How to Design a Stop-Work Authority Rehearsal in 30 Minutes

F2 practical guide for supervisors, EHS professionals, maintenance leads, and frontline teams

A stop-work authority rehearsal is a short practice session in which a team tests how it will recognize a changing exposure, pause the task, communicate the concern, and decide whether work can restart. The exercise turns a sentence in a policy into a usable behavior whose success depends on the response that follows the pause.

Many organizations tell workers that they may stop work, yet never rehearse what happens next. When the plan and the field no longer match, the worker may not know which radio channel to use, the supervisor may treat the pause as a challenge, and the control owner may be unavailable. The authority exists on paper, although the decision path remains fragile.

James Reason’s work on active and latent failures is useful here because a weak stop-work response is rarely only an individual problem. The conversation, escalation route, staffing arrangement, and production pressure can all shape whether a person feels able to speak. Andreza Araujo’s safety-culture work makes the same distinction practical: the organization’s real culture appears in what its routines permit when the situation becomes inconvenient.

What you need before starting

Choose one task that contains a credible change in exposure, such as a lifting operation in which the exclusion zone becomes uncertain, a maintenance job whose isolation boundary is unclear, or a work-at-height task in which weather changes the original plan. Use a hypothetical or scheduled scenario, not a disguised client story. The goal is to test the system without turning a real worker into the exercise.

Invite the people who would actually make the decision. That normally includes one or two workers, the supervisor, the control owner, and an EHS facilitator who can observe without taking over. Confirm the planned duration, the location, the stop signal, and the evidence that would be needed before restart.

Step 1: Select one changing exposure

Write the scenario in two or three sentences. State the original task, the condition that changes, and the possible consequence if the team continues without a review. Do not build a disaster story. A realistic change creates a stronger test because participants must decide with incomplete information.

For example, the team might be preparing to lift a replacement motor when a temporary access route becomes partially blocked. The lifting plan may still be valid, yet the changed route affects people, equipment movement, and the ability to keep the exclusion zone clear. The exercise tests whether anyone can pause the job before the constraint becomes an incident.

Step 2: Define the stop trigger

Translate the scenario into a visible trigger that a worker can recognize without interpreting a long policy. The trigger might be a missing barrier, a loss of communication, an unexpected change in weather, an unverified isolation, or a condition that makes the approved method impossible to follow.

Ask the team what evidence would make the trigger credible. This prevents the rehearsal from rewarding vague alarm while preserving room for uncertainty. A worker should not need to prove that harm is already occurring, although the concern should still be connected to a condition, a consequence, or a control that cannot be verified.

Step 3: Rehearse the first sentence

Give the person who notices the change a plain sentence to use. It can follow this pattern: “Stop the task. The condition has changed because the access route is no longer clear. We need to reassess before anyone enters the area.” The wording should identify the pause and the observable reason, without requiring technical fluency under pressure.

Let participants adapt the sentence to their language and communication system. The point is not to create a script that sounds artificial. It is to remove the hesitation that appears when people are unsure whether a concern is serious enough to say out loud.

Step 4: Test the pause response

Run the scenario until the worker uses the stop signal, then observe the first ten seconds of the response. Does the equipment actually stop? Does the supervisor acknowledge the pause? Does anyone ask the worker to continue while the concern is discussed? Those seconds reveal whether the operating routine protects the authority or quietly cancels it.

The supervisor should thank the worker for stopping the task, ask for a description of the changed condition, and prevent the group from debating fault before the exposure is understood. A calm response does not mean accepting every proposed control. It means protecting the decision process long enough to examine the evidence.

Step 5: Route the concern to the decision owner

Identify the person who can change the method, allocate equipment, revise the permit, or authorize a restart. EHS may facilitate the review, but the operational owner must remain visible because stop-work authority fails when responsibility is pushed into an office that cannot change the work.

Test the actual route rather than describing an ideal one. If the decision owner is on another shift, unreachable by radio, or unclear to the crew, record that friction. A stop-work process that depends on a single person answering immediately needs a backup route before the next high-risk job begins.

Step 6: Reassess the controls

Ask what changed in the hierarchy of controls. Has the team lost an engineering safeguard, a separation distance, a reliable isolation, a competent person, or the information needed to follow the method? This question moves the discussion away from whether the worker was cautious enough and toward whether the work system still contains the intended protection.

Require the group to distinguish a temporary measure from a permanent correction. A temporary barrier can protect people while a better control is arranged, although it should have an owner, an expiry point, and a verification method. Without those details, the workaround becomes a new normal that nobody formally accepted.

Step 7: Define restart evidence

Before the exercise ends, ask the team to name the evidence that would permit restart. Depending on the task, that evidence may be a verified exclusion zone, a revised lift plan, a completed isolation check, a weather decision, or a supervisor confirmation that the required people and equipment are present.

Do not accept “everyone understands” as the only evidence. Understanding matters, yet a dependable restart also requires a condition that can be observed and checked. The record should state who verifies it and what happens if the evidence is missing.

Step 8: Capture the friction and change one thing

Close the rehearsal by asking three questions. What made the pause easy? What made it harder than it should have been? What single change would make the next pause faster or safer? Keep the answers close to the work, such as a missing escalation contact, an unclear permit field, a supervisor phrase that sounded dismissive, or a barrier that cannot be inspected from the normal access point.

Assign one owner and one due date for the selected change, then schedule a brief verification in the next relevant task. The measure of the rehearsal is not that every participant says the exercise was useful. It is that the operation removes a real obstacle to speaking up and can show whether the change survived contact with work.

What should the facilitator record?

Use a one-page record that captures the scenario, the trigger, the first response, the escalation route, the control decision, the restart evidence, and the friction that requires action. Avoid turning the form into a transcript. The record should help the next supervisor make a better decision, not create another archive that nobody reads.

For a related model of how teams can voice disagreement before high-risk work, see the pre-job dissent round guide. The exercise is different from a stop-work rehearsal, although both test whether a concern can become a decision before exposure increases.

• Scenario and changed exposure are specific.
• Stop trigger is observable and easy to communicate.
• Supervisor response protects the pause.
• Decision owner and backup route are known.
• Restart evidence has an owner and verification method.
• One friction point becomes a tracked improvement.

Do not wait for a real conflict to discover that stop-work authority is unclear. Rehearse one changing exposure during the next toolbox period, then fix the first barrier the team identifies.

A stop-work authority program earns trust when the worker can pause the task without being treated as the problem, and when the supervisor can convert the concern into a disciplined control decision. For a complementary view of the response choices that follow a field observation, read the guide to coaching, correction, and escalation.

Teams that want to strengthen this capability can also review the difficult safety conversation model and explore Andreza Araujo’s work on safety culture and leadership.