Safety Reporting Structure Malaysia — Why Safety Must Report to the Top (Not to Operations)
In most Malaysian companies, safety reports to operations. That is the problem. The safety reporting structure Malaysia organisations use is not a minor administrative detail — it determines whether safety can actually do its job, or whether it becomes a compliance function that protects the operation instead of auditing it.
This is not a popular opinion in Malaysian corporate culture. Safety under operations is the norm. The safety manager sits in the operations hierarchy. Safety decisions pass through operations leadership. And the organisations that operate this way genuinely believe they have taken safety seriously — because they have a safety function, a safety plan, and a safety budget.
What they don’t have is a safety reporting structure that allows safety to actually work.
The problem is not individual. It is not about the competence of the safety manager or the character of the operations VP. It is structural — and structural problems cannot be fixed by better people. They can only be fixed by a better design.
The Structural Conflict of Interest
Operations has a defined function: deliver output. Production targets, contractor deadlines, project milestones, cost per unit, on-time delivery. Operations leadership is measured, incentivised, and in some cases legally accountable for whether these outputs are achieved.
Safety has a different function: stop work when something is wrong. Flag conditions that don’t meet the safety requirement. Say no to a job that hasn’t been properly risk-assessed. Require isolation before a job starts, even when starting immediately would save time. Make the call to send workers home when the site isn’t safe to operate, even when production is behind schedule.
Now place both of these functions in the same reporting line. Operations VP at the top. Safety Manager reporting to the Operations VP.
When the Safety Manager wants to stop a job — the approval must go to the same person who is under pressure to finish it. When the Safety Manager wants to flag a serious near miss — the report goes to the same person who will be accountable for the delay. When the Safety Manager wants to require an additional control that will slow the operation — the decision is made by the person whose KPIs are driven by the operation running on schedule.
This is not a failure of character. This is a structural conflict of interest. And conflicts of interest, by design, resolve in favour of the stronger incentive. In operations, the stronger incentive is almost always production.
Tripod Beta Names This: Incompatible Goals (IG)
In Tripod Beta’s incident investigation framework, this structural problem has a name: IG — Incompatible Goals. It is one of the 11 Basic Risk Factors, and it describes exactly what happens when production targets and safety requirements compete within the same reporting line.
When two objectives that conflict with each other are both imposed on the same decision-maker or system, the system will optimise for whichever objective carries the stronger incentive or accountability. In organisations where production is the primary measure of success and safety reporting sits within operations, the incentive structure reliably resolves in favour of production.
IG is not just a theoretical risk category. It appears in investigations across industries and countries. When Malaysian HSE practitioners investigate serious incidents and trace the causation path to the management system level, IG often appears — a structure that made safety decisions dependent on approval from someone whose primary accountability was production delivery.
The lesson from Tripod Beta is not that IG can be fixed by better individuals. It is that IG can only be fixed by removing the structural conflict — which means changing the safety reporting structure so that safety’s decisions are not subject to approval from operations.
What Happens When Safety Reports to Operations
Over time, a safety function that reports to operations shifts its focus. Not because the Safety Manager lacks integrity, but because the organisational environment consistently signals what matters and what doesn’t.
Safety stops managing risk. It starts managing compliance paperwork. It stops questioning the operation. It starts protecting it. The incident reports become shorter. The near miss register fills with low-severity items. The recommendations from audits are carefully worded to avoid friction with operations. The Safety Manager’s job becomes easier — and the organisation’s risk profile becomes worse.
This is not hypothetical. It is the predictable outcome of a structure where the incentive to avoid friction is stronger than the incentive to surface genuine risk.
The Three Conditions for a Safety Reporting Structure That Works
Getting the safety reporting structure right in Malaysia requires three conditions to be met simultaneously:
-
1
Direct line to the MD or CEO
The Safety Manager must have direct access to the most senior decision-maker in the organisation — not access filtered through operations. When safety needs to escalate a serious issue, the escalation must reach the person who can act on it without commercial interference.
-
2
Authority to stop work without commercial approval
Safety must have unambiguous, organisationally endorsed authority to stop a job, a shift, or a production run when the safety requirement is not met — without requiring the approval of the person whose KPIs depend on the work continuing. This authority must be exercised without consequence to the Safety Manager.
-
3
Separation from the operations chain being audited
Safety cannot objectively audit an operation it reports into. An auditor who is accountable to the auditee is not independent — and independence is the precondition for meaningful audit findings. The safety function must be structurally separate from the operations hierarchy to audit it without conflict.
What Malaysian Law Says About This
The Occupational Safety and Health Act 1994 (OSHA 1994), and the amendments introduced under OSHA 2022, impose duties on employers and directors to ensure the safety of workers — not just to appoint a safety officer. OSHA 2022 in particular extended the liability of directors and senior officers for safety failures, creating a clearer accountability chain from the boardroom to the worksite.
This legal direction reinforces the structural argument. When senior leaders are personally accountable for safety outcomes, having safety report to operations — where the incentive structure consistently subordinates safety to production — becomes a governance risk as well as an operational one. The structure that lets safety do its job is also the structure that protects directors from being personally exposed to liability when the system they designed fails.
The test question for your organisation: Does your safety function have the authority to stop work without seeking approval from the person who wants the work done? If the answer is no — that is not a character problem. It is a design problem.
Safety Reporting to the Top Is Not a Cost — It’s a Structural Requirement
The resistance to this structural change in Malaysian organisations usually takes one of two forms: “we trust our safety manager to speak up” or “the cost of independent safety reporting is not justified.”
The first objection confuses individual character with structural design. Trustworthy, capable safety managers working in the wrong structure will still be subject to the incentive system that structure creates. The structure does not care about their character. It rewards what it measures and penalises what it ignores — and a safety function reporting to operations is in a structure that reliably measures production and ignores safety escalation that creates friction.
The second objection inverts the cost calculation. The cost of independent safety reporting is predictable and manageable. The cost of an incident caused by a structural conflict of interest — in human terms, in regulatory terms, in reputational and legal terms — is not. Every serious industrial incident in Malaysia that involved production pressure overriding a safety concern was, at its management system level, an IG failure. The investigation always finds what the structure produced.
Safety reporting to the top is not a cost. It is the only structural arrangement that lets the safety function do what it was designed to do. Every other arrangement is a compromise — and compromises show up in investigations.
Understand Your Legal Duties as a Manager or Director
Cikgu Barrier’s OSH Obligations for Management programme covers the duties of Directors, Managers, and HR under OSHA 1994 and OSHA 2022 — including the organisational accountability structures that reduce legal exposure and produce safer operations.
