Toward a Proactive Safety in Design : Some Generic Recommandations

1. Toward a Proactive Safety in Design :Some Generic Recommandations

2. Why to stress the design? • In spite of automation: • Total reliability remains very modest : • Significant technical failures • Low robustness of the solutions • Weakening of the safety of the operators: • Confusion between solution and function of safety . • Risks dependent on the phases of interaction man X system : •adjustments, maintenance, reprogramming... • Human remains guaranteeing profitability and safety of the system • A study carried out by the INRS showed that 20% of the configurations of the operation of an automated system are because of the automatisms (Neboit and al., 1993) • Automation and Human Activities • Paradoxes of automation (Fadier, in SIAS 2001) • The underestimation in the design process • industrial situations variability and or instability • human variability (intra and inter) • real operation , or under-nominal , or degraded • human interventions in degraded situation

3. Design : The Pandora box • Inside the box • how does the designer see it? What is the design process? • Getting into the box • supporting, influencing, reviewing, improving the design and the designer • Edges of the box • limits of our actions , the limits of design and our expectations of it.

4. Basic postulates :In terms of design… • Design scope takes place even in functioning(Rabardel, 1995 ; Béguin & Rabardel, 2000, Fadier et al. 2003) • Re-utilisation of known solutions without an evaluation coming from daily analysis work • Learning fromexperience(information coming from the users) is not a systematic process used in the design improvement • Any system undergoes migrations (drifts transformations, and adaptations) from its design to its first uses (Rasmussen 1997, Amalberti 2001, Fadier et al.2002)

5. what impact on prevention? Role of the Designer Client User Design for whom? • Design activity resulting as the result of a succession of compromises: from design to use. • Financial constraints • Times • Technical solutions • Standards and legislation • Work activities, • Etc. • Two types of compromise • compromise cognitive • collective compromise

6. Particular Statute of the prevention in the design • Follows a lawful obligation , • Is never clarified in specifications (is not a starting objective ), • Generally based on the standards (direct ways ): • Complexity and ambiguity of the standards (numbers, range , principle , ..) • Often "realized" by an expert , • Is carried out in opposition to the production, It stops the system • Becomes a constraint for the Designer and the User , • There are also indirect ways based on individual knowledge and concerning particular points of a system : Access machines, flow of circulation… • Designers Needs : • the manifest absence, which the Designer seems to agree , do not underline the absence : • Their needs on the matter , • The difficulties which they encounters .

7. Towards a new proactive approach to design Proactive safetycan be defined as the combined studies, analyses and projected integration options implemented in foresight with respect to the critical event. Based on an ecological approach centered user: an “ecological design”, i.e. a design process which results in a solution that takes into account the set of situations potentially met by future use • To reduce the asymmetry between the technical and human elements: • Usability • Designing for error • To support the construction of an adequate representation and nearer to the reality of use of the work equipment : • management of the interferences and of the common reference frame • To identify: • rules of use , • criteria and the uses which it will firstly be necessary to integrate • To know the daily situations , factual and accidental to be able to anticipate them: • Which risks for the total safety of the system ? • Like, for the health of the operator is necessary it to anticipate ? • Which safety barrier ?

8. Some generic recommendations Fadier &al.Safety Science volume 44, Issue 1 , January 2006, Pages 55-73 Safety and Design • Ecological design : User Accessibility to work equipment and Increase robustness • Necessary linking of work equipment and organizations in which operators will work ; • Anticipating future operation though identification of tools and the knowledge used for design ; • Going beyond technical know-how ; • Organizing participative design, reflecting on groups, participants and their roles ; • Support on work analysis like an assistance tool to identify and collect for several scenarios of use (practices); • Using existing company Experience Feedback structures or creating specific structures.

9. Conclusion Safety Design needs to: • Integrate the principle of mediating tool transparency. In other words “to make the invisible visible” : • Consideration of perception-action coupling , • Work equipment Accessibility with respect to operations • Not force cognitive control into an operating level which is more complex than required: • Integration of scenarios of possible situations , • Facilitation of the training and the formation by the tool , through a taking into account of logics use / operation , • Usability • Make the system error tolerant : because human Performances certainly variable but essential to Complexity management • Taking safety into account in design of automated systems inextricably leads to involve human activity requirements as well as organisational factors • Hollnagel (2001) points out that although human performance is inherently variable this does not mean that it is unreliable. • Indeed, it reflects different work conditions, and, performance deviations positive or negative are opportunities to improve the system

10. Thank you for your kindly attention Thank you for your kindly attention Thank you for your kindly attention Thank you for your kindly attention Thank you for your kindly attention Thank you for your kindly attention Thank you for your kindly attention Thank you for your kindly attention Thank you for your kindly attention Thank you for your kindly attention Thank you for your kindly attention

11. 1. Ecological design (Sustainability systems design) • Greater User Accessibility to work equipment : • Physical accessibility : to take into account the nature and the complexity of the device to be conceived • Cognitive accessibility: to take into account coherence interns activity, the quality of the interfaces • Increase robustness of the technological solutions designed.

