Management of Change vs Pre-Startup Review vs Field Verification: 4 Decision Points for Temporary Equipment

A temporary pump arrives after a production asset fails. The team installs it during a compressed shutdown window, updates one procedure, and asks the supervisor to confirm that the arrangement is acceptable. The first question is usually, “Which form do we need?” The more important question is whether the condition has changed the risk decision.

Management of change, a pre-startup safety review, and field verification are related, but they do different jobs. Treating them as interchangeable creates false confidence. In a plant where temporary equipment can alter isolation points, guarding, access, emergency response, or operating limits, leaders need a method for choosing the right review and sequencing it correctly.

What should leaders evaluate before choosing a review?

The decision should start with the change itself, not with the form that is easiest to open. Ask whether the temporary condition changes the hazard, the barrier, the person responsible for the barrier, or the way work is performed. If any answer is yes, the condition deserves a deliberate risk decision.

Four dimensions make the choice clearer. The first is novelty, meaning whether the equipment or arrangement is new to the operation. The second is release status, which asks whether the equipment is still being designed and installed or is ready to enter service. The third is field uncertainty, which asks whether the written description may differ from the physical condition. The fourth is duration, because a temporary condition that remains for three months can create a different management problem from a controlled intervention lasting one shift.

These dimensions also expose a common trap. A signed review may show that someone accepted the risk, while leaving unclear whether anyone proved that the barrier works. James Reason’s work on latent failures helps explain why this distinction matters. The visible event often appears at the point of work, although the conditions that made it possible were created earlier by design, planning, maintenance, or supervision.

For leaders who need a broader definition of acceptable exposure, the article Risk Criteria Explained provides useful context. The present comparison focuses on the review path that turns that decision into an operating control.

Management of change is strongest when the condition changes the risk picture

Management of change should lead when a temporary equipment arrangement changes the assumptions under which the operation was designed or controlled. The change might affect energy isolation, chemical compatibility, lifting points, access, ventilation, alarms, staffing, inspection frequency, or emergency response. It can also change who owns the final decision.

The strength of management of change is its breadth. It forces the team to examine technical, human, procedural, and organizational consequences before the new condition becomes routine. The review should identify what changed, why it changed, which hazards were introduced or increased, which controls were affected, and who must approve the new operating boundary.

Its weakness appears when the form becomes a description exercise. A team may record that a temporary hose replaces a fixed line, yet fail to ask whether the hose crosses a vehicle route, whether the coupling is compatible with the fluid, or whether the emergency isolation point remains reachable. The document can be accurate and still be incomplete as a control.

Use management of change as the lead review when the central question is, “What does this condition change?” It is less useful as the only review when the central question is, “Can this equipment now be released?” That second question belongs to a readiness gate.

A pre-startup safety review is the release gate before service begins

A pre-startup safety review, often abbreviated PSSR, is strongest when equipment or a modified process is about to enter service. Its purpose is to confirm that the installation is complete enough to operate, that required safeguards are in place, that procedures and training match the configuration, and that open items do not undermine the release decision.

For temporary equipment, the review should be scaled to the hazard rather than copied from a major capital project. A portable generator may need checks for grounding, fuel storage, exhaust routing, electrical protection, access, and emergency shutdown. A temporary pump may require confirmation of pressure limits, hose restraint, isolation, guarding, spill response, and inspection ownership.

The PSSR is valuable because it creates a deliberate pause before the first operating cycle. Its limitation is timing. If the review is conducted only at the end, the team may discover that the selected equipment cannot meet the intended operating envelope, when redesign would be expensive and the production deadline is already exerting pressure.

Use a pre-startup review when the central question is, “Is the modified or temporary arrangement ready to enter service?” It should follow management of change whenever the arrangement changes the risk picture, because readiness cannot be judged well when the team has not first defined what has changed.

Field verification tests whether the control survives contact with work

Field verification is strongest when the main uncertainty sits between the written plan and the physical task. It can be a structured walkdown, a barrier check, a functional test, or a supervisor-led confirmation at the point of use. The method should reflect the hazard and should produce evidence that another person can understand.

Temporary conditions deserve field verification because they often depend on improvisation. The equipment may fit on the drawing but block a walkway. A lock may exist but be unreachable after the temporary enclosure is installed. A rescue route may be listed in the plan but unavailable because the temporary line occupies the access path. These are not clerical defects. They are control failures that appear only when someone looks at the work as it will actually happen.

Field verification is not a substitute for risk assessment or release authorization. A supervisor can confirm that a guard is installed without having authority to accept a changed operating limit. Conversely, an engineer can approve the design without seeing that the crew cannot reach the isolation point while wearing the required protection.

Use field verification when the central question is, “Does the control exist, remain accessible, and work at the point of exposure?” It is especially important after installation, after a shift change, after a layout change, or when a worker raises a concern that the document does not explain.

