Swiss Cheese Model: Why One Missed 6 a.m. Has Four Causes
James Reason's Swiss cheese model (BMJ, 2000) says accidents need holes in several defences to line up. A 4-slice example applies it to a failed 6 a.m. plan.
In this article9 sections
A phone sits on a dresser, four steps from the bed, charger cable pulled taut. Out of reach means you have to stand. It works for weeks. Then one Thursday you cross the room, silence it, and are back under the duvet. The usual verdict is weak discipline. James Reason’s model of accidents asks what else had to be true that morning.
What is the Swiss cheese model?
Reason described it in “Human error: models and management” (BMJ, 2000;320:768-770). Defences, he wrote, are “more like slices of Swiss cheese, having many holes”, and harm usually occurs only when “the holes in many layers momentarily line up”. That paper cites his book Human Error (Cambridge University Press, 1990) for failure types.
What are active failures and latent conditions?
Holes arise for two reasons, the paper says. Active failures are “unsafe acts committed by people in direct contact with the patient or system”. Latent conditions are the “resident pathogens” left by designers, procedure writers and managers.
What are the four slices of a failed morning?
Take the phone across the room as one defence. The percentages below are invented to show the logic. They are illustrative, not data.
| Slice | What the hole looks like | Invented chance it is open |
|---|---|---|
| Alarm tone | Familiar enough to dismiss half-asleep | 30% |
| Bedtime | Past 1 a.m. the night before | 25% |
| Light | Dark room, curtains shut | 50% |
| Consequence | Nothing happens if you go back | 100% |
If the holes were independent, all four would line up on 0.30 x 0.25 x 0.50 x 1.00, about 3.8% of mornings, roughly one a month. The consequence slice has no cheese at all, so fix it first. A late bedtime often has its own causes.
What would close the fourth slice?
Something has to cost you if you go back to bed. Video proof is one version. DontSnooze gives you 30 seconds after the alarm to record a video showing you are up, and if you do not, a random camera-roll photo goes to friends you chose. By the model’s logic that closes a hole willpower never covered, though that is my inference and no study I opened tests it. For a neighbouring single-cause story, see the forced-smile experiments on mood.
Where does the model stop?
It is a metaphor from accident analysis, built for hospitals and plants. Real holes are not independent (a late night and a dark morning travel together), so the product above is off. Perneger (BMC Health Services Research, 2005;5:71) asked whether there are holes in the metaphor itself. His survey of 85 volunteers who said they knew the model found their readings of slices, holes and arrows varied considerably. Use it as a checklist, and log your own slices for two weeks before trusting any number.
What do people ask about the Swiss cheese model?
What is the Swiss cheese model in simple terms?
It pictures defences as slices of Swiss cheese, each with shifting holes. Harm gets through only when holes in many slices line up. Reason set it out in the BMJ in 2000.
What is the difference between active failures and latent conditions?
Active failures are unsafe acts by people in direct contact with the system, such as slips and lapses. Latent conditions are the resident pathogens left by earlier decisions. Hitting snooze is an active failure; an alarm tone you have stopped hearing is a latent condition.
Is the Swiss cheese model proven?
It is a teaching metaphor, not a tested law. In Perneger’s 2005 survey, 85 safety professionals who knew the model matched the author’s reading of its parts on 66.5% of items.