Active vs. Latent Failures: Telling System Weaknesses from Frontline Errors
Active and latent failures are the two categories of error described by James Reason's Swiss cheese model, and both contribute to patient harm when defensive layers align. They share a role in producing adverse events, but they differ fundamentally along one core axis: whether the failure is a visible act committed by a frontline worker at the point of care (active) or a hidden system condition that was present long before the incident and set the worker up to fail (latent).
How to tell them apart
| Feature | Active Failures | Latent Failures |
|---|---|---|
| Definition | Unsafe acts committed by frontline workers | System conditions that enable or set up an error |
| Visibility | Immediately visible at the moment they occur | Hidden or dormant until activated by circumstances |
| Timeframe | Occur at the point of patient contact | Present in the system before the incident ever happens |
| Examples | Drawing up the wrong medication, or skipping the time-out and failing to verify the surgical site | Understaffing, poor equipment design, confusing or look-alike-sound-alike packaging |
| Intervention focus | Individual training and checklists directed at the person or the specific act | System redesign and policy change directed at the environment |
| Causal role in the Swiss cheese model | The final unsafe act that passes through the last defensive layer to reach the patient | The pre-existing holes in earlier layers that allow the active failure to occur |
The reasoning
Anchor on visibility and timing. If the failure is a discrete unsafe act performed by a worker at the bedside and is apparent the moment it happens—giving the wrong medication, cutting without verifying the surgical site—it is an active failure. If instead you are describing a background condition that existed before anyone touched the patient and only becomes dangerous when circumstances align—understaffing, look-alike vials, confusing labeling—it is a latent failure. The key insight is that active failures are usually the product of latent failures: the nurse who gives the wrong drug may be working a 14-hour shift in an understaffed unit with distracting alarms and look-alike vials. When arbitrating, ask 'what did the person do?' (active) versus 'why did the system allow it?' (latent), and match the intervention: retrain and add checklists for active failures, but redesign the system and change policy to eliminate latent ones.
Key tests
- Root cause analysis (RCA): identifies active failures as the proximate causes (e.g., 'the nurse drew up the wrong volume') and latent failures as the underlying root causes (e.g., 'no competency verification system for the device')
- 5 Whys technique: the first 'why' typically surfaces the active failure at the point of care, while repeated questioning drives down to the latent system-level failure that must be corrected
- Barrier analysis (asking what defenses failed): active failures represent the breach at the final defensive layer, whereas latent failures represent weaknesses in earlier system defenses that were already present
What they share
- Both are components of the Swiss cheese model of error causation and can contribute to a single adverse event
- Both must be identified during root cause analysis to prevent future harm
- Neither is meant to be addressed by blaming an individual—the goal is always to understand why the system allowed harm
Pitfalls
- Stopping at the active failure and blaming the individual, missing the latent system conditions that made the error likely—this defeats the purpose of the Swiss cheese model
- Confusing the sentinel event itself (e.g., wrong-site surgery, the harmful outcome) with the active failure that produced it (e.g., failing to perform the time-out) and the latent conditions that allowed it
- Assuming latent failures alone cause harm; in the Swiss cheese model an error must pass through ALL defensive layers, so single-point failures rarely reach the patient without alignment of both active and latent holes
- Mislabeling contributing factors: an illegible handwritten order is frequently a latent/system factor (poor communication or ordering process) rather than a purely proximate act—so do not reflexively file every contributing factor as an active failure; the root cause is usually the absent system safeguard that would have caught the error regardless
Practice this the way the exam tests it — on branching cases where your decisions shape the patient.