New Machine Safety Owner in 60 Days: The First Decisions That Keep Production From Owning the Risk

A machine safety owner is the person accountable for keeping equipment-risk decisions connected from design and installation through operation, maintenance, change, and retirement. The role succeeds when safeguards remain effective in real work, not when the compliance file simply looks complete.

What does a machine safety owner need to understand before starting?

A machine safety owner sits at the boundary between engineering intent and production reality. The equipment may have a guard, an interlock, an emergency stop, and a written procedure, yet the task can still depend on bypasses, awkward access, rushed resets, or maintenance work that was never considered during the original design.

The first responsibility is to understand where the organization makes decisions about exposure. A new owner should know who can approve a safeguard change, who can accept residual risk, who can stop production, and who must verify the result before the machine returns to service.

ISO 12100 gives a recognized structure for machinery risk assessment and risk reduction. It becomes useful when the team applies it to the actual machine, task, and lifecycle conditions, because a generic assessment cannot show whether a person can reach a danger point during cleaning, jam removal, setup, or fault recovery.

Andreza Araujo often frames leadership as a visible operating choice rather than a title. In this role, that means refusing to let production ownership silently absorb an unresolved safety decision simply because the machine is important or the deadline is close.

First week: build the equipment-risk picture

Walk the equipment with operators, maintainers, engineers, and supervisors instead of relying on a spreadsheet prepared by one department. Ask where people enter, reach, clear, clean, adjust, isolate, and restart the machine.

Include normal production, startup, shutdown, changeover, troubleshooting, sanitation, maintenance, contractor work, and abnormal recovery. The purpose is not to produce a longer hazard list. It is to identify the moments when the installed control no longer matches the work.

Review machine-risk assessments, guarding drawings, interlock tests, lockout procedures, maintenance history, change records, incident and near-miss reports, procurement specifications, and open corrective actions. Then compare those records with what the team does at the machine.

By the end of the week, the owner should have three working lists. The first contains high-consequence exposures. The second contains safeguards whose condition or suitability is uncertain. The third contains decisions that have no clear owner.

Days 8 to 30: clarify the first control decisions

Separate a machine hazard from the control that actually prevents access or energy release. A guard that can be removed without a tool, an interlock that is routinely defeated, or an isolation point that cannot be reached safely is not equivalent to a reliable safeguard merely because it appears in the assessment.

Apply the hierarchy of controls with a design-first bias. Ask whether the hazard can be eliminated, whether the energy or access path can be reduced, and whether engineering protection can prevent contact before relying on procedures, training, or personal protective equipment.

For each priority machine, define the decision owner, required technical input, temporary protection, escalation threshold, and verification evidence. A good action is specific enough that a supervisor can tell whether it is complete without interpreting a vague phrase such as “improve guarding.”

James Reason's model of organizational accidents keeps latent conditions in view. Repeated unsafe access may reflect poor guard design, slow spare-part approval, a maintenance interface, inadequate supervision, or a schedule that rewards speed. The operator's action is part of the story, but it is rarely the whole control problem.

Days 31 to 60: test protection under production conditions

Controls are not finished when engineering signs the drawing. Test them where work becomes difficult. Observe setup, changeover, cleaning, fault recovery, and maintenance isolation during representative conditions, including handoffs between shifts and departments.

Ask the people who use the machine whether the safeguard helps them complete the task or creates a workaround. A control that blocks access without providing a safe method for necessary work can produce predictable bypass pressure. Fix the interface that makes the bypass attractive instead of normalizing the bypass.

Verification should produce evidence, not a meeting record. Depending on the control, evidence may include a functional interlock test, a measured stopping distance, a confirmed isolation point, a revised access method, a completed change review, or an observation that the task can be performed without reaching through a danger zone.

Andreza Araujo's experience across more than 250 cultural transformation projects supports a simple test for ownership. The person accountable for the risk should explain what changed, why the change is adequate, and how the organization knows that protection still works after the work leaves the project team.

How should the owner handle production pressure?

