The Titan disaster raises uncomfortable questions about leadership, risk and what happens when confidence carries more weight than evidence. For anyone responsible for other people’s safety, the lessons reach well beyond the ocean.

In Episode 12 of The Real Risk, Safety Jon explores Titan through a leadership lens. The focus is on the decisions made at the surface, where priorities are set, concerns are heard or dismissed, and someone decides whether the evidence justifies pressing ahead.

Innovation requires challenging assumptions, but that includes challenging your own. Calling yourself a disruptor does not make physics a stakeholder you can manage with a convincing PowerPoint.

This episode examines questions every leader should be prepared to answer:

• Can people challenge your decisions without paying a personal price?
• How do you distinguish demonstrated safety from confidence that something will work?
• Are previous successful outcomes being treated as proof that the risks are controlled?
• What evidence would make you stop, reconsider or seek independent scrutiny?
• Who has the authority to say “no”, and will that decision actually hold?

Whether you lead a transport operation, a manufacturing business or a small team, these questions belong in everyday decision-making. The real test of leadership is how you respond when the evidence threatens the plan you want to pursue.

Hosted by Jon Hillis, Certified OHS Professional and former WorkSafe Victoria inspector.

“So far as is reasonably practicable.” Seven words that carry a lot of weight when you’re responsible for keeping people safe.

How much is enough? Where does cost fit? And how do you distinguish a defensible safety decision from a shortcut dressed up as a risk assessment?

In this episode of The Real Risk, Jon Hillis takes a practical look at SFARP and the decisions behind managing workplace risk. Drawing on his background as a former WorkSafe Victoria inspector and safety professional, Jon brings the discussion back to the job: what can hurt someone, what you know about it, and what can reasonably be done to prevent it.

Because “we’ve always done it this way” isn’t much of a control measure. It’s just a very well-rehearsed sentence.

This episode’s central questions:

• How likely is the risk, and how serious could the harm be?
• What do you know, or reasonably ought to know, about the hazard and available controls?
• Are suitable controls available and practical for the work?
• Where does cost belong in the decision?
• What evidence supports the controls you selected?

For business owners, officers, supervisors and safety professionals who need to make sound decisions without disappearing into a mountain of paperwork.

Your challenge this week: pick one high-risk task. Ask what could cause serious harm, what prevents it, and who has checked that those controls actually work.

More practical safety commentary and resources:

https://www.safetyjon.com.au/

Explore The Real Risk and Safety Jon media:

https://www.safetyjon.com.au/media

Follow the show and share this episode with the person who approves the work, the resources or the shortcuts.

On 16 Jan 03, a piece of insulating foam struck the left wing of Space Shuttle Columbia during launch. On 01 Feb 03, Columbia broke apart during re-entry, killing all seven crew members.

The foam strike was not simply an unforeseen technical failure. Foam shedding had occurred on previous missions, and because those missions had returned safely, the abnormal gradually became accepted. Previous success began to function as evidence that the risk was tolerable.

In Episode 10 of Safety Jon: The Real Risk Podcast, Jon Hillis examines the Columbia disaster through the lens of normalisation of deviance and organisational risk management.

The episode looks at how repeated deviations can become accepted practice, how confirmation bias affects decision-making, why uncertainty can be interpreted in favour of continuing operations, how technical concerns can fail to reach decision-makers with sufficient force, and what happens when the burden shifts to engineers to prove something is unsafe rather than requiring decision-makers to establish that it is safe.

Columbia is an extreme example, but the organisational mechanisms are familiar. A damaged guard that has “always been like that”, a vehicle defect repeatedly deferred, a procedure routinely bypassed, or a control that fails without consequence can all become normal because nothing happened last time.

That is the trap. An absence of consequences is not evidence that a control is adequate.

Safety Jon: The Real Risk Podcast looks past paperwork, slogans and polished dashboards to examine what actually controls risk, and what happens when organisations convince themselves that abnormal conditions are normal.

For more Safety Jon content, articles, resources and practical WHS tools, visit Safety Jon.

Before the truck left the depot, there were reports of confusion, unusual driving errors and a driver falling asleep behind the wheel. A fitness-to-drive declaration was signed, but the risk remained.

On 22 Apr 20, a heavy vehicle entered the emergency lane of Melbourne’s Eastern Freeway and killed four Victoria Police members performing their duties: Leading Senior Constable Lynette Taylor, Senior Constable Kevin King, Constable Glen Humphris and Constable Josh Prestney. All four are remembered on the Victoria Police Honour Roll.

