Health and Safety Culture: Building a Safe Work Environment in Oil and Gas
A weak safety culture does not announce itself. It accumulates quietly in skipped pre-job briefings, permit-to-work shortcuts, and near-misses that go unreported because workers expect nothing to change. The eventual outcome is a serious incident that halts production, triggers regulatory investigation, and exposes the organisation to liability. The business case for safety culture is not separate from operational performance — it is the same argument.
Why Culture Matters More Than Procedure Alone
Procedures and engineering controls set the boundary conditions for safe operation. Culture determines whether people actually work within them under pressure. A facility can hold a complete library of safe work procedures and still experience a serious event if the workforce does not believe those procedures are enforced consistently, if supervisors routinely accept shortcuts to meet schedule, or if reporting a concern is perceived as a career risk.
The distinction matters because it changes where management must invest attention. Buying new equipment or rewriting procedures addresses the hardware and documentation layers. Changing culture requires sustained leadership behaviour, visible accountability, and feedback loops that demonstrate to every level of the workforce that reported hazards lead to real action.
Regulatory and Standards Framework
Several frameworks provide structure for building and auditing safety management systems in oil and gas:
ISO 45001— Occupational health and safety management systems. Specifies requirements for an OH&S management system and provides guidance for its use, with the explicit intent of preventing work-related injury and ill health.API RP 75— Recommended Practice for Development of a Safety and Environmental Management Program for Offshore Operations and Facilities. Provides the foundational structure for process safety management offshore.OSHA 29 CFR 1910.119— Process Safety Management of Highly Hazardous Chemicals. Mandatory in US-regulated facilities; covers the fourteen elements of PSM including management of change, mechanical integrity, and incident investigation.IEC 61511— Functional Safety: Safety Instrumented Systems for the Process Industry Sector. While primarily a SIS standard, its competency and management-of-change requirements directly reflect safety culture obligations.
None of these standards can be satisfied on paper alone. Each requires demonstrable evidence that the organisation actually operates as described — a distinction auditors and incident investigators will test.
The Layers of a Functional Safety Culture
Leadership Visibility and Accountability
Senior leaders set the cultural temperature. When a plant manager walks a unit and asks only about throughput, the workforce draws an accurate conclusion about what is valued. When the same manager stops to discuss a near-miss report, asks what barrier failed, and follows up on the corrective action, the conclusion changes.
Effective leadership behaviours include:
- Conducting structured safety walks with documented findings and close-out dates, not informal tours
- Participating in incident investigations rather than delegating them entirely
- Publicly acknowledging when a production decision was correctly subordinated to a safety concern
- Holding supervisors accountable for hazard reporting rates and corrective action closure, not just injury counts
Permit to Work as a Cultural Indicator
The permit-to-work (PTW) system is both a procedural control and a cultural barometer. A well-functioning PTW system requires that the issuing authority, performing authority, and any area authority each independently verify conditions before work begins. Where culture is weak, the PTW becomes a signature exercise — forms are completed after the fact, isolation verification is assumed rather than confirmed, and concurrent operations are not cross-referenced.
Any work on hydrocarbon-containing equipment must include: positive isolation at appropriate block valves or blinds, full depressurisation and draining of the affected section, verification of zero energy state using calibrated instruments, lockout/tagout (LOTO) applied by the performing authority, gas detection confirming a safe atmosphere, and controlled venting to an appropriate safe location. These steps are not negotiable based on schedule pressure, and a culture that tolerates their omission will eventually pay the consequence.
Auditing PTW quality — not just PTW volume — is a practical leading indicator of cultural health.
Near-Miss and Hazard Reporting
Near-miss reporting rates are among the most useful leading indicators available to a safety team, because they reflect workforce confidence that reporting is safe and worthwhile. A low reporting rate in an active facility does not mean the facility is unusually safe; it typically means the reporting culture is suppressed.
Building reporting confidence requires:
- A non-punitive policy that is consistently applied, not just written
- Visible feedback: every reported near-miss should receive an acknowledgement and a stated disposition within a defined, short timeframe
- Trend analysis shared openly with the workforce, showing what categories of hazard are appearing and what is being done
- Occasional examples where a near-miss report directly prevented a more serious event — these become organisational memory
Competency and Training
Competency is the point where safety culture meets technical capability. A worker who does not understand the hazards of a task cannot make a sound risk judgement, regardless of their attitude toward safety. Competency frameworks should define the specific knowledge, skills, and experience required for each safety-critical role, with verification rather than assumption.
