Attack CascadeAttack Cascade

Beyond the Tabletop · Article 2 of 5

Psychological Safety Is Crisis Infrastructure, Not a Culture Perk

Learn why psychological safety is crisis infrastructure, how Australian leaders can use tabletop exercise analytics to strengthen speaking up and resilience.

Attack Cascade Research9 minute read

Executive opening

In a serious incident, the most important information may not belong to the person with the most authority. It may sit with an analyst, frontline manager, legal adviser or employee who sees a problem others cannot yet see.

Whether that information travels is a resilience question.

Psychological safety is the shared belief that a team is safe for interpersonal risk-taking. It does not mean that everyone agrees, that standards are lowered, or that difficult performance conversations disappear. It means people can ask a question, challenge an assumption, report a concern or admit uncertainty without expecting humiliation or automatic punishment. Amy Edmondson’s foundational field study linked psychological safety with team learning behaviour, with learning behaviour in turn associated with team performance; that is an association and a model of how learning may operate, not a guarantee of crisis success. Edmondson’s 1999 study remains a useful starting point.

For Australian leaders, this makes psychological safety part of operational resilience, not a discretionary culture initiative. Tabletop exercises can reveal whether authority, trust and communication work under pressure, and whether concerns become changed behaviour. The objective is not to score individual courage, but to understand the conditions in which information moves.

Why psychological safety matters in a crisis

Speaking up is an operational control

During a disruption, teams work with incomplete information, competing priorities and time pressure. A decision-maker may need to act before facts are settled. In that environment, silence can be mistaken for agreement and confidence can be mistaken for competence.

Speaking up is therefore not simply a matter of interpersonal style. It can provide an early warning, expose a dependency, identify a regulatory question or prevent a communications error. Psychological safety supports the behaviours that make those signals usable: asking for clarification, escalating uncertainty, sharing bad news and testing a plan before it becomes an irreversible commitment.

Research supports the connection between psychological safety and learning, communication and performance, but leaders should resist simplistic claims. A psychologically safe team can still make a poor decision. A team can also speak up and be ignored. The leadership task is to make voice possible and then ensure that the organisation has a credible way to hear, assess and act on it.

Psychological safety is not “being nice”

Psychological safety is sometimes confused with comfort. In resilient organisations, it should make candour more likely, not make challenge less likely. A respectful team can say that evidence is insufficient, authority is unclear, customer impact is larger than reported, or the group is anchoring on its first explanation.

Accountability remains essential. A fair environment distinguishes between a reasonable decision made with the information available, a system weakness, and reckless or deliberately harmful conduct. Psychological safety does not remove responsibility; it helps the organisation see problems early enough to respond responsibly.

What the evidence says — and what it does not

A 2017 meta-analysis drew on 136 independent samples, more than 22,000 individuals and nearly 5,000 groups. It supports treating psychological safety as a serious organisational research construct, but not as a single score that predicts crisis performance. Frazier and colleagues, 2017.

The intervention evidence is more cautious. A systematic review of 14 interventions addressing psychological safety, speaking up and voice behaviour found mixed results. It recommended longitudinal, multifaceted approaches, objective measures, visible leadership support and work across interdisciplinary teams. Education alone did not consistently change deeply rooted speaking-up behaviour. O’Donovan and McAuliffe, 2020.

That finding matters for exercise design. A workshop can explain escalation protocols, but cannot demonstrate that people will challenge a senior executive six months later. Repeated exercises, consistent debriefing and visible follow-through provide better evidence of patterns, not proof of causation.

Australian work health and safety guidance treats psychological health as an organisational concern, not only an individual one. This is not a reason to infer mental health from exercise behaviour. It is a reason to examine whether leadership practices, workload, role ambiguity or fear of consequences make it harder to raise concerns. Safe Work Australia, 2024.

From a point-in-time exercise to a learning system

A traditional tabletop often ends with a debrief, observations and a report. The risk is treating attendance or a completed report as evidence that resilience has improved.

Longitudinal tabletop analytics change the question from “Did we run the exercise?” to “What is changing in how we operate?”

The current analytics model surfaces exercise history, maturity trends, dimension deep-dives, communication and timeliness results, risk profiles, recommendations and completed-run history. It also includes evidence-gated Organisational Experience (OEX) dimensions—Robustness, Exposure, Blind Spots, Trust, Adaptability and Recovery—alongside an Organisational Confidence Index (OCI). These frameworks organise exercise findings; they are not clinical assessments, employee ratings or proof of real-event success.

For psychological safety, the useful unit of analysis is the condition and pattern:

  1. Condition: Could participants question an assumption, ask for help or report uncertainty?
  2. Pattern: Did the same hesitation, escalation gap or authority ambiguity appear in more than one exercise?
  3. Response: Did leaders acknowledge the signal and create a safe route for follow-up?
  4. Learning: Was the action completed, retested and reflected in a later exercise?

This protects people and improves evidence. It avoids turning hesitation into a label, while also avoiding the error of calling a session psychologically safe simply because no one openly disagreed.

How exercise analytics change the conversation

From “Who failed?” to “What made speaking up difficult?”

An individual-focused review asks who did not escalate. A resilience-focused review asks whether the path was clear, information and authority were available, and prior experience taught people that raising concerns was welcome.