12. 2. Necessary linking of work equipment and organizations in which operators will work • Anticipation of the Human resources • Anticipation of the materials resources: maintenance, work equipment aging, etc .. • Solution Validation based on safety-related regulation and work procedures (Safety #reliability) • Knowledge and official recognition of critical situations ( work analysis) • organization Operation depends on developing functional networks (collective interactions )

13. 3. Anticipating future operation (towards a systems’ plasticity) • To identify the daily work requirements • To analyze the critical events • To build scenarios of specific situations • To use simulation (Virtual Reality) : • To evaluate and test the technical devices • To take into account degraded operation and Human recovery activities • To resist to make inferences on the basis of known situation • To take into account the paradoxes of automation

14. 4. Going beyond technical know-how (to avoid crystallization on the artifact) • To integrate the safety and ergonomics objectives into specifications: safety as a performance criterion and investment • To take into account the HF in projects : suitable use of the anthropometrics data , real work requirements, workspaces , failures of the equipment , procedures considered as BATU… • To exceed the certainty of the « unique situation  » or "nominal » towards an acceptance of an industrial variability (situations and human ) • To consider the dynamic aspect of work situations • To give more autonomy : work is made by adaptations and regulation # rigid and incomplete procedures • To better distribute the M-M functions • To identify the phases of HF integration and test the technological solutions

15. 5. Organization participative design Definition: " involvement of persons in planning and controlling a significant number of their work activities, these persons possessing sufficient knowledge and capacity to exercise an influence on both processes and results to achieve desired aims ". • Support and recognition of competences • organization and structuring based on the work situations and design phases. • Definition of the end-users

16. 6. To set up a structure of Experience Feedback • Using existing company Experience Feedback (EF) structures or creating specific structures • To take into account : • Daily operation, problems and risks observed in production and maintenance situations; • Critical events leading to a near accident, an accident with and an accident without days lost. • information conveyed by this feedback must be : • Always informative and exploitable . • They aim to facilitate the designer task and not to make it more complex . • They must constitute a decisional aid for safe design (logic tree : Didelot et al., 2002).

17. HF Maturity Scale: Roadmap to sustainable progress

18. A cognitive activity model of safety integration into design process(adapted by De la Garza, 2000) InitialRepresentation Aims & Constraints (technical safety file) FinalRepresentation Individual knowledge:explicit & Implicit knowledge, competences, experience … Mental Simulation (models, Drawings, Calculations, Mecanichal Part. Accommodation and Assimilation processes Anticipation problems, Technical choices, evaluation… Collective knowledge :explicit (guidelines, design rules, design reviews, technical file, informal meetings…) Prototype, Technical file Safety Objectives

19. Boundary (Palliatives) activities Tolerated during use [BATU] Schematically, these palliatives and boundary activities result, according to the circumstances: • from an acceptance of the fact that the initiating conditions under which the operator has to work; • from a compromise between the production and safety; • from a slow migration of daily deviations which have been applied to satisfy the real constraints of the situation; • from the necessity of immediate management of an exceptional situation Area : Non Acceptable Area Acceptable Model functioning Installation Design conditions and migrations factors conditions and migrations factors Analyses process and methods of design (methods of integration of safety by the various actors) • Analyses : • Activities of the designer, of establishment • identification of conditions and factors of migrations • Process of formation Of training of theusers • Analyse : • Activities of uses of the rotary printing-presses (7 customer-users, rotary) • Identification of risks, analyses causal and modelling STEP They can be Operational and/or Managerial feedback towards the design GIPC-PROSPER : Model & Step (Fadier et al., 1998) The process of design includes 3 stages

20. How the Designer works and represents the real work ? • The Designers 'activity rests on situations of problems resolution (re-use of old solutions, Collective management of knowledge, competences and constraints ) • There are a few cognitive models describing dynamically « designer subject » activity (De la Garza, 2000) • The reproaches often made to the designers are to : • Anticipate a few future situations of use , • Re-use or adapt old solutions to new problems, without a real validation • How he imagines the use of its product ? Which flexibility /robustness /"stability "/evolution can he give to the final solutions ? • DeveloppementPhase: Daily activity , all environmental situations and conditions, migrations and drifts • Integration Phase : taking into account of the whole of the system • Installation phase : modification, realization and tractability .. • Operation • Reliability : A tested reliability but a modest robustness • Safety : Integrated safety and Standards • User: specifications of the customer and the real needs for the users