For the Swiss Cheese model in physical cosmology, see large-scale structure of the cosmos, galaxy filament, and supercluster.
File:Emmentaler aoc block.jpg
In the Swiss Cheese model, individual weaknesses are modelled as holes in slices of swiss cheese, such as this Emmental. They represent the imperfections in individual safeguards or defences, which in the real world rarely approach the ideal of being completely proof against failure.

The Swiss Cheese model of accident causation is a model used in the risk analysis and risk management of human systems, commonly aviation, engineering, and healthcare. It likens human systems to multiple slices of swiss cheese, stacked together, side by side. It was originally propounded by British psychologist James T. Reason of the University of Manchester in 1990 (Reason 1990), and has since gained widespread acceptance and use in healthcare, in the aviation safety industry, and in emergency service organizations. It is sometimes called the cumulative act effect.

Reason hypothesizes that most accidents can be traced to one or more of four levels of failure: Organizational influences, unsafe supervision, preconditions for unsafe acts, and the unsafe acts themselves. In the Swiss Cheese model, an organization's defences against failure are modelled as a series of barriers, represented as slices of swiss cheese. The holes in the cheese slices represent individual weaknesses in individual parts of the system, and are continually varying in size and position in all slices. The system as a whole produces failures when all of the holes in each of the slices momentarily align, permitting (in Reason's words) "a trajectory of accident opportunity", so that a hazard passes through all of the holes in all of the defenses, leading to a failure.[1][2][3]

Frosch[4] describes Reason's model in mathematical terms as a being a model in percolation theory, which he analyses as a Bethe lattice.

The Swiss Cheese model includes, in the causal sequence of human failures that leads to an accident or an error, both active failures and latent failures. The former concept of active failures encompasses the unsafe acts that can be directly linked to an accident, such as (in the case of aircraft accidents) pilot errors. The latter concept of latent failures is particularly useful in the process of aircraft accident investigation, since it encourages the study of contributory factors in the system that may have lain dormant for a long time (days, weeks, or months) until they finally contributed to the accident. Latent failures span the first three levels of failure in Reason's model. Preconditions for unsafe acts include fatigued air crew or improper communications practices. Unsafe supervision encompasses such things as, for example, two inexperienced pilots being paired together and sent on a flight into known adverse weather at night. Organizational influences encompass such things as reduction in expenditure on pilot training in times of financial austerity.[5]

The same analyses and models apply in the field of healthcare, and many researchers have provided descriptive summaries, anecdotes, and analyses of Reason's work in the field. For example, a latent failure could be the similar packaging of two different prescription drugs that are then stored close to each other in a pharmacy. Such a failure would be a contributory factor in the administration of the wrong drug to a patient. Such research has led to the realization that medical error can be the result of "system flaws, not character flaws", and that individual greed, ignorance, malice, or laziness are not the only causes of error.[6]

Lubnau, Lubnau, and Okray[7] apply Reason's Swiss Cheese model to the engineering of human systems in the field of firefighting, with the aim of reducing human errors by "inserting additional layers of cheese into the system", namely the techniques of Crew Resource Management.

Although the Swiss cheese model is respected and considered to be a useful method of relating concepts, it has been subject to some criticism, including that it is used over broadly, and without enough other models or support. However, it is viewed as a decent model when supported.[8]

References

  1. Script error
  2. Script error
  3. Script error
  4. Script error
  5. Script error
  6. Script error
  7. Script error
  8. "Revisiting the Swiss cheese model of accidents". Eurocontrol. October 2006. http://www.eurocontrol.int/eec/gallery/content/public/document/eec/report/2006/017_Swiss_Cheese_Model.pdf.

Further reading

See also