Why leading industries use CAST to identify systemic vulnerabilities that traditional methods miss.
Industry applications, particularly in aerospace and healthcare, show that CAST identifies a broader range of systemic and organizational causal factors than traditional chain-of-events models. Organizations transitioning from traditional investigative models, such as Root Cause Analysis (RCA) or the “5 Whys”, report a significant increase in the depth and breadth of their findings, leading to more robust safety interventions.
Reduces Hindsight Bias
Instead of asking who is to blame, CAST asks why an action may have made sense in context. By focusing on systemic flaws that go beyond human error, it reveals deep-seated organizational deficiencies. As a result, CAST produces additional solutions that are more practical and often lower-cost, addressing root causes that are otherwise overlooked.
Identifies More Causes
“…the implementation of CAST was able to cover the largest number of factors in all categories when the findings of all three methods were analyzed for their ability to identify organizational, technology, environmental, and human causal factors. Additionally, CAST led to the identification of all factors that were identified by FTA and FMEA applications.”
More Consistent
“In the between-method comparison analysis, STAMP-CAST produced a significantly higher inter-rater reliability coefficient relative to AcciMap and AcciNet.”
Exposes More Weaknesses
“Whilst the official accident report propositions were limited to changes in the process system and documentary aspects, additional recommendations, especially regarding systemic factors and design flaws, were obtained by CAST.”
More Effective Recommendations
The CAST analysis revealed that identical incidents in 1999 and 2011 had occurred without corrective action being taken, identifying “risk assessment blinders” in the corporate Management of Change (MOC) process.
Effective for Autonomy
CAST was used to analyze previous tiltrotor accidents to develop a framework for human-machine collaboration, identifying dangers in aircraft system mismanagement between different controllers.
Addresses Complexity
CAST provides a comprehensive framework to pinpoint subtle but critical systemic factors and organizational issues that traditional approaches often overlook.
Provides Systemic Depth
Recommendations increased from 4 to 9; uncovered 19-month delays in mandating safety changes.
Provides Systemic Insights
Revealed why procedures were not followed due to dysfunctional interactions.
Provides Practicality and Reliability
Identified root causes as far back as the chemical research phase years prior.
Higher ROI
By identifying common underlying causes across different types of losses, CAST prevents the “whack-a-mole” approach to safety, leading to a dramatic reduction in future accidents and the time spent on repeated investigations.”
High Inter-Rater Reliability Ratings
CAST is superior to AcciMap and AcciNet in inter-rater reliability ratings.
Excels in Feedback Analysis
CAST is more effective than AcciMap and Perceptual Cycle Model (PCM) in systematically identifying failures in feedback and control mechanisms due to its structured taxonomy, which provides clearer guidance for analysis.
Uncovers Systemic Feedback Failures
American Airlines used the CAST to move beyond simplistic “root cause” blame to a more sophisticated understanding of how complex system designs influence human behavior. They uncovered critical gaps in communication, oversight, and physical equipment that were often missed by previous investigations. The CAST process resulted in high-impact, system-level recommendations—such as clearer safety indicators and automated LOTO tracking—that provide robust, lasting protection for their team members. Ultimately, the airline found that the value of CAST lies in its ability to protect the human through system design, ensuring that safety is an inherent feature of the environment rather than a burden placed solely on the individual.
Surpasses Root Cause Analysis
CAST provided a significantly more comprehensive investigation than traditional methods, increasing safety recommendations from 4 to 15. By analyzing the airline’s control structure, it uncovered critical missing feedback between management and dispatchers while explaining why unsafe decisions seemed logical to personnel at the time.
