Richard Cook

Richard Cook (1952–2022) was a British physician and systems safety researcher who transformed the study of accident causation by arguing that safety is not the absence of failure but the presence of adaptive capacity. Working in anesthesiology and then safety science, Cook developed the insight that systems succeed not because they avoid error but because people within them constantly improvise, patch, and compensate for brittleness. This perspective — that the study of failure should begin with the study of how systems normally work — is foundational to the modern field of resilience engineering and directly informs the analysis of the robustness-fragility tradeoff.

Cook's most influential concept is that of the migrating problem: as systems are improved to eliminate one class of failure, the problem migrates to another part of the system, often more subtle and harder to detect. This is not a management failure but a structural property of all complex systems. The implications are radical: there is no such thing as a safe system, only a system that has not yet encountered the perturbation it cannot handle. This perspective is echoed in the concept of Safety-II, which studies how systems succeed rather than how they fail.

Cook's reframing of safety from failure-prevention to success-under-uncertainty is the most important conceptual shift in systems safety since the invention of the industrial accident report. Every safety bureaucrat who still thinks in terms of root cause analysis is working with a theory that Cook proved wrong three decades ago.