I recently watched The Railway Men on Netflix. For those who have never heard of the show, it is inspired by the real railway workers in Bhopal who, during the 1984 Bhopal disaster, risked their lives to evacuate residents from the Bhopal Junction station.
The series focuses not only on the sequence of events following the gas leak, but also the remarkable actions taken by these men as they attempted to save as many lives as possible.
What happened during the 1984 Bhopal disaster?
Union Carbide India Limited (UCIL), part of the Union Carbide Corporation (UCC) in the United States, was a chemical plant that produce variety of products. Some of the products include pesticides, batteries, and plastics.
As part of its pesticide production, UCIL used a chemical called methyl isocyanate (MIC), which were housed in three 68 tonnes storage tanks. During the 1980s, there was a fall in demand for pesticides, but production at UCIL continued, which lead to an accumulation of unused MIC at the site.
On 2 December 1984, during the maintenance operation, water entered one of the MIC storage tanks as a pipe had not been properly sealed. The water introduced into the tanks resulted in an exothermic reaction, causing high volumes of poisonous gas to leak across the site.
By the early morning of 3rd December 1984, the reaction had escalated and the gas had spread across the city of Bhopal. Approximately 3,000 – 4,000 people are estimated to have died that night, with at least 15,000 related deaths after the incident.
Most accounts of the Bhopal incident focus on how the disaster happened: organisational drift, cost-cutting, weakened maintenance and degraded safety systems that allowed MIC to escape. These analyses are essential, but they generally stop at the moment of release. Academic studies, legal inquiries and historical records seldom describe what happened afterwards and partly because traditional models place far greater emphasis on prevention than on recovery.
What The Railway Men captured well was the recovery after the gas was released, focusing in on the extraordinary recovery actions taken by people in the community, such as the railway workers, who found themselves facing a crisis without training, equipment or information. Their actions provide a striking illustration of the final stage of the Accident Sequence and Precursor (ASAP) model.
Accident Sequence and Precursor (ASAP) Model
The ASAP model is the framework for the Task Based Incident Evaluation (TABIE) methodology, developed by our Managing Director, David Embrey, created. Unlike models that focus solely on immediate causes, ASAP highlights systemic, latent conditions and places emphasis recovery actions, which are the steps taken after the hazard is released and when people must navigate uncertainty and degraded systems.
ASAP reminds us that accidents do not end when the hazard is released, and that it’s the way people manage the aftermath that shape the scale of the tragedy.
In this analysis, I use the sequence of events shown in The Railway Men to reflect on the ASAP model by comparing the actions of UCIL with those of the community.
Precursor Organisational and Policy Conditions
UCIL
In UCIL, the plant had experienced significant cost-cutting that reduced staffing levels and weakened training. This left areas of the plant under-resourced, with fewer sufficiently trained and competent operators to manage increasingly complex risks. Essential safety systems, such as the vent gas scrubber, flare tower and refrigeration unit designed to stabilise MIC, had been switched off or deteriorated. Maintenance drift meant that unreliable equipment remained in service. This included the pressure gauges on the MIC storage tanks, which were already malfunctioning before the night of the leak, leaving operators without accurate information about tank conditions even under normal circumstances.
Community
For the community, a different set of precursor conditions shaped the vulnerabilities of the system. Bhopal Junction station’s communication lines were already down with maintenance delayed. Hospitals lacked protocols or resources for handling chemical exposure. While there were warnings about the potential dangers hidden in UCIL as reported by a local journalist, this information did not translate into public awareness or preparedness. These weaknesses meant that when the gas escaped, the city was almost entirely unprepared.
Latent Precursor Failures
UCIL
For UCIL, dormant technical and human failures were already embedded in the system. The valves were corroded, pressure indicators were faulty, and the refrigeration system had been turned off. Earlier in the day, some workers cleared a clogged pipe using water, but they did not isolate the pipe properly, allowing water to enter the MIC tank. The workers did detect a leak and raised it, but this was dismissed with the decision to address it only after a tea break. These seemingly small decisions and hidden defects aligned in a way that made escalation inevitable.
Community
In the community, communication lines at Bhopal Junction had been down earlier in the day, a dormant vulnerability that became critical once the station needed to coordinate evacuation.