| Core Claim | Document Link | CAST Conclusion |
|---|---|---|
| Reduces Hindsight Bias | The Use of STAMP/CAST in Healthcare LRS | Instead of asking who is to blame, CAST asks why an action may have made sense in context. By focusing on systemic flaws that go beyond human error, it reveals deep-seated organizational deficiencies. As a result, CAST produces additional solutions that are more practical and often lower-cost, addressing root causes that are otherwise overlooked. |
| Identifies More Causes | Tenerife Accident Analysis: A Comparison of FTA, FMEA, and CAST | “…the implementation of CAST was able to cover the largest number of factors in all categories when the findings of all three methods were analyzed for their ability to identify organizational, technology, environmental, and human causal factors. Additionally, CAST led to the identification of all factors that were identified by FTA and FMEA applications.” |
| More Consistent | Testing the Reliability of Accident Analysis Methods: a comparison of AcciMap, STAMP-CAST, and AcciNet | “In the between-method comparison analysis, STAMP-CAST produced a significantly higher inter-rater reliability coefficient relative to AcciMap and AcciNet.” |
| Exposes More Weaknesses | Learning from Incidents: A Systems-Theoretic Analysis in the Railway Sector | “Whilst the official accident report propositions were limited to changes in the process system and documentary aspects, additional recommendations, especially regarding systemic factors and design flaws, were obtained by CAST.” |
| More Effective Recommendations | CAST Analysis of the Shell Moerdijk Accident | The CAST analysis revealed that identical incidents in 1999 and 2011 had occurred without corrective action being taken, identifying "risk assessment blinders" in the corporate Management of Change (MOC) process. |
| Effective for Autonomy | STPA/CAST on Novel Tiltrotor Aircraft | CAST was used to analyze previous tiltrotor accidents to develop a framework for human-machine collaboration, identifying dangers in aircraft system mismanagement between different controllers. |
| Addresses Complexity | Application of CAST to Regulatory Decision-Making: A case study of the Sikorsky S92A | CAST provides a comprehensive framework to pinpoint subtle but critical systemic factors and organizational issues that traditional approaches often overlook. |
| Provides Systemic Depth | UK Derailment Investigation | Recommendations increased from 4 to 9; uncovered 19-month delays in mandating safety changes. |
| Provides Systemic Insights | Iceberg Encounter (FPSO) | Revealed why procedures were not followed due to dysfunctional interactions. |
| Provides Practicality and Reliability | Organic Catalyst Explosion | Identified root causes as far back as the chemical research phase years prior. |
| Higher ROI | CAST Handbook: How to Learn More from Incidents and Accidents | By identifying common underlying causes across different types of losses, CAST prevents the "whack-a-mole" approach to safety, leading to a dramatic reduction in future accidents and the time spent on repeated investigations." |
| High Inter-Rater Reliability Ratings | Accident Analysis Methods Reliability Comparison | CAST is superior to AcciMap and AcciNet in inter-rater reliability ratings. |
| Excels in Feedback Analysis | Mixed-Methods Rail Collision Analysis | CAST is more effective than AcciMap and Perceptual Cycle Model (PCM) in systematically identifying failures in feedback and control mechanisms due to its structured taxonomy, which provides clearer guidance for analysis. |
| Uncovers Systemic Feedback Failures | Best Practices and Lessons Learned Applying CAST American Airlines | American Airlines used CAST to move beyond simplistic "root cause" blame to a more sophisticated understanding of how complex system designs influence human behavior. They uncovered critical gaps in communication, oversight, and physical equipment that were often missed by previous investigations. The CAST process resulted in high-impact, system-level recommendations—such as clearer safety indicators and automated LOTO tracking—that provide robust, lasting protection for their team members. Ultimately, the airline found that the value of CAST lies in its ability to protect the human through system design, ensuring that safety is an inherent feature of the environment rather than a burden placed solely on the individual. |
| Surpasses Root Cause Analysis | Beyond Root Cause: Using CAST in Airline Operations | CAST provided a significantly more comprehensive investigation than traditional methods, increasing safety recommendations from 4 to 15. By analyzing the airline’s control structure, it uncovered critical missing feedback between management and dispatchers while explaining why unsafe decisions seemed logical to personnel at the time. |
While the initial adoption of CAST requires a shift in mindset and an investment in training, the long-term gains in efficiency and the effectiveness of safety recommendations provide a clear advantage over traditional techniques.
