Cognitive Tunneling During Emergencies
A person can do the wrong thing in an emergency while working hard, following training, and trying to protect others. That is one reason cognitive tunneling deserves serious attention in health, safety, and environmental practice.
Cognitive tunneling is a form of attentional narrowing. Under pressure, the brain locks onto one cue, one task, or one explanation, then filters out information that does not fit. The person may not feel confused. In fact, the tunnel can feel like clarity. The hazard sits just outside the frame.
In HSE work, this can show up during a fire response, a process upset, a suspended load, a road incident, or a noisy control room. The pattern is often the same. A worker sees a problem, commits to a solution, and misses the second problem that will injure someone.
The goal is not to blame people for being human. The goal is to design emergency decision support that helps people keep a wider view when stress, time pressure, alarms, and uncertainty push attention into a narrow channel.
What Cognitive Tunneling Means In HSE Work
Cognitive tunneling is not simple distraction. It is a focused state where attention becomes too selective. The person may concentrate on a single alarm, gauge, casualty, piece of equipment, or suspected cause while missing cues that should change the response.
Human factors research often discusses related concepts such as attentional narrowing, fixation, task saturation, and loss of situational awareness. These terms are not identical, but they overlap in emergency work.
Several well-established factors make tunneling more likely:
High workload
Time pressure
Fear of serious consequences
Loud noise or poor visibility
Too many alarms or radio messages
Ambiguous information
Strong expectations about what is happening
Authority pressure or group focus on one explanation
Fatigue, heat stress, or physical exertion
Daniel Kahneman’s work on attention and effort helped popularize the idea that attention is limited. When one task consumes more mental capacity, less remains for monitoring, questioning, and updating. Aviation human factors uses the related term “fixation” for cases where crews concentrate on one issue and lose track of aircraft state. Process safety investigations have also shown that unclear alarms, confusing procedures, and poor shift communication can keep operators focused on the wrong problem.
For HSE teams, the practical point is clear. People do not scan the full environment automatically during stress. The system must help them do it.
Why Stress Pushes People Toward The Wrong Focus
Stress changes decision making in ways that matter during emergencies. The body prepares for action. Heart rate rises. Vision may literally and mentally narrow. People tend to prefer familiar actions and obvious cues. They may also seek closure too quickly, which means they stop looking for other explanations once one explanation seems plausible.
This can help in some situations. A rapid response to a known hazard saves time. A firefighter who recognizes a small incipient fire can act quickly. A driver who sees a pedestrian can brake without debate.
The risk appears when the situation is complex, changing, or misread.
A worker may see smoke and focus on the nearest extinguisher while missing a wind shift. A crane operator may focus on maintaining load control while missing a spotter entering the fall zone. A control-room operator may focus on restoring a pump while missing that the downstream pressure is still climbing.
Cognitive tunneling also feeds on confirmation bias. Once a person forms a story, they notice facts that support it and discount facts that challenge it. In emergency response this can be dangerous because early information is often incomplete or wrong.
A common sequence looks like this:
A cue appears urgent.
The person labels the problem.
The person chooses an action.
New cues appear, but they do not match the original label.
The person treats those cues as noise, delay, or instrument error.
The response continues in the wrong direction.
The failure point is not always the first decision. It is often the failure to reassess.
How Cognitive Tunneling Appears Across High-Risk Operations
Cognitive tunneling does not belong to one industry. It appears wherever people must make decisions with limited time, uncertain information, and serious consequences.
Emergency Response Scenarios
Emergency responders often face the strongest triggers for tunneling. The environment is loud, urgent, and emotionally charged. People may be injured. Bystanders may shout conflicting information. The first visible hazard can dominate attention.
Consider a release of a hazardous vapor near a loading area. A responder may focus on evacuating people from the immediate zone. That is the right starting point, but tunneling can cause the team to miss a second issue, such as vapor moving toward an ignition source, a drainage path leading to a confined area, or a change in wind direction.
The same pattern occurs in medical response. A bleeding injury draws attention because it is visible and dramatic. The team may miss energy isolation, traffic control, atmospheric hazards, or a second casualty behind equipment. For this reason, many emergency medical systems use structured assessments. They force responders to check airway, breathing, circulation, disability, exposure, and scene safety rather than treating the first visible injury only.
HSE emergency plans should treat scene size-up as a recurring activity, not a one-time step. A good response leader asks:
What has changed in the last minute?
What can hurt responders now?
What are we assuming?
Who is watching the wider scene?
What information would make us stop or change tactics?
The best emergency teams build reset points into the response. They don't rely on memory under adrenaline.
