Understanding Models of Accident Causation: From Dominoes to Swiss Cheese

Every industrial accident tells a story. But how do we understand that story? Over decades, safety professionals have developed different models to explain why accidents happen and, more importantly, how we can prevent them. These models of accident causation have evolved from simple, linear explanations to complex systems thinking that acknowledges the multifaceted nature of workplace safety. Understanding these models is essential for anyone working in industrial safety or disaster management.

Heinrich’s domino theory: The beginning of systematic safety thinking
The remedy and the limitation
Energy transfer theory: Understanding the physics of harm
Practical applications in safety design
Multiple causation theory: Recognizing complexity
The systems perspective
Reason’s Swiss cheese model: Visualizing system defenses
Active failures and latent conditions
Modern systems theory: Embracing complexity
Beyond linear causation
Evolution and integration of models

Heinrich’s domino theory: The beginning of systematic safety thinking

In 1931, Herbert W. Heinrich introduced a revolutionary way of thinking about accidents. Working for an insurance company, Heinrich analyzed thousands of accident reports and proposed that accidents unfold like falling dominoes in a predictable sequence. His domino theory identified five sequential factors: Social Environment and Ancestry, Fault of Person, Unsafe Act or Mechanical Hazard, Accident, and Injury.

The power of this model lies in its simplicity. Heinrich argued that removing any one domino from the sequence would prevent the accident from occurring. According to his research, 88% of all accidents were caused by unsafe acts, 10% by unsafe conditions, and only 2% by unpreventable causes.

The remedy and the limitation

Heinrich’s model suggested that eliminating the third domino-the unsafe act or condition-was the most practical intervention point. This focus on immediate causes made the theory accessible to supervisors and managers who could implement concrete safety measures. However, the model’s emphasis on individual behavior has drawn criticism for oversimplifying complex organizational factors.

Modern safety professionals recognize that the domino theory adopts an overly linear view of accident causation. The first two dominoes, which attributed accidents to ancestry and personal faults, reflected outdated beliefs about worker character. Contemporary versions of the model have replaced these elements with management systems and organizational factors.

Energy transfer theory: Understanding the physics of harm

Dr. William Haddon Jr. shifted the focus from behavior to physics when he developed the energy transfer theory in the late 1960s. This model recognizes that injury and damage occur through the transfer of energy with such force that the body or property cannot withstand it. Energy can be kinetic, thermal, chemical, electrical, or radiological.

The genius of this approach lies in its practical framework for hazard control. Haddon proposed strategies that address three critical points: the Source of energy, the Path through which it travels, and the Receiver who might be harmed. Control measures can prevent energy buildup, contain or redirect energy, or protect the potential victim.

Practical applications in safety design

Energy transfer theory has profound implications for industrial safety design. For example, Haddon introduced ten countermeasures to avoid, control, and mitigate accidents involving vulnerable targets. These strategies range from eliminating the hazard entirely to strengthening structures that can contain destructive energy. Fire-resistant construction materials, safety barriers around rotating machinery, and personal protective equipment all exemplify energy transfer principles in action.

This model particularly excels at identifying hazards and evaluating control methods. Unlike behavior-focused theories, it emphasizes engineering controls and passive protection measures that don’t rely solely on human vigilance.

Multiple causation theory: Recognizing complexity

As accident investigators examined more incidents, they realized that single-cause explanations rarely captured the full picture. Multiple causation theory, developed by researchers including Dan Petersen in the 1970s, argues that accidents result from combinations of behavioral and environmental factors rather than isolated causes.

This theory divides contributing factors into two categories. Behavioral factors include worker attitudes, lack of knowledge, insufficient skills, and physical or mental conditions. Environmental factors encompass improper machine guarding, degraded equipment, and unsafe procedures. Petersen’s model emphasized that human error stems from system failures in policy, training, inspection, or management accountability.

The systems perspective

Multiple causation theory marked an important shift toward systems thinking. Petersen argued that behind every unsafe condition is a management system that allowed it to exist, and behind every unsafe behavior is a reason people engage in those actions. This perspective moved accident prevention beyond simplistic blame to address root organizational causes.

