How to Set Up a Fatigue Risk Review for Night-Shift Teams in 30 Days

F2 practical guide for shift managers, occupational health teams, and EHS leaders

Night work is often managed as a scheduling problem, even when the real exposure sits in the interaction between hours, workload, recovery, supervision, and task consequence. A roster can comply with a local rule while a tired team still approaches a high-energy task without enough recovery or decision support.

The guide below shows how to set up a fatigue risk review in thirty days. It is designed for operations that use rotating shifts, permanent nights, extended handovers, or callout work, and it keeps the review focused on work design rather than on blaming people for a predictable human response.

Andreza Araujo's The Illusion of Compliance, the English rendering of A Ilusão da Conformidade, is a useful starting point because a completed roster or training record is not proof that the work remains safe at two in the morning. The review must connect the schedule to the decisions and controls that the night team actually faces.

Step 1: Set the decision boundary

Define what the review is meant to decide before collecting data. The question may be whether a night-shift task can continue under the current roster, whether a maintenance window should move, whether a callout arrangement creates unacceptable recovery loss, or whether a supervisor needs another control before authorizing work.

Write the boundary in one sentence and name the work groups included. A review that covers every employee, every shift, and every possible health concern will produce general observations instead of an operational decision. Start with one exposure, one population, and one decision owner.

Use the existing psychosocial risk triage guide when the first evidence suggests that workload, staffing, autonomy, or recovery design is contributing to the fatigue signal.

Step 2: Map the night-work pattern

Collect the actual pattern for the previous four weeks, including planned hours, overtime, shift swaps, callouts, early starts, late finishes, and the time between one duty period and the next. The planned roster alone is not enough because fatigue risk is shaped by the schedule people worked, not only by the schedule the system printed.

Separate permanent nights from rotating nights and identify the point at which the team changes from day work to night work. Record where the handover occurs, who supervises the transition, and whether the most demanding tasks are concentrated near the end of the shift, when alertness and available support may be different from the start.

When the work crosses multiple crews, compare the map with the site's shift-handover process. A handover that transfers production status but omits fatigue-relevant changes leaves the incoming team to reconstruct the risk under pressure.

Step 3: Identify high-consequence decisions

List the tasks in which reduced alertness could change the consequence of an error. Examples include isolation verification, vehicle movement, work at height, confined-space entry, process adjustment, alarm response, lifting, and emergency response. The purpose is not to label tired people as unsafe. It is to identify decisions that deserve stronger design and supervision.

For each task, describe the decision that must be made, the information required, and the control that prevents a wrong or delayed choice from becoming harm. James Reason's work on latent conditions helps here because the exposure may be distributed across staffing, interface design, maintenance planning, and supervision rather than located in one person's attention.

Across 25+ years leading EHS at multinationals, Andreza Araujo has consistently treated safety as a management decision that must hold under operating pressure. That lens keeps the review on the conditions leaders can change, including task timing, staffing, escalation, and control availability.

Step 4: Check the recovery opportunity

Ask whether the schedule allows people to recover between duties and whether the work design protects that opportunity. Review commuting demands, consecutive nights, short turnarounds, overtime after the scheduled shift, second jobs where the organization has a lawful and respectful way to ask, and the way emergency callouts affect the next duty period.

Do not turn the review into a medical assessment or ask supervisors to diagnose a worker. The operational question is whether the work arrangement creates a foreseeable reduction in alertness and whether the organization has a safe route for changing the assignment, delaying the task, or seeking occupational health advice.

ISO 45003:2021 is relevant because it directs attention toward psychosocial conditions in the work system. Pair its work-factor lens with the ISO 45003 explainer so the review does not reduce fatigue to an individual resilience issue.

Step 5: Test the controls at the workface

For every high-consequence task, verify the controls that should reduce the effect of reduced alertness. A second-person check, a defined escalation route, a task pause, a restricted authorization window, lighting, communication redundancy, or a change in sequence may be more useful than another reminder to stay focused.

Check whether each control is available during the night shift, whether the person who owns it is present or reachable, and whether the team knows what to do when the control is unavailable. A control that depends on a specialist who is not reachable at the decision point is a planning assumption, not dependable protection.