How do the three methods compare?

The three methods differ by the decision they support. Management of change defines the consequences of a changed condition. The pre-startup review determines whether the condition is ready for service. Field verification tests whether the control works in the real work setting. A plant that uses the same method for all three decisions will either over-document low-risk changes or under-control high-risk ones.

The comparison becomes practical when the team assigns each method a clear output. Management of change should produce a defined operating boundary and accountable owners. The pre-startup review should produce a release, rejection, or conditional release with dated actions. Field verification should produce evidence of barrier condition, accessibility, and follow-up.

Andreza Araujo’s work across more than 250 cultural transformation projects supports a simple leadership test: can the operation explain who made the decision, what evidence supported it, and when the decision will be revisited? If those answers are missing, the organization may have completed a process without controlling the risk.

Four decision points prevent the wrong review from carrying the whole burden

Decision point 1: Did the condition change the hazard or control assumptions? If yes, open management of change before the equipment is accepted as normal work. If no, document why the condition remains within an existing, understood operating envelope.

Decision point 2: Is the equipment about to enter service? If yes, use a pre-startup review scaled to the consequence of failure. Do not treat a completed installation as proof of readiness, because installation completion and operational readiness are different claims.

Decision point 3: Could the field condition defeat the written control? If yes, perform field verification with the people who will operate, maintain, isolate, or respond to the equipment. Their task knowledge is evidence about usability, not a replacement for technical review.

Decision point 4: Will the temporary condition remain long enough to drift? If yes, assign an expiry date, owner, review trigger, and permanent-design decision. A temporary arrangement without a dated end state becomes an undocumented operating mode, which is precisely how control assumptions decay.

These points create a sequence rather than a competition. Management of change explains the change. The pre-startup review gates the release. Field verification confirms the barrier in context. The sequence can be shortened for a low-consequence change, but the reasoning should remain visible.

Which method should a plant leader choose in each situation?

Choose management of change first when the temporary arrangement changes process conditions, energy sources, staffing, safeguards, or decision rights. The plant manager or operations leader should not delegate the changed-risk decision to a form owner who lacks authority over production and maintenance priorities.

Choose a pre-startup review first when the design is known and the immediate issue is readiness for operation. This is common after a temporary bypass, equipment replacement, shutdown modification, or relocation that has already passed the change-definition stage but still needs a release decision.

Choose field verification first when the installation is already in place and the concern is practical control. This can happen after a worker reports that a valve is inaccessible, a temporary cable is exposed to traffic, or a rescue route is blocked. The first response should examine the condition, while the final response should reopen management of change if the finding reveals a broader change in risk.

For a high-consequence condition, use all three. The operational burden is justified when a temporary barrier can fail with serious consequences, when the condition affects multiple shifts, or when the equipment interacts with existing safeguards. Control Reliability Explained offers a related way to test whether a barrier deserves trust.

What should the review package contain before the temporary condition becomes routine?

A credible package does not need to be large, but it must be specific. It should identify the temporary equipment, the reason for the change, the operating limits, the affected hazards, the critical controls, the accountable decision owner, and the evidence required before release. It should also show what will cause the review to reopen.

• One description of the physical configuration, including interfaces with existing equipment.
• One risk decision that states the accepted operating boundary and unresolved conditions.
• One readiness check before first use or restart.
• One field verification record that tests accessibility and barrier condition.
• One named owner for expiry, removal, extension, or permanent redesign.
• One escalation route for a worker or supervisor who finds a mismatch.

The package should be readable by the next shift, not only by the person who created it. When the controls depend on local knowledge that never reaches the record, the operation is vulnerable to shift changes, contractor turnover, and production pressure.

How can leaders turn the comparison into a repeatable operating decision?

Start with a short triage question at the point where the temporary condition is proposed. Ask what changed, whether the equipment is ready to operate, and what must be checked in the field. The answer should route the request to one or more review methods without forcing every condition through the same administrative path.

Then set a visible decision owner. EHS can challenge the assumptions, engineering can confirm the technical design, maintenance can confirm maintainability, and supervisors can test usability, but someone with operating authority must decide whether the condition is released, restricted, or rejected.

Finally, verify closure in the field and review the expiry date. If the temporary condition is extended, the extension should be a new decision rather than an automatic calendar action. That small distinction keeps the organization from confusing continued need with continued acceptability.

Temporary equipment is not automatically unsafe, and a completed form is not automatically a control. The right method depends on the question being answered. Management of change defines the changed risk, pre-startup review proves readiness, and field verification tests whether the barrier survives real work. When leaders sequence those decisions and assign ownership, temporary work remains visible instead of becoming permanent risk by habit.

Andreza Araujo helps organizations turn safety culture into measurable operating decisions through engineering, creativity, and care. Explore her practical work on workplace safety and safety culture.