Book summary “Managing the unexpected”: summary

Introduction

You face a constant threat from unexpected events that can instantly destroy your organization. Traditional management focuses on stability and efficiency, yet these very systems often blind you to small errors before they cascade into catastrophic failures. Karl E. Weick and Kathleen M. Sutcliffe show you how to avoid this fate by examining High Reliability Organizations like nuclear aircraft carriers and fire crews.

High-reliability organizations survive catastrophic environments by institutionalizing continuous mindfulness through anticipation and containment principles.

The book explains how you can spot hidden vulnerabilities and maintain performance under extreme pressure. You will learn to question assumptions, respect frontline expertise, and recover quickly when things go wrong.

Ask yourself these questions as you read:

• How do your daily routines create dangerous blind spots?
• What keeps you from noticing small warning signs?
• How can you build resilience before a crisis strikes?

1. Introduction and Core Concepts

Unexpected events act as an abrupt audit of organizational resilience, where unpreparedness turns minor unheeded flaws into complex, destructive crises.

Mild audits occur constantly, but when small errors go unnoticed and simple diagnoses are accepted, these mild audits grow into brutal disasters. Organizations often make weak responses to weak signals, which contrasts with the strong responses needed to halt early anomalies.

At Intel, incorrect calculations on Pentium chips were ignored initially until they turned into substantial problems. Menu Foods faced tainted pet food, and Coca-Cola faced protests over a new soft drink formula after small initial failures were neglected.

The Anatomy of Brutal Audits

Major operational failures rarely emerge abruptly. Instead, they are preceded by an accumulation of small clues indicating that unexpected events are occurring.

Most reliability lapses involve a mismatch where someone expects something to happen and it does not, or counts on something not to happen and it does. These issues do not manifest as full-blown crises right away. Subtle warning signs build up over time, and failing to notice or address them leads to disaster.

Complacency and hubris are among the greatest threats to maintaining high reliability in any operational setting. High Reliability Organizations operate in unforgiving environments where errors have catastrophic consequences. They must prioritize safety and reliable performance above all else.

These organizations manage complex technologies and processes where the scale of potential failures precludes learning through trial and experimentation. They do not succeed because they have achieved perfection or possess infallible methods. Their effectiveness stems from a continuous struggle to understand what they know and what they do not know.

Five Principles of Reliable Organizations

High Reliability Organizations maintain continuous mindfulness by applying five core principles that span anticipation and containment of unexpected events.

• track small failures;
• resist oversimplification;
• remain sensitive to operations;
• maintain capabilities for resilience;
• take advantage of shifting locations of expertise.

The first three principles focus primarily on the capacity to anticipate problems. The final two principles focus on the capacity to contain problems once they occur.

True organizational reliability does not mean a complete lack of variation. Achieving stability is not about eliminating all changes or surprises. Instead, maintaining high reliability depends on actively cultivating mindful variety so that you can sense and adapt to changing conditions effectively.

Organizations seeking to navigate dynamic and uncertain business environments should benchmark against experts in resilient high performance. You can learn these lessons without suffering failures firsthand by studying how experts struggle to get things right.

2. Expectations and Mindfulness

Expectations create order but generate blind spots by driving confirmation bias and the normalization of deviance.

Expectations act as hypotheses. When you face pressure, you increase your search for information that matches your expectations. You dismiss inconsistencies, which allows small errors to compound into brutal audits.

Leaving a stray bolt on a carrier deck is treated as a minor hypothesis that nothing bad will happen. When ingested into a jet engine, it causes an explosion.

Expectations as Blind Spots

Unexpected events manifest in three distinct forms:

• expected events that fail to happen;
• unexpected events that do happen;
• completely unthought-of events that arrive as a total surprise.

Organizations often plan for known risks. Unexpected variations occur when routines yield counterintuitive results, when anomalies cluster beyond random chance, or when entirely novel phenomena breach traditional boundaries.

On aircraft carriers, expected fatigue did not degrade performance because crews accommodated each other. The introduction of women pilots into an all-male stronghold represented an unthought-of event.

Organizations gradually normalize anomalies and accept increasing levels of risk until a catastrophic failure occurs. When unexpected operational interruptions happen, you are initially candid. You quickly rewrite your stories to justify actions and protect reputations, turning unacceptable anomalies into routine baseline operations.

During the 1986 Challenger disaster, NASA engineers incrementally redefined acceptable risk from heat on primary O-rings to gas blowby reaching secondary rings.

The Nature of Unexpected Events

The brief interval between experiencing surprise and successfully normalizing the event is the rare window where learning and deeper understanding can occur. Physical feelings of puzzlement or unease serve as reliable indicators that your mental models are flawed. These opportunities vanish quickly as standard storytelling takes over.

