Open any incident investigation report from a Malaysian workplace and look for the root cause finding. In a significant proportion of them, you will find some version of the same conclusion: human error.
Worker failed to follow the procedure. Operator made an incorrect decision. Employee failed to use PPE.
These findings are not wrong — they are descriptions. And a description is not an investigation.
What “Human Error” Actually Says
When an investigation concludes “human error,” it has named the final act in a chain of events. It has described what the person did — or failed to do — at the moment of the incident.
What it has not explained is:
- Why the person made that error at that moment
- What state they were operating in — fatigued, under pressure, lacking information, using defective equipment
- What the system produced that state
- What the organisation should have done differently to prevent that state from developing
- What allowed the system to function for weeks or months with that vulnerability undetected
“Human error” is the last visible symptom of a system failure. Calling it the root cause is equivalent to diagnosing a cough as the disease, rather than the infection producing it.
The Tripod Beta Framework
Tripod Beta is a systemic incident investigation methodology developed by TU Delft and adopted by major organisations in the energy sector and beyond. It is now used across oil and gas, chemical, maritime, and construction industries, and is the most rigorous investigation framework available for complex workplace incidents.
Its core principle is that human performance is not random. People do not make errors because they are careless or incompetent by nature. They make errors when the system creates conditions that make errors more likely — and those conditions are identifiable, traceable, and preventable.
The Tripod Beta causation chain is:
Underlying Cause → Precondition → Substandard Act or Condition → Failed Barrier → Event
Each element in this chain has a specific definition.
The Underlying Cause is a system failure — a management decision, a resource gap, a policy, or an organisational condition that produced a hazardous state. Underlying Causes are categorised by Basic Risk Factor (BRF): categories such as Training (TR), Hardware (HW), Procedures (PR), or Incompatible Goals (IG). These categories identify which part of the management system failed.
The Precondition is the measurable, undesirable state that the Underlying Cause produced — the specific condition the person was operating under when the error occurred. It is not the error itself, and it is not the abstract system failure. It is the concrete, observable state that linked the system failure to the act.
The Substandard Act or Condition is the immediate behaviour or physical state that preceded the barrier failure. This is where “human error” typically appears. It describes what happened — not why.
The Failed Barrier is the specific control that should have prevented the event but did not.
The Event is the top event — the loss of control of the hazard.
Why the Precondition Is the Key Insight
The precondition is the element most frequently missing from investigations that conclude “human error.”
Without the precondition, an investigation presents two facts that might be connected: the management system had a gap and the worker made an error. The gap between these two facts is an assumption — drawn by an arrow on a diagram, not named and evidenced.
With the precondition, the causation path becomes traceable. The investigation names the specific state that the system gap produced, confirms that this state existed at the time of the incident, and explains mechanically how the state made the error likely.
For example:
Underlying Cause: No competency verification system exists for energy isolation tasks at this facility (BRF: TR — Training)
Precondition: Operator lacks verified competency in the energy isolation procedure — this gap existed and was undetected before the incident
Substandard Act: Isolation step omitted during maintenance task
Failed Barrier: Lockout/tagout not completed
Event: Contact with stored electrical energy
In this chain, “human error” labels the Substandard Act. But the investigation has not stopped there — it has traced backward to name the precondition (the operator’s competency gap) and the underlying cause (the absent verification system). The corrective actions that follow target the system, not the person: implement a competency verification process for energy isolation.
The Investigator’s Discipline
Tripod Beta requires investigators to maintain a discipline that is uncomfortable: to resist the simple explanation and continue asking why until the management system failure is named.
When someone says “the worker didn’t follow the procedure,” the Tripod Beta investigator asks: what was the state the worker was in that made not following the procedure likely? Was the procedure unclear? Did the worker lack the competency to recognise that the step was critical? Was there production pressure that made skipping the step look like a reasonable risk?
When the precondition is named, it becomes testable: was this state actually present? Can we confirm it through records, interviews, observations?
This is investigation as evidence-based analysis, not investigation as blame assignment.
The Practical Implication for Malaysian Workplaces
Every investigation report that concludes “human error” as a root cause has, in effect, concluded that the person is the problem. The corrective action will target the person: retrain them, discipline them, remind them.
And the system that produced the conditions for the error — the absent verification process, the inadequate procedure, the competing production pressure — remains unchanged. Ready to produce the same precondition in the next person, who will also be described, after the next event, as “human error.”
The investigation that finds the Underlying Cause changes the system. The investigation that finds human error changes nothing that matters.
Want your team to investigate incidents at the system level — not stop at the person? Cikgu Barrier’s Tripod Beta Incident Investigation program is Malaysia’s only accredited Tripod Beta training, delivered by an Energy Institute UK certified trainer. In-house delivery, 3 days. Enquire now.