2020年1月25日 星期六

圖像觀念與底層真相for Industrial Safety

前情提要

再次從政大老師那汲取智慧與洞見,回首思考追尋的意義與真相
摘錄:
社會現象是由一連串的事件所組成,事件與事件之間雖有關聯,但其因果關係可分為三個層次的領域:經驗領域(domain of empirical)、真確領域(domain of actual)、真實領域(domain of real)。
在第一個層次中,研究者看到一連串事件,稱為經驗領域。這一層面中看到的是表象,不是真相。例如,常有人說新加坡只有一季而已,因為四季如夏。新加坡氣候一直很熱這項觀察,便是經驗領域。或是,兒子的相貌長得與父親很像;相貌相仿是我們觀察到在經驗領域的表象。如果我們要探索為什麼新加坡四季都很熱,為何父子相貌相仿,研究者便需進入第二層面:真確領域。
真確領域是表象所呈現的樣貌(pattern)。新加坡四季都很熱,背後的原因是位於赤道,所以四季都很炎熱;但別的地區可能四季如冬,像北極;或是四季分明,像日本;這是季節的脈絡。此外,由父子相貌相仿我們可以發現「虎父無犬子」、「龍生龍、鳳生鳳」這樣的血緣脈絡。當我們觀察到季節與血緣的脈絡時,便進入到真確領域。
但進入真確領域仍不是真相。真實主義者認為,真相隱於第三層面的真實領域之中。知識必須在此真實領域中建立,方可成為真科學。在真實領域中,要透過脈絡進一步找到底層機制(underlying mechanism)。例如,要了解地球上為何有四季,就必須了解地球、月球與太陽之間的運轉結構,這是新加坡氣候為什麼很熱,為何地球產生四季的底層機制。
此外,追問為什麼父子的長相習性會相近,就必須透過人類的基因來分析。所以,基因結構就是「虎父無犬子」現象的底層機制。找出底層機制,才算是進入真實領域。同理,要了解為何會有地震,就必須了解地球板塊擠壓碰撞的脈絡。要了解板塊為何會擠壓碰撞,就要理解地殼及地層移動的機制。


時值農曆春節,獻上一些領悟心得作為新春賀禮,
希望對於看得的有緣朋友 有些參考價值。




事故是由一連串的事件所組成,事件與事件之間雖有關聯,但其因果關係可分為三個層次的領域:經驗領域(domain of empirical)、真確領域(domain of actual)、真實領域(domain of real)。

第一個層次經驗領域(domain of empirical

大家看到事故發生,七嘴八舌討論背後有種種原因與因素,例如,有人犯錯,某些設備機台或防護機制失效/不給力,乃至於種種天時地利的陰錯陽差。



也嘗試去分析事故發原因或分類事故類型,進行統計




Heinrich歸納出的129300

這一層面中看到的是表象,不是真相。
涵義
  1. 既然只是表象,代表只能治標不治本,發生墜落職災就宣導大家要注意墜落職災(實際上會不會減少是另一回事)
  2. 只是現象,不是原因(root cause),例如營造業容易發生墜落與崩塌類型事故,石化業容易發生火災爆炸類型的事故。
  3. 只是表象=冰山浮出水面的一角,讓人忽略低層脈絡=>只看見犯錯的人與故障的機器設備,事故檢討流於獵巫/打地鼠與找代罪羔羊





第二個層次的真確領域(domain of actual
歸納出各種表象背後的規律與樣貌(pattern)。
例如人會犯錯有如吃燒餅掉芝麻,只是或然率的大小,戴明大師的紅珠實驗揭露出系統管理階層運作的生態與心態

而霍桑研究告訴我們:人會偷懶/特別是當沒有人監督觀察時

設備機台會故障,其故障率符合熱力學第二定律,時間越久故障率越高。

人們嘗試針對各種危害與失控情境加入種種防護


然而卻總是在發生事故後才發現:種種防護漏洞百出
最後只能用所謂管理不當作為總結(root cause)