Process Upsets And Abnormal Operations
Process operations create a different type of tunnel. Operators may face fast-changing readings, alarm floods, unclear cause-and-effect relationships, and competing production pressure. During an upset, it is natural to focus on the alarm that is loudest, newest, or historically most troublesome.
That may not be the alarm that matters most.
The US Chemical Safety Board has repeatedly found, across multiple investigations, that alarm management, procedure quality, communication, and equipment status can shape operator decisions during major incidents. Well-known process safety events, including the BP Texas City refinery explosion in 2005, are often discussed in industry training because they show how abnormal conditions, instrumentation issues, procedural weaknesses, and organizational pressures can combine.
Cognitive tunneling during a process upset may look like this:
Operators focus on restarting a tripped pump while inventory continues to build.
A team treats a high-level alarm as a bad instrument because similar alarms have been unreliable.
Field staff troubleshoot a valve while the control room misses a developing pressure excursion.
A supervisor pushes for stable production, causing the team to underweight shutdown criteria.
Process safety programs often use layers of protection, operating limits, alarms, interlocks, and emergency shutdown systems. Cognitive tunneling can weaken the human layer when procedures do not clearly identify decision points.
A procedure that says “monitor pressure” is weaker than one that says “if pressure rises above the defined safe limit, stop feed and notify the shift supervisor.” The second form reduces interpretation under stress.
Lifting Operations And Suspended Loads
Lifting operations produce a strong visual focus. People watch the load. That makes sense. The load is heavy, moving, and dangerous. Yet many serious lifting incidents involve conditions outside the load itself.
A rigger may focus on hand signals and miss a change in ground stability. A crane operator may focus on boom angle and radius while missing a worker stepping into the exclusion zone. A lift director may focus on the planned path and miss wind gusts, poor radio quality, or a snag point.
Cognitive tunneling is especially risky in critical lifts because teams often rehearse the intended movement. Rehearsal helps, but it can also strengthen expectation. If the load behaves differently, people may take too long to abandon the plan.
Common tunnel traps in lifting include:
Watching the hook while ignoring the travel path
Watching the load while ignoring people near pinch points
Watching the signal person while missing overhead obstruction
Focusing on crane capacity while underestimating ground bearing risk
Trying to “save” an unstable lift rather than stopping
The simplest defense is a stop-work culture that is real during the lift, not only in the pre-lift meeting. Crews should agree on plain stop criteria before the pick begins. Examples include loss of visual contact, radio interference, unexpected load movement, unauthorized entry into the exclusion zone, or wind above the defined limit.
A useful HSE review question is: what could the crew be looking at while the real danger develops somewhere else?
Vehicle Incidents And Roadside Emergencies
Driving already demands constant scanning. During an incident, attention narrows further. A driver may focus on the vehicle directly ahead and miss brake lights two cars beyond. A worker responding to a roadside breakdown may focus on the disabled vehicle and miss traffic drift. A supervisor arriving at a site may focus on finding the entrance and miss pedestrians, forklifts, or temporary traffic controls.
Transportation safety research and crash investigations often identify inattention, expectation, speed, fatigue, and poor hazard perception as contributing factors. Cognitive tunneling can occur even when the driver’s eyes are open and directed forward. The problem is not only seeing. It is perceiving and interpreting.
A common example is the “looked but failed to see” problem at intersections. A driver may look toward a motorcycle, bicycle, or pedestrian but fail to register the hazard because attention is tuned to larger vehicles or the expected traffic pattern.
In HSE-managed fleets, tunneling risks increase during:
Backing and maneuvering
Emergency response driving
Convoy movement
Work zones
Loading docks
Roadside assistance
Post-incident scene control
Decision support for vehicle risk should include environmental prompts, not only driver behavior rules. For example, roadside response plans should assign one person to traffic watch when staffing allows. Vehicle incident procedures should specify where to park, how to angle the vehicle, when to deploy cones or flares, and when to retreat to a safer location.
A driver under stress should not need to invent a traffic control plan at the shoulder of a highway.
Control Room And Alarm Flood Examples
Control rooms are fertile ground for cognitive tunneling because they can overload people with data while hiding the field reality. Screens, alarms, trends, radios, permits, and calls compete for attention. The operator must decide what matters now.
Alarm flood is a known human factors hazard. Industry guidance such as ISA 18.2 and IEC 62682 addresses alarm management principles, including alarm rationalization, priority, shelving, and performance monitoring. The reason is practical. If too many alarms arrive together, operators cannot treat them all as meaningful.
During an upset, an operator may lock onto the first alarm, the most familiar alarm, or the alarm tied to a recent maintenance issue. While troubleshooting that point, the broader process state may move toward a limit.
Control-room tunneling can also happen through display design. If critical information lives on another screen, behind multiple clicks, or in a trend that is not displayed by default, it may not exist for the operator during a high workload event.