Initiating Event
UCIL
For UCIL, the initiating event was the moment water entered the MIC Tank, triggering a rapid, exothermic reaction. Because of the faulty pressure gauges and inadequate procedures, operators could not intervene effectively to manage the gas leak.
Community
For the community, the initiating event was the first recognition that something catastrophic was happening. Residents felt like their eyes and nose were burning, some were choking in their homes. The police were receiving reports of people fleeing the streets, and passengers were collapsing on the platforms. In the hospitals, doctors were encountering sudden waves people with respiratory distress. This was the moment when the community and the people in the station became aware that something catastrophic was unfolding.
Consequence
UCIL
In UCIL, approximately 40 tonnes of MIC and toxic by-products were vented into the atmosphere, spreading across the neighbourhoods surrounding the plant. With organisations unprepared and external agencies uninformed, the workers evacuated the plant and the hazard spread uncontrollably.
Community
Within the community, the consequences were immediate and devastating. People ran blindly through the streets, panicked and confused about the number of people collapsing on the street. Hospitals descended into chaos as staff treated unfamiliar symptoms without information. Police and district officials were repeatedly assured by the plant that there was no leak, delaying the mobilisation of emergency response. The lack of reliable communication and coordination magnified the suffering.
Post-Consequence Management
UCIL
Despite receiving queries from police and officials, Union Carbide plant representatives insisted that there was no leak. Confirmation came hours later, only after the first deaths had already been reported. Safety information that hospitals needed was not provided in time. The organisation that caused the hazard contributed little to its containment.
Community
In the community, this same phase reveals extraordinary resilience. At Bhopal Junction, the staff noticed passengers collapsing and residents fleeing toward the station. With the communication lines down and no official alerts, the station master had to rely entirely on observation and judgement to protect the people around him. As conditions worsened, the station workers improvised their own command structure. They sheltered civilians in the safest parts of the station, carried victims to areas with clearer air and repaired locomotives under exposure to keep evacuation routes open.
One of the most critical decisions was to use the Gorakhpur Express, an incoming train, as a means of evacuating residents from the danger zone. This decision saved hundreds of lives. Staff also worked to restore communication lines to warn nearby stations and halt incoming trains, preventing thousands from entering the toxic zone.
Running trains without operational clearance, navigational support or communication required extraordinary courage and adaptability, yet it became a lifeline for many.
Meanwhile, doctors treated patients using intuition and limited tools to help those affected by the toxic gas. These decentralised, improvised actions, made under uncertainty, fear and limited resources, protected the community against a disaster that could have claimed even more lives.
Looking Beyond the Sequence: What Stage 5 Reveals About Organisational Learning
The first four stages of ASAP model explain how the Bhopal disaster came to be. They describe the organisational drift, degraded safety systems, latent technical and human failures, and the initiating event that allowed MIC to escape from the plant and into the surrounding city. These stages are well documented and widely analysed across accident reports, academic literature, and safety case studies. Together, they show how a complex system gradually lost its capacity to prevent failure.
However, while these stages explain how the disaster occurred, they tell us far less about how it unfolded once the gas had escaped. This is where the analysis often stops, even though the human and organisational actions that follow can dramatically influence the scale of harm. What is discussed far less, and what this blog focuses on, is the fifth stage – Post-Consequence Management.
Why the fifth stage matters
The Post-Consequence Management phase can be indicative of how effective or efficient systems are. It is during this stage where systems are tested under the most constrained conditions, when prevention has failed and people must act with limited information, degraded resources and intense time pressure. Actions taken at this point can influence how harm unfolds, whether impacts stabilise, escalate further, or persist over time, and they reveal how effectively organisations and communities can adapt when formal structures are under strain.
In Bhopal, this stage highlighted a clear contrast between the breakdown of formal organisational response and the adaptive actions taken by individuals and groups within the community.
Community Response: Sensemaking and Improvised Coordination
The response from the people at Bhopal Junction demonstrated rapid sensemaking under extreme uncertainty. With communication lines already down and no official alerts issued, railway staff relied entirely on observation: passengers collapsing on platforms, residents fleeing towards the station, and the effects of the gas leak in their eyes. These cues were sufficient to recognise that something catastrophic was unfolding. As conditions evolved, they shared observations, adjusted their understanding, and coordinated action locally. This informal learning process allowed them to move from confusion to purposeful action in a matter of minutes.
