When Authority and Impairment Collide: The Occupational Medicine Obligation For Fitness For For Duty Assessments

In safety-critical roles, fitness for duty is not assumed—it is verified. So why does verification fail precisely when the stakes are highest?

There is a clinical question we rarely ask loudly enough in professional settings: What happens when the individual whose judgment controls the greatest consequence shows the earliest signs that their judgment is failing?

Occupational medicine exists, in significant part, to answer that question. Fitness-for-

duty assessment—the formal, structured evaluation of whether an individual retains the cognitive, physical, and psychological capacity to safely perform the functions of a

specific role—is among the most consequential tools in our clinical arsenal. It is also

among the most underused, most politically avoided, and most systematically neglected at precisely the levels of authority where the stakes are highest.

This piece is not about politics. It is about systems, thresholds, and the clinical and

ethical obligation that attaches when behavioral deterioration in a safety-critical role

reaches the level of documented risk.

The Problem with Authority Gradients

Aviation and maritime industries spent decades learning a lesson that cost lives to understand: seniority and competence are not the same thing, and unchallenged authority in high-consequence environments produces catastrophic outcomes. The solution was not to remove authority—it was to build structured frameworks that channel authority, challenge unsafe decisions, and create obligatory escalation pathways when those decisions approach the threshold of harm.

Bridge Resource Management (BRM) and Crew Resource Management (CRM) were direct responses to this understanding. They are systems designed specifically to flatten authority gradients—to ensure that subordinates can, and in certain circumstances must, challenge decisions regardless of who is making them, when those decisions carry unacceptable risk.

But there is a gap in these frameworks that the occupational medicine community has not adequately addressed. These systems are built to intercept error—acute lapses, single bad decisions, momentary failures of procedure. They are less equipped to recognize and respond to a different and more insidious pattern: the progressive deterioration of judgment, impulse control, and executive function over time, at the level of command, in a way that becomes normalized by those who observe it.

DEFINITION — Fitness for Duty

A formal, structured assessment of whether an individual retains the cognitive, psychological, and physical capacity to safely perform the specific functions of their role. In occupational medicine, fitness for duty is determined by a qualified physician with appropriate occupational health expertise, not by operational supervisors or human resources professionals acting alone.

DEFINITION — A safety-critical system, task, or role

A safety-critical, system, task, or role is one in which failure, error, impairment, or absence of proper control has a credible and immediate potential to cause serious harm, including injury, fatality, environmental damage, or major asset loss.

In formal risk and engineering language, “safety-critical” denotes high-consequence, low-tolerance scenarios where the margin for error is minimal and where controls must be robust, redundant, and continuously verified.

A Maritime Scenario: The Case That Should Not Need to Happen

Consider the following scenario. It is deliberately drawn from maritime operations—a sector with mature occupational health frameworks, international regulatory oversight, and a well-developed culture of safety management. It is also, for that reason, useful as a control case: if the system should work anywhere, it should work there.

SCENARIO

A master of a very large crude carrier (VLCC) has, over a period of months, displayed escalating behavioral changes. Bridge communications have become unprofessional and at times abusive. VHF interactions with vessel traffic services have included impulsive responses and poor situational judgment. The bridge team has observed volatility, disinhibition, and deterioration in decision-making under routine conditions. This is not a single incident. It is a pattern.

Then, while operating in proximity to an adjacent laden tanker, the master declares an intention to deploy his vessel’s anchor in such a way as to foul, strike, or penetrate the hull or critical structures of the other ship. He issues the order.

He knows—any competent master would know—that hull breach, cargo release, fire, and explosion are reasonably foreseeable consequences. He also knows that the structural and kinetic consequences may not be contained to the target vessel.

When decision-making power reaches a scale where a single action can trigger environmental destruction, economic disruption, and loss of human life, fitness for duty is no longer optional—it is a systems requirement.

At that moment, several questions crystallize simultaneously. What is the obligation of the bridge team? What duty falls on the officer of the watch, the chief officer, the helmsman asked to execute? What is the culpability of those who observed the trajectory for weeks or months and did not escalate?

And critically: what should have happened before the order was ever given?

