risk and safety issues has been published, and may be profitably studied; see, for example, Rosenhead 1989 and Chicken and Haynes 1989.

Setting the agenda, which is the very first step of the problem-solving process, is also the least understood. What brings a problem to the head of the agenda is the identification of a problem and the consequent challenge to determine how it can be represented in a way that facilitates its solution; these are subjects that only recently have been focused upon in studies of decision processes. The task of setting an agenda is of utmost importance because both individual human beings and human institutions have limited capacities in dealing with many tasks simultaneously. While some problems are receiving full attention, others are neglected. When new problems emerge suddenly and unexpectedly (e.g., firefighting), they may replace orderly planning and deliberation.

The way in which problems are represented has much to do with the quality of the solutions that are found. At present the representation or framing of problems is even less well understood than agenda setting. A characteristic of many advances in science and technology is that a change in framing will bring about a whole new approach to solving a problem. One example of such change in the framing of problem definition in safety science in recent years, is the shift of focus away from the details of the work operations to the organizational decisions and conditions which create the whole work situation—see, for example, Wagenaar et al. (1994).

Decision Making in Organizations

Models of organizational decision making view the question of choice as a logical process in which decision makers try to maximize their objectives in an orderly series of steps (figure 2). This process is in principle the same for safety as for decisions on other issues that the organization has to manage.

Figure 2. The decision-making process in organizations

These models may serve as a general framework for “rational decision making” in organizations; however, such ideal models have several limitations and they leave out important aspects of processes which actually may take place. Some of the significant characteristics of organizational decision-making processes are discussed below.

Criteria applied in organizational choice

While rational choice models are preoccupied with finding the optimal alternative, other criteria may be even more relevant in organizational decisions. As observed by March and Simon (1993), organizations for various reasons search for satisfactory rather than optimal solutions.

• Optimal alternatives. An alternative can be defined as optimal if (1) there exists a set of criteria that permits all alternatives to be compared and (2) the alternative in question is preferred, by these criteria, to all other alternatives (see also the discussion of rational choice, above).
• Satisfactory alternatives. An alternative is satisfactory if (1) there exists a set of criteria that describes minimally satisfactory alternatives and (2) the alternative in question meets or exceeds these criteria.

According to March and Simon (1993) most human decision making, whether individual or organizational, is concerned with the discovery and selection of satisfactory alternatives. Only in exceptional cases is it concerned with discovery and selection of optimal alternatives. In safety management, satisfactory alternatives with respect to safety will usually suffice, so that a given solution to a safety problem must meet specified standards. The typical constraints which often apply to optimal choice safety decisions are economic considerations such as: “Good enough, but as cheap as possible”.

Programmed decision making

Exploring the parallels between human decision making and ­organizational decision making, March and Simon (1993) argued that organizations can never be perfectly rational, because their members have limited information-processing capabilities. It is claimed that decision makers at best can achieve only limited forms of rationality because they (1) usually have to act on the basis of incomplete information, (2) are able to explore only a limited number of alternatives relating to any given decision, and (3) are unable to attach accurate values to outcomes. March and Simon maintain that the limits on human rationality are institutionalized in the structure and modes of functioning of our organizations. In order to make the decision-making process manageable, organizations fragment, routinize and limit the decision process in several ways. Departments and work units have the effect of segmenting the organization’s environment, of compartmentalizing responsibilities, and thus of simplifying the domains of interest and decision making of managers, supervisors and workers. Organizational hierarchies perform a similar function, providing channels of problem solving in order to make life more manageable. This creates a structure of attention, interpretation and operation that exerts a crucial influence on what is appreciated as “rational” choices of the individual decision maker in the organizational context. March and Simon named these organized sets of responses performance programmes, or simply programmes. The term programme is not intended to connote complete rigidity. The content of the programme may be adaptive to a large number of characteristics that initiate it. The programme may also be conditional on data that are independent of the initiating stimuli. It is then more properly called a performance strategy.

A set of activities is regarded as routinized to the degree that choice has been simplified by the development of fixed response to defined stimuli. If searches have been eliminated, but choice remains in the form of clearly defined systematic computing routines, the activity is designated as routinized. Activities are regarded as unroutinized to the extent that they have to be preceded by programme-developing activities of a problem-solving kind. The distinction made by Hale et al. (1994) (discussed above) between the levels of execution, planning and system structure/management carry similar implications concerning the structuring of the decision-making process.

Programming influences decision making in two ways: (1) by defining how a decision process should be run, who should participate, and so on, and (2) by prescribing choices to be made based on the information and alternatives at hand. The effects of programming are on the one hand positive in the sense that they may increase the efficiency of the decision process and assure that problems are not left unresolved, but are treated in a way that is well structured. On the other hand, rigid programming may hamper the flexibility that is needed especially in the problem-solving phase of a decision process in order to generate new solutions. For example, many airlines have established fixed procedures for treatment of reported deviations, so-called flight reports or maintenance reports, which require that each case be examined by an appointed person and that a decision be made concerning preventive actions to be taken based on the incident. Sometimes the decision may be that no action shall be taken, but the procedures assure that such a decision is deliberate, and not a result of negligence, and that there is a responsible decision maker involved in the decisions.

The degree to which activities are programmed influences risk taking. Wagenaar (1990) maintained that most accidents are consequences of routine behaviour without any consideration of risk. The real problem of risk occurs at higher levels in organizations, where the unprogrammed decisions are made. But risks are most often not taken consciously. They tend to be results of decisions made on issues which are not directly related to safety, but where preconditions for safe operation were inadvertently affected. Managers and other high-level decision makers are thus more often permitting opportunities for risks than taking risks.

