EHS Manager vs Operations Leader vs Board Risk Committee: Who Should Own a Critical Safety Decision?
Critical safety decisions stall when the EHS manager, operations leader, and board risk committee are asked to own the same question. This comparison shows which role should identify, change, fund, escalate, and verify the decision.

Key takeaways
- 01The EHS manager should make exposure and control weakness visible, but should not become the default owner of every operational correction.
- 02The operations leader should own changes to work, resources, and production conditions because that role controls the operating system.
- 03The board risk committee should challenge material exposure, capital choices, and unresolved escalation rather than manage field controls.
- 04One decision can involve all three roles, but each role should answer a different question at a defined point in the decision cycle.
- 05Ownership becomes credible when the decision record names the trigger, authority, evidence threshold, and verification date.
A critical safety decision often enters an organization through the EHS function, travels to operations, and reaches the board only after delay has become part of the risk. The problem is rarely that no one cares. It is that three roles receive the same issue without receiving the same authority.
The EHS manager, operations leader, and board risk committee should not compete for ownership. They should own different questions in the same decision chain. This comparison shows who should identify the exposure, change the work, fund the solution, escalate the issue, and verify that protection actually improved.
HSE describes leadership as a visible management responsibility, while ISO 45001 specifies leadership involvement in the occupational health and safety system. Neither source turns the EHS manager into a substitute for operational authority. The decision must still sit with the role that can change the condition creating exposure.
Key Takeaways
- The EHS manager should expose the risk and test evidence.
- The operations leader should change the work and allocate operating resources.
- The board risk committee should challenge material exposure and management response.
- Shared accountability works only when decision rights remain distinct.
- Verification closes the loop between a decision and safer work.
What does each role actually control?
The EHS manager, operations leader, and board risk committee control different parts of the safety decision. The EHS manager controls the quality of risk information, the operations leader controls execution conditions, and the board committee controls governance challenge at the level of material exposure. Confusing those authorities creates meetings that produce concern without movement.
The EHS role is strongest when it translates field evidence into a decision that leaders cannot dismiss as a compliance detail. The operations role is strongest when it changes staffing, sequencing, equipment, supervision, or production expectations. The board role is strongest when it tests whether management has accepted a material risk without a credible reduction plan.
| Role | Primary question | Decision authority | Failure when misassigned |
|---|---|---|---|
| EHS manager | What exposure exists and how reliable is the control? | Evidence, challenge, assurance, escalation | Advice is mistaken for line ownership. |
| Operations leader | What must change in the work and resources? | Execution, staffing, sequencing, production conditions | Risk is acknowledged without operational change. |
| Board risk committee | Is material exposure being governed with enough urgency? | Challenge, oversight, capital and escalation scrutiny | Governance becomes field-level micromanagement. |
Andreza Araujo's Make The Difference: Be a Leader in Health & Safety places leadership close to the work, where decisions become observable. That principle matters because a board question cannot substitute for a supervisor who has the authority to stop a task, and a safety report cannot substitute for an operations leader who can change the plan.
When should the EHS manager lead the decision?
The EHS manager should lead when the central decision concerns exposure definition, control evidence, legal or standard alignment, assurance quality, or escalation. That role should make the risk legible before the organization argues about ownership. A clear EHS assessment separates a known hazard from a vague concern and identifies which control must perform.
Leadership evidence should be specific. The record should show the task, consequence, current control, evidence date, owner, and condition that would invalidate the plan. ISO 45001 is a management-system standard, not a permission slip for a weak control, and the EHS manager should say so when a certificate is being treated as proof of field protection.
The EHS manager should also challenge a clean incident record when the control has not been tested. James Reason's work on latent conditions supports this distinction because an absence of recorded harm does not prove that the system can withstand variation. The EHS contribution is therefore more than reporting. It is disciplined challenge that makes hidden weakness visible.
When should the operations leader own the change?
The operations leader should own the decision whenever reducing exposure requires a change to how work is planned, staffed, sequenced, supervised, equipped, or funded inside the operation. That role can alter the conditions that produce exposure, which is why a risk action that ends with an EHS task is often a sign that ownership has been displaced.
Consider a maintenance task whose isolation depends on a rushed handover. The EHS manager can identify the control gap and require evidence, but the operations leader must change the handover time, staffing model, isolation verification, and release criteria. If production targets remain unchanged, the written action has not reached the source of the risk.
Across 25+ years of multinational EHS leadership, Andreza Araujo has built her work around engineering, creativity, and care. The practical implication is direct. A safety decision is not complete when leaders agree with the analysis. It is complete when the operating system has changed in a way that workers and supervisors can recognize.
What belongs at board risk committee level?
The board risk committee should own the question of whether management is governing material safety exposure with sufficient independence, resources, and urgency. It should examine repeated exceptions, delayed capital, cross-site patterns, unresolved high-consequence exposure, and whether executive incentives encourage silence. It should not approve a crew's permit or direct a field inspection.