Aviators rely on leemers, a visceral feeling that something is not quite right, to catch errors before they escalate.

The Idea of Mindfulness

Mindfulness is formally defined as a rich awareness of discriminatory detail that keeps the mind anchored in the present moment rather than drifting into distractions. Unlike generic situation awareness, mindfulness requires the continuous scrutiny, refinement, and invention of expectations to match unprecedented contextual shifts.

Nuclear power watchstanders who allow small distractions like phone calls or idle chatter risk missing critical operational failures.

You can cultivate mindfulness through specific daily actions:

• Assess personal concentration and remove daily distractions to focus calmly.
• Return quickly to the immediate task when the mind wanders.

Aircraft carrier flight decks function as highly compressed, hazardous systems requiring continuous coordination, immediate improvisation, and institutionalized mindfulness practices. These 4.5 acres of flight deck space operate on an 1100 feet ship length weighing 95000 tons, where 20-year-olds represent half the crew.

Captain Dick Martin drove the carrier Carl Vinson in reverse at 10 knots during an 1983 Atlantic storm to reduce deck winds and allow safe aircraft landings.

Reliability-seeking organizations institutionalize five specific principles to counteract confirmation bias and maintain operational awareness:

• preoccupation with failure;
• reluctance to simplify;
• sensitivity to operations;
• commitment to resilience;
• deference to expertise.

These principles combine anticipation-focused behaviors with containment-focused behaviors. Carrier catapult officers refuse to reduce engine power upon request until they physically walk in front of the aircraft to visually confirm the safety of a 2 million horsepower catapult operating in 48 to 60 second intervals for aircraft recovery and launch.

3. Principles of Anticipation

Anticipating the unexpected requires mindful attention to three specific areas: failure, simplification, and operations.

To anticipate is to foresee or imagine an unchecked outcome based on small disparities. High reliability organizations do not merely expect the unexpected. They operationalize three core principles to spot weak signals early and stop undesirable events from escalating.

Preoccupation with Failure

High reliability organizations are preoccupied with failure because catching small discrepancies early gives them more options to prevent tragedies. Embracing failure means paying close attention to weak signals that indicate larger system problems and clearly specifying mistakes that people are forbidden to make. The longer problematic conditions persist, the less predictable and controllable interactions become.

At Davis-Besse in 2002, a 6½-inch-thick metal liner corroded down to the width of a pencil eraser while containing 2,200 pounds per square inch of pressure, and air filters were changed every two days for two years instead of the monthly norm. Success narrows perceptions and breeds overconfidence, leading organizations to ignore warning signs and drift into complacency. When organizations succeed, they attribute it to their own competence rather than luck, trusting procedures to ignore the least significant events. This overconfidence causes them to misinterpret close calls as evidence of safety rather than warnings of danger.

During the Challenger disaster on January 28, 1986, which killed seven astronauts, NASA repeatedly interpreted O-ring burn marks as acceptable risk because previous shuttles completed their missions successfully.

Managers can detect where unforeseen human-system failures are most likely to occur by asking three specific operational questions. Human factors psychologist James Reason provides a framework to assess vulnerabilities at the human-system interface by examining direct contact, critical risks, and day-to-day frequency.

• Ask the hands-on question: What activities involve the most direct human contact with the system and offer the greatest opportunity for immediate adverse effects?
• Ask the criticality question: What activities, if performed inadequately, pose the greatest risks to system well-being?
• Ask the frequency question: How often are these activities performed in day-to-day operations?

Organizations must create a safe psychological climate where employees are rewarded and commended for reporting errors and near misses. Complex technologies can fail in unimaginable ways. When organizations encourage open discussion and reward error reporting, they increase their knowledge base and prevent minor mistakes from turning into major accidents.

Wernher von Braun sent a bottle of champagne to an engineer who reported causing a short-circuit during prelaunch testing, which revealed the exact cause of a missile accident and saved expensive redesigns.

To test your assumptions, you can use a specific practice:

• Write down specific expectations before an event occurs and seal them in an envelope.
• Reread the list after the event to assess where expectations were right and wrong.

Reluctance to Simplify

Organizations must actively resist generic categories and labels because generalization buries the early warning signs of unexpected problems. While formal organizing requires abstraction and simplification for coordination, generic labels cause observers to miss heterogeneous details and disconfirming evidence. High reliability organizations simplify slowly, reluctantly, and mindfully.

110 people were killed when ValuJet Flight 592 crashed in Florida in May 1996 because oxygen generators were labeled as empty and treated casually, masking the fact that they still held volatile components filled with explosive vapor.

You can carry categories more lightly by applying specific mental habits:

• Believe and doubt categories simultaneously.
• Differentiate categories into subcategories.
• Treat categories as a blind spot as well as an illumination source.
• Question underlying assumptions and examine imperfectly fitting examples.

