University of North Texas  |  College of Information SWDSI Annual Conference

Engineering Reliability

Training as a Strategic Driver of Risk Reduction
in Supply Chain Systems

SWDSI Conference Presentation
Presented by
Scott J. Warren, Ph.D.
Department of Learning Technologies
College of Information  ·  [email protected]

Co-author
Arun Pookalangara
Department of Learning Technologies
College of Information
University of North Texas
The Core Argument

Training Is Not a Cost. It Is Engineered Reliability

Organizations routinely treat employee training as a discretionary expense, reduced when budgets tighten. This paper argues the opposite: structured, FMEA-grounded training programs function as engineering interventions that measurably reduce risk and generate calculable returns.

Risk Barrier
Reason (1997)[1] describes training as an adjustable barrier between incident and prevention, serving as the last defense before errors cascade into failures.
Active Control
ISO 31000[2] positions training across every phase of risk management: identification, treatment, and monitoring through performance feedback loops.
Org Intelligence
Hollnagel, Woods, and Leveson (2006)[3] argue training is not a static expense but an evolving form of organizational intelligence that adapts to new threats over time.

The Method

Failure Mode and Effects Analysis (FMEA)

FMEA is an engineering framework for systematically identifying where and how a process can fail, and quantifying the risk of each failure mode through a composite Risk Priority Number (RPN).[4]

S
Severity
×
O
Occurrence
×
D
Detection
=
RPN
Risk Priority Number
Training reduces Occurrence (O) and improves Detection (D), directly lowering RPN and increasing system reliability.
FedEx Cold-Chain Logistics
Physical supply chain risk involving temperature excursions and pharmaceutical spoilage caused by conditioning errors and handoff delays.
Maersk Cyber-Resilience
Digital/IT security risk addressed through a post-NotPetya training program (2017-2023) targeting phishing, lateral movement, and backup recovery failures.

Case Study: FedEx

Cold-Chain Logistics: Training as Temperature Risk Engineering

FedEx operates one of the world's most demanding cold-chain logistics networks, where pharmaceutical shipments must remain within precise temperature ranges from origin to delivery. A single lapse in gel-pack conditioning, probe calibration, or handoff protocol can render an entire shipment unusable, exposing the company to spoilage claims, regulatory penalties, and customer attrition.

Following its Safe Ops training initiative, FedEx's 2024 Sustainability Report documented a 52% reduction in temperature-related incidents and a 31% improvement in on-time pharmaceutical deliveries.[5] FedEx did not report these results using FMEA, but their publicly available performance metrics map directly onto FMEA's logic: each improvement reflects a reduction in how often a failure mode occurs (Occurrence) and how quickly it is caught (Detection), which together drive down the Risk Priority Number.

The table below illustrates how those reported improvements translate into modeled RPN shifts across three key failure modes. The largest proportional gain appears in gel-pack conditioning, where targeted procedural training produced a 70% RPN reduction — demonstrating how precise skill development in a single step can create outsized gains in overall system reliability.[4]

52%
Reduction in temperature excursions[5]
31%
Drop in pharmaceutical spoilage claims[5]
70%
RPN reduction (gel pack conditioning)
Failure ModeRPN Before TrainingRPN After Training% RPN Reduction
Under-conditioned gel packs1604870%
Misread temperature probe1265656%
Handoff delay warming1205455%
Note: RPN values are illustrative and modeled on FedEx's reported performance metrics. They show how training outcomes could be expressed using FMEA's Severity × Occurrence × Detection framework.

Case Study: Maersk

Cyber-Resilience: Training After a Catastrophic Attack

In June 2017, the NotPetya cyberattack brought Maersk's global operations to a near-complete halt. The malware spread through the company's network in hours, taking down approximately 45,000 PCs, 4,000 servers, and 2,500 applications. The financial cost exceeded $300 million. The vulnerability was not primarily technical — it was human. Phishing click rates, undetected lateral movement, and failed backup procedures were the actual failure modes.

In response, Maersk launched a global cyber-resilience training program targeting precisely those human behaviors. By 2023, the company reported an 80% reduction in critical IT-security incidents.[6] Applying FMEA to these outcomes reveals where training had its greatest effect: phishing-related risk saw the largest modeled RPN decline (76%), reflecting dramatically reduced click rates and improved threat detection awareness among staff.

