How to Review a Temporary Change in 8 Decision Checks

A temporary change often enters an operation through an urgent request, a missing spare part, a bypassed alarm, a substitute material, or a short-term staffing decision. The label sounds controlled because the change is not meant to last. The exposure can still become permanent when nobody defines the review point, the operating limit, or the person who must return the system to its approved state.

This eight-check guide helps a frontline supervisor, change owner, or EHS manager review a temporary change before work starts and again before the exception becomes routine. The central test is simple, although it is not casual. The team must know what changed, what new exposure it created, which controls remain dependable, and who has authority to stop the work.

ISO 45001:2018 expects organizations to manage change that can affect occupational health and safety. ISO 31000:2018 places risk management inside decision-making, while OSHA Process Safety Management, 29 CFR 1910.119(i), requires management of change for covered process changes. These references point to the same operating discipline, which is to make the temporary condition visible, bounded, approved, and reviewable.

What you need before starting

Bring the approved operating procedure, current risk assessment, change request, equipment or process drawings, permit when required, and emergency response information that could be affected. Add the people who can approve, execute, monitor, and reverse the change. A temporary change review is not a meeting for collecting opinions. It is a decision record that must survive the next shift.

Set a maximum duration before discussing technical details. A change with no end date is not temporary in operational terms. The review should also identify a 24-hour check and a 72-hour field verification, even when the change is expected to last only one shift, because the first execution frequently exposes interactions that were invisible in the planning room.

Step 1: Describe the change in one sentence

Write the change so that someone outside the immediate team can understand it without opening five attachments. Name the asset, task, location, reason, start time, expected end time, and approved state. A supervisor might record that a pump will operate with a temporary seal arrangement during a 6-hour maintenance window while the replacement part is delivered.

Do not describe the change as “use workaround” or “operate as normal with a deviation.” Those phrases hide the exposure. The sentence should make the difference observable, because the reviewer needs to compare the actual condition with the condition that the procedure, permit, and emergency plan were designed to control.

Step 2: State why the normal condition cannot be restored

Record the reason for the exception and test whether it is genuinely temporary. The cause may be equipment failure, a supply delay, weather, an unexpected production constraint, or a design problem that has not yet been corrected. If the same cause has appeared twice in 30 days, the issue deserves a systemic correction rather than another temporary approval.

This check protects the operation from normalizing a workaround. Andreza Araujo’s work on safety culture emphasizes that compliance is not the same as control. A signed exception can still become a cultural signal that production pressure outranks the approved method, especially when leaders renew it without asking what would restore the original barrier.

Step 3: Identify the changed exposure

Compare the approved state with the proposed state across people, equipment, energy, materials, environment, timing, and decision rights. Ask what can now reach a person, what can fail earlier, what response will take longer, and which assumption in the existing risk assessment is no longer true. Include exposure created by contractors and simultaneous operations in adjacent areas.

Use three levels of consequence in the discussion. Identify the credible serious harm, the initiating condition that could make it possible, and the evidence that will show the control is holding. The sequence keeps the team from stopping at a label such as medium risk.

Step 4: Test every critical control

List the controls that prevent the changed exposure from reaching people, then test whether each one is present, suitable, independent, and usable under the temporary condition. A control is not verified because its field exists in a form. The reviewer needs evidence from the equipment, work area, person performing the task, or a documented test that reflects the current state.

Record each result as working, degraded, unavailable, or not applicable. If one critical control is unavailable, the approval should change the method, add an effective substitute, or stop the work. OSHA Process Safety Management, 29 CFR 1910.119(i), makes management of change explicit for covered processes, and the same logic is useful beyond those regulatory boundaries.

Step 5: Check competence, staffing, and supervision

A temporary condition can change the knowledge required to perform the job safely. Confirm that the people doing the work understand the deviation, altered limits, stop criteria, and recovery plan. Check whether the shift has enough qualified coverage for the task, adjacent operations, and emergency response if the temporary control fails.

Ask who will decide when conditions change at 2 a.m., during a handover, or while the supervisor handles another event. Name the role, not only a person, and state the escalation route. A decision that depends on one individual being reachable is fragile, particularly when the temporary change crosses 2 shifts or involves more than 1 contractor.

Step 6: Set boundaries and stop criteria

Define the operating limits that cannot be exceeded. These may include pressure, temperature, load, wind speed, isolation status, staffing level, visibility, communication availability, or the number of simultaneous tasks. Write the trigger that requires a pause and the next role that must approve continuation. Do not leave the stop decision as a general instruction to use judgment.

Set the maximum duration in hours or days, the review time, and the condition that ends the approval immediately. A 7-day exception with no daily check is weaker than a 24-hour approval that has clear evidence and renewal authority. If the change remains necessary after the maximum duration, reopen the review as a new decision instead of extending the original record by habit.

Step 7: Rehearse failure and recovery

Describe what happens if the temporary control fails, the condition worsens, or the approved method becomes unavailable. The team should know how to stop the task, isolate energy, move people to safety, contact help, and restore the approved state. Use a short verbal rehearsal that takes no more than 10 minutes, because a plan that cannot be explained clearly will be difficult to execute under pressure.

Include the recovery owner and the material or tool required to reverse the change. If restoration depends on a delivery, specialist, or external contractor, record that dependency before authorization. ISO 45001:2018 connects operational planning, competence, communication, and emergency preparedness, so the emergency plan must match the current configuration.

Step 8: Approve, verify, and close the change

Authorize the change only after the previous checks have an owner and evidence. The approval should state whether work can proceed, what conditions apply, when the next review occurs, and who can cancel the decision. Send the record to the next shift before the handover, and place the current status where the people exposed to the change can see it.

Verify the first execution in the field within 72 hours, or sooner when the work is high consequence. Recheck the changed control after the first shift, after a crew change, and after any new interaction. Close the change only when the approved state is restored and someone verifies the restoration. If it must continue beyond 30 days, treat that fact as evidence that the organization needs a permanent engineering, planning, staffing, or procurement decision.

For a wider diagnostic, compare this review with the five temporary-change traps that turn exceptions into operating conditions and the guide to decision authority in safety risk acceptance. A temporary review controls the present exception, while governance must also remove the condition that keeps recreating it.

Across 25+ years leading EHS at multinationals, Andreza Araujo has positioned safety culture as a pattern of decisions, not a poster or declaration. Her book Safety Culture: From Theory to Practice connects visible leadership, consistency, and operational choices with the culture people experience when work becomes difficult.

Make temporary decisions safer. Explore Andreza Araujo’s safety leadership resources for practical methods that turn risk ownership into visible operating discipline.