RESUMO
The design of rules (laws, norms, policies, procedures, protocols) and the implementation of a management that aimed at conforming the behaviors of operators with these rules has long been the dominant approach to improve safety in socio-technical systems. This approach has proven to be effective in enhancing safety by enabling organizations to cope with predictable risks and failures. However, in our modern and constantly evolving socio-technical systems, where the management of unforeseen situation has become the rule, this approach has shown its limitations: operators' initiatives, which sometimes deviate from rules, are equally important for maintaining safety. Therefore, while the rules remain a key feature of risk management, the challenge is not the search for total compliance with rules, but the permanent monitoring of their use to detect and distinguish gaps that constitute a drift towards the accident from gaps that highlight that the rule has become inappropriate and which the compliance with may prove dangerous for safety.