Tripod Beta Basic Risk Factors Malaysia — The Complete Reference Guide to All 11 BRFs
Your investigation found the root cause: “Worker failed to follow procedure.” That’s not a root cause — that’s a symptom. Tripod Beta Basic Risk Factors are the 11 management system failures that sit underneath it. This is the complete reference guide to what each one means and how to apply them.
In Malaysian HSE practice, the phrase “root cause” has been stretched far beyond its meaning. When an investigation report concludes that the root cause was “failure to follow procedure,” “human error,” or “lack of awareness,” it has not found the root cause. It has named the Immediate Cause — the observable, surface-level thing that the person did or didn’t do — and stopped there.
Root cause analysis, in the Tripod Beta framework, requires the investigation to go three levels deeper: from the Immediate Cause (what happened), to the Preconditions (the conditions that made the error possible), to the Basic Risk Factor — the management system failure that created the conditions in the first place.
It is at the Basic Risk Factor level that investigations produce corrective actions that actually prevent the next incident. Everything above that level produces corrective actions that address symptoms.
Understanding the Tripod Beta Causation Path
Before covering the 11 Basic Risk Factors, it helps to understand where they sit in the Tripod Beta causation structure:
The Basic Risk Factors are the deepest level the investigation reaches. They represent failures in the systems, processes, and structures that organisations put in place to manage safety — training systems, maintenance systems, design systems, communication systems, organisational structures, and procedures. When these fail, they create the conditions in which incidents become possible, likely, and eventually, inevitable.
The 11 Tripod Beta Basic Risk Factors — Full Reference
Tripod Beta identifies 11 Basic Risk Factors that cover the full range of management system failures relevant to safety. The DOSH Malaysia incident investigation framework, aligned with international HSE standards, recognises the same categories of underlying management failure. Here is the complete reference:
| Code | BRF Name & What It Means | Example Failure |
|---|---|---|
| DE | DesignFlaw in the design of equipment, workplace layout, or task structure | Valve located in a position that requires the operator to stretch across a hazardous zone to reach it |
| TR | TrainingTraining that is absent, inadequate, or not transferred to practice on the job | Worker trained on theory but never supervised on the actual task; training not refreshed after process change |
| HW | HardwareEquipment not fit for purpose, poorly maintained, or absent when needed | Safety interlock bypassed because it was creating nuisance trips; PPE that doesn’t fit or is uncomfortable |
| CO | CommunicationFailure of communication between people, teams, shifts, or departments | Shift handover did not capture a known equipment deficiency; contractor not informed of site safety critical rules |
| MM | Maintenance ManagementInspections missed, defects reported but not actioned, maintenance backlog unmanaged | Gas detector calibration overdue by 4 months; defect raised in maintenance system marked “low priority” for 6 months |
| IG | Incompatible GoalsProduction targets and safety requirements competing — and production winning by default | Supervisor verbally told workers “just get it done” when the safe method would have taken longer; KPIs measured output, not compliance |
| HK | HousekeepingPoor physical conditions in the workplace — disorder, contamination, obstruction — that make hazards worse | Oil spill on walkway not cleaned up; materials stored blocking emergency exit route |
| OR | OrganisationUnclear responsibilities, absent enforcement, organisational structures that prevent safety from functioning | No one owned the safety critical task; safety manager reporting to operations VP who had conflicting production targets |
| EE | Error Enforcing ConditionsConditions present in the workplace that made mistakes practically inevitable — fatigue, distraction, cognitive overload | Operator managing 3 simultaneous process streams during peak hours; 12-hour night shift with no rest break policy |
| DF | DefencesSafety defences that are missing, inadequate, or not suited to the actual hazard profile of the task | No secondary containment for a corrosive substance; emergency shutdown valve not rated for the operating temperature range |
| PR | ProcedureProcedures that are missing, unclear, outdated, impractical, or not enforced | Procedure had not been updated since the process was modified 2 years ago; procedure exists but workers were not required to sign off on it |
You’ll need it at your next investigation debrief. Your corrective action should target one of these 11 — not the person who was involved.
How to Apply Basic Risk Factors in an Investigation
Applying Tripod Beta Basic Risk Factors is not a box-ticking exercise. The process is analytical: for each barrier that failed in the incident, trace the causation path through the Immediate Cause and the Precondition, and then ask: which management system failed to prevent this precondition from existing?
The answer is a Basic Risk Factor. In most real incidents, two or three Basic Risk Factors are present simultaneously — often interacting. An investigation that identifies only one BRF for a serious incident has probably not been traced completely.
Here is a worked example:
- Immediate Cause: Worker did not isolate energy before performing maintenance on a conveyor
- Precondition: Worker believed isolation was not required for the task they were performing (misclassified as minor maintenance)
- Basic Risk Factors identified:
- TR (Training) — Worker not trained on the site’s task classification criteria that determined when LOTO was required
- PR (Procedure) — The maintenance procedure did not include a decision step for determining whether energy isolation was required before beginning work
- CO (Communication) — Supervisor who authorised the work did not confirm the worker’s understanding of the energy isolation requirement
The corrective actions target each of these three management system failures — not the worker. Retraining the worker without fixing the procedure and the communication failure leaves the precondition in place for the next person in the same situation.
The standard for a complete investigation: Every corrective action names a Basic Risk Factor. If your corrective actions target a person — “counsel the worker,” “remind the team,” “increase supervision” — the investigation stopped at the Immediate Cause level. It has not been completed.
Why This Matters for Malaysia’s HSE Landscape
The pressure Malaysian organisations face from DOSH inspections and post-incident reviews is increasing. DOSH’s investigation standards require evidence that organisations have identified the underlying causes of incidents — not just the immediate circumstances. An investigation report that concludes with human error and a corrective action of retraining does not satisfy that standard.
More importantly: it does not prevent the next incident. The management system failure that created the conditions remains unchanged. The preconditions that made the error possible are still present. The next person in the same situation will face the same risk.
That is the practical reason Tripod Beta Basic Risk Factors exist — not methodology for its own sake, but a structured way of finding the failure that, if fixed, changes the conditions that cause incidents.
Master Tripod Beta and Basic Risk Factor Analysis
Cikgu Barrier delivers Malaysia’s specialist Tripod Beta Incident Investigation training — covering all 11 BRFs, causation path tracing, barrier state assessment, and investigation reporting. Delivered in-house for your HSE team.