This is directly reflected in IEC 61511, which requires documented competency for all persons involved in the safety lifecycle of a safety instrumented system. The same principle applies more broadly: functional safety, isolation planning, hot work authorisation, and confined space entry each require verified competency, not just attendance at a training course.
Management of Change
A disproportionate share of process safety incidents trace back to changes that were not adequately assessed — modifications to process conditions, temporary bypasses that became permanent, equipment substitutions that altered the safety case. A robust management of change (MOC) process requires that any change to process, equipment, procedures, or organisation is reviewed for safety impact before implementation, not after.
Cultural failure in MOC often looks like urgency overriding process: the change is made under time pressure and the paperwork completed retrospectively. Leadership must treat MOC compliance as a non-negotiable, with the same rigour applied to a temporary instrument bypass as to a permanent plant modification.
Comparison: Lagging vs. Leading Indicators
| Indicator Type | Examples | Limitation |
|---|---|---|
| Lagging | Lost-time injuries, recordable incidents, process releases | Measures outcomes after harm has occurred |
| Leading | Near-miss reports, PTW audit scores, overdue corrective actions, safety observation frequency | Measures system health before harm occurs |
| Process Safety Specific | Demand rate on safety systems, SIS proof-test completion rate, MOC compliance rate | Requires data infrastructure and consistent definitions |
The industry has historically over-relied on lagging indicators. A facility can go extended periods without a recordable injury while accumulating significant process safety risk. Lagging personal safety metrics and process safety health are not interchangeable.
Illustrative Scenario
The following is an illustrative scenario constructed for instructional purposes and does not represent a specific documented incident.
A maintenance team on a gas compression unit receives a PTW for a routine seal replacement. Schedule pressure is high — the unit has been down longer than planned. The isolation register lists two block valves as the isolation boundary, but the performing authority does not physically verify closure or apply LOTO before breaking the flange. A supervisor present on the job does not challenge the omission. The seal is replaced without incident on that occasion.
Three weeks later, a different crew uses the same unit with the same informal approach. On this occasion, the upstream valve has developed internal leakage. The flange is broken under residual pressure. The outcome is a hydrocarbon release and a flash fire.
The causal chain is not primarily technical — the valve failure was detectable with a proper isolation verification. The causal chain is cultural: the first team's shortcut was observed and not corrected, establishing an informal norm. The corrective action required is not a procedure rewrite. It is visible enforcement of the existing procedure, investigation of why the supervisor did not intervene, and a workforce briefing that explains what the near-miss on the first job actually represented.
Practical Checklist: Safety Culture Assessment
Use the following as a structured starting point for a cultural health review:
- [ ] Are safety walks conducted on a defined schedule with documented findings and close-out tracking?
- [ ] Is near-miss reporting rate trended over time and shared with the workforce?
- [ ] Are corrective actions from incident investigations closed within committed timeframes?
- [ ] Is the PTW system audited for quality (isolation verification, concurrent operations check) rather than just completion?
- [ ] Does the MOC process cover temporary changes and organisational changes, not only physical plant modifications?
- [ ] Are competency records current for all safety-critical roles, with verification evidence rather than training attendance records alone?
- [ ] Are safety performance metrics discussed at the same level of leadership attention as production and cost metrics?
- [ ] When a worker raises a safety concern, is there a documented response within a defined timeframe?
- [ ] Are supervisors assessed on safety leadership behaviours as part of their performance review?
- [ ] Is there a clear, non-punitive reporting pathway that workers demonstrably trust?
Conclusion
Safety culture is not a programme with a start and end date. It is the aggregate of daily decisions made at every level of an organisation — decisions about whether to stop a job, raise a concern, complete an isolation properly, or accept a shortcut under schedule pressure. The engineering controls and management systems described in ISO 45001, API RP 75, and OSHA 29 CFR 1910.119 provide the architecture. Leadership behaviour and accountability fill that architecture with meaning.
The immediate next steps for any facility conducting a cultural review are: audit leading indicator data to establish an honest baseline, identify the two or three most visible gaps in leadership behaviour or reporting culture, and commit to specific, measurable actions with named owners and close-out dates. Avoid the common failure of launching a broad culture initiative without accountability — broad initiatives without accountability become wallpaper. Start narrow, demonstrate follow-through, and build credibility with the workforce one closed corrective action at a time.