In episode 9 of The Real Risk Podcast, Safety Jon examines the decisions made before that truck left Lyndhurst, including the warnings passed to supervisors, the depot meeting and the reliance on a signed fitness declaration. Drawing on the Victorian Court of Appeal’s decision in Singh v The Queen, the episode explores the effects of severe sleep deprivation and drug impairment, and why available rest time cannot be treated as verified sleep.

The discussion also examines the wider fatigue-management failures uncovered through Taskforce Paragon and what Chain of Responsibility means for the people influencing a transport task. The Supreme Court of Victoria’s sentencing summary for Simon Tuteru provides the legal context for the supervisor’s prosecution.

The episode connects those lessons with the Heavy Vehicle National Law reforms that commenced on 01 Aug 26. The expanded fitness-to-drive duty reinforces why compliance with work and rest hours does not, by itself, establish that a driver can operate safely. See the NHVR’s reform overview and fitness-to-drive guidance.

For operators, schedulers, drivers and safety practitioners, the practical focus is what happens when credible concerns arise: who stops the task, how fitness is assessed and whether the operation can accommodate a driver being stood down. Jon also examines the difference between counting completed forms and checking whether controls actually work.

Explore more incident analysis and practical safety resources at Safety Jon. Subscribe to The Real Risk Podcast through your preferred podcast app.

On 22 Oct 19, Dean Anson Sanderson and Shannon Sanderson were travelling together on an 86-metre zipline at Jungle Surfing Canopy Tours near Cape Tribulation, Queensland. The upper wire-rope-grip termination failed, allowing the line to disengage and causing both patrons to fall, killing Dean and leaving Shannon with serious injuries.

The hardware had been inspected, but a visual inspection could not establish whether the grips had been tightened to the required torque or whether the termination remained capable of carrying the forces imposed upon it. You can inspect whether the nuts are present, admire their general shininess and tick the corresponding box, but you cannot inspect torque with your eyes.

In this episode, Jon examines the difference between inspection and verification, the task-specific meaning of competence, role drift, plant alterations, safety-critical maintenance, independent assurance and officer due diligence. He also considers why emergency arrangements must be tested against the actual consequences of a failure, particularly where access, rescue and medical response are difficult.

The lessons extend well beyond adventure tourism. They apply wherever life depends on torque, friction, terminations or critical connections, including lifting equipment, load restraint, fall-protection systems, towing arrangements and other safety-critical plant.

At the time of publication, the Coroners Court of Queensland lists the inquest into Dean Sanderson’s death as adjourned, with the date for findings still to be confirmed. This episode discusses published regulatory information and issues examined through the coronial process, but does not present unfinished coronial findings as settled conclusions.

Further reading:

Safety Jon, Lessons From a Queensland Zipline Fatality

Workplace Health and Safety Queensland, Zip line (flying fox) terminations

Workplace Health and Safety Queensland, Zip line anchorage failure

Coroners Court of Queensland, Inquest proceedings list

For further workplace incident analysis, practical risk guidance and new episodes of The Real Risk Podcast, visit Safety Jon.

If your officer due diligence system can be summarised as “we have a safety manager”, you do not have a due diligence system. You have a safety manager.

In this episode of The Real Risk Podcast, I look at what officer duties actually require, who may be considered an officer, and why WHS responsibilities cannot simply be pushed down the organisational chart.

We work through the practical elements of due diligence under the model WHS framework, including keeping current WHS knowledge, understanding operations and material risks, providing appropriate resources and processes, receiving and responding to safety information, maintaining compliance processes and, critically, verifying that those systems actually work.

I also look at the different position in Victoria, where officer liability operates through the Occupational Health and Safety Act 2004 rather than the standalone section 27 duty used under the model WHS laws.

The episode draws on regulator experience, real prosecutions and practical examples involving plant guarding, fatigue, defective equipment, resourcing decisions and officer accountability. We also examine what useful WHS information should reach officers, what an inspector or prosecutor may look for after a serious incident, and why a green dashboard is not evidence that critical controls are functioning.

The central point is simple. Officers can rely on competent WHS professionals, managers and specialists for advice, but reliance is not abdication. The safety manager can advise, investigate, audit and escalate. They cannot exercise an officer’s personal duty for them.

Due diligence needs to be visible in decisions, resources, questioning, verification and evidence before something goes wrong, not reconstructed afterwards because a regulator has started asking uncomfortable questions.

Safety Jon: The Real Risk Podcast

Real safety. No theatre.

