Organizational & Operational Failure Modes

← Back to Domain-Specific Families

Abstractions that diagnose how complex human-technical systems break down, covering command and coordination failures (unity-of-command breakdown, handoff loss, plan-execute gap), safety and human-factors pathologies (automation bias, latent conditions, target fixation), and crisis-response mismatches.

38 abstractions in this family — domain-specific abstractions that sit near one another in structural-signature space (k-means over structural-signature embeddings). Each is shown with its short description.

• Active Failure — The frontline operator's act at the sharp end that completes a hazard path by aligning with holes latent conditions had pre-positioned in a system's layered defenses — the proximate, visible half of Reason's Swiss cheese model.
• Attrition Trap — Diagnose a grinding campaign as failing-without-being-lost when its operational clock runs but its strategic clock has stopped — because the conversion assumption linking losses to strategic transition was falsified — and lock-in prevents exit.
• Automation Bias — The human-factors regularity in which operators over-weight an automated system's outputs and under-weight contradicting evidence, so the human-automation team can perform worse on rare anomalies than the unaided operator would — through commission errors (acting on a false recommendation) or omission errors (staying passive when the system is silent).
• Bus Factor — The minimum number of team members whose sudden simultaneous loss would halt a project — a per-capability count of how many people could take a subsystem, credential, or relationship over tomorrow, exposing where tacit human knowledge is dangerously concentrated.
• Byzantine Generals Problem — Formalize distributed consensus under adversarial faults — collapse the unbounded space of misbehaviors into a fault budget f and a population n, then read whether all loyal participants can agree straight off the proven floor of 3f+1 (or 2f+1 with signatures).
• Commander's-Intent Ambiguity — Locate incoherent decentralized execution in the purpose artefact one level up: when delegated subordinates must re-derive action under changed conditions but the intent statement is too imprecise to disambiguate their choice, locally rational actions aggregate into globally incoherent outcomes.
• Controller–Follower Relationship — A technical coordination relationship in which a designated controller initiates commands, timing, or reference state for one or more follower components whose permitted behavior is subordinate to that channel, historically labeled master–slave in many engineering specifications.
• Convergence Failure — The disaster-management pathology in which uncoordinated pro-social inflows — volunteers, donations, inquiries — arrive faster than incident command can absorb, consuming the same coordination bandwidth the primary hazard needs and triggering a second disaster.
• Crew resource management — Crew resource management trains communication, leadership, situational awareness, and decision-making to control human-error risk in high-consequence teams.
• Culmination Surprise — The operational failure of advancing past the culminating point — where sustaining capacity falls below what forward momentum requires — without recognising it, so the surprise lives entirely in the recognition gap between real culmination and its discovery.
• Customer-Discovery Theater — Diagnose fake product discovery by the single structural test of whether the inquiry is permitted to change the plan — the tell being a long track record of discovery that has never killed or redirected a roadmap.
• Distraction — The involuntary capture of an agent's scarce attention by a salient secondary stimulus that wins a bottleneck competition against the primary task by its own salience rather than the agent's intent, imposing a performance cost plus recovery time.
• Door security — The coordinated control and reinforcement of a complete doorway—leaf, frame, hinges, lock, strike, glazing, credentials, and approach—to resist forced, covert, or credential-based unauthorized entry.
• Fixed-Priority Pre-emptive Scheduling — A processor-scheduling policy that runs the highest-priority ready task under stable priority ranks and pre-empts lower-priority work when a higher-priority task becomes ready.
• Goal structuring notation — Goal structuring notation is a graphical language for assurance arguments that connects goals, strategies, contexts, assumptions, justifications, and evidence into an explicit claim-support structure.
• Gold Plating — Diagnose a delivery overrun as producer-side unilateral scope expansion — quality or features added beyond the authorized envelope without the principal's sanction — whose real cost lives not in the polish but in the unbudgeted second-order burden it drags into downstream processes.
• Handoff Loss — Locate post-transition failures at the transfer relation itself: work crossing a boundary between actors arrives degraded because a bounded artifact cannot carry the sender's tacit state, so downstream decisions run on an impoverished reconstruction.
• Incident Objectives — The short ordered list of specific, measurable, owned, time-bounded aims an Incident Commander sets each operational period, re-aiming the response periodically under uncertainty and driving the planning cycle's assignments, tactics, and period-end verification.
