The Temptation to Protect Your Image Instead of Your People

Why It Matters

You will spend much of your adult life inside organizations — companies, nonprofits, government agencies, families — that have cultures. Those cultures either make it easy or hard to say true things that are uncomfortable. Understanding how those cultures form, what sustains them, and what it costs to challenge them is practically essential to operating with integrity inside them.

The Challenger disaster is taught in engineering schools, business schools, and ethics programs because it is unusually well-documented. We can trace, step by step, exactly who knew what and when, exactly which decisions were made, and exactly where the failure of character inserted itself into a system that had all the information it needed to make a different choice. It is a gift, in the terrible sense — a completely clear window into a failure mode that is otherwise invisible until after the catastrophe.

This failure mode is not limited to NASA. It operates in hospitals, in banks, in families, in friend groups. The form it takes in each context is slightly different, but the structure is the same: people with uncomfortable knowledge are given — or give themselves — reasons not to insist, and the person at the top of the structure receives a picture of reality that has been filtered through everyone's desire to not be the one who causes a problem. The result is decisions made on the basis of what everyone wanted to be true.

A Story

The Night Before Challenger

On the evening of January 27, 1986, a group of engineers at Morton Thiokol — the company that manufactured the solid rocket boosters for the Space Shuttle — were on a telephone conference call with NASA managers, arguing urgently that the launch scheduled for the following morning should be delayed. The temperature at Cape Canaveral was forecast to drop below freezing overnight. The engineers believed — had evidence to support — that the O-rings sealing the joints of the solid rocket boosters became dangerously brittle in cold temperatures and might fail to seal properly.

The lead engineer, Roger Boisjoly, had been raising concerns about the O-rings for more than a year. He had written an internal memo in July 1985 calling the problem 'a catastrophe of the highest order' and warning that it could result in the loss of the vehicle and crew. The memo had not stopped the previous launches. Organizational momentum was difficult to interrupt.

On this particular evening, the engineers presented their data. The NASA managers pushed back. One of them said, with audible frustration, words that would later be considered among the most damning in the history of organizational failure: 'My God, Thiokol, when do you want me to launch, next April? The engineers are killing us.' Then, in a break from normal procedure, the NASA manager asked the Thiokol management to 'take off your engineering hat and put on your management hat.' The implication was clear: this was not a technical problem anymore. It was a schedule problem. A political problem. A perception problem.

The Thiokol management overruled their own engineers and approved the launch. Boisjoly and his colleague Arnie Thompson argued until the last moment. When the vote was taken, they were excluded from it.

On the morning of January 28, 1986, at 11:38 a.m., Space Shuttle Challenger lifted off from Cape Canaveral. Seventy-three seconds later, it disintegrated. All seven crew members were killed.

The Rogers Commission, convened to investigate the disaster, found that the decision to launch had proceeded despite warnings that should have stopped it — and that the organizational culture at NASA had created an environment in which schedule pressure routinely overrode engineering safety concerns. Managers at multiple levels had filtered or failed to escalate information that, had it reached the right people in time, might have changed the decision.

Boisjoly testified before the commission and named everything he had witnessed. He had tried to stop the launch. He had been overruled. For the rest of his life, he went to schools and companies and organizations and told this story, not as a tale of his own heroism, but as a warning: 'Watch your organizations,' he said. 'Watch for the moment when the people in power start to hear only what they want to hear. That is when people get hurt.'

Vocabulary

Normalization of deviance

The gradual process by which a known risk or flaw is repeatedly tolerated without incident until it becomes treated as acceptable — even though the underlying danger has not changed. The O-ring problem at NASA was normalized over many launches; because nothing catastrophic had happened, the warnings became easier to dismiss.

Organizational silence

A pattern in which people within an organization consistently withhold concerns, criticisms, or important information because the culture has — explicitly or implicitly — made it unsafe or futile to speak. Organizational silence is not always the result of fear of punishment; it can also result from the sense that speaking will not change anything.

Schedule pressure

The organizational force generated by timelines, public commitments, financial constraints, and political expectations that creates pressure to proceed with a course of action regardless of technical or safety concerns. Schedule pressure is a common contributor to preventable disasters.

Whistleblowing

The act of disclosing wrongdoing, danger, or significant misconduct to an authority outside the normal chain of command — to regulators, the press, or the public — when internal channels have failed. Whistleblowing is often legally protected but personally costly.

