The Swiss Cheese Model: Why Accidents Happen

 In aviation, accidents rarely result from a single mistake. Most tragedies occur due to a chain of failures that, individually, might not lead to serious consequences.

This concept is explained by the Swiss Cheese Model, developed by British psychologist James Reason.

Introduced in the 1990s, the model transformed the way high-risk industries investigate accidents and incidents. Today, it is widely used by organizations such as the International Civil Aviation Organization, the Federal Aviation Administration, and airlines worldwide.

What Is the Swiss Cheese Model?

Imagine several slices of Swiss cheese lined up side by side.

Each slice represents a layer of defense within a complex system.

These barriers may include:

• Regulations and standards;
• Pilot and controller training;
• Operational procedures;
• Aircraft technology;
• Maintenance programs;
• Management oversight;
• Organizational culture;
• Safety Management Systems (SMS).

The holes in each slice represent weaknesses, vulnerabilities, or temporary failures.

Normally, these holes do not align. When one defense layer fails, another barrier prevents the hazard from progressing.

An accident occurs when the holes in multiple layers align, allowing a threat to pass through every defense.

Active Failures and Latent Conditions

According to James Reason, there are two main categories of failures.

Active failures

These are errors made by frontline operators, such as pilots, air traffic controllers, or maintenance personnel.

Examples include:

• Misinterpreting a procedure;
• Communication errors;
• Incorrect aircraft configuration;
• Poor decision-making under pressure.

Latent conditions

These are hidden system weaknesses that may remain unnoticed for months or even years.

Examples include:

• Inadequate training;
• Excessive workload;
• Insufficient infrastructure;
• Poor supervision;
• Punitive organizational culture;
• Regulatory shortcomings.

Latent conditions are particularly dangerous because they often remain invisible until they combine with active failures.

The Importance of Safety Culture

The Swiss Cheese Model changed the focus of accident investigations.

Instead of asking:

"Who made the mistake?"

Organizations began asking:

"Which defenses failed?"

This shift strengthened the concept of Just Culture, encouraging voluntary reporting and proactive risk identification.

The goal is not to assign blame but to understand why the system allowed an error to penetrate all safety barriers.

Why the Model Matters Today

Increasing air traffic, economic pressure, workforce shortages, and growing technological complexity make the Swiss Cheese Model more relevant than ever.

Seemingly isolated events — communication failures, maintenance delays, excessive workload, or inadequate infrastructure — may represent holes that are moving dangerously close to alignment.

Accidents do not happen suddenly. They are preceded by latent conditions that develop over time.

Identifying these vulnerabilities before the holes align is the foundation of modern aviation safety.

Conclusion

The Swiss Cheese Model reminds us that safety does not depend on human perfection.

Instead, it relies on building resilient systems capable of detecting, absorbing, and correcting failures before they escalate into accidents.

In aviation, every safety barrier matters.

Keeping the holes from aligning is a shared responsibility among professionals, operators, regulators, and decision-makers.

---

Marcuss Silva Reis
Commercial Pilot, Aviation Expert Witness, Economist, and Optical Technician. Postgraduate in Aeronautical Sciences, Civil Aviation Safety, and Higher Education Teaching. Founder and professor at Instituto do Ar.