Sensitivity to Operations

Sensitivity to operations requires monitoring actual frontline work and responding promptly to deviations regardless of formal plans and designs.

Plans reflect context-free intentions that can only be implemented if personnel apply context-sensitive experiential rationality. The primary threat to operations is an engineering culture that undervalues experiential knowledge in formal models.

Medical personnel stopped a high number of needle stick injuries among cleaning personnel simply by moving a trash can that was incorrectly located right under a syringe bucket.

4. Principles of Containment

Containment focuses on preventing unwanted outcomes after an unexpected event has occurred, whereas anticipation tries to prevent the event itself.

Because unexpected events begin to unfold before they are noticed and precautions often fail, you must build capabilities to bounce back from problems. Strong expectations embedded in plans create mindlessness and blindness to unexpected developments. Henry Mintzberg calls this the fallacy of predetermination.

Larry Hirschhorn described maintenance workers in a nuclear plant who lifted wires to complete a task, but technicians failed to test the motor because testing procedures did not account for this unwritten action.

Commitment to Resilience

Resilience is the systemic capability to maintain function during adversity and degrade gracefully when failures occur.

Instead of seeking impossible perfection, resilient organizations assume unexpected trouble is ubiquitous. You must focus on cures, mitigation, swift negative feedback, and fast real-time learning.

FedEx operates the sweep network where 20 to 25 domestic flights fly to Memphis 60 percent loaded every evening, leaving 40 percent empty space to divert aircraft and recover at-risk cargo.

When running your own diversion procedures, you must follow strict operational steps:

• Calculate the time needed to fly the divert route and allow 30 minutes for ground time.
• Ensure the aircraft arrives in Memphis by 1:30 A.M.
• If the timeline cannot be met, find another sweep aircraft or do not take down the system by bending the hard deadline.

Deference to Expertise

High reliability organizations alter traditional hierarchy during crises by deferring to expertise rather than rank.

Because senior leaders often receive filtered good news and lack frontline visibility, decision-making authority migrates to the person possessing specific knowledge of the unfolding event.

During NASA mission STS-107, mission managers dismissed requests for clear images of a debris strike on the Columbia space shuttle because they relied on a hierarchy that favored chain-of-command over engineering expertise.

The disaster began 82 seconds into the flight when blurred photos captured a puff of smoke on the Columbia space shuttle.

The Value of Conscious Audits

Winston Churchill formulated a powerful post-event audit protocol after discovering the vulnerability of Singapore. Examining why warning signs were missed prevents you from assuming that a lack of negative reports means safety.

The ferry boat Herald of Free Enterprise capsized and sank within 5 minutes on March 6, 1987, resulting in 193 lives lost because a standing order assumed the vessel was ready for sea if no deficiency report was made, while the responsible seaman had fallen asleep.

You can uncover blind spots by applying a Churchill audit protocol:

• Ask why I didn't know.
• Ask why my advisors didn't know.
• Ask why I wasn't told.
• Ask why I didn't ask.

5. Organizational Culture

Organizational culture provides a powerful similarity of approach and priorities that enables collective responses. However, this same integration can leave vital factors outside the bounds of organizational perception and encourage collective blindness.

A mindful safety culture relies on requisite variety, shared core values, and informed reporting subcultures.

Organizational Culture and Requisite Variety

The principle of requisite variety states that if a system has less variety than its environmental inputs, it can be destroyed. High reliability organizations achieve this by encouraging diverse subcultures rather than a monolithic integration view that denies ambiguity.

In wildland firefighting, crews match complex, unpredictable fire behavior by fighting fire with complex backfires rather than relying solely on simple tools like water streams.

How Culture Controls and Changes

Top management can grant wide operational autonomy to employees if the organization is disciplined by a small core of shared values. A handful of key values converted into behavioral norms provides a stable framework. This discipline gives you the confidence to experiment and make decisions locally in a preferred manner.

Captain Herb Brown of the aircraft carrier USS Kennedy successfully built a high-reliability culture by consistently communicating core values around safety, keeping people informed, and caring for crew members through the public address system and face-to-face interaction.

Organizations act their way into new beliefs and values because changing behavior first makes internalizing new attitudes much easier. When people perform actions publicly, irrevocably, and voluntarily, they feel pressure to rationalize their behavior by adopting plausible new beliefs.

Culture change can be effectively initiated using physical symbols or artifacts as leverage for deeper behavioral and mental shifts. Changing a symbol works backward in culture change: first the artifact changes, then new values become attached to it, and finally underlying assumptions align.

Gordon Bethune, CEO of Continental Airlines, used his wristwatch during a road show meeting to demonstrate teamwork after an employee questioned why reservation agents should get on-time performance bonuses when they never touched an airplane. He promised a 65 dollar monthly bonus to 40000 employees if Continental placed among top five airlines in on-time performance starting in January 1995.

