The Problem with the "Bad Apple" Theory
When something goes wrong — a production outage, a security breach, a data loss event — the instinctive human response is to find the person who caused it and hold them accountable. This is called the "bad apple" theory of accidents: the system is basically safe, and failures happen because a few erratic, incompetent, or careless individuals ("bad apples") introduce errors into it. Remove the bad apple, and the system is safe again.
This theory is intuitive, emotionally satisfying, and almost always wrong.
Sidney Dekker's "New View" of Human Error
Sidney Dekker, an aviation safety researcher and pilot, spent decades studying accidents in high-stakes industries. His central finding, articulated in The Field Guide to Understanding Human Error, is that human error is a symptom, not a cause. When an engineer makes a mistake, the productive question is not "why were they careless?" but "why did it make sense for them to do that, given what they knew and the tools they had at the time?"
This reframe is called the "New View" of human error, and it leads to fundamentally different responses to failure:
| Dimension | Old View (Bad Apple) | New View (Just Culture) |
|---|---|---|
| Cause of failure | Individual carelessness or incompetence | System conditions that made the error likely |
| Response | Punish or remove the individual | Investigate the system; fix the conditions |
| Question asked | "Who did this?" | "Why did this make sense to them at the time?" |
| Outcome | Individual is blamed; system unchanged | System improves; same error less likely to recur |
| Side effect | People hide mistakes | People surface mistakes early |
What "Just" Actually Means
Just Culture is not "blame-free culture." That is a common and important misunderstanding. A blame-free culture would mean no one is ever held accountable for anything, which is neither fair nor safe. Just Culture draws a distinction between three types of behavior:
- Human error (slips, mistakes, misjudgments): The system should be fixed. The individual should not be punished.
- At-risk behavior (knowingly taking shortcuts that increase risk): Coaching and system redesign. The individual needs support and clearer guardrails.
- Reckless behavior (conscious disregard for substantial and unjustifiable risk): Accountability is appropriate. This is the rare case where individual action is genuinely the problem.
The critical insight is that category 3 — genuine recklessness — is far rarer than most organizations assume. The vast majority of failures that get treated as recklessness are actually human errors or at-risk behaviors caused by system conditions: confusing interfaces, inadequate tooling, time pressure, poor documentation, or insufficient training.
Key Point: The practical test for whether your organization has a Just Culture is simple: when something goes wrong, does the investigation start with the system or with the individual? If your post-mortem template's first section is "Root Cause: [Person's Name]," you do not have a Just Culture, regardless of what your values page says.