| Industry | Document Link | Traditional Method Effort | CAST Effort | Outcome/Efficiency Gain |
|---|---|---|---|---|
| Nuclear | NRC Regulatory Oversight | Standard LER/RCA: Focused on linear failures. 60 – 100+ hours | 2-Day Workshop | Found critical gaps in engineering assumptions missed by standard methods. |
| Medical Devices | Blood Gas Analyzer Recall | FMEA: “months to years” missed the cause of the recall. | CAST/STPA: “considerable less time” | Found the recall cause (specific software interaction) in <4% of the time. |
Nuclear
Standard LER/RCA: Focused on linear failures. 60 – 100+ hours
2-Day Workshop
Found critical gaps in engineering assumptions missed by standard methods.
Medical Devices
FMEA: “months to years” missed the cause of the recall.
CAST/STPA: “considerable less time”
Found the recall cause (specific software interaction) in <4% of the time.
Organizations across high-risk sectors—including aviation, nuclear power, healthcare, and autonomous transportation—are adopting Causal Analysis based on Systems Theory because it provides a more efficient way to explore the complex causes of loss events. The evidence from real-world applications highlights three primary drivers for this transition:
Evidence:
1) CAST identifies more causal factors and systemic flaws
Traditional accident investigation techniques are largely based on the “chain-of-events” model, which assumes that accidents result from a linear sequence of failures. In this older paradigm, the investigation focuses on finding the failed component, the procedure that was violated, or the primary human error. However, as systems have become increasingly interconnected and software-intensive, a new class of accidents has emerged: interaction accidents. These events occur when components interact in unsafe ways, even though each individual part “worked”.
In the chemical and process industries, the limitations of the “bow-tie” or “Swiss cheese” models often lead to a superficial understanding of risk. A CAST analysis of the Shell Moerdijk reactor explosion revealed that the official investigation report had omitted critical systemic flaws. CAST identified that similar incidents had occurred at other plants in 1999 and 2011, yet the corporate safety management system had not incorporated these lessons into the design and procedures of the Moerdijk plant.
The analysis highlighted “risk assessment blinders” and a flawed Management of Change (MOC) process where production modifications, such as switching to a different catalyst, were made without retesting underlying safety assumptions. While traditional reports might focus on the immediate trigger of a leak, CAST exposed the systemic flaws across the company, the parent company, and even external audits to identify these shortcomings, revealing a flawed mental model at the corporate level.
Investigations into autonomous vehicle accidents, such as the Uber-Volvo collision with a pedestrian in Tempe, Arizona, illustrate the gap between traditional regulatory reporting and systemic analysis. The National Transportation Safety Board (NTSB) report focused heavily on the operator’s failure to monitor the system. A CAST-based socio-technical analysis, however, shifted the focus to how decisions taken in the broader system created the circumstances necessary for the accident. CAST identified faults in the Automated Driving System (ADS) classification logic—which was unable to identify the pedestrian for over four seconds—and the corporate decision to remove the “co-pilot” from the vehicle, which decreased safety and ignored warning signs of vehicle damage. By modeling the safety control structure, CAST reveals how automation complacency is an innate human response to the situation created by the organization, rather than a simple individual failure.
The analysis of the Tenerife aircraft accident provides a stark contrast between traditional reliability methods and CAST. Other approaches were found to identify causes related primarily to human error and technical malfunction, such as adverse weather, pilot errors, and air traffic controller mistakes.
However, when CAST was applied to the same event, it identified a superset of these findings, encompassing the complex organizational and social factors that traditional methods missed. CAST revealed that the accident was not merely a series of isolated errors but the result of a safety control structure that failed to manage the pressures of duty-hour regulations and the limitations of airport infrastructure. The ability of CAST to capture these infrastructure issues alongside organizational and technical concerns proves its effectiveness in uncovering the deeper causes that exist at the institutional level.
