Dynamic Risk Assessment: 15-Minute Field Routine

HSE explains that risk assessment is a careful examination of what could harm people at work, yet field conditions can change within minutes after a formal assessment is signed. This guide gives supervisors a 15-minute dynamic risk assessment routine that converts risk perception into a stop, adapt, or proceed decision at the point of work.

Dynamic risk assessment is not a replacement for JSA, JHA, method statements, permits, or formal risk assessments. It is the short field routine used when the job, crew, environment, energy state, or surrounding activity changes after planning has already happened.

Why does dynamic risk assessment fail in routine work?

Dynamic risk assessment fails when it becomes a verbal habit instead of a visible decision routine with time, owner, trigger, and stop authority. In a 15-minute field check, the supervisor must compare the planned work against current reality, because ISO 31000:2018 treats risk as tied to uncertainty and objectives, not only to a fixed document created earlier.

ISO specifies that ISO 31000:2018 provides principles and guidelines for identifying, analyzing, evaluating, treating, monitoring, and communicating risk. The field problem is that many operations perform those verbs on paper during planning, then skip them at the place where uncertainty becomes visible.

Across 25+ years leading EHS at multinationals, Andreza Araújo identifies that the practical failure is rarely the absence of a form. The failure is the belief that a signed form still describes the job after a production delay, a missing tool, a substitute operator, a weather change, or a contractor interface has altered the exposure.

The supervisor should frame the routine as a decision gate. If the crew finds no material change, work proceeds under the existing controls. If one material change appears, the crew pauses and updates the control. If two or more changes appear, the job returns to EHS or operations leadership for a higher-level review.

Step 1: Freeze the job scope before anyone starts

Step 1 is to state the exact task, boundary, crew, and first work step in less than 2 minutes. A dynamic risk assessment cannot control a vague task, because the difference between cleaning a conveyor, clearing a blockage, and testing a restart may be the difference between administrative control and stored-energy isolation.

This is where many field routines collapse. The supervisor asks, "Are we good to go?" and receives 3 nods, although nobody has defined whether the job includes troubleshooting, adjustment, testing, or only observation. A scope freeze converts the conversation from optimism to evidence.

As Andreza Araújo argues in *A Ilusão da Conformidade*, glossed for English readers as *The Illusion of Compliance*, compliance that does not change behavior at the work front is only appearance. The scope statement matters because it gives the crew a concrete object to challenge, not a broad safety slogan.

Use one sentence on the permit, whiteboard, or mobile record. For example, "Crew B will remove guarding panel 4, clean accumulated material, verify zero energy, reinstall the guard, and wait for maintenance release before restart." Anything outside that sentence requires a new decision.

Step 2: Compare the plan with what changed?

Step 2 is a 3-minute comparison between the approved plan and the field conditions that exist now. The supervisor should ask what changed in people, equipment, environment, time pressure, simultaneous work, and energy state, because those 6 dimensions catch most routine drift before it becomes accepted as normal.

HSE reports that each risk assessment should include a review date that reflects the type of work and the speed of change. Dynamic risk assessment applies the same logic at a smaller scale, because a loading dock, production line, or maintenance bay can change faster than the review cycle written in the register.

The strongest question is not "Is the job safe?" The better question is, "What is different from the plan we approved?" That wording lowers defensiveness. It also helps an operator mention that the original technician is absent, the forklift route has shifted, the lighting is poor, or the isolation point is different from the drawing.

Link this step with your existing JSA, JHA, and Take 5 selection logic. The formal tool defines the baseline, while the dynamic routine tests whether the baseline still describes reality.

Step 3: Identify the credible worst case

Step 3 is to name the credible worst case before discussing likelihood. In 2 minutes, the crew should identify the injury, fatality, exposure, release, or asset event that could happen if the changed condition defeats the planned control, because severity deserves attention even when the task feels familiar.

The trap is starting with probability. When a supervisor says that the job has been done 200 times, the crew hears permission to normalize the exposure. James Reason's Swiss cheese model is useful here because it keeps attention on the layers that must align, not on the worker's confidence.

In *Sorte ou Capacidade*, glossed as *Luck or Capability*, Andreza Araújo argues that the absence of an accident does not prove capability. That point is central to dynamic risk assessment, since a crew can repeat an exposed shortcut for months and mistake survival for control.

Ask for the credible worst case in plain terms. "Hand caught in nip point," "fall through fragile roof," "chlorine exposure," or "vehicle strikes pedestrian" is better than a generic high-risk label, because the named consequence points the team toward the control that must be verified.

Step 4: Verify the control that prevents that event

Step 4 is to verify one critical control against the named worst case within 3 minutes. A dynamic risk assessment only has value when it checks whether the barrier that prevents serious harm is present, working, and under someone's control at the moment work begins.

Do not let the crew list every control in the procedure. Pick the control that would prevent the serious event named in Step 3. If the worst case is a hand caught in moving equipment, verify isolation and restart prevention. If the worst case is a pedestrian strike, verify separation, visibility, and traffic authority.