The Occupational Medicine Trigger Point

In occupational medicine, we recognize the concept of a clinical trigger point—an observable threshold of behavioral change that, in a safety-critical worker, mandates formal evaluation rather than continued operational tolerance. This is not a diagnosis. It is a signal that the question of diagnosis must be formally addressed.

The behaviors described in the scenario above—progressive volatility, impulsive and disinhibited communication, deterioration in judgment under routine conditions, escalating to a stated intent to take an action with foreseeable catastrophic consequences—constitute that trigger point. Not hypothetically. Operationally.

At that point, a formal fitness-for-duty assessment by a qualified Occupational Medicine physician is not optional. It is required. Removal from safety-critical duties should be immediate, pending evaluation. The purpose is not punitive. The purpose is protective.

The Differential Is Not Theoretical

One of the most important things occupational medicine contributes to this conversation is clinical specificity. The behaviors described are not simply “concerning.” They are medically interpretable. The differential diagnosis for the pattern described includes, but is not limited to:

1.      Acute or subacute neurological processes—including vascular lesions, space-occupying intracranial pathology, or early neurodegenerative change

2.     Primary psychiatric conditions affecting impulse control, judgment, and executive function—including those with late-onset presentations

3.     Substance-related impairment—whether acute intoxication, chronic dependence, or withdrawal-related behavioral dysregulation

4.     Medication-induced cognitive or behavioral effects—including prescribed medications with known CNS profiles

These are not permanent verdicts. They are diagnoses. Many are treatable, manageable, or reversible. But only if they are identified. And identification requires a physician with the training to conduct one—not a performance review, not an HR intervention, not a peer conversation.

“When the potential consequence of failure is catastrophic, capacity is not assumed—it is verified. The higher the level of authority, the more rigorous that verification must be.”

The Inverse Problem: Authority and the Collapse of Oversight

Here is the structural problem that occupational medicine must confront directly: the higher the level of authority, the less structured the fitness evaluation tends to become.

A commercial truck driver in Canada undergoes mandatory periodic medical evaluation. A Class 1 air transport pilot is subject to ongoing aeromedical fitness certification. A nuclear plant operator is assessed against psychological and cognitive fitness standards as a condition of licensing. A seafarer’s certificate of competency includes a medical component.

But as authority expands—as the scale of potential consequence grows—the formal structures of fitness verification often thin rather than thicken. This is the inverse problem. And it is not accidental. It reflects a social and institutional reluctance to subject authority itself to the scrutiny that its consequences demand.

This is a systems failure. And occupational medicine, as a specialty, is positioned to name it as such.

What Robust Fitness-for-Duty Systems Look Like

The occupational medicine literature, and the operational experience of high-reliability organizations, point toward several essential components of a system designed to address this problem before it reaches the crisis threshold:

1. Prospective behavioral surveillance frameworks. Structured, documented observation of behavioral patterns in safety-critical role-holders, with defined criteria for what constitutes a formal trigger requiring clinical referral—not ad hoc reporting, but protocol-governed escalation.

2. Independent clinical evaluation pathways. Fitness-for-duty assessments conducted by occupational medicine physicians who are structurally independent from the chain of command being evaluated. Independence is not optional; it is what gives the evaluation its validity.

3. Mandatory participation requirements. Where fitness-for-duty assessment is triggered by documented behavioral thresholds in a safety-critical role, participation cannot be voluntary. The stakes are too high for the individual in question to control access to evaluation.

4. Graduated removal and return-to-work protocols. Removal from safety-critical duties pending evaluation should be immediate. Return should require documented clearance, with conditions where indicated. The process should be transparent, defensible, and consistent.

5. Proportionality to consequence. The rigor of fitness evaluation should scale with the potential consequence of failure. A worker whose failure affects one person requires a different level of scrutiny than one whose failure affects thousands. This is a basic principle of proportionate risk management.

CLINICAL BOTTOM LINE

Progressive behavioral deterioration in a safety-critical role—documented volatility, disinhibition, impaired executive function, and statements or actions with foreseeable catastrophic consequence—constitutes a formal clinical trigger for mandatory fitness-for-duty assessment by a qualified Occupational Medicine physician. This trigger is not overridden by seniority, authority, or organizational hierarchy. It is, if anything, strengthened by them.

He issues the order.