Production pressure becomes dangerous when it changes the decision without changing the risk record. A machine may be restarted with a temporary barrier, reduced speed, or additional observer, but those measures should have a named approval, an expiry point, and a route to permanent correction.

The owner should define in advance what requires an immediate stop, what requires controlled escalation, and what can continue with a documented temporary measure. This boundary prevents every disagreement from becoming a crisis while also preventing urgent exposure from being disguised as routine delay.

When a safeguard fails, resist two weak responses. The first is to blame the person who bypassed it without examining the design and work conditions. The second is to accept the bypass as normal because the machine has operated that way for months. A serious review asks what made the unsafe state available, tolerated, or difficult to correct.

Andreza Araujo's book *Make the Difference, Be a Leader in Health and Safety* grounds this leadership stance in decisions that people can observe. A safety owner earns credibility when the escalation route still works during a missed shipment, maintenance backlog, or difficult restart.

Common mistakes in the first 60 days

New owners often start by rewriting every risk assessment. That creates activity without necessarily improving the machine. The better sequence is to identify exposures that can cause serious harm, test the controls that claim to address them, and then repair the documents so they reflect the decision.

Another mistake is treating procurement as separate from machine safety. Requirements for guarding, access, isolation, diagnostics, and maintenance need to be explicit before equipment arrives. Retrofitting a control after installation is usually slower and more expensive than defining the interface during specification and design.

A third mistake is assigning ownership to EHS while leaving operations and engineering without decision duties. EHS can coordinate and challenge, but a sustainable control system requires the functions that design, purchase, operate, and maintain the machine to own the relevant choices.

A fourth mistake is measuring closure instead of protection. An action can be closed in the system while the safeguard remains hard to use, the spare part remains unavailable, or the work instruction still directs people toward the old access route. Closure is an administrative state. Protection is a field condition.

Resources to deepen the role

Start with ISO 12100 for the machinery risk-reduction structure, then connect it to applicable legal requirements, manufacturer information, electrical and control-system standards, and the organization's change-management process. The standard gives structure, but the machine and the work determine the evidence required.

For the leadership dimension, Andreza Araujo's *Safety Culture: From Theory to Practice* is a useful companion because it treats culture as something revealed by routines, choices, and consequences. That perspective helps a machine safety owner explain why a technically correct control can still fail when the surrounding management system rewards workarounds.

Reason's work on latent failures, Heinrich and Bird's precursor-event logic, and the hierarchy of controls provide complementary lenses. Use them to ask better questions about design, exposure, barriers, and repeated weak signals without turning the review into a search for a single person to blame.

How can leaders tell whether the role is working?

After 60 days, leaders should not judge the role by the number of assessments rewritten or actions entered. They should ask whether serious machine risks are visible, whether decisions have named owners, whether unresolved exposure is escalated early, and whether safeguards have been tested during the work that creates pressure.

A practical review can examine the age of open high-risk actions, the time between a failed safeguard and escalation, the percentage of critical controls with current verification evidence, and the number of temporary protections that passed their expiry date. These measures are useful only when they lead to decisions rather than becoming another scorecard.

The role is working when operators can describe the safe method, maintainers can isolate and test the energy, engineers can explain the design basis, supervisors can stop an unsafe restart, and leaders can resource the correction. That is machine safety ownership beyond the compliance folder.

FAQ

What does a machine safety owner do? A machine safety owner coordinates safeguards, action ownership, escalation, and field verification.

Is the role the same as the maintenance manager? Not necessarily. The company should define the boundary between reliability work and cross-functional safety decisions.

What should happen first? Build an evidence-based picture of equipment, exposures, safeguards, and open decisions before launching a broad document rewrite.

Which standard helps? ISO 12100 provides a recognized machinery risk-assessment and risk-reduction structure, which should be applied with legal, technical, and field evidence.

How is success visible? Serious risk is escalated earlier, control ownership is clearer, temporary safeguards do not become permanent, and field verification confirms that protection works during real tasks.

The first 60 days should make machine safety easier to decide, harder to bypass, and more visible to the leaders who control time, money, design, and production priorities.