On 22 Apr 20, a heavy vehicle entered the emergency lane of Melbourne’s Eastern Freeway and killed four Victoria Police members performing their duties: Leading Senior Constable Lynette Taylor, Senior Constable Kevin King, Constable Glen Humphris and Constable Josh Prestney. All four are remembered on the Victoria Police Honour Roll.

In episode 9 of The Real Risk Podcast, Safety Jon examines the decisions made before that truck left Lyndhurst, including the warnings passed to supervisors, the depot meeting and the reliance on a signed fitness declaration. Drawing on the Victorian Court of Appeal’s decision in Singh v The Queen, the episode explores the effects of severe sleep deprivation and drug impairment, and why available rest time cannot be treated as verified sleep.

The discussion also examines the wider fatigue-management failures uncovered through Taskforce Paragon and what Chain of Responsibility means for the people influencing a transport task. The Supreme Court of Victoria’s sentencing summary for Simon Tuteru provides the legal context for the supervisor’s prosecution.

The episode connects those lessons with the Heavy Vehicle National Law reforms that commenced on 01 Aug 26. The expanded fitness-to-drive duty reinforces why compliance with work and rest hours does not, by itself, establish that a driver can operate safely. See the NHVR’s reform overview and fitness-to-drive guidance.

For operators, schedulers, drivers and safety practitioners, the practical focus is what happens when credible concerns arise: who stops the task, how fitness is assessed and whether the operation can accommodate a driver being stood down. Jon also examines the difference between counting completed forms and checking whether controls actually work.

Explore more incident analysis and practical safety resources at Safety Jon. Subscribe to The Real Risk Podcast through your preferred podcast app.

The hardware had been inspected, but a visual inspection could not establish whether the grips had been tightened to the required torque or whether the termination remained capable of carrying the forces imposed upon it. You can inspect whether the nuts are present, admire their general shininess and tick the corresponding box, but you cannot inspect torque with your eyes.

In this episode, Jon examines the difference between inspection and verification, the task-specific meaning of competence, role drift, plant alterations, safety-critical maintenance, independent assurance and officer due diligence. He also considers why emergency arrangements must be tested against the actual consequences of a failure, particularly where access, rescue and medical response are difficult.

The lessons extend well beyond adventure tourism. They apply wherever life depends on torque, friction, terminations or critical connections, including lifting equipment, load restraint, fall-protection systems, towing arrangements and other safety-critical plant.

At the time of publication, the Coroners Court of Queensland lists the inquest into Dean Sanderson’s death as adjourned, with the date for findings still to be confirmed. This episode discusses published regulatory information and issues examined through the coronial process, but does not present unfinished coronial findings as settled conclusions.

Further reading:

Safety Jon, Lessons From a Queensland Zipline Fatality

Workplace Health and Safety Queensland, Zip line (flying fox) terminations

Workplace Health and Safety Queensland, Zip line anchorage failure

Coroners Court of Queensland, Inquest proceedings list

For further workplace incident analysis, practical risk guidance and new episodes of The Real Risk Podcast, visit Safety Jon.

In this episode of The Real Risk Podcast, I look at what officer duties actually require, who may be considered an officer, and why WHS responsibilities cannot simply be pushed down the organisational chart.

We work through the practical elements of due diligence under the model WHS framework, including keeping current WHS knowledge, understanding operations and material risks, providing appropriate resources and processes, receiving and responding to safety information, maintaining compliance processes and, critically, verifying that those systems actually work.

I also look at the different position in Victoria, where officer liability operates through the Occupational Health and Safety Act 2004 rather than the standalone section 27 duty used under the model WHS laws.

The episode draws on regulator experience, real prosecutions and practical examples involving plant guarding, fatigue, defective equipment, resourcing decisions and officer accountability. We also examine what useful WHS information should reach officers, what an inspector or prosecutor may look for after a serious incident, and why a green dashboard is not evidence that critical controls are functioning.

The central point is simple. Officers can rely on competent WHS professionals, managers and specialists for advice, but reliance is not abdication. The safety manager can advise, investigate, audit and escalate. They cannot exercise an officer’s personal duty for them.

Due diligence needs to be visible in decisions, resources, questioning, verification and evidence before something goes wrong, not reconstructed afterwards because a regulator has started asking uncomfortable questions.

Safety Jon: The Real Risk Podcast

Real safety. No theatre.

In this episode of Safety Jon: The Real Risk Podcast, I draw on a deidentified inspection from my time as a WorkSafe Inspector involving a worker who was run over by a forklift in a loading and unloading area. The worker survived, but the CCTV footage left very little room for ambiguity about what can happen when pedestrians and mobile plant occupy the same operational space without effective separation.

During the inspection, a management representative argued against installing a physical barrier because, in his words, the forklifts would hit it. That was not an argument against the barrier. It was evidence of the exposure.

If the forklift will hit the barrier, then without the barrier it can hit the worker.