乃至於使用安全文化/安全氣候等構念,乃至於ISO PDCA條文架構來詮釋事故的發生與預防。


這一層面中看到的是深一層的原因,但仍不是終極原因root cause
涵義
  1. 對於各種事故的發生有更深一層的理解與提出更全面的預防對策與見解
  2. 讓大家看見冰山水面下的一部分,開始腳痛醫頭,跳脫治標不治本的徒勞無功
  3. 仍然只是表象,大家以為看見冰山與大象的全貌,透過種種構念或條文來詮釋事故的發生與預防,實際上無助於解決「應然」與「實然」間的落差。




當我們觀察到事故與醞釀事故的脈絡時,便進入到
第三個層次的真確領域(domain of real
所謂的管理不當的背後,其實是一種取捨與抉擇,有資源的公司比沒資源的公司,相對的人員素質與訓練佳,設備機台的妥善維護佳,因此相對事故率發率低(不保證不會出事)=>事故的發生不過是一種必然,乃至於種種遭遇事故的經驗有如組織DNA,形成組織文化與系統均衡
例如以下文章

利用系統循環圖(Causal loop diagrams)進行系統思考

系統思考

系統新舊三論

在這一個層面,大家看見的有如另一個世界


所謂的安全或發生意外的潛勢,不單是表面的不安全的行為、不夠完整的機械設備乃至於不安全的環境;亦非所謂的管理好壞或者領導與組織安全文化,而是一種機率函數
function of internal resource, external pressure, and systematic equilibrium level.  


涵義
  1. 事故的發生與預防,不是Yes or No,而是一種因緣際會與或然率的概念,無須獵巫找代罪羔羊,事情發生了就發生了(法官與官員自誤誤人)
  2. 所謂的因果其實只是一種人腦主觀意識詮釋的錯覺,沒有所謂的因果關係(Causation )只有關聯性(Correlations)。成敗禍福是一體的兩面,相生相依,塞翁失馬焉知非福。
  3. 見樹見林,從微觀的角度看事故可以預防與預測,而從宏觀的角度看事故無法預防與預測。換言之,追尋與尊崇各種最高標準或best practice無益。


你問:
看清楚了冰山與大象的全貌與導致事故發生的真確領域又如何?
我說:
不是不落因果,而是不昧於因果 


FROM Safety-I TO Safety-II
(突破不過是把腦筋與觀念稍微轉彎一下)

Safety-I:專注於可能出錯的少數,事出必有因,專注於找出人為疏失或故障的設備元件,然後為了有所交代,訂定各嚴苛的嚴刑峻法,讓大家戰戰兢兢…代價是:Trying to achieve safety by constraining performance variability will inevitably affect the ability to achieve desired outcomes as well and therefore be counterproductive.

Safety-II:關注沒出錯甚至做得不錯的多數,事故的發生不過是一種因緣際會(Emergence rather than causality),與其訂定各種規範限制大家,不如提升大家的能耐與給予因應變化的自由度,用承擔出錯來換取嘗試機會與創造可能性(risks as well as opportunities)

https://www.skybrary.aero/bookshelf/books/2437.pdf 



What Safety-II isn’t
https://humanisticsystems.com/2014/06/08/what-safety-ii-isnt/
摘錄:

Isn’t about looking only at success or the positive(but also all possible outcomes: involving normal, everyday, routine performance; exceptionally good performance: and near-misses accidents and disasters)

Isn’t an atheoretical fad, it isn’t ‘just theory’ either. Theory – of systems, people, and time – provides a way of explaining and making sense of the world.

Isn’t the end of Safety-I. Safety-I and Safety-II are complementary, and “Many of the existing practices can therefore continue to be used, although possibly with a different emphasis”

Isn’t about ‘best practice’. The best practice we can hope for is contextual practice – practice that fits the context.

Isn’t what ‘we already do’. But “We already do that” acts as a thought-stopper and prevents reflection about just exactly what it is that we already do, and – perhaps more to the point – why we do it.

Isn’t ‘them and us’. While people may prefer to identify more with one set of assumptions than another, the chances are that what we think aspects of both have validity in different contexts.

Isn’t just about safety. Safety-II is more naturally aligned with business and front-line operational goals that emphasise effectiveness. And effectiveness – doing the right things right – is surely what it is all about.