Better control-room design supports three questions:
What is the plant state?
What is changing fastest?
What action is required now?
High-performance HMI principles support this by using clear hierarchy, meaningful alarm priority, trend visibility, and displays that show abnormal conditions without requiring the operator to search through clutter. These ideas are not cosmetic. They protect attention.
How Emergency Systems Can Accidentally Make Tunneling Worse
HSE teams often focus on training people to stay calm. Training helps, but system design can still push people into a tunnel.
Poorly designed emergency systems create hidden traps.
Too Many Alarms Compete For The Same Attention
If everything alarms, nothing guides. Alarm floods can cause operators to silence alarms, focus on a familiar one, or wait for the pattern to settle. That costs time.
Alarm systems should distinguish advisory, warning, and critical conditions. A high-priority alarm should mean something specific. It should also have a defined operator response.
Procedures Require Interpretation At The Worst Moment
Many emergency procedures contain vague language. Phrases such as “as needed,” “if safe,” and “monitor closely” may be unavoidable in some contexts, but they can leave too much judgment for a stressed team.
Good procedures identify triggers, actions, roles, and escalation points. They also separate diagnosis from immediate protective action. In an emergency, the first task is often to place the system in a safer state, not to prove the root cause.
Radio Traffic Creates A False Sense Of Awareness
Busy radio channels can feel like coordination. They can also bury critical information. People may assume someone else heard the key message. Under stress, responders may transmit too much detail, use unclear location names, or fail to confirm receipt.
Radio discipline matters. Short messages, repeat-backs, standard location names, and clear command transfer reduce mental load.
Displays Show Data Without Meaning
A screen full of numbers is not decision support. During abnormal conditions, people need context. Is the value normal, abnormal, rising, falling, near a trip point, or inconsistent with other data?
Color alone is not enough. Display design should use grouping, trend direction, plain labels, and clear abnormal state indicators.
Supervisors Become Problem Solvers Instead Of Attention Managers
During an emergency, leaders often get pulled into technical troubleshooting. That can leave no one managing the bigger picture. The response leader’s job is not to solve every detail. It is to maintain situational awareness, set priorities, control communications, and call time-outs when needed.
Methods For Designing Better Emergency Decision Support
Better decision support does not mean adding more screens, more forms, or more alarms. It means helping people make safer decisions when attention is limited.
The following methods apply across emergency response, process safety, lifting, vehicle operations, and control rooms.
Build Reassessment Into The Workflow
Cognitive tunneling thrives when teams do not pause to update their understanding. Build reassessment into procedures and drills.
Use short prompts at defined points:
What has changed?
What is the worst credible next event?
What cues do not fit our current explanation?
Are we still inside the safe operating envelope?
Do we need to stop, isolate, evacuate, or escalate?
For field response, set time-based check-ins. For process operations, set state-based check-ins tied to pressure, level, temperature, gas detection, or equipment status. For lifting, reassess before hoisting, before traveling, before setting, and after any unexpected movement.
Use Role Design To Protect The Wider View
Assign someone to maintain the wider picture. This role may be the incident commander, lift director, control-room supervisor, or road scene lead. The key is to define the job before the emergency.
The wider-view role should:
Track changing conditions
Challenge assumptions
Watch for secondary hazards
Control task overload
Decide when to pause or stop
Ask for outside help early
In high-hazard work, the person with the best technical skill may not be the best person to maintain the full scene view if they are also troubleshooting.
Create Decision Aids With Triggers And Actions
A useful decision aid links a cue to a response. It avoids long explanations during the event.
For example:
Situation | Decision Support That Reduces Tunneling |
Gas detector alarm during maintenance | Stop hot work, evacuate the immediate area, account for crew, verify wind direction, notify control room |
Load swings during a lift | Stop movement, lower if safe, clear exclusion zone, reassess rigging and wind |
Multiple process alarms in one unit | Move to abnormal operating procedure, check key safe operating limits, assign one operator to trends |
Roadside breakdown | Park in a protective position if safe, activate warning devices, move people away from traffic, call traffic control support |
Fire response near chemicals | Identify material, isolate ignition sources if safe, confirm runoff path, establish exclusion zone |
This format helps because it does not ask a stressed person to create a plan from memory.
Design Displays Around Plant State Rather Than Equipment Lists
Control-room decision support should show the condition of the system, not just the status of components. Operators need to see relationships.
A strong abnormal situation display highlights:
Current operating mode
Safe operating limits
Rate of change
Critical barriers
Equipment unavailable or bypassed
Alarm priority with response guidance
Trends for the variables that define risk
Good display design also reduces unnecessary visual noise. If every value has the same color, size, and weight, the operator must work harder to find the abnormal state.