The review should also test whether supervisors can stop or redesign the task without treating the decision as a personal failure. Andreza Araujo's work on safety culture emphasizes that declared values become credible only when operating routines support the decision they ask people to make.

Step 6: Create a private reporting route

Give employees a way to report schedule strain, missed recovery, or fatigue-related difficulty without turning the report into a fitness judgment. The route may combine a confidential occupational health channel with a non-punitive operational signal that identifies when work design needs review.

Define what happens after a report. A form that disappears into a mailbox will teach people that speaking up changes nothing. The owner should confirm receipt, protect personal information, assess the work condition, and communicate what will change when the report reveals a control problem.

Keep individual medical information separate from management metrics. Leaders need enough information to correct the work system, while clinical details belong with qualified health professionals and must be handled under the applicable privacy requirements.

Step 7: Run a two-week field test

Choose a bounded trial with one night crew or one task family. Track the controls that were actually used, the points at which the team changed the plan, the time needed to obtain help, and any repeat condition that made the original arrangement difficult to sustain.

Ask supervisors and workers what made the safer choice easier or harder. Do not ask only whether the control was followed, because that question can reward a clean answer while hiding a weak design. Ask which decision took too long, which information was missing, and what would have happened if the person had continued without intervention.

Compare the field notes with the cognitive fatigue analysis to distinguish a local signal from a broader work-design pattern. The objective is not to create a new score. It is to learn which controls change decisions during the night shift.

Step 8: Convert the findings into an owner-led plan

End the thirty-day review with a short action plan that names the exposure, the decision to change, the control owner, the due date, and the evidence that will show whether the change works. Separate immediate containment from redesign, because a temporary adjustment should not be mistaken for a permanent solution.

Assign leaders to the decisions that require staffing, schedule, budget, or production changes. Assign EHS and occupational health to the technical support they are qualified to provide. The operational owner remains accountable for whether the task can start, pause, or restart under the revised conditions.

At the next leadership review, ask whether the plan changed the work or only added documentation. Andreza Araujo's Safety Culture: From Theory to Practice makes this distinction central: culture is visible when values shape decisions, routines, and consequences. A fatigue review is complete only when the organization can show that its night-work controls became more dependable.

What should a fatigue risk review produce?

The review should produce a bounded exposure map, a list of high-consequence decisions, verified controls, a route for confidential reporting, a field-test record, and an owner-led action plan. It should not produce a medical label for a person or a dashboard that hides the work conditions behind a single score.

If the evidence shows that the schedule repeatedly creates short recovery, weak supervision, or unsupported high-consequence decisions, management must change the design or formally escalate the residual risk. The correct outcome is a better operating decision, not a more polished record.

Frequently asked questions

Who should lead a fatigue risk review?

The operational manager who owns the night-work decision should lead it with supervisors, workers, EHS, and occupational health as appropriate. EHS can challenge assumptions and help structure evidence, but the operating owner must control the decision about task timing, staffing, and escalation.

Is fatigue risk the same as a medical diagnosis?

No. A fatigue risk review examines work design, recovery opportunity, task consequence, and available controls. A medical diagnosis belongs with qualified health professionals and should not be inferred from a supervisor's observation or from a schedule metric.

How long should the review take?

A focused review can be organized over thirty days, with the first phase mapping the work, the second phase testing controls, and the final phase assigning owners. The duration should expand when the work involves serious consequence, complex callout patterns, or several employers.

What if the team refuses to report fatigue?

Check whether the reporting route creates fear, exposure to discipline, or uncertainty about what happens next. Improve confidentiality, define the response, and give supervisors a work-design signal that does not require employees to disclose private health information.

What is the most important sign that the review worked?

The strongest sign is a changed decision at the workface. The crew delays, redesigns, escalates, or adds a verified control when the schedule or alertness condition makes the original plan unreliable.

Night-shift fatigue is manageable when leaders treat it as a design and decision problem rather than a character test. For more practical frameworks on turning safety commitments into dependable routines, visit Andreza Araujo's books and methods.