If leaders punish the messenger, the next exercise may produce quieter participation without reducing risk. Examining the system can clarify thresholds, roles and decision rights.

From confidence to evidence

Executives may leave a tabletop feeling that the team performed well. Structured analytics can put observations beside that feeling: communication, response timeliness, governance, dimension trends, priority actions and questions for the next run.

The most credible statement is often modest: “In this scenario, participants identified the issue earlier, used a clearer route and revisited an outstanding action.” That is stronger than claiming a score proves resilience.

From one team’s culture to organisational patterns

Psychological safety can vary by team, role, hierarchy and context. Senior leaders may challenge one another freely while frontline staff remain uncertain about escalation. Technology may share information rapidly while legal, communications and operations receive it too late.

Analytics should help leaders compare exercises, tracks, jurisdictions and dimensions without creating a league table. The goal is to identify recurring barriers and improve information flow across boundaries.

Practical actions for Australian boards and executives

1. Ask for evidence of learning, not only exercise completion

Board reporting should show what was tested, observed, assigned and changed when retested. For APRA-regulated entities, CPS 230 places accountability for operational risk management and business continuity with the board and expects critical operations to remain within tolerance during severe disruption. One tabletop does not prove resilience. APRA, CPS 230.

2. Make dissent an explicit exercise objective

Brief facilitators to observe whether assumptions are tested, dissent acknowledged and alternative evidence considered. Ask leaders to invite challenge without putting anyone on display.

3. Use debriefs to learn before evaluating

Early evaluative language can close a conversation. The intervention review found that debriefing leader behaviour influenced psychological safety in simulation settings. Start with “What did you see?” and “What information did you have then?” before moving to “What should have happened?”

4. Track actions and retest them

An action that is not owned, dated and retested is an intention. Use the next exercise to test whether a new threshold, contact path, authority delegation or communication protocol works under pressure. Record when the evidence is insufficient rather than forcing a score.

5. Protect confidentiality and dignity

Do not rank individuals, diagnose trauma or infer mental health from exercise analytics. Aggregate where possible, explain what is collected and why, and separate learning from discipline while retaining fair accountability for reckless conduct. Psychological safety cannot be created through covert surveillance.

6. Look for cross-functional silence

Ask where information stopped between security, operations, executives, legal, communications or a critical supplier. A concern that never reaches the decision-maker is not an effective control. This is where intelligence flow and crisis decision-making becomes central to resilience.

Psychological safety and sustainable resilience

Resilience is not appearing calm during one exercise. It is absorbing disruption, making informed decisions, recovering and improving without exhausting the people and relationships on which that capacity depends.

That is why psychological safety belongs alongside governance, technical readiness, legal readiness, communications and response timeliness. If people cannot disclose uncertainty, challenge assumptions or report a near miss, formal controls may look stronger on paper than in practice.

The proposed threat-informed leadership lens in this series extends that idea carefully. Inspired by trauma-informed principles such as safety, trust, collaboration and empowerment, it asks leaders to understand how repeated exposure to threat can shape attention, communication and decision-making. It is a management lens, not a validated clinical framework. It must never be used to pathologise employees or justify surveillance.

Conclusion

Psychological safety is not a promise that every voice will prevail. It is a leadership obligation to make relevant voice possible, to hear it seriously and to learn from what happens next.

Tabletop exercise analytics can support that obligation when they focus on organisational conditions and longitudinal patterns: authority, trust, information flow, adaptation, recovery and the closure of learning actions. OEX and OCI can help structure that evidence where sufficient findings have been captured, while their evidence-gated and “not captured” states should remain visible.

The leadership question is simple but demanding: When the next credible threat emerges, will people across our organisation feel able—and be able—to tell us what we need to know?

Key takeaways

Frequently asked questions

What is psychological safety in organisational resilience?

Psychological safety is the shared belief that people can raise concerns, ask questions, admit uncertainty and challenge assumptions without unreasonable interpersonal punishment. In organisational resilience, it supports the information flow and learning behaviours needed to manage disruption.

Does psychological safety mean there is no accountability?

No. Psychological safety and accountability are compatible. Leaders can encourage reporting and learning while distinguishing reasonable decisions, system weaknesses and reckless or deliberately harmful conduct.

How can a tabletop exercise assess psychological safety?

It should observe conditions and group patterns: whether concerns are raised, how leaders respond to dissent, whether escalation routes are clear, whose information is included and whether issues are acted on. It should not diagnose, rank or permanently label individuals.

Can OEX or OCI prove that an organisation is resilient?

No. OEX and OCI are supporting evidence frameworks within the described analytics model. They can organise captured findings and trends, but a score from an exercise is not causal proof or a guarantee of real-incident performance.

Suggested internal links

References

  1. Psychological Safety and Learning Behavior in Work Teams — Amy Edmondson (1999)
  2. Psychological Safety: A Meta-Analytic Review and Extension — Frazier et al. (2017)
  3. A systematic review exploring interventions to improve psychological safety, speaking up and voice behaviour — O’Donovan and McAuliffe (2020)
  4. Individual Characteristics That Promote or Prevent Psychological Safety and Error Reporting in Healthcare — Wawersik et al. (2023)
  5. Psychological health and safety in the workplace — Safe Work Australia (2024)
  6. Prudential Standard CPS 230: Operational Risk Management — APRA (2023)