The theory acknowledges that accidents rarely have just one trigger. A worker might fall from a ladder due to a combination of factors: defective equipment, improper positioning, inadequate training, time pressure, and poor lighting. Addressing only one factor might not prevent similar accidents in the future.

Reason’s Swiss cheese model: Visualizing system defenses

In 1990, Professor James Reason introduced what would become one of the most influential safety models. The Swiss cheese model represents organizational defenses as slices of cheese with randomly placed holes. Each slice represents a defensive layer-organizational decisions, supervision, preconditions, and individual actions. The holes represent weaknesses or failures in those defenses.

An accident occurs when holes in all layers momentarily align, creating what Reason called “a trajectory of accident opportunity” that allows a hazard to pass through all defenses. This visualization brilliantly captures how multiple small failures can combine to produce a catastrophic outcome.

Active failures and latent conditions

The model distinguishes between two types of failures. Active failures are unsafe acts directly linked to the accident-errors made by frontline workers. Latent conditions are weaknesses that may lie dormant for extended periods before contributing to an accident. These latent failures span organizational influences, supervisory issues, and preconditions for unsafe acts.

The Swiss cheese model shifts focus from individual blame to systemic analysis. It reveals that accidents typically result from organizational and design flaws rather than individual carelessness. This perspective has been widely adopted in aviation, healthcare, and other high-risk industries, improving outcomes by reducing the tendency to punish workers for mistakes made within poorly designed systems.

Modern systems theory: Embracing complexity

Contemporary safety science recognizes that accidents in complex sociotechnical systems cannot be fully explained by linear models. Modern systems theory views accidents as emergent outcomes arising from interactions between organizational decisions, workplace conditions, team dynamics, and individual actions.

This approach acknowledges that higher-level management decisions create latent conditions throughout the system. Budget constraints, production pressures, inadequate staffing, and poor communication structures all create vulnerabilities. When combined with local conditions and human performance variability, these factors can interact in unexpected ways to produce accidents.

Beyond linear causation

Systems theory emphasizes that accidents develop through complex interactions of multiple factors over time rather than simple cause-and-effect chains. A single intervention may not prevent accidents if the underlying system conditions remain unchanged. This perspective requires comprehensive approaches that address technical, human, and organizational dimensions simultaneously.

Modern accident investigations using systems theory look beyond immediate causes to examine decision-making processes, resource allocation, organizational culture, and the broader operational context. This holistic view recognizes that frontline workers operate within constraints created by the system, and sustainable safety improvements require system-level changes.

Evolution and integration of models

These accident causation models represent an evolution in safety thinking, from simple linear sequences to complex systems perspectives. Each model contributed valuable insights: Heinrich highlighted the importance of systematic analysis, Haddon emphasized physical hazards and engineering controls, multiple causation theory recognized interacting factors, the Swiss cheese model illustrated layered defenses, and systems theory embraced organizational complexity.

Today’s safety professionals often integrate insights from multiple models. They recognize that effective accident prevention requires addressing individual behavior, environmental hazards, engineering design, management systems, and organizational culture. The choice of model depends on the specific context and the nature of the hazard being analyzed.

What do you think? How might understanding these different models change the way your organization approaches accident investigation and prevention? Which model resonates most with the types of incidents you’ve encountered or studied in industrial settings?

References

PDF 📄

Table of Contents

Heinrich’s domino theory: The beginning of systematic safety thinking 🔗

The remedy and the limitation 🔗

Energy transfer theory: Understanding the physics of harm 🔗

Practical applications in safety design 🔗

Multiple causation theory: Recognizing complexity 🔗

The systems perspective 🔗

Reason’s Swiss cheese model: Visualizing system defenses 🔗

Active failures and latent conditions 🔗

Modern systems theory: Embracing complexity 🔗

Beyond linear causation 🔗

Evolution and integration of models 🔗