Job Safety Analysis Explained: 4 Layers That Keep Field Decisions Honest
A job safety analysis is more than a list of hazards. These four layers show how to connect the task, exposure, controls, and verification before work begins.
Key takeaways
- 01A job safety analysis becomes useful when it explains how each task step creates exposure and how the selected control will be checked.
- 02The four layers are task sequence, exposure pathway, control design, and field verification.
- 03A generic hazard list cannot show whether the control is available, understood, and usable under real operating conditions.
- 04James Reason's work supports reading the task and surrounding conditions together instead of stopping at the last visible action.
- 05Supervisors should revise the analysis when equipment, people, conditions, or sequence changes.
A job safety analysis breaks a task into meaningful steps, identifies the exposure created by each step, and defines controls that can be checked in the field. Its value depends on the connection between those elements, because a hazard list without a usable control does not guide a safe decision.
What is a job safety analysis?
A job safety analysis, often called a JSA, examines how work will actually be performed. The team describes the sequence, considers what can cause harm, and selects controls that fit the equipment, people, timing, and conditions at the worksite.
A document may contain correct hazard terminology and still fail at the point of use if the control is unavailable, difficult to understand, or incompatible with the job sequence. ISO 45001, published in 2018, supports this operational focus by requiring organizations to address hazards and risks within their processes rather than treating assessment as detached paperwork.
James Reason's work also helps explain why the final visible action is not enough. The decision made at the worksite is shaped by planning, design, supervision, information, and available time. A useful JSA keeps those conditions visible without removing accountability for the work decision.
What are the 4 layers of a job safety analysis?
1. Task sequence
Start with the work as a sequence of observable actions. “Repair the pump” is too broad to support a meaningful review, while “isolate the motor, verify zero energy, remove the guard, and position the lifting aid” gives the team something it can examine.
Use the smallest step that changes the exposure or required control. If the sequence is too broad, hazards disappear inside vague wording. If it is broken into every minor movement, the analysis becomes difficult to use and quickly turns into a formality.
2. Exposure pathway
For each step, describe how a person could encounter the hazard. The question is not only whether electricity, pressure, chemicals, traffic, or stored energy exists. The question is how the task could place a person in its path, including what changes when work is interrupted or conditions deteriorate.
This layer separates a named hazard from an intelligible risk. A rotating shaft is a hazard. Reaching across an unguarded shaft while aligning a coupling is an exposure pathway that tells the team what must be prevented.
3. Control design
Choose controls that change the conditions of work before relying on memory or caution. Elimination, substitution, engineering controls, administrative controls, and personal protective equipment can all have a place, although they do not offer the same reliability.
The control description should state who owns it, when it must be ready, and what acceptable condition looks like. “Use PPE” is not a control design. “Install the face shield before opening the line, confirm the splash zone is isolated, and keep the eyewash route clear” gives the supervisor a condition that can be checked.
4. Field verification
The final layer asks whether the plan matches the worksite at the moment of execution. Equipment position, weather, staffing, access, simultaneous work, and production changes can invalidate an analysis that was accurate during planning.
Verification should be a brief conversation with the people doing the job, not a signature collected at the gate. Ask which step is most likely to change, which control is hardest to maintain, and what would make them stop and reassess. Their answers reveal whether the JSA is usable.
How can supervisors differentiate a live JSA from a form?
A live analysis changes the decision at the worksite. It gives the crew a shared sequence, identifies the exposure in plain language, and makes the critical controls visible before the task starts. A form records that someone completed a review, but it may not influence how the task is set up.
One practical test is to remove the document and ask the crew to explain the four layers in their own words. If they can describe the step, exposure, control, and verification, the analysis has reached the work. If they can only repeat the hazard names, the document needs revision.
When should a JSA be used instead of a broader assessment?
Use a JSA when the decision is tied to a specific task, crew, sequence, or changing condition. Use a broader assessment when the organization needs to understand risks across a process, facility, or system. The methods complement each other, and neither should be used to avoid the other.
Andreza Araujo's experience across more than 250 cultural transformation projects points to a practical distinction: evidence matters when it changes an operating decision. A JSA earns its place when it helps the team identify the next exposure and confirm the control before someone is committed to the task.
When does a JSA need revision?
Revise the analysis when the work sequence changes, a different tool or material is introduced, staffing changes the coordination pattern, or the field team finds that a stated control cannot be maintained. A review is also warranted after an incident, near miss, or repeated deviation that exposes a weakness in the original assumptions.
The purpose is not to create a new document for every small variation. The purpose is to keep the task description honest enough that the crew can recognize when the controls no longer match the work.
What should the team do after the analysis?
Keep the review active during the work. Stop and reassess when the sequence changes, a control fails, another crew enters the area, or conditions no longer match the assumptions. The strongest JSA is not the longest document. It is the one that helps people recognize when the original decision is no longer valid.
FAQ
What is a job safety analysis? It is a structured review that connects task steps, exposure pathways, controls, and field verification.
What are the four layers? The four layers are task sequence, exposure pathway, control design, and field verification.
Is a JSA the same as a risk assessment? No. A JSA is task-level, while a broader risk assessment can cover processes, facilities, equipment, and organizational conditions.
When should it be reviewed? Review it before unusual work, after changes, when conditions shift, and when the crew finds a control difficult to use.
A job safety analysis becomes a real safety tool when it helps the team see how work creates exposure and how the control will be verified before the decision becomes difficult to change.
Frequently asked questions
What is a job safety analysis?
What are the four layers of a job safety analysis?
Is a job safety analysis the same as a risk assessment?
When should a job safety analysis be reviewed?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.