We look at why painted lines, procedures and instructions are weak controls when heavy mobile plant and pedestrians interact, and why foreseeable barrier strikes should be treated as information about the system rather than an inconvenience. A damaged barrier can tell you something about layout, visibility, congestion, speed, loading practices, traffic flow and the way work is actually being performed.

The episode also examines the difference between having a traffic management document and actually managing traffic. Physical separation, workplace design, pedestrian routes, loading areas, visibility and verification of controls all matter because humans remain stubbornly human and forklifts remain stubbornly heavy.

The question is not whether workers have been told to stay inside the painted lines. The question is whether the system has been designed so that a predictable mistake, distraction or operational variation does not put a person underneath several tonnes of mobile plant.

Real safety. No theatre.

In this episode of Safety Jon: The Real Risk Podcast, Jon examines the work of Professor James Reason and why his thinking remains central to understanding serious incidents, organisational accidents and the failures that sit behind the person closest to the consequence.

The Swiss cheese model is well known across safety, but the useful part was never the cheese. Reason’s work challenges organisations to look beyond the final human action and examine the latent conditions, failed defences, management decisions and organisational weaknesses that allowed an error to become an injury, fatality or major event.

The episode also looks at what happens when leadership takes the opposite approach. Pathological safety cultures blame workers, protect management decisions and treat adverse events as individual failures. That approach does more than produce poor investigations. Workers watch what happens to their colleagues, learn what the organisation rewards and punishes, then adjust what they report, challenge and disclose accordingly.

Jon also draws on his former regulator experience, including responding to a serious incident at a food manufacturing workplace where a worker suffered a finger amputation after reaching into a heat-sealing machine. The employer’s immediate explanation was that the worker should not have reached into the equipment. The regulatory response focused instead on the failed system, including inadequate guarding.

The worker was in hospital undergoing surgery. The machine still had to answer some questions.

In this episode

• Why “human error” describes an event but rarely explains it.
• James Reason’s distinction between active failures and latent organisational conditions.
• What the Swiss cheese model actually tells us about failed defences.
• Why retraining a worker is often a weak corrective action when the underlying system remains unchanged.
• How regulators examine plant, systems of work, supervision, guarding, training, design and organisational controls.
• Why worker blame can become a symptom of pathological safety leadership.
• How punitive responses affect reporting, consultation, trust and workforce behaviour.
• Why workers must be treated as people operating within systems, not convenient endpoints for an investigation.
• The difference between accountability and blame.
• Why a fair investigation process matters even where a worker made an error.
• How leaders influence safety culture through the way they respond when something goes wrong.
• Why the question after an incident should not simply be “Who made the mistake?”, but “What allowed that mistake to produce this consequence?”

The central point

A worker can make an error and still not be the cause of the incident.

People forget things. They misunderstand information, become distracted, make assumptions and sometimes make poor decisions. A functioning safety system anticipates that reality and provides effective defences between ordinary human fallibility and serious harm.

When one mistake can place a hand into hazardous machinery, put a person in front of mobile plant or expose a worker to an uncontrolled fatal risk, the organisation has a system problem worth investigating.

Human error is not the end of the investigation.

It is where the investigation gets interesting.

About Safety Jon: The Real Risk Podcast

Safety Jon: The Real Risk Podcast looks at serious incidents, prosecutions, investigations, organisational failures and the safety concepts that actually matter in operational workplaces.

No theatre, no corporate fog and no pretending another toolbox talk automatically fixes a failed system.

Real safety. No theatre.

Disclaimer

This podcast provides general information and commentary about workplace health and safety, risk management and incident investigation. It does not constitute legal advice and should not be relied upon as a substitute for advice specific to your organisation, jurisdiction or circumstances.

Legislation, regulatory guidance and legal obligations vary between Australian jurisdictions and may change over time. Where a workplace incident, regulatory matter or legal issue requires a decision, obtain appropriate professional advice and confirm the current requirements applying to the workplace.

Two newborn babies were affected. One died and the other suffered serious injuries.

This was not simply a case of two pipes being connected incorrectly.

The NSW Chief Health Officer’s investigation identified failures in installation, testing and commissioning, along with broader problems involving project planning, risk management and governance. Procedures intended to detect exactly this type of error were either not followed or were ineffective.

In Episode 4 of Safety Jon: The Real Risk Podcast, Jon Hillis examines how a physical installation error was able to survive multiple opportunities for detection before reaching the point of patient care.

We look at:

• how the medical gas cross-connection occurred

• why testing and commissioning are safety-critical controls, not administrative formalities

• the danger of relying on labels, documentation and assumptions without physical verification

• contractor and client responsibilities when safety-critical systems are installed or modified

• how failures across several layers of control can combine into a catastrophic outcome

• why commissioning must establish that a system actually works as intended before it is placed into service

• what this incident means well beyond healthcare, including plant, electrical systems, pressure systems, engineering projects and other safety-critical infrastructure

The central lesson is simple.