The International Labour Organization identifies occupational safety and health as a fundamental concern of work, which places severe exposure inside governance rather than outside it. Board attention is appropriate when the issue can affect people, continuity, reputation, legal duty, or the credibility of management information.
Board oversight becomes weak when every issue is presented as a dashboard color. A committee should ask what changed since the last review, which control is expected to hold, how management knows, and what happens if the evidence is unfavorable. Four green quarters do not answer those questions unless the underlying control has been tested under the conditions that matter.
How do the three roles work together under time pressure?
Under time pressure, the three roles should act in sequence rather than wait for a single perfect meeting. The EHS manager states the exposure and evidence threshold, the operations leader decides whether the work can continue and what must change, and the board committee becomes involved when the risk is material or the response remains unresolved.
A useful sequence has four moments. First, identify the consequence and current barrier. Second, name the person who can change the condition. Third, set a decision time that reflects the exposure rather than the reporting calendar. Fourth, verify the change in the field and escalate if the evidence does not support continuation.
This sequence prevents a common failure in which a serious issue is sent upward before anyone has made a local decision. A board review cannot repair an active control failure quickly enough if operations has not already decided whether people may remain exposed.
Which role should own funding and permanent controls?
Funding should be owned by the executive who controls the affected operating or capital budget, with EHS defining the risk evidence and the board committee challenging material delay. The correct owner is not the person who first noticed the hazard. It is the person who can authorize the design, equipment, staffing, or maintenance change that reduces exposure.
A permanent control also needs a verification design. The funding request should state the consequence being reduced, the performance expected, the interim protection, the implementation date, and the test that will show whether the investment changed the work. A request that says “improve safety” is not ready for approval because no one can verify the promised reduction.
In more than 250 companies served worldwide, Andreza Araujo's brand context centers transformation on observable decisions rather than slogans. That makes the governance test practical. If the capital decision cannot be connected to a changed task, a stronger barrier, or a measurable verification point, the organization is funding activity instead of protection.
What evidence proves that ownership is working?
Ownership is working when the decision record, field condition, and leadership review tell the same story. The evidence should show who made the decision, what changed, when the change became active, how workers recognize it, and which result would trigger another review. The record should remain understandable after 30, 60, or 90 days.
Use a small evidence set rather than a larger dashboard. Four tests are enough to begin. The decision owner is named. The control is observable. The verification date is current. The escalation route is known to the people who can encounter the exposure.
Evidence should also include adverse information. A mature decision process does not delete exceptions because they complicate the monthly result. It asks whether exceptions reveal a design weakness, a resource gap, or an incentive that is pushing work away from the stated control.
Which ownership model fits the risk?
The best ownership model depends on consequence, time, controllability, and recurrence. A local operating change belongs mainly to operations. A disputed control assessment requires EHS challenge. A repeated material exposure that needs capital, executive escalation, or cross-site action belongs in board-level oversight. The right answer is often a handoff with explicit decision rights, not a single permanent owner.
| Decision condition | Lead role | Supporting role | Required output |
|---|---|---|---|
| Evidence is unclear | EHS manager | Operations leader | Defined exposure and evidence threshold |
| Control must change today | Operations leader | EHS manager | Safe continuation, pause, or recovery plan |
| Permanent control needs funding | Operations executive | EHS manager and finance | Approved scope, owner, date, and verification |
| Material exposure remains unresolved | Board risk committee | Executive management | Challenge, escalation, and accountable response |
The model also changes by time. A task may need an operations decision in 10 minutes, an EHS review within 24 hours, and an executive or board review within 30 days. These are not contradictory deadlines. They protect different parts of the decision cycle.
What should leaders change in the next 30 days?
Choose one recurring critical exposure and write the decision chain in five lines. State the consequence, name the EHS evidence owner, identify the operations owner, define the escalation trigger, and set the verification date. Then test the chain with a supervisor who encounters the work outside the meeting room.
After 7 days, check whether the control is visible in the field. After 14 days, review whether production conditions are supporting the change. After 30 days, ask whether the remaining risk is lower, merely better documented, or still waiting for authority. This rhythm turns ownership into an operating practice instead of a governance diagram.
Safety leadership is credible when evidence changes a decision and the decision changes work. The EHS manager should make risk visible, the operations leader should make protection real, and the board risk committee should ensure that material exposure does not remain unresolved behind a green report.
Safety is about coming home. Shorten safety decision latency, compare the result with your decision-gate design, and use clear delegation in safety leadership when accountability is still diffused.
For organizations connecting culture, risk ownership, and field proof, Andreza Araujo's safety leadership resources offer a practical reference for turning management intent into safer work.
Frequently asked questions
Should the EHS manager own every critical safety decision?
What should an operations leader decide about safety risk?
When should a board risk committee become involved?
Can EHS and operations share accountability?
What is the fastest way to clarify safety decision ownership?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.