How To Do Safety-II(質性研究無誤)
https://humanisticsystems.com/2019/11/03/how-to-do-safety-ii/ 
摘錄:

Idea 1: Collaborate
start to see the reality of how patterns, system structures and mental models are connected to produce events, both wanted and unwanted. But you will have to stand back and watch how this complexity is boiled down to mechanistic thinking and methods that don’t describe how safety is created, or even how unsafe events really occur.

Idea 2: Read
Start by reading some short articles on Safety-II, and associated concepts, by authors with a pedigree in this area. You might want to expand your search terms to ‘systems thinking‘, ‘resilience engineering‘, ‘systems ergonomics and human factors‘.

Idea 3: Think
we somehow manage to avoid taking a step back to think more holistically about outcomes, work, systems, and the mental models that give rise to all of this. It was the first course that they had participated in where they actually had to think, and not just learn content or follow a process.

Idea 4: Listen and Talk
A good discussion will harvest new insights, including multiple perspectives and thick descriptions.

Idea 5: Write and Draw
Start to think about patterns of interactions inside and outside of your organisation – micro, meso, and macro. But keep it concrete. How do things influence each other at technical, individual, team, organisational, regulatory, governmental, media, and economic levels, to create patterns and associated wanted and unwanted outcomes?

Idea 6: Observe
Don’t go with a checklist. Just hang out. Notice how people resolve the dilemmas created by goal conflicts, what trade-offs and compromises are necessary, how people work around a degraded environment (staffing and competency gaps, equipment problems, procedural complexity, etc), and how – despite the context – things work reasonably well most of the time.

Idea 7: Design
Small designed interventions are a good way forward. You may wish, for instance to: a) make small changes to work-as-done that help balance multiple goals; b) review procedures to remove or reconcile those that are problematic (e.g., conflicting, defunct, over-specified); c) help managers and support staff to become familiar with how the work works; d) adjust buffers or margins for performance; e) review onerous analyses of events could be better directed at patterns (e.g., onerous safety analysis of multiple events outside of one’s control); f) create a means of getting regular outside perspectives on your work (perhaps an observer swap arrangement); g) create a means to simulate unusual circumstances and allow experimental performance (not a competency check). The interventions may aim at reducing unhelpful gaps between the varieties of human work (e.g., the ignorance and fantasy, taboo, PR and subterfuge, defunct archetypes).





有一次跟同業聊到,我跟她說:(上頭老闆真實的期望與期待)我的任務執掌不是讓公司的風險最小或者守法(=不出事),而是讓公司承擔最大的風險(這樣高階主管才有策略空間與產能運用彈性,然後不出大事或出事無大礙=沒有死人/沒被法辦/營運持續)….

她聽了眼睛睜大大、不可置信(應該是唾棄鄙人,只不過為維持禮貌,沒有當場掉頭離去) 

以上觀點解釋了許多老闆對於法規與各種規定的敵意,而官員把多數的事業單位視為黑心商人或者不守規矩的青少年(=防小人,Safety-I的觀點來搞法規,覺得法規越多越詳盡越好),乃至於檢調單位偵辦意外事故也始終是朝向業務過失的方向偵辦(憑空想像與詮釋事發的因果關係)

Safety-II的觀點適用在一些少數成熟的大企業與有心用心的高層乃至於善用行政裁量權的官員(=願意承擔責任與後果的君子)。

法規對於君子而言,可謂是不必要、不接地氣、梆手綁腳&欲加之罪何患無辭;而對於小人而言,不被認真執行(口頭宣導講講)的法規=不存在的法規(想想自營工作者與中小企業…)。

不過再回過頭想想,能夠被法規折騰與大家透過法規來相互傷害,或許算是一種幸福、社會文明與進步的象徵(看看某些地方或組織,領導說了算、黨說算、角頭說了算的那種無法無天)



每個人在某個時間點,都會懷疑自己存在的意義
你我彼此不過是在時空中碰巧相遇,助人助己讓世界變得更好


安心上路,繼續在人世間的折騰與修練吧。



沒有留言: