Why nuclear safety depends not only on engineered systems, but on how people think, communicate and respond

Nuclear safety is often described through visible and documented layers: containment structures, reactor protection systems, shutdown systems, emergency core cooling, redundancy, diversity and defence in depth. These elements matter deeply. They are designable, testable, documented and central to the technical architecture of nuclear safety. But around every visible safety system there is another structure, less visible and equally important. Safety culture.

It is not a decorative phrase. It is not a campaign slogan. It is not a poster on the wall. Safety culture is the way an organization behaves when something is unclear, inconvenient, routine or uncomfortable.

It becomes visible in ordinary behaviour: in how people ask questions, how concerns are received, how procedures are followed, how deviations are reported, how leadership reacts to bad news, how teams communicate under pressure, and how an organization learns before small signals become larger problems.

In nuclear technology, safety culture is not separate from the technical system. It surrounds the system, interprets it, maintains it and sometimes protects it from the assumptions of the people working around it. That is why safety culture should not be treated as a soft addition to nuclear safety. It is one of the structures that allows the technical system to remain trustworthy in practice.

Safety culture is not a soft layer

It is easy to misunderstand safety culture as something human, behavioral and therefore somehow less technical. That is a mistake.

In a nuclear environment, human behaviour is part of the system.

A procedure only works if it is understood, respected, usable and followed. An alarm only works if it is recognized, interpreted and acted upon correctly. A conservative design only works if the organization does not slowly normalize exceptions. A safety margin can only be preserved if people understand why it exists.

Safety culture connects the technical system with the organizational system. It links equipment, documentation, training, communication, decision-making and responsibility.

A plant may have robust engineering, but if people are afraid to raise concerns, safety is weakened. A team may have detailed procedures, but if workarounds become normal, safety is weakened. An organization may have formal reporting systems, but if inconvenient information is ignored, safety is weakened.

Safety culture is not the opposite of technical discipline. It is one of the conditions that allows technical discipline to remain alive.

More than individual behaviour

Safety culture is sometimes reduced to personal attitude. Be careful. Pay attention. Follow the rules. Those expectations matter, but they are not enough. In complex systems, safety does not depend only on whether one person is careful. It depends on whether the organization makes careful work possible.

That includes leadership, staffing, workload, procedures, training, supervision, communication channels, maintenance practices, contractor management, design feedback and the way operating experience is used. A strong safety culture does not ask people to be perfect. It creates conditions where people can detect, question, stop, correct and learn. This distinction matters.

If safety culture is reduced to individual behaviour, every failure becomes too easy to explain as human error. Someone missed something, made the wrong decision or failed to follow a procedure. But in nuclear safety, that should not close the analysis. It should open it.

A mature safety culture asks why the signal was missed, whether the procedure was clear, whether the workload was reasonable, whether the training was sufficient, whether time pressure was present, whether concerns had already been raised, whether a deviation had started to become normal, and whether the organization was truly listening.

It does not stop at blame. It asks what the system allowed, encouraged, missed or failed to correct.

The role of leadership

Safety culture is strongly shaped by leadership. Not only by formal statements, but by everyday reactions. People quickly understand what an organization truly values. They notice when production pressure quietly outranks caution, when concerns are welcomed or treated as obstruction, when managers listen to technical staff, when procedures are improved rather than merely enforced, and when bad news is punished, softened or used for learning.

In a strong safety culture, leadership does not only demand safety from others. It models it.

That means making conservative decisions when necessary. It means creating trust, protecting the right to raise concerns, and accepting that stopping work can be a sign of professionalism rather than weakness.

It also means understanding that silence is not the same as safety. A quiet organization is not automatically a safe organization. Sometimes silence means confidence. Sometimes it means fear. Safety culture depends on knowing the difference.

Questioning attitude

One of the most important characteristics of nuclear safety culture is a questioning attitude. This does not mean distrust for the sake of distrust. It means disciplined attention. A questioning attitude asks what is being assumed, what has changed, what an indication means, whether a condition is expected, whether a procedure is still appropriate, whether a deviation has consequences, and whether the organization is becoming too comfortable with something unusual.

It protects the system from complacency. This is especially important during routine work.

Major events attract attention. Routine work often does not. But routine is where normalization can begin quietly. A small deviation becomes familiar. A workaround saves time. A missing detail is accepted because nothing happened last time. A weak signal is dismissed because the system still appears stable.

Safety culture keeps routine work from becoming mentally invisible. It keeps people aware that in complex systems, small things can matter.

Reporting and learning

A strong safety culture depends on the ability to report problems without fear. This includes events, near misses, weak signals, unclear procedures, equipment issues, communication problems and organizational pressures.

Reporting is not a bureaucratic exercise. It is a learning mechanism.

If information does not move, the organization cannot learn. If people hide concerns, the organization becomes blind. If reports disappear into a system with no feedback, people stop reporting. If every issue is treated as personal failure, the deeper causes remain untouched.

Learning culture is therefore part of safety culture. Operating experience should not be collected as decoration. It has to be read, discussed, compared, understood and translated into better practice. In nuclear systems, learning must happen before consequences become visible.

Waiting for failure is not a safety strategy.

Procedures and judgement

Procedures are central to nuclear safety. They create consistency, reduce ambiguity, preserve organizational knowledge and support decision-making under pressure. But procedures do not remove the need for judgement. They require understanding.

A procedure is not just text. It is a bridge between design intent and human action.

For that bridge to work, procedures must be clear, accurate, usable and respected. People must also understand why they exist and when a situation requires escalation, clarification or stopping the activity. A strong safety culture does not treat procedures as empty paperwork. It treats them as part of the safety system.

This also means that when procedures are difficult to use, unclear or repeatedly bypassed, the answer is not only discipline. The answer is also inquiry.

The organization has to ask why this is happening, whether the procedure is realistic, whether it reflects actual conditions, whether the system has changed, and whether people are compensating for a design or organizational weakness. Good procedure use and good questioning belong together.

Safety culture as defence in depth

Defence in depth is often described through technical and organizational layers: fuel design, cladding, reactor coolant system boundary, containment, safety systems, procedures, monitoring, emergency preparedness and response. Safety culture can also be understood as an organizational layer of defence. It does not replace engineered safety. It strengthens it. It helps ensure that barriers are maintained, assumptions are challenged, degraded conditions are recognized and decisions remain conservative.

A strong safety culture cannot make a poor design acceptable. But a weak safety culture can damage even a strong design. That is why safety culture matters. It is not a soft addition to hard engineering. It is one of the ways an organization keeps engineering honest.

Not perfection, but resilience

A strong safety culture does not mean that people never make mistakes. That would be unrealistic. People can misread, forget, assume, rush, misunderstand or become overloaded. Complex systems can create confusing signals. Organizations can develop blind spots. The question is whether the organization is able to detect, absorb, correct and learn from human fallibility before it leads to consequences.

That is where safety culture becomes practical. It creates resilience. Not by pretending that everything is under control, but by building habits that make correction possible. To stop, question, verify, communicate, report, learn and improve may sound simple. In a nuclear environment, these actions carry weight because they help keep uncertainty visible before it becomes consequential.

Conclusion

Nuclear safety culture is the invisible structure around the visible system. It lives in decisions, habits, conversations, procedures, training, leadership and the response to uncertainty.

It is present when someone feels responsible enough to ask one more question. It is present when a team stops before continuing under unclear conditions. It is present when leadership listens to uncomfortable information. It is present when an organization treats weak signals as valuable rather than annoying.

And it is absent when silence is mistaken for agreement, routine is mistaken for safety, and compliance is mistaken for understanding.

In nuclear technology, safety is not only built into systems. It is also carried by people. Not as a slogan. As discipline. As responsibility. As culture.

Conceptual reference note

This article is informed by established nuclear safety culture principles, including the understanding of safety culture developed in IAEA INSAG-4, leadership and management expectations reflected in IAEA GSR Part 2, and broader safety culture themes used by nuclear regulators and international organizations such as NRC and WANO.

The article is written as an independent communication and interpretation piece for By the Protocol. It is not an official institutional statement, regulatory guidance or operational procedure.

Hero image: iStock licensed stock image. The image is used for illustrative purposes.

Last modified: June 14, 2026