• Latent Condition — Name the dormant, pre-staged weakness in a system's defence layers — laid down by upstream decisions far from the sharp end — that produces no harm until an operational circumstance aligns it with an active failure to complete a path to an accident.
• Maneuver Warfare — Win by targeting the enemy's cohesion and decision-making rather than their mass — out-cycling and dislocating their command-and-control through five coupled commitments (schwerpunkt, OODA dominance, gaps-and-surfaces, mission command, maneuver) so their force cannot be brought to bear.
• Meeting Inflation — The organizational pathology in which coordination meetings multiply until they consume more capacity than the work they coordinate — driven by coordination cost scaling super-linearly with the number of interdependent people while each scheduler prices a meeting linearly.
• Multi-Instrument Coordinated Campaign — A single directing actor deploys a portfolio of qualitatively distinct instruments against a resistant target, timed and calibrated to cross the seams of its siloed defences, so integrated pressure exceeds what any instrument or uncoordinated set could achieve.
• Mutual-aid mismatch — The failure mode in which external support to an overwhelmed jurisdiction matches the gap in category but does not couple at the integration interface — wrong fittings, wrong radio plan, missing credentials, or post-peak arrival — so nominal aid yields no incremental capability.
• Operational Pause — Deliberately halt active operations while still able to continue — trading present momentum for restored sustainment and a replan — timed to fall before the culminating point, past which recovery becomes impossible.
• Operational-Pause Mismanagement — Diagnose when a pause taken to restore capacity instead hands initiative to a still-moving adversary, by budgeting it against the adversary's expected gain — a sign test on restart cost, exploitation rate, and ceded-window value — rather than against one's own expected recovery.
• Operator-Vigilance Dependency — Name the safety configuration in which a human operator's unaided sustained attention is the final live barrier against a severe hazard, under exactly the monotony and rarity that the vigilance literature says will degrade that attention — worsened, not helped, by more upstream automation.
• Organizational Influence Failure — The accident-causation configuration in which upper-level resource, culture, and process decisions systematically stage the downstream conditions under which frontline operators produce unsafe acts — the apex of the HFACS four-level hierarchy, reclassifying the visible failure as the expression of an upstream choice rather than its cause.
• Plan-Execute Gap — The pathology in which a coarse-grained planning artefact cannot be enacted because the execution layer faces binding fine-grained constraints the planning model never represented — so the fix is constraint propagation and feedback, never a better forecast.
• Precondition for Unsafe Act — Name the immediate situational, personal, and team conditions — fatigue, distraction, a steep authority gradient — that raise the probability of frontline operator error, a distinct HFACS layer between upstream supervision and the unsafe act itself.
• Pursuit Curve — Trace the path of a pursuer whose instantaneous forward tangent points toward a moving target's current position.
• Resource-Typing Mismatch — The incident-command failure where a mutual-aid requisition label ('ambulance,' 'swift-water team,' 'generator') is too coarse to pin the capability actually needed, so a faithfully-used label delivers the wrong point in its hidden capability range and misallocates resources at scale.
• Riskiest Assumption Test — Rank a plan's assumptions by consequence-if-false times uncertainty times upstream-position, then spend the next effort on the cheapest credible test of the top one — the question whose answer would most reduce total wasted work.
• Safety-Stock Illusion — Recognize that a buffer reported as adequate protection can be useless when disruption arrives, because effective protection is the weakest of five margins — size, location, composition, accessibility, and fit to the realised disruption — not the reported size alone.
• Shaping Operation — A military action whose purpose is to alter the conditions a later decisive operation will meet — degrading, suppressing, or deceiving the enemy field — so its value is realised through the field-state it produces, not through any objective it seizes itself.
• Situational-Awareness Collapse — Locate a control failure under tempo in the picture-keeping pipeline rather than in missing data — a rate problem where perception, comprehension, or projection can no longer cycle fast enough to keep the decision-maker's model current.
• Target Fixation — The acute failure in which pursuit of a salient local objective consumes a fixed attentional capacity so completely that the strategic envelope goes unmonitored — worsening with operator skill, and fixable only by externalising the monitor, never by exhorting the engager.
• Unity-of-Command Breakdown — The command-and-control failure in which one subordinate node in the authority graph carries two or more binding in-edges for the same task at the same time, so that when the supervisors' orders diverge the actor cannot comply with both.
• Volunteer-Management Overload — The crisis failure mode in which would-be helpers arrive faster than a response system's finite credential-brief-assign-supervise intake channel can absorb them, so beyond a threshold each marginal arrival consumes net capacity rather than adding it.