Who is Erik Hollnagel
Erik Hollnagel is a Danish system-safety researcher, born in Copenhagen and trained in psychology. [5] Macquarie University lists him as a Visiting Fellow in its healthcare resilience and implementation centre, affiliated with the Institute of Resilient Systems. [20]
Education and international career
He earned his psychology master’s degree in Copenhagen and doctorate in Aarhus. He worked as a programmer in 1962–1968, researched at Risø in 1978–1982 and led human-machine interaction research at the Halden project in 1982–1985. [5]
In 1999 he became professor of Human-Machine Interaction at Linköping. His career also included advising the Halden reactor project and technical direction at HRA Ltd. [6]
Human reliability and the evolution of CREAM
In The Reliability of Man-Machine Interaction (1992), he questioned directly transferring models of mechanical components to people. Dividing work into independent actions could obscure features of the combined system. His critique directed attention to relationships and conditions of performance poorly represented by a list of isolated acts. [7]
Published in 1998, Cognitive Reliability and Error Analysis Method presented CREAM as a context-dependent approach to human reliability. It identified cognitive tasks, conditions affecting their performance and consequences for the system. The method supported retrospective analysis and prospective study within the probabilistic assessment practices of that period. [8]
In 1999 he reported an experiment with M. Kaarstad and H. C. Lee involving professional nuclear power plant operators in a full-scope simulator. They studied qualitative predictions of actions under different alarm systems. Prediction coverage depended on the completeness of the preceding task analysis, a specific limitation of that experimental evaluation. [9]
Hollnagel later reconsidered CREAM and regarded it as obsolete from his own perspective. A research paper deposited at NIST preserves this retrospective statement and links it to later frameworks such as FRAM. This evolution distinguishes the method’s historical importance from the direction its author subsequently adopted. [10]
Joint cognitive systems and barriers
Barriers and Accident Prevention (2004) distinguished protective functions from the systems implementing them. It compared sequential, epidemiological and systemic accident models, examining how the chosen model directs investigation. [6]
With David D. Woods he wrote Joint Cognitive Systems: Foundations of Cognitive Systems Engineering in 2005. It treats people and technologies as a combined system of activity. Its functional approach examines control, information use and coping with complexity, adopting a unit of analysis broader than either person or machine alone. [11]
Resilience engineering
In 2006 he edited Resilience Engineering: Concepts and Precepts with Woods and Nancy Leveson. Contributions from multiple researchers examined adaptation, anticipation and performance under varying conditions. This collective project focused on how people and organisations adjust activities when time, resources and available information are limited. [12]
The ETTO Principle (2009) developed the relationship between efficiency and thoroughness. Hollnagel argued that work involves adjusting effort to conditions, and that the same adjustments can contribute to successful or adverse outcomes. The principle interprets everyday variability and decisions about how much to check, prepare or review. [13]
FRAM and functional modelling
Published in 2012, FRAM presented the Functional Resonance Analysis Method as a way to model the functions necessary for an activity to succeed. Analysis examines their connections and performance variability. Combinations among functions can explain unexpected outcomes of different magnitudes even when no individual part appears extraordinary. [14]
The FRAM Model Visualiser manual, written with Rees Hill, describes six aspects of each function: input, output, preconditions, resources, control and time. It represents human, technical and organisational functions. The tool organises descriptions and visualises connections; interpreting those relationships requires knowledge of the work and the scenarios under examination. [15]
Safety-I, Safety-II and resilience potentials
Safety-I and Safety-II (2014) contrasted reducing adverse outcomes with understanding how successful performance is achieved. Hollnagel placed the study of ordinary functioning at the centre of the latter perspective. The proposal addresses daily operations alongside management decisions and organisational culture. [1]
Safety-II in Practice developed the Resilience Assessment Grid, or RAG, around four potentials: responding, monitoring, learning and anticipating. Its question sets are tailored to the organisation. The approach explores how these capacities are sustained and related, rather than assuming that a general label adequately describes resilience. [16]
Resilience in healthcare
With Jeffrey Braithwaite and Robert L. Wears he edited Resilient Health Care in 2013. The volume brought together organisational, patient-safety and resilience specialists to study healthcare systems facing demands for efficiency and safe care. It applied analysis of adaptations and relationships between activities to a specific clinical setting. [17]
Later volumes extended the approach to everyday clinical work and coordination between teams. AHRQ highlights the series’ treatment of activities such as handovers and responses to emerging problems. Its focus is the functioning of care systems and teams’ ability to sustain care under changing conditions. [18]
The Resilient Health Care Network held its first workshop in Middelfart, Denmark, in 2012 under Hollnagel’s leadership. Later meetings combined cases, methodological discussion and work on FRAM and RAG. These exchanges brought researchers together with practitioners studying specific healthcare situations. [21]
Synesis and recent work
In Synesis he proposed studying productivity, quality, safety and reliability together. Each perspective reveals only part of an organisation, while changes in one dimension affect others. The book develops an integrated view of priorities, practices and change management to understand organisational functioning as a whole. [19]
From Safety to Safely: Principles and Practice of Systemic Potentials Management continues this direction. Hollnagel asks how activities can be managed safely, combining productive functioning with development of systemic potentials. The book extends his movement from the reliability of individual actions towards functional, integrated explanations of complex organisations. [3]
Connection with prevention
For prevention, his contribution encourages observation of work when no accident occurs. Understanding resources, coordination and adaptations broadens the information available for managing safety alongside analysis of harm and failure.
