Human error is never the root cause—it's the starting point your investigation should never have stopped at.

A forklift strikes a pedestrian in the warehouse. The operator was texting. The incident report says "root cause: operator distraction, failure to follow safe operating procedures." Case closed. Training scheduled. Discipline issued.
And nothing changes.
Because "operator error" isn't a root cause—it's the moment your investigation gave up. Human and Organizational Performance (HOP) principles exist precisely because most safety investigations stop at the person and never touch the system that set them up to fail.
Here's the actual scenario: the operator was texting because the warehouse uses a digital pick system that requires confirmation at every stop. Drivers are measured on picks per hour. There's no designated safe zone to check the device. The pedestrian walkway isn't painted—it was, but the striping wore off eight months ago and repainting got bumped for budget. The forklift has no proximity alarm because "we've never had an incident before."
The investigation found "operator distraction." It didn't find:
So you retrain the operator. You discipline them. Maybe you fire them. And six months later, a different operator in the exact same system hits someone else.
Todd Conklin's HOP framework has five principles. Most safety programs reference them. Few actually apply them. Here's the one that breaks most investigations:
Principle 1: Error is normal. Humans make mistakes. Designing a system that depends on perfect human performance is designing a system that will eventually fail. The question isn't "why did this person screw up?" The question is "why did our system allow this mistake to cause harm?"
When you write "human error" as your root cause, you're saying the system was fine—the human was the problem. HOP flips it: the human's behavior is normal. The system that made that behavior dangerous is the problem.
Here's what that investigation looks like under HOP:
Now you have something to fix. And it's not the operator.
Most companies treat incident investigations as fault-finding missions. Someone screwed up. Find them. Punish them. Send a message.
Here's what actually happens: near-miss reporting drops. People stop telling you about close calls because they've seen what happens to the last person who got "investigated." Your leading indicators—the only data that predicts where your next recordable is coming from—disappear. You're flying blind, and you did it to yourself.
HOP Principle 2: Blame fixes nothing. Punishing the person who touched it last doesn't change the system. It just teaches everyone else not to be the last person to touch it when something goes wrong.
The companies that stay stuck at Stage 2 on the Bradley Curve (Dependent safety culture—"I follow the rules when someone's watching") are the ones still running blame-based investigations. You can't supervise your way to an Interdependent culture. You have to build a system where people trust that telling you about problems won't get them fired.
Start with the error. Don't stop there.
Ask: What about the work environment made this behavior make sense to the person doing it? Not "why did they violate the rule?" but "what made violating the rule the logical choice in that moment?"
In the forklift case:
The operator made a rational decision within a system that rewarded speed and provided no engineered safeguards. That's not "operator error." That's a system designed to eventually hurt someone.
HOP stands for Human and Organizational Performance. It's a framework for understanding that human error is a symptom of system design failures, not a root cause. HOP principles focus on learning from incidents, eliminating blame, and redesigning systems to tolerate normal human variability.
Because it doesn't explain why the error occurred or how to prevent it. Saying "human error" is like saying "the car crashed because the driver lost control." It's technically true and completely useless. HOP pushes you to ask: what conditions made the error likely? What system failures allowed the error to cause harm?
By shifting investigations from blame to learning. When people trust that reporting problems won't get them punished, near-miss reporting increases. That gives you leading indicator data to fix hazards before they become injuries. HOP also drives you toward engineering controls and system redesigns instead of relying on procedure compliance and supervision.
HOP principles are what move a company from Stage 2 (Dependent—safety by supervision) to Stage 4 (Interdependent—team-based safety culture). You can't mandate accountability. You build it by creating systems where people trust that speaking up about problems is safe and productive. That's HOP in practice.
Most safety programs plateau because the investigation process stops too early. You find the person. You retrain them. The same incident happens again with someone else.
If your incident investigations aren't surfacing system failures and latent conditions—if they're still stopping at "operator didn't follow procedure"—your program is stuck. And your TRIR reflects it.
We don't run investigations for clients, but we do handle the entire administrative load—OSHA 300 logs, training records, ISNetworld updates, program documentation—so in-house EHS managers actually have time to do root cause work that matters. If the admin burden is eating the time you should be spending on this, let's talk. Schedule a call here.
Aaron West
Founder, EHS, Inc. — 18+ years in EHS compliance and contractor safety
Aaron West has spent over 18 years helping contractors and businesses navigate OSHA compliance, ISNetworld® certification, and workplace safety management. He founded EHS, Inc. to make enterprise-level EHS accessible to companies of all sizes — serving contractors and businesses nationwide — without long-term contracts or enterprise overhead.
Our team handles the complexity so you can focus on running your business. No long-term contracts, no learning curve.
Talk to EHSMost incident investigations stop at "operator error" and miss the systemic failures that made the accident inevitable.
Most incident investigations stop at operator error. The real failure happened six months earlier in the office.
Most RCAs find the active failure and call it done—but the latent conditions that made it possible are still there.
Framework to achieve zero incidents
Stop hitting paywalls
54 topics in English & Spanish