Evidence:
2) CAST reduces hindsight bias and shifts the focus from blame to system improvement
In healthcare, where 6% of patients suffer preventable harm, incident reporting systems are often ineffective because they focus on frontline human error and are “blame-laden”. CAST treats safety as a control problem rather than a failure problem. Instead of asking “Who did it?”, CAST asks “Why did the system allow this to happen?” and “Why did the action make sense to the person at the time?”.
In a trial implementation at a hospital, a safety team trained in CAST analyzed a sentinel event and identified not only the unsafe actions by frontline staff but also the departmental management’s unsafe decisions and the underlying reasons for those decisions. The CAST analysis identified diverse causal factors, such as shortcomings in the electronic medical record and technology limitations in biopsy pathway guidance, which a standard RCA would have attributed to a “lack of communication”. This depth of analysis leads to more effective safety interventions, such as process redesign and change management, rather than the “weak” interventions typically found in RCAs, like personal reflection or retraining.
The U.S. Nuclear Regulatory Commission (NRC) recognized the potential of CAST to improve regulatory oversight in safety-related digital instrumentation and controls (DI&C). During CAST workshops, participants noted that most findings—such as incorrect operational assumptions and systemic factors—were entirely absent from traditional analyses like Licensee Event Reports (LERs).
The CAST process encouraged participants to identify the specific reasons for human behaviors and the questions that should be asked during an investigation but are typically overlooked. By providing critical new insights into why safety-related controls were not effective, CAST addresses the “modern challenges” in accident analysis that chain-of-event models did not handle.
Evidence:
3) CAST is more efficient and provides a higher return on investment
A common assumption in safety engineering is that a more rigorous and comprehensive analysis must necessarily be more time-consuming. The evidence from industry trials and comparative studies contradicts this assumption, showing that CAST can be faster and more efficient than traditional methods when applied by trained teams.
Recent studies in healthcare have shown that CAST can reduce analysis time from the traditional 8–12 hours per RCA to just 2–4 hours. This 67% reduction in time is accompanied by a 3.2x increase in the identification of systemic factors. This is critical for busy clinicians who often lack the time for thorough analysis.
In the medical device industry, the efficiency gap is even more pronounced. A manufacturer spent a year performing FMEA on a blood gas analyzer that had been recalled, identifying 75 scenarios but failing to find the cause of the recall. A single analyst using CAST and STPA modeled the control loops and found 175 scenarios—including the specific recall cause—in only two weeks. This represents a reduction in analysis time of over 90% while yielding far more accurate results.
Experienced accident investigators have found that CAST allows them to work faster because it creates the right questions to ask early in the process, preventing the need to revisit data collection later. While the first few CAST analyses may require an initial investment in time to model the safety control structure, much of that work can be reused in subsequent investigations of the same system. Over a short period, the amount of effort is significantly reduced, resulting in a net long-term gain through both faster investigations and a reduction in the total number of accidents.
The power of CAST lies in its foundation in systems theory, which views systems as dynamic entities rather than a collection of static components. Safety is understood as an emergent property of the system as a whole, rather than a property of its individual parts.
The core of a CAST analysis is the creation of a hierarchical safety control structure model. This model captures actions across many levels of a system—from physical equipment and frontline operators to corporate management and government regulators. This structure allows the investigator to visualize both vertical and lateral relationships that influence decisions throughout.
In a railway analysis, for example, the control structure might include the train operating company, the infrastructure owners, and the maintenance contractors. CAST analyzes how control actions (e.g., a mandate to check tracks) and feedback loops (e.g., report on track condition) were executed or failed.
CAST explicitly models the “process model” of each controller. In complex systems, accidents often occur when the controller’s process model becomes inconsistent with the actual state of the process. For example, if a software controller “believes” a chemical reactor is empty when it is actually full, it may provide an unsafe command to add more material.
By examining the “mental model flaws” of human operators and the “logic flaws” of automated systems, CAST identifies why unsafe control was provided. This provides a much deeper understanding of human-system interaction than traditional methods, which often simply label an event as “human error”.