The Bristol Royal Infirmary Case

An informed, mindful safety culture requires four distinct subcultures working together:

• reporting culture;
• just culture;
• flexible culture;
• learning culture.

Maintaining intelligent wariness requires collecting and disseminating information about incidents and near misses. The culture must protect those who report, draw a clear line between acceptable and unacceptable behavior, adapt authority structures to expertise, and convert lessons into action.

Between 1988 and 1994, the Bristol Royal Infirmary mortality rate for open-heart surgery in children under one year old was roughly double that of other English centers during 5 of the 7 years. A board of inquiry examined 1800 medical records, studied 900000 pages of documents, heard 577 witnesses, and held 96 days of oral evidence hearings.

Surgeons Drs. James Wisheart and Janardan Dhasmana performed an average caseload of roughly 46 operations, which was well below the recommended minimum annual caseload of 80 to 100 open-heart operations necessary for two surgeons to maintain sufficient expertise.

6. Implementing Mindfulness

You can build organizational reliability through incremental small wins, operational briefings, and structured reviews.

A small win is a concrete, completed outcome of moderate importance that moves away from bad conditions without directly or aggressively confronting the system. Managers can introduce these changes immediately by paying attention to meeting agendas, questions asked, and follow-up habits. During the 2000 fire season, combined agencies lit 4,697 prescribed fires clearing 1,192,220 acres, which increased by 2005 to 7,756 fires clearing 2,310,346 acres, prompting modest changes toward mindful management.

You can apply specific practices to build mindfulness in daily operations:

• Be attentive to questions that are frequently or never asked
• Notice what is first and last on a meeting agenda
• Observe what is and isn't important enough to call a meeting
• Track what gets followed up and what gets forgotten

Small Wins Strategy

Karl Brauneis restored the original intent of the Ten Standard Fire Orders by structuring a rewrite so that individuals step through them from order 1 to 10 to engage a fire and from 10 to 1 to disengage, turning a simplified list into an orderly process. Karl Brauneis resisted the simplification of the Ten Standard Fire Orders, while the National Wildfire Coordinating Group grouped the orders into three clusters: fire behavior, fireline safety, and organizational control.

Wildland Firefighting Practice

The Hawkins wildfire in the Dixie National Forest burned over 35,000 acres and threatened Enterprise, Utah, after lightning started fires in late July 2004, leading managers to declare it a wildfire for suppression after 12,500 acres had burned. Gary Klein developed the STICC briefing protocol to improve operational alignment and active feedback between leaders and teams.

Structuring communication requires five distinct elements to establish shared intent and vulnerability awareness:

• Situation: state what you think you face
• Task: state what you think should be done
• Intent: explain why that is what should be done
• Concern: identify what should be kept on eye on because a change means a whole new situation
• Calibrate: ask subordinates to speak up if they do not understand, cannot do it, or see something you do not

Basics of Mindfulness Practices

Building mindfulness requires overcoming natural inclinations by focusing on failures, holding expectations lightly, and letting culture do the controlling.

Global power company AES insists on reinventing the wheel every chance it gets to ensure employees see things they previously missed. Ron Westrum observed pediatricians in the 1940s and 1950s who missed child abuse due to the fallacy of centrality.

Cultivating mindful moments demands specific daily habits:

• Increase the number of mindful moments in your unit by looking at failures and assuming nothing
• Offer psychological safety to people experiencing learning anxiety
• Reinvent the wheel to see details and vulnerabilities previously missed
• Carry expectations lightly to prevent blind spots
• Balance centralization with decentralization around core values
• Let culture do the controlling through consensus and intensity focused on key values

10 Key Ideas

1. Unpreparedness turns minor unheeded flaws into complex, destructive crises during unexpected events that act as abrupt audits of organizational resilience.
2. Expectations create order but generate blind spots by driving confirmation bias and the normalization of deviance.
3. High reliability organizations are preoccupied with failure because catching small discrepancies early gives them more options to prevent tragedies.
4. Organizations must actively resist generic categories and labels because generalization buries early warning signs of unexpected problems.
5. Sensitivity to operations requires monitoring actual frontline work and responding promptly to deviations regardless of formal plans and designs.
6. Resilience is the systemic capability to maintain function during adversity and degrade gracefully when failures occur.
7. High reliability organizations alter traditional hierarchy during crises by deferring to expertise rather than rank.
8. A mindful safety culture relies on requisite variety, shared core values, and informed reporting subcultures.
9. You can build organizational reliability through incremental small wins, operational briefings, and structured reviews.
10. Building mindfulness requires overcoming natural inclinations by focusing on failures, holding expectations lightly, and letting culture do the controlling.