Distinguish human error from system conditions
When a person is the proximate cause, ask why the system allowed the error to occur.
Why it works
The Five Whys is particularly important in systems with human operators because the proximate cause of most failures is a human action or omission. Stopping at "human error" as the root cause is almost always a failure of analysis: the deeper question is why the system’s design, training, culture, or conditions made that error likely. Toyota’s approach consistently reaches system-level causes rather than individual blame — not as a way of avoiding accountability, but because fixing the person does not fix the system that produced the error.
How to do it
- When a "why?" answer names a person’s mistake, ask: "Why was the person able to make this mistake?" or "What conditions made this error likely?"
- Look for: missing information, time pressure, absent safeguards, inadequate training, conflicting incentives.
- Design the fix at the system level rather than targeting the individual.
Evidence
The distinction between proximate human error and systemic causes is a foundation of high-reliability organization (HRO) theory. Healthcare patient-safety research consistently finds that error reduction requires system redesign, not just individual retraining. The Institute of Medicine’s To Err Is Human landmark report grounded this at national scale, attributing tens of thousands of preventable deaths to system failures rather than individual incompetence and shifting patient-safety strategy toward system redesign. (observational)
Not all errors are systemic; some are genuine individual misjudgments that require individual-level responses. The skill is distinguishing the two, not assuming all errors are systemic.
Sources
- Reason (1990), Human Error — the Swiss cheese model and system conditions for error
- Reason, J. (2000). Human error: models and management. BMJ, 320(7237), 768–770.
- Kohn, L.T., Corrigan, J.M., & Donaldson, M.S. (Eds.) (2000). To Err Is Human: Building a Safer Health System. Institute of Medicine / National Academies Press, Washington, DC.
Common mistake
Using "it was human error" as the end of the analysis — which is the single most common way the Five Whys fails in organizations with blame-forward cultures.
Practice this with IX Coach
7 days free, then $40/month (~$1.30/day).
More practices for The Five Whys
- State the problem precisely before asking the first why
A vague problem statement produces vague root causes — be specific about what happened.
- Follow the causal chain until you reach a changeable cause
Keep asking "why?" until you reach something you can actually fix.
- Branch the chain when you find multiple causes
When a "why" has two or more true answers, follow each branch separately.
- Verify the root cause by tracing back up the chain
After reaching a root, work back up: does each "because" in the chain make logical sense?
- Design the fix to prevent recurrence, not just to recover from this instance
Ensure the root-cause fix eliminates the cause permanently, not just this occurrence.