Emergent Barriers Beyond the Original System Boundary
It is important to note that the railway workers were not part of UCIL’s process safety system. However, once the accident propagated beyond the plant boundary, the relevant “system” expanded to include transport, healthcare, policing, and the public. Within this broader socio-technical system, the actions of the railway staff became an emergent protective barrier, limiting further exposure and preventing thousands more from entering the contaminated area.
This reframing is critical. Stage 5 shows that when accidents exceed their original domain, safety no longer resides solely in engineered barriers or organisational procedures. It emerges through human action at system boundaries, often where no formal responsibility was ever defined.
The Post Consequence Management stage helps us understand how human and organisational behaviours influence outcomes once formal systems are under extreme strain. These behaviours illustrate how recovery can be supported, and we can take these learning and feed into resilience. Resilience is not only the capacity to respond, it is the capacity to learn fast enough for that response to matter. Systems that do not learn after an accident continue to struggle to recover from the next one. Strengthening resilience therefore means strengthening learning structures, both formal and informal, and ensuring that feedback, sensemaking and adaptation are embedded at every level of an organisation.
Why Bhopal Still Matters Today
Nearly four decades after the Bhopal disaster, its effects continue to be felt. Many survivors and their families still live with long-term health impacts, environmental contamination remains a concern, and questions of accountability and justice persist. Beyond its human toll, Bhopal reshaped global conversations about industrial safety, chemical storage, emergency preparedness, and corporate responsibility. It exposed the consequences of operating high-hazard facilities in densely populated areas without adequate safeguards, transparency, or community engagement.
Despite regulatory improvements and technological advances since 1984, the core challenges highlighted by Bhopal remain strikingly familiar. Complex systems still operate under economic pressure, warning signs are still missed or normalised, and emergency response arrangements often assume ideal conditions rather than degraded reality. The disaster serves as a reminder that safety is not solely about preventing failures, but about recognising how systems behave when failures occur and how people are supported to respond under uncertainty.
References
Bhopal Gas Leak in pictures: 40 Years since the Tragedy Killed Thousands in India. (2024). BBC News. [online] 2 Dec. Available at: https://www.bbc.co.uk/news/articles/cp35vlg3zvxo [Accessed 10 Dec. 2025].
Embrey, D. (2025). TABIE: a Task Analysis Based Incident Evaluation Technique. [online] Human Reliability Associates Ltd. Available at: https://www.humanreliability.com/downloads/tabie-a-task-analysis-based-incident-evaluation-technique/ .
John, M. (2023). The True Story of the Railway Men’s 1984 Bhopal Gas Tragedy. [online] ScreenRant. Available at: https://screenrant.com/railway-men-1984-bhopal-gas-tragedy-true-story/ [Accessed 9 Dec. 2025].
Mohammad Ali, F. (2004). Forgotten Hero of Bhopal’s Tragedy. [online] Bbc.co.uk. Available at: http://news.bbc.co.uk/1/hi/world/south_asia/4051755.stm [Accessed 10 Dec. 2025].
Nair, S. (2023). The True Story Behind ‘The Railway Men’. [online] Collider. Available at: https://collider.com/railway-men-netflix-true-story/ [Accessed 9 Dec. 2025].
Passow, J. and Edwards, T. (2023). The long, Dark Shadow of Bhopal: Still Waiting for justice, Four Decades on. The Guardian. [online] 14 Jun. Available at: https://www.theguardian.com/global-development/2023/jun/14/bhopal-toxic-gas-leak-chemical-environmental-disaster-waiting-for-justice-union-carbide-dow [Accessed 12 Dec. 2025].
The Railway Men: the Untold Story of Bhopal 1984, (2023). Netflix. 18 Nov. Available at: https://www.netflix.com/gb/title/81711003.
Wikipedia. (2023). Bhopal Disaster. [online] Available at: https://en.wikipedia.org/wiki/Bhopal_disaster#.
The ASAP model is widely applicable in other industries. See how we applied this in another case study here: Learning from the Herald of Free Enterprise Disaster