A painted pedestrian walkway is not physical separation. Sometimes the clearest evidence that a barrier is needed comes from the argument being made against installing one.

In this episode of Safety Jon: The Real Risk Podcast, I draw on a deidentified inspection from my time as a WorkSafe Inspector involving a worker who was run over by a forklift in a loading and unloading area. The worker survived, but the CCTV footage left very little room for ambiguity about what can happen when pedestrians and mobile plant occupy the same operational space without effective separation.

During the inspection, a management representative argued against installing a physical barrier because, in his words, the forklifts would hit it. That was not an argument against the barrier. It was evidence of the exposure.

If the forklift will hit the barrier, then without the barrier it can hit the worker.

We look at why painted lines, procedures and instructions are weak controls when heavy mobile plant and pedestrians interact, and why foreseeable barrier strikes should be treated as information about the system rather than an inconvenience. A damaged barrier can tell you something about layout, visibility, congestion, speed, loading practices, traffic flow and the way work is actually being performed.

The episode also examines the difference between having a traffic management document and actually managing traffic. Physical separation, workplace design, pedestrian routes, loading areas, visibility and verification of controls all matter because humans remain stubbornly human and forklifts remain stubbornly heavy.

The question is not whether workers have been told to stay inside the painted lines. The question is whether the system has been designed so that a predictable mistake, distraction or operational variation does not put a person underneath several tonnes of mobile plant.

Real safety. No theatre.

If an investigation ends with “worker error”, it probably has not gone far enough.

In this episode of Safety Jon: The Real Risk Podcast, Jon examines the work of Professor James Reason and why his thinking remains central to understanding serious incidents, organisational accidents and the failures that sit behind the person closest to the consequence.

The Swiss cheese model is well known across safety, but the useful part was never the cheese. Reason’s work challenges organisations to look beyond the final human action and examine the latent conditions, failed defences, management decisions and organisational weaknesses that allowed an error to become an injury, fatality or major event.

The episode also looks at what happens when leadership takes the opposite approach. Pathological safety cultures blame workers, protect management decisions and treat adverse events as individual failures. That approach does more than produce poor investigations. Workers watch what happens to their colleagues, learn what the organisation rewards and punishes, then adjust what they report, challenge and disclose accordingly.

Jon also draws on his former regulator experience, including responding to a serious incident at a food manufacturing workplace where a worker suffered a finger amputation after reaching into a heat-sealing machine. The employer’s immediate explanation was that the worker should not have reached into the equipment. The regulatory response focused instead on the failed system, including inadequate guarding.

The worker was in hospital undergoing surgery. The machine still had to answer some questions.

• Why “human error” describes an event but rarely explains it.
• James Reason’s distinction between active failures and latent organisational conditions.
• What the Swiss cheese model actually tells us about failed defences.
• Why retraining a worker is often a weak corrective action when the underlying system remains unchanged.
• How regulators examine plant, systems of work, supervision, guarding, training, design and organisational controls.
• Why worker blame can become a symptom of pathological safety leadership.
• How punitive responses affect reporting, consultation, trust and workforce behaviour.
• Why workers must be treated as people operating within systems, not convenient endpoints for an investigation.
• The difference between accountability and blame.
• Why a fair investigation process matters even where a worker made an error.
• How leaders influence safety culture through the way they respond when something goes wrong.
• Why the question after an incident should not simply be “Who made the mistake?”, but “What allowed that mistake to produce this consequence?”

A worker can make an error and still not be the cause of the incident.

People forget things. They misunderstand information, become distracted, make assumptions and sometimes make poor decisions. A functioning safety system anticipates that reality and provides effective defences between ordinary human fallibility and serious harm.

When one mistake can place a hand into hazardous machinery, put a person in front of mobile plant or expose a worker to an uncontrolled fatal risk, the organisation has a system problem worth investigating.

Human error is not the end of the investigation.

It is where the investigation gets interesting.

Safety Jon: The Real Risk Podcast looks at serious incidents, prosecutions, investigations, organisational failures and the safety concepts that actually matter in operational workplaces.

No theatre, no corporate fog and no pretending another toolbox talk automatically fixes a failed system.

Real safety. No theatre.

This podcast provides general information and commentary about workplace health and safety, risk management and incident investigation. It does not constitute legal advice and should not be relied upon as a substitute for advice specific to your organisation, jurisdiction or circumstances.

Legislation, regulatory guidance and legal obligations vary between Australian jurisdictions and may change over time. Where a workplace incident, regulatory matter or legal issue requires a decision, obtain appropriate professional advice and confirm the current requirements applying to the workplace.