Psychological safety

The condition in a team or organization in which people feel that it is safe to speak up, raise concerns, admit mistakes, and disagree with authority without fear of punishment or humiliation. Psychological safety is strongly correlated with team performance and is the specific quality that was absent in the NASA management culture before Challenger.

Guided Teaching

This lesson is about a systemic failure, not a single villain. The Challenger disaster is sometimes taught as if there were obvious bad actors who made obviously wrong choices. The reality is more uncomfortable: the people who approved the launch were not monsters. They were managers under real pressure, in a culture that had rewarded launches and treated delays as problems. The decision to launch was produced by a system — and individual decisions were shaped, at every level, by what that system rewarded and punished.

The phrase 'take off your engineering hat and put on your management hat' is the heart of this lesson. Ask your student: what does that phrase mean? What is it asking the engineers to do? It is asking them to stop being the people whose job is to say true things about technical reality, and to start being the people whose job is to help the organization do what it wants to do. This is the moment when the organization's needs replaced the facts. And no one in the room stopped it.

Discuss the concept of normalization of deviance. The O-ring problem had been known for more than a year. The previous launches had not failed — which made the risk feel more manageable than it was. Ask your student: can you think of a parallel in everyday life? A family that has a conversation pattern that isn't quite healthy but has never produced a crisis, so it never gets examined? A practice in a sport or activity that everyone knows is slightly dangerous but hasn't caused an injury yet? The normalization of deviance is a universal human pattern.

Ask your student: what would it have required to stop the launch? Not courage in the abstract, but specifically: which person would have needed to say what, to whom, and in what way, for the outcome to be different? Working through the actual chain makes the point more specifically than abstract principles. And then: why didn't any of those people do that? What would have happened to them if they had tried?

Close with Boisjoly. He testified. He named everything. He spent the rest of his life telling this story as a warning. He lost his job, his health, and his standing in the aerospace community. But he said: 'I could not have lived with myself if I had not spoken.' Ask your student: what does that suggest about the relationship between integrity and cost? Is there a version of integrity that is only worth having when it doesn't cost anything?

For Discussion

1. 1.Why does the lesson describe the Challenger disaster as a failure of organizational culture rather than simply a bad decision by a few individuals?
2. 2.What does 'normalization of deviance' mean? Can you think of an example from your own experience — in any context — where a known problem was repeatedly tolerated until it felt acceptable?
3. 3.What did the NASA manager mean when he told Thiokol to 'take off your engineering hat and put on your management hat'? Why is that request so ethically significant?
4. 4.What is psychological safety? Why does its absence create dangerous conditions in organizations?
5. 5.Roger Boisjoly knew about the danger for over a year before the disaster. He raised concerns internally and was overruled. What options did he have? What were the costs and consequences of each?
6. 6.What can a person do — at any level in an organization, not just at the top — to push back against image-protection and organizational silence? What would it have cost someone at NASA to do that in 1985 and 1986?

Practice

Organizational Culture Audit

1. 1.Think of an organization you are currently part of — a sports team, a club, a workplace, a family, a school group. Describe its culture honestly: not how it presents itself, but how it actually operates.
2. 2.Ask yourself: is it easy or difficult to raise concerns in this organization? When someone brings a problem, how is it typically received? Are there topics that are consistently avoided? Are there people whose concerns are consistently taken less seriously than others?
3. 3.Identify one specific way this organization's culture currently makes it easier or harder to tell uncomfortable truths. What created that culture? What sustains it?
4. 4.Write a one-paragraph description of what a leader would need to do — specifically — to make this culture more psychologically safe. Not in general terms: specifically. What would that leader need to say, and in what context, and to whom?

Memory Questions

1. 1.What was the O-ring problem, and how long had it been known before the Challenger disaster?
2. 2.What does 'normalization of deviance' mean, and how did it operate at NASA before Challenger?
3. 3.What did the NASA manager mean when he asked Thiokol to 'take off your engineering hat'? Why does that phrase matter?
4. 4.What is psychological safety, and why was its absence important in the Challenger disaster?
5. 5.What did Roger Boisjoly do after the disaster, and what does the lesson say it reveals about the relationship between integrity and cost?