Decision Making, Power and Conflict of Interests

The ability to influence the outcomes of decision-making processes is a well-recognized source of power, and one that has attracted considerable attention in organization-theory literature. Since organizations are in large measure decision-making systems, an individual or group can exert major influence on the decision processes of the organization. According to Morgan (1986) the kinds of power used in decision making can be classified into the following three interrelated elements:

1. The decision premises. Influence on the decision premises may be exerted in several ways. One of the most effective ways of “making” a decision is to allow it to be made by default. Hence much of the political activity within an organization depends on the control of agendas and other decision ­premises that influence how particular decisions will be ­approached, perhaps in ways that prevent certain core issues from surfacing at all. In addition, decision premises are ­manipulated by the unobtrusive control embedded in choice of those vocabularies, structures of communications, attitudes, beliefs, rules and procedures which are accepted without questioning. These factors shape decisions by the way we think and act. According to Morgan (1986), visions of what the problems and issues are and how they can be tackled, often act as mental straitjackets that prevent us from seeing other ways of formulating our basic concerns and the alternative courses of action that are available.
2. The decision processes. Control of decision processes is usually more visible than the control of decision premises. How to treat an issue involves questions such as who should be involved, when the decision should be made, how the issue should be handled at meetings, and how it should be reported. The ground rules that are to guide decision making are important variables that organization members can manipulate in order to influence the outcome.
3. The decision issues and objectives. A final way of controlling decision making is to influence the issues and objectives to be addressed and the evaluative criteria to be employed. An individual can shape the issues and objectives most directly through preparing reports and contributing to the discussion on which the decision will be based. By emphasizing the importance of particular constraints, selecting and evaluating the alternatives on which a decision will be made, and highlighting the importance of certain values or outcomes, decision makers can exert considerable influence on the decision that emerges from discussion.

Some decision problems may carry a conflict of interest—for example, between management and employees. Disagreement may occur on the definition of what is really the problem—what Rittel and Webber (1973) characterized as “wicked” problems, to be distinguished from problems that are “tame” with respect to securing consent. In other cases, parties may agree on problem definition but not on how the problem should be solved, or what are acceptable solutions or criteria for solutions. The attitudes or strategies of conflicting parties will define not only their problem-solving behaviour, but also the prospects of reaching an acceptable solution through negotiations. Important variables are how parties attempt to satisfy their own versus the other party’s concerns (figure 3). Successful collaboration requires that both parties are assertive concerning their own needs, but are simultaneously willing to take the needs of the other party equally into consideration.

Figure 3. Five styles of negotiating behaviour

Another interesting typology based on the amount of agreement between goals and means, was developed by Thompson and Tuden (1959) (cited in Koopman and Pool 1991). The authors suggested what was a “best-fitting strategy” based on knowledge about the parties’ perceptions of the causation of the problem and about preferences of outcomes (figure 4).

Figure 4. A typology of problem-solving strategy

If there is agreement on goals and means, the decision can be calculated—for example, developed by some experts. If the means to the desired ends are unclear, these experts will have to reach a solution through consultation (majority judgement). If there is any conflict about the goals, consultation between the parties involved is necessary. However, if agreement is lacking both on goals and means, the organization is really endangered. Such a situation requires charismatic leadership which can “inspire” a solution acceptable to the conflicting parties.

Decision making within an organizational framework thus opens up perspectives far beyond those of rational choice or individual problem-solving models. Decision processes must be seen within the framework of organizational and management processes, where the concept of rationality may take on new and different meanings from those defined by the logicality of rational choice approaches embedded in, for example, operations research models. Decision making carried out within safety management must be regarded in light of such a perspective as will allow a full understanding of all aspects of the decision problems at hand.

Summary and Conclusions

Decision making can generally be described as a process starting with an initial situation (initial state) which decision makers perceive to be deviating from a desired goal situation (goal state), although they do not know in advance how to alter the initial state into the goal state (Huber 1989). The problem solver transforms the initial state into the goal state by applying one or more operators, or activities to alter states. Often a sequence of operators is required to bring about the desired change.

The research literature on the subject provides no simple answers to how to make decisions on safety issues; therefore, the methods of decision making must be rational and logical. Rational choice theory represents an elegant conception of how optimal decisions are made. However, within safety management, rational choice theory cannot be easily applied. The most obvious limitation is the lack of valid and reliable data on potential choices with respect to both completeness and to knowledge of consequences. Another difficulty is that the concept rational assumes a benefactor, which may differ depending on which perspective is chosen in a decision situation. However, the rational choice approach may still be helpful in pointing out some of the difficulties and shortcomings of the decisions to be made.

Often the challenge is not to make a wise choice between alternative actions, but rather to analyse a situation in order to find out what the problem really is. In analysing safety management problems, structuring is often the most important task. Understanding the problem is a prerequisite for finding an acceptable solution. The most important issue concerning problem solving is not to identify a single superior method, which probably does not exist on account of the wide range of problems within the areas of risk assessment and safety management. The main point is rather to take a structured approach and document the analysis and decisions made in such a way that the procedures and evaluations are traceable.

Organizations will manage some of their decision making through programmed actions. Programming or fixed procedures for decision-making routines may be very useful in safety management. An example is how some companies treat reported deviations and near accidents. Programming can be an efficient way to control decision-making processes in the organization, provided that the safety issues and decision rules are clear.

In real life, decisions take place within an organizational and social context where conflicts of interest sometimes emerge. The decision processes may be hindered by different perceptions of what the problems are, of criteria, or of the acceptability of proposed solutions. Being aware of the presence and possible effects of vested interests is helpful in making decisions which are acceptable to all parties involved. Safety management includes a large variety of problems depending on which life cycle, organizational level and stage of problem solving or hazard alleviation a problem concerns. In that sense, decision making concerning safety is as wide in scope and character as decision making on any other management issues.

Back