This case illustrates a crucial point: cybersecurity is not purely a technical problem. It is a human reliability problem, and training is the intervention that addresses it most directly. Each percentage improvement in Maersk's incident rates represents a measurable shift in the Occurrence and Detection dimensions of FMEA — translating human behavior change into calculable risk reduction.[8]

80%
Drop in critical IT-security incidents[6]
76%
RPN reduction (phishing attacks)
55%
RPN reduction (lateral movement)
Failure ModeRPN Before TrainingRPN After Training% RPN Reduction
Phishing leading to credential compromise3368076%
Lateral movement undetected36016255%
Backup/restore delay1688450%
Note: RPN values are illustrative and modeled on Maersk's reported cybersecurity improvements. They demonstrate how FMEA could quantify the relative effectiveness of training across different digital failure modes.

Training as Strategic ROI

From Cost Center to Value Creator

Both cases demonstrate that training-driven RPN reductions translate directly to financial and operational returns. These are not soft benefits but measurable outcomes tied to specific failure mode elimination.

FedEx Returns
  • Reduced pharmaceutical spoilage
  • Improved customer retention
  • Fewer regulatory incidents
  • Measurable process gains
Maersk Returns
  • Shorter cyber-recovery times
  • Reduced insurance exposure
  • Strengthened brand integrity
  • Predictive risk capability
"Each measurable reduction in failure likelihood corresponds directly to improved organizational ROI"[7] (Phillips, 2016)

Training as Organizational Defense

High-Reliability Organizations

High-Reliability Organizations are distinguished not by the absence of failure, but by their capacity to detect, contain, and recover from failure before it propagates. Training is the engine of each HRO capability.

Anticipation
Identify anomalies early before errors cascade into failures.[8] Training sharpens the perceptual skills needed to spot deviations before they escalate.
Adaptation
Respond flexibly under pressure. Human judgment complements engineered processes, and training is how that judgment is developed and tested.[3]
Feedback Loops
Institutionalized learning: lessons from one event strengthen overall resilience.[9] Training embeds feedback as a structural feature, not an afterthought.
Self-Correction
Proactive system learning. FedEx analytics and Maersk drills transform reactive incident responses into proactive risk reduction capabilities.

The Integrated Framework

From Risk Assessment to Strategic ROI

1ISO 31000
Risk Framework
Establish risk context and organizational objectives
>
2FMEA
Analysis
Identify failure modes and calculate baseline RPN scores
>
3Training
Intervention
Deploy targeted training to reduce O and D scores
>
4Measured Risk
Reduction
Post-training RPN reassessment quantifies improvement
>
5Strategic
ROI
Connect RPN reductions to financial and operational outcomes
Quantifiable
FMEA converts training outcomes to numeric RPN shifts, measurable and defensible in any budget conversation.
Predictive
Training evaluation becomes a forward-looking strategic planning tool, not a retrospective compliance report.
Cultural
A high-reliability culture emerges when training is recognized as enterprise risk architecture, not overhead.
Core finding: Training is not a cost. It is engineered reliability, and its value is calculable.

Sources

References

  1. Reason, J. (1997). Managing the risks of organizational accidents. Ashgate.
  2. International Organization for Standardization. (2018). ISO 31000: Risk management guidelines.
  3. Hollnagel, E., Woods, D. D., & Leveson, N. (2006). Resilience engineering: Concepts and precepts. Ashgate.
  4. Stamatis, D. H. (2003). Failure Mode and Effect Analysis: FMEA from theory to execution (2nd ed.). ASQ Quality Press.
  5. FedEx. (2024). 2024 Sustainability Report. FedEx Corporation.
  6. Maersk. (2023). Annual Sustainability Report 2023. A. P. Moller-Maersk Group.
  7. Phillips, J. J. (2016). Handbook of training evaluation and measurement methods (4th ed.). Routledge.
  8. Weick, K. E., & Sutcliffe, K. M. (2001). Managing the unexpected: Assuring high performance in an age of complexity. Jossey-Bass.
  9. Senge, P. M. (1990). The fifth discipline: The art and practice of the learning organization. Doubleday.
  10. Baldwin, T. T., & Ford, J. K. (1988). Transfer of training: A review and directions for future research. Personnel Psychology, 41(1), 63–105.
  11. Christopher, M., & Peck, H. (2004). Building the resilient supply chain. International Journal of Logistics Management, 15(2), 1–13.
  12. Chopra, S., & Sodhi, M. S. (2014). Reducing the risk of supply chain disruptions. MIT Sloan Management Review, 55(3), 73–80.
  13. Warren, S. J., & Churchill, C. (2024). A holistic model of cognitive theory to explain knowledge construction and dissemination in organizations used for competitive advantage. Performance Improvement Journal, 62(5), 154–168. https://doi.org/10.56811/PFI-21-0036
  14. Warren, S. J., Churchill, C., & Hayes, A. (2024). A service-based measurement model for determining disruptive workforce training technology value. In J. Delello & R. McWhorter (Eds.), Disruptive Technologies in Education and Workforce Development (pp. 206–231). IGI Global.