CAST provides a structured approach to identify why safety constraints were not enforced. These categories include:
This systematic approach ensures that the investigation considers a broad spectrum of risks, including culture, environmental factors, and operational pressures, rather than stopping at the first identifiable error.
Beyond individual accident investigations, CAST serves as a catalyst for broader organizational transformation. It provides a structured approach to “learning from losses” that strengthens the entire Safety Management System (SMS).
The shift toward “blame-free” explanations for losses strengthens safety culture by fostering trust. When teams see that CAST produces more effective solutions than finger-pointing, they become more willing to report gaps, which increases true accountability. When leadership acts on the systemic factors CAST identifies, it signals a commitment to meaningful change and encourages genuine collaboration.
Applying CAST to lower-severity events uncovers critical factors before they escalate into major losses. By analyzing gaps through a systems lens, organizations can pinpoint specific weaknesses and build more robust protections into their infrastructure before a catastrophe occurs.
Regulatory agencies, such as the FAA and NRC, increasingly require evidence that organizations possess a deep understanding of their operations and potential gaps. CAST provides the rigorous documentation necessary to prove a company recognized and corrected the underlying issues that permitted it.
The transition from linear approaches to CAST represents a fundamental shift in how organizations manage risk. The evidence from across industry is clear: it is possible to improve upon traditional methods like RCA to ensure safety in today’s complex, software-intensive, and socio-technical world.
CAST provides a strategic path forward. By treating safety as a control problem and modeling the organizational context of decisions, CAST allows investigators to:
Stop chasing fires and start building smarter, safer operations. CAST gives your team a way to ensure that when you solve a problem once, it stays solved. By providing the depth needed to move beyond quick fixes, we can build a safer future that protects our people, our assets, and our reputation for the long term.
Stay informed about the latest from STAMP Institute.
Tell us what you’re interested in, and we’ll recommend a path forward.
By continuing, you agree to our Terms of Service and Privacy Policy.
Gain skills and confidence with expert guidance as you implement modern approaches in your organization.
Gain a strategic overview of the STAMP framework designed specifically for your executive team. Our briefings focus on high-level alignment, risk mitigation, and scaling impact across your organization.
The information provided will be used exclusively to prepare your tailored briefing. By submitting, you agree to our Terms of Service and Privacy Policy. This service is reserved for organizational leadership and project stakeholders.
We’ve received your industry details. Our team regularly updates our active industry list to reflect new sectors and innovative applications of the STAMP framework. We’ll reach out if we’d like to feature your work as a specific case study!
The STAMP Institute Team
We are constantly inspired by the diverse ways our community applies STAMP. Tell us about your industry and how you’re using these methods so we can better represent the full reach of our network.
The information collected here is for mapping purposes only. By submitting this form, you grant STAMP Institute permission to display your organization’s industry on our public website. Contact and use case details will not be shared without your consent.
Thank you for reaching out! A member of the STAMP Institute team will review your request to hand-select the case studies most relevant to your goals.
Our research spans diverse sectors, but we know your challenges are unique. Tell us a bit about your focus, and we’ll curate a selection of case studies and impact reports relevant to your specific field.
By submitting this form, you agree to our Privacy Policy. STAMP Institute will only use your information to provide the requested content and update you on relevant industry insights. You may unsubscribe at any time. We do not sell your personal data.
Thank you for contacting us. A STAMP Institute representative will follow up shortly to schedule a discovery call.
Learn modern approaches to safety, security, and reliability with customized, expert-led training from STAMP Institute. Gain skills and confidence with expert guidance as you implement modern approaches in your organization.
Thank you for contacting us. A STAMP Institute representative will follow up shortly to schedule a discovery call.
You’re on the list! Thank you for joining the STAMP Institute community. You’ll now be the first to receive updates on modern approaches to safety and security.
New Training Announcements: Stay ahead with the latest curriculum updates.
Research & Presentations: Exclusive insights and expert methodologies.
Upcoming Courses: Priority registration for specialized training sessions.