Use Checklists For Critical Transitions
Checklists work best when they protect against predictable omissions. They should be short, specific, and positioned at transition points.
Examples include:
Before entry into a hot zone
Before restart after trip
Before lifting the load
Before reversing or entering a congested area
Before transferring command
Before returning to normal operation
A checklist should not become a paperwork ritual. It should force the team to look at what tunneling would make them miss.
Train For Surprise, Not Only Procedure Compliance
Drills often test whether people remember the plan. Real emergencies test whether people can update the plan when reality changes.
Scenario training should include:
Conflicting cues
A deteriorating condition away from the obvious hazard
A failed communication path
A missing person or unaccounted contractor
A misleading alarm
A weather or wind shift
A blocked access route
A leadership handoff
The exercise objective should include recognition of changing conditions, not only completion of assigned tasks.
Normalize Challenge And Stop Authority
Tunneling becomes more dangerous when the team treats the first plan as fixed. A junior worker may notice the key cue but stay silent if the culture punishes interruption.
Stop authority must be practical. Crews need words they can use in the moment. For example:
“Stop the lift.”
“Hold position.”
“We need a reassessment.”
“That reading does not fit.”
“Traffic is entering the work zone.”
“We have lost visual contact.”
These phrases should appear in training and pre-job briefings. A stop call should trigger a known response, not debate.
How To Test Whether Decision Support Will Work Under Stress
A procedure may look good on paper and still fail during stress. HSE teams should test decision support in realistic conditions before relying on it.
Run Tabletop Reviews With Human Factors Questions
A tabletop exercise should ask more than “what does the procedure say?” It should test attention.
Use questions such as:
What will be most visible to the team?
What will be easiest to miss?
Which alarm or cue might dominate attention?
What false explanation might seem reasonable at first?
Who has authority to stop the action?
What information must be repeated back?
What decision has to be made within the first few minutes?
These questions reveal whether the system depends too much on perfect human attention.
Observe Drills For Fixation Behaviors
During drills, evaluators often track completion times and procedural steps. Add observation of cognitive behaviors.
Look for signs such as:
Everyone faces the same hazard and no one scans the wider area.
The team keeps troubleshooting after stop criteria are met.
Radio traffic increases but shared understanding does not.
The leader handles details and stops directing the response.
People ignore cues that conflict with the initial diagnosis.
No one asks what has changed.
Debrief these observations without blame. The question is not “why were you careless?” The better question is “what in the system made this easy to miss?”
Review Near Misses For Attention Traps
Near-miss reports often focus on immediate causes. Add prompts that identify tunneling.
Useful prompts include:
What was the person focused on at the time?
What information was available but not used?
Was the missed cue visible, audible, or hidden?
Did alarms, radio traffic, or workload compete for attention?
Did the first explanation turn out to be wrong?
What would have helped the person reassess sooner?
This turns near-miss learning into better design, not just a reminder to “pay more attention.”
Measure The Health Of The Support System
Some indicators can show whether the organization is reducing tunneling risk.
Track:
Alarm rates during normal and abnormal periods
Number of standing alarms
Emergency drill reassessment quality
Procedure steps that lack clear triggers
Stop-work calls during drills and real work
Control-room workload during upsets
Radio communication errors
Time to recognize escalation criteria
Post-incident findings related to situational awareness
The measures do not need to be complex. They need to show whether people can detect change, act on critical cues, and stop when conditions drift outside the plan.
What HSE Leaders Should Change First
The fastest gains usually come from improving a few high-risk decisions rather than rewriting every procedure.
Start with tasks where cognitive tunneling would have severe consequences:
Emergency shutdown decisions
Evacuation and shelter-in-place decisions
Critical lift stop criteria
Confined space rescue decisions
Hot work gas alarm response
Roadside emergency response
Restart after trip
Override or bypass decisions
Control-room response to alarm floods
For each task, identify the moment when attention is most likely to narrow. Then add support at that point.
A good improvement cycle looks like this:
Select one high-risk scenario.
Map the cues people receive.
Identify the cue most likely to dominate attention.
Identify the critical cue most likely to be missed.
Define stop, reassess, and escalation triggers.
Test the support in a drill.
Revise based on observed behavior.
This approach keeps human factors practical. It also helps leaders avoid vague corrective actions such as “increase awareness” or “retrain personnel.” Awareness matters, but design carries more weight when seconds count.
The strongest emergency decision support does three things. It makes the critical cue easier to see. It makes the next safe action easier to choose. It makes reassessment a required part of the work.
When teams can pause, challenge the first story, and scan for what does not fit, they are less likely to miss the hazard outside the tunnel.