A system is not safe because the paperwork says it is safe.

Where failure can kill or seriously injure someone, verification needs to demonstrate that the control exists, functions correctly and produces the intended result.

That is the difference between completing a commissioning process and actually commissioning a safe system.

Source material

This episode draws on publicly available material concerning the Bankstown-Lidcombe Hospital medical gases incident, including the NSW Chief Health Officer’s Final Report and associated NSW Health material.

Content note

This episode discusses the death and serious injury of newborn babies and the circumstances surrounding a significant healthcare safety failure.

Disclaimer

Safety Jon: The Real Risk Podcast is provided for general information and education. It does not constitute legal, medical or professional advice. Legislative and regulatory requirements vary between Australian jurisdictions and should be checked against current applicable requirements.

Safety Jon: The Real Risk Podcast

Practical safety. Real incidents. Lessons worth learning.

On 25 October 2016, four people died on Dreamworld’s Thunder River Rapids Ride. The subsequent coronial inquest identified significant deficiencies involving the ride’s design and risk assessment, engineering oversight, maintenance records, operating procedures, training, emergency arrangements and the treatment of earlier incidents.

This episode examines how a foreseeable technical event was allowed to become catastrophic. It considers the difference between having safety documentation and having a functioning safety system, particularly where plant is modified over time, faults recur, responsibilities become fragmented and audits fail to test the controls that matter.

The lessons extend well beyond amusement rides. They concern management of change, competent engineering review, critical control verification, maintenance governance, operator competence, emergency response, incident learning and officer oversight.

Safety Jon examines serious incidents, prosecutions and operational failures to identify practical lessons for WHS practitioners, managers and duty holders.

General information only. This episode does not provide legal advice.

A safe system of work is not just a procedure, SWMS, checklist, induction, toolbox talk or training record. Those documents may support the system, but they do not prove the work is actually safe. The real question is whether the work has been properly planned, controlled, supervised, consulted on, verified and reviewed under real operating conditions.

This episode breaks down what a safe system of work means in practice, including the gap between work as imagined and work as actually done. It looks at why organisations get into trouble when they rely on paperwork, memory, worker experience or “old mate knows what he’s doing” instead of designing controls that hold up when people are tired, busy, under pressure, new to the task, dealing with change or working around equipment faults.

The episode also considers safe systems across physical and psychological risk, including mobile plant and pedestrian separation, machine guarding and jam clearing, fatigue, psychosocial hazards, labour hire, consultation, supervision, leadership and field verification.

In this episode:

• What a safe system of work actually means in practical terms.
• Why procedures, SWMS, JSEAs, permits and training records are not the same as control.
• Why work as done matters more than work as imagined.
• How documents should support a safe system, not replace it.
• Why safe systems need to account for human error, fatigue, pressure, change and foreseeable workarounds.
• How forklift and pedestrian interaction, machine guarding, fatigue, psychosocial risk and labour hire expose weak systems.
• Why consultation with workers and HSRs matters.
• Why supervisors are a control point, not just job allocators.
• Why leadership must resource, support and verify the system.
• How to test whether a task is genuinely controlled or just documented.

Safety Jon: The Real Risk Podcast is general commentary only. It is not legal advice, consulting advice or a substitute for organisation-specific risk assessment, competent advice or professional judgement. Duties and regulatory requirements vary between Australian jurisdictions, and organisations should seek appropriate advice for their own operations, workforce, hazards and controls.

When O’Neill became Chairman and CEO of Alcoa in 1987, investors expected the usual executive language about profit, growth, capital and shareholder value. Instead, he opened with worker safety and his intention to pursue zero injuries.

This episode looks at why that mattered. It was not safety theatre, and it was not paperwork wearing a hard hat. O’Neill treated safety as a diagnostic tool for the way the business actually operated, including how leaders received bad news, responded to risk, resourced controls, listened to workers and verified that the system worked in practice.

The episode also connects the Alcoa case study to Australian WHS and OHS leadership duties, including officer due diligence, critical risk, control verification and the difference between genuine safety leadership and administrative confidence.

In this episode:

• Paul O’Neill, Alcoa and the business case for safety leadership.
• Why safety is not separate from business performance.
• How the Hudson Safety Culture Maturity Model explains pathological, reactive, calculative, proactive and generative cultures.
• Why poor leadership flows through an organisation and shapes what workers, supervisors and managers tolerate.
• What Ductus Exemplo, lead by example, means in a safety context.
• Why dashboards, procedures and policies are not proof of control.
• Why officers and senior leaders need to understand serious risks, critical controls, reporting pathways, resourcing and verification.

Safety Jon: The Real Risk Podcast is general commentary only. It is not legal advice, financial advice, investment advice, consulting advice or a finding about any current Alcoa operation, officer, worker, site, system or incident. The Alcoa and Paul O’Neill material is used as a leadership case study, with confirmed historical facts separated from practical inference.