In more than 250 cultural transformation projects, Andreza Araújo observes that field teams often confuse evidence with intention. A supervisor saying "we will be careful" is not evidence. A lock applied, a route blocked, a spotter briefed, or an exclusion zone physically marked is evidence.

The most efficient field test is a show-me test. Ask the worker who owns the control to point to it, prove it, or demonstrate it before the first step starts. This connects naturally with Take 5 checks before work starts, but it adds a stronger focus on control proof.

Step 5: Decide stop, adapt, or proceed

Step 5 is the formal decision point where the supervisor records one of 3 outcomes: stop, adapt, or proceed. The routine should not end with a discussion, because a dynamic risk assessment that produces no decision becomes another safety conversation with no operational authority.

3 outcomes are enough for field use: stop when the credible worst case has no verified control, adapt when the control can be restored locally, and proceed when the control is verified and the scope has not expanded. More options create hesitation, especially under production pressure.

The decision must be visible. Write it on the permit, digital checklist, shift board, or supervisor log with time and owner. When the crew adapts, record the adaptation, because the next supervisor needs to know whether the job was made safer or merely made possible.

A useful rule is that the person who feels pressure to continue should not be the only person who approves adaptation. If production urgency is high, add a second approval from EHS, maintenance, or the area owner. The extra 2 minutes often prevents a weak compromise from becoming the new standard.

Step 6: Escalate when authority is missing?

Step 6 is to escalate the decision when the field team lacks authority, information, or resources to restore the control. A supervisor should not accept a risk whose treatment depends on engineering, procurement, shutdown planning, or management approval, because that turns field judgment into unmanaged risk acceptance.

The ILO describes occupational safety and health as protecting lives, preventing harm, and ensuring that every worker can carry out the job in safety and dignity. The ILO emphasizes prevention and worker protection, which means the escalation route must be known before the crew is asked to absorb an uncontrolled exposure.

Dynamic risk assessment is often sold as empowerment, but empowerment without escalation is abandonment. If a damaged guard, missing anchor point, failed gas test, blocked exit, or absent competent person appears, the supervisor needs a named escalation path, not a speech about ownership.

Use a simple threshold: escalate when the field team cannot restore the control within 15 minutes, when the adaptation changes design intent, or when the credible worst case includes fatality, permanent disability, fire, explosion, or toxic exposure. Those thresholds protect the supervisor from carrying a decision that belongs higher in the organization.

Step 7: Capture the weak signal for the next plan

Step 7 is to convert the field finding into a weak signal that improves the next formal risk assessment. The point of dynamic risk assessment is not only to survive today's job, because repeated adaptations reveal where the planned system is inaccurate.

1 repeated adaptation in 3 shifts should trigger review, because repetition means the formal assessment no longer matches the work. If a crew keeps adding spotters, moving barricades, substituting tools, or changing sequence, the problem is not field discipline. The planning basis is wrong.

This is the bridge between the 15-minute field routine and the management system. The supervisor sends the weak signal to EHS with the task, changed condition, worst case, control gap, and action taken. EHS then decides whether to update the JSA, retrain the crew, repair equipment, change layout, or revise the risk register.

The same discipline appears in a 60-minute What-If field review, where the team studies credible deviations before they become incidents. Dynamic assessment catches the deviation today, while What-If analysis studies whether the system needs redesign.

Step 8: Audit the routine for decision quality

Step 8 is to audit the quality of 10 completed dynamic risk assessments each month, not merely the number completed. Quantity proves activity, while decision quality proves whether supervisors are identifying change, naming credible worst cases, verifying controls, and escalating when authority is missing.

Use a monthly sample of 10 field records from different crews, shifts, and work types. Score each record against 5 criteria: scope clarity, changed condition, credible worst case, verified control, and decision outcome. A perfect form with no changed condition identified in a changing workplace should not score well.

During the PepsiCo South America tenure, where the accident ratio fell 50% in 6 months, Andreza Araújo learned that routines improve when leaders inspect the decision, not only the document. That lesson applies here because the audit should coach supervisors toward sharper judgment, not punish them for finding unstable work.

Close the loop with risk perception. If the audit shows that teams rarely identify changed conditions, connect the findings to risk perception habits in routine work and rebuild the supervisor briefing around what people are failing to notice.

Dynamic risk assessment vs pre-task checklist

Dynamic risk assessment differs from a pre-task checklist because it asks whether the job has changed enough to require a decision. A checklist confirms planned controls, while the dynamic routine tests whether uncertainty has entered the work after the plan was approved.

Each week without a dynamic risk assessment routine leaves supervisors to improvise under pressure, while repeated field adaptations stay invisible to the formal risk process.

Conclusion

Dynamic risk assessment works when it gives supervisors a 15-minute decision routine: freeze the scope, compare what changed, name the credible worst case, verify the control, decide, escalate, capture the weak signal, and audit decision quality.

If your operation needs this routine connected to safety culture, supervisor authority, and critical-control verification, ACS Global Ventures can support the diagnostic and implementation plan through Andreza Araújo.