How to Run a Shift Handover That Preserves Critical Risk Information

F2 how-to guide for shift supervisors, maintenance leaders, and EHS managers

A shift handover is a safety control when it transfers the decisions, changing conditions, and unresolved exposure that the next crew must understand before taking responsibility. It is not a summary of yesterday's work. It is a short decision process that keeps risk from disappearing between people, calendars, and production targets.

Picture a maintenance team taking over at 6:00 a.m. The permit is still open, a temporary isolation remains in place, a contractor is waiting for access, and the night supervisor has already left. If the handover says only that the job is progressing, the incoming crew inherits an exposure without inheriting the reasoning behind the controls. This guide shows how to prevent that gap without turning the shift change into another long meeting.

The central principle is simple but demanding. The outgoing team must transfer what changed, what remains uncertain, and what decision the incoming team is authorized to make. That approach is consistent with Andreza Araujo's operational leadership focus in Make The Difference: Be a Leader in Health & Safety, where leadership is expressed through choices that people can execute at the point of work.

What to prepare before the handover

Use one visible handover record for the shift, not a collection of disconnected notes. The record should identify the active task, the highest-consequence exposure, the critical controls, the person who can change the work, and the condition that requires escalation. A supervisor can keep the format on paper, a board, or a digital tool, provided the same fields are used every time.

Before the conversation starts, collect the open permit, isolation status, temporary changes, overdue controls, abnormal operating conditions, and any concern raised during the previous shift. A handover becomes weak when the team tries to remember the whole shift from memory, because memory favors the most recent event rather than the condition that still carries the greatest consequence.

Step 1: Define the work that is actually continuing

Write the task as it exists in the field, including its location, equipment, phase, and work group. Do not copy the original work order if the job has changed since authorization. A maintenance task that began as pump replacement may now involve temporary piping, an altered access route, and a delayed test.

Ask the outgoing supervisor to explain what the crew will touch first when the next shift begins. That answer exposes the real starting point, which is often different from the title in the schedule. Verify the description against the permit and the field condition before accepting the handover.

The common error is to hand over the plan instead of the work. If the two no longer match, pause the transfer and revalidate the task through the site process.

Step 2: Name the highest-consequence exposure

Choose one exposure that could produce the most serious harm if the control fails. It may be stored energy, a line break, a suspended load, a confined space, an energized test, or vehicle interaction. The purpose is not to deny other hazards. It is to stop the handover from becoming a long list in which every item receives the same attention.

State the exposure in operational language. “Energy isolation is incomplete at the north valve” is more useful than “LOTO remains a concern,” because the first statement tells the incoming crew where the decision sits. James Reason's work on latent failures supports this discipline, since serious events often develop through several weak conditions rather than one dramatic mistake.

Verify the statement with the control owner and the person who will perform the next step. If they describe different exposures, the shift is not ready to transfer responsibility.

Step 3: Confirm the controls that must not be lost

List only the controls whose absence would change whether the work can continue. Include the isolation, exclusion zone, gas test, rescue arrangement, permit boundary, communication channel, or engineering safeguard that the next crew must preserve.

For each control, record how it is verified and when it was last checked. A control is not transferred merely because its name appears in the permit. The incoming supervisor needs evidence that the barrier exists in the current conditions, which may include a field check, a test result, a locked device, or a direct confirmation from the responsible person.

This is where a permit revalidation trigger matters. When the work boundary, sequence, weather, equipment state, or personnel changes, the handover should direct the team to revalidate instead of treating the old approval as permanent.

Step 4: Record what changed during the shift

Describe changes that affected the task, even when the work remained within the original plan. Include a temporary repair, a delayed inspection, a substituted tool, a new contractor, a blocked access route, a change in staffing, or a production request that altered the sequence.

Use the sentence pattern “The condition changed from X to Y, and the control response is Z.” This format forces the team to connect a fact with a decision. For example, “The access route changed from the east platform to the west stair, and the exclusion zone now needs a second spotter.”

Do not hide small changes because they appear manageable. A temporary change can become an operating condition when the next crew assumes that familiarity means approval. The outgoing supervisor should also state which change remains unverified, because uncertainty is itself information that the next decision owner needs.

Step 5: Transfer unresolved decisions, not just unfinished tasks

An unfinished task is not always an unresolved risk. Conversely, a task can look complete while a decision remains open. Record the decision that still needs an owner, the evidence required, and the latest safe time for resolution.

Examples include whether a damaged guard can remain in service, whether a contractor may enter before a rescue team arrives, whether a temporary bypass can stay active, or whether production can restart after an interrupted isolation. Name the person with authority to decide, because an EHS coordinator may track the issue without controlling the equipment, budget, or sequence.

A decision record for residual risk can support this step when the exposure cannot be removed immediately. The record should show what evidence supports the decision, who accepted the remaining exposure, and what condition will reopen it.

Step 6: Test the incoming supervisor's understanding

Ask the incoming supervisor to repeat three points in their own words: the highest-consequence exposure, the control that must remain intact, and the condition that requires a stop or escalation. This is a verification step, not a test of obedience. If the explanation changes during the repeat-back, the handover has revealed a communication gap before the work begins.

Include the person who will lead the next field activity whenever possible. A supervisor may understand the decision while the work leader has a different view of the access route, isolation boundary, or rescue arrangement. The conversation is complete only when the people who act on the control share the same boundary.

Keep the repeat-back focused. A short exchange that exposes one unresolved ambiguity is safer than a long briefing that leaves every point sounding equally urgent.

Step 7: Set the first verification time

Agree when the incoming team will verify the transferred control in the field. The timing should match the risk, not the convenience of the next routine meeting. A live line break may require verification before the first movement, while a lower-consequence inspection may allow a check later in the shift.

Write the verification owner, location, evidence, and response if the control is not as described. If the team cannot say what will happen when the check fails, the handover has recorded activity without establishing protection.

Link this check to the site's existing safety decision review when the issue crosses shifts or functions. Repeated handover gaps are not individual communication failures. They may show that planning, maintenance, operations, or engineering needs a different decision route.

Step 8: Close the transfer with authority and escalation

End by stating who may stop the work, who must be called, and what information must travel with the escalation. The incoming team should not need to infer whether a supervisor can pause the job, whether operations must approve a restart, or whether an engineering review is required.

Use a clear closeout sentence such as, “The incoming supervisor accepts the work only within the stated boundary, and the job stops if the isolation, access, or rescue condition changes.” Adapt the wording to the site's authority structure, but keep the boundary visible.

File the record where the next decision owner can find it, then remove or close outdated notes so an old condition cannot compete with the current one. A handover that preserves obsolete information creates a second hazard, because people may follow a control that no longer matches the work.

How to know the handover is working

Review the process after several shifts by checking whether incoming supervisors can identify the same exposure, whether field verification occurs at the agreed time, whether changes trigger revalidation, and whether unresolved decisions reach the right owner. Do not measure success by the number of forms completed. Measure whether the next crew begins with the information and authority needed to make a safe decision.

Across 25+ years in multinational EHS leadership, Andreza Araujo has treated safety leadership as an operating practice rather than a message campaign. A reliable shift handover follows that principle. It makes the risk visible, gives the decision a name, and keeps the control connected to the work after attention moves to the next shift.

Learn more about Andreza Araujo's safety leadership resources when your organization needs to turn routine communication into decisions that hold under operational pressure.