Plant Manager vs EHS vs Supervisor: Who Owns Risk Controls?
Plant manager, EHS, and supervisor each own different parts of risk control, and the wrong handoff model keeps serious gaps open longer than needed.

Key takeaways
- 01Clarify first-response ownership, system ownership, and resource ownership before the same control gap repeats.
- 02Assign supervisors to verify barriers in the field, because proximity without verification leaves the exposure untouched.
- 03Give EHS authority to challenge the method and test evidence, not to replace operations as the permanent owner.
- 04Keep the plant manager accountable for priority, budget, and cross-functional escalation, because only that role can remove the friction that blocks the fix.
- 05Read Make The Difference: Be a Leader in Health & Safety and A Ilusão da Conformidade to see why leadership clarity beats paper ownership.
Who owns the control when the risk is visible on the floor but the fix is still moving through inboxes? In many plants, the supervisor sees the problem, EHS documents it, and the plant manager hears about it after the delay already mattered.
That is why the ownership question is not academic. It appears in Critical-Risk Owner in 45 Days: Accountability Map and in Critical Control Verification: 7 Audit Traps That Leave SIF Risk Untouched, because a control only counts when the right role can name it, check it, and escalate it.
Across 25+ years in multinational EHS and more than 250 cultural transformation projects, Andreza Araújo has seen the same failure pattern repeat. Ownership is split across functions, so no one feels fully accountable for the barrier itself. In Make The Difference: Be a Leader in Health & Safety, leadership is not a title effect. It is the act of deciding who moves first, who challenges the method, and who releases the resources that let the fix survive.
Evaluation criteria
To compare the three roles, use five criteria that matter in the field: speed, proximity, system reach, escalation power, and verification strength. A role can score high on one dimension and low on another, which is why role clarity matters more than slogans about shared responsibility.
James Reason is useful here because latent conditions survive when ownership is vague. The plant may look controlled on paper, yet the barrier still fails in real work because nobody owns the exact decision that would have repaired it.
| Criterion | What it tells you | Why it matters |
|---|---|---|
| Speed | How fast the role can move a response | Critical controls fail faster than annual meetings |
| Proximity | How close the role is to the hazard | The first signal usually appears in the field |
| System reach | How much the role can change the work | Some fixes need design, not reminders |
| Escalation power | Whether the role can force priority | Without this, the fix waits behind production pressure |
| Verification strength | Whether the role can prove the control works | Paper ownership does not equal field control |
Plant manager
The plant manager owns priority, budget release, and cross-functional conflict resolution. That role is strongest when the fix requires capital, production change, or a decision that affects several departments at once.
The plant manager is not the best person for daily verification, but the manager is the only one who can remove the friction that keeps the barrier weak. That is why Safety Ownership: 6 Myths Plant Managers Must Stop matters. A plant leader who thinks ownership is a memo usually delays the exact change the site needs.
Make The Difference: Be a Leader in Health & Safety fits this role because it treats leadership as a decision system, not a style. The plant manager should own the stop points, the resources, and the escalation path, especially when the issue crosses maintenance, operations, and contractor work.
| Dimension | Score | Read |
|---|---|---|
| Speed | 3/5 | Fast enough for priority, slower than the floor |
| Proximity | 2/5 | Usually distant from the exposure point |
| System reach | 5/5 | Strongest role for design and resource change |
| Escalation power | 5/5 | Can force attention across functions |
| Verification strength | 3/5 | Can require proof, but should not be the only checker |
EHS
EHS owns method, challenge, and assurance. That means the function should define how the control is tested, what evidence counts, and when the result must be escalated. EHS should not become the permanent substitute for operations.
This is where many organizations drift. EHS writes the standard, tracks the action, and then gets treated as the owner of the work itself. Andreza Araújo calls that kind of drift a form of conformity, because the organization looks aligned while the field still depends on improvisation. A Ilusão da Conformidade is the right book to keep nearby when the spreadsheet starts pretending to be the control.
EHS also needs the authority to challenge false closure. If a barrier only exists in the audit pack, the function should say so. The best companion article for that discipline is Critical Control Verification: 7 Audit Traps That Leave SIF Risk Untouched, because it shows why checking the file is not the same as checking the barrier.
| Dimension | Score | Read |
|---|---|---|
| Speed | 4/5 | Fast for challenge and method |
| Proximity | 3/5 | Near the system, not always near the hazard |
| System reach | 4/5 | Strong on design and assurance |
| Escalation power | 3/5 | Useful, but usually needs management backing |
| Verification strength | 4/5 | Best role for testing evidence discipline |
Supervisor
The supervisor owns first-line verification and the daily call. That is the role closest to the exposure point, so it is the first place where a weak barrier should be confirmed, questioned, or stopped.
The supervisor is not usually the best owner for capital redesign, but the supervisor is the best owner for seeing whether the control works under pressure. That is why Critical-Risk Owner in 45 Days: Accountability Map is so useful. It shows how the day-to-day owner keeps the risk from drifting back into routine.
Andreza Araújo has seen the same pattern in more than 30 countries: if supervisors do not own the field check, the site confuses reporting with control. Critical Control Verification: 7 Audit Traps That Leave SIF Risk Untouched makes that gap visible, because the field always tells a different story from the file.
| Dimension | Score | Read |
|---|---|---|
| Speed | 5/5 | Fastest response at the point of work |
| Proximity | 5/5 | Closest to the hazard and the team |
| System reach | 2/5 | Limited influence without escalation support |
| Escalation power | 3/5 | Can raise the alarm, but may not change budget |
| Verification strength | 5/5 | Best position for daily field proof |
Decision matrix
The right answer depends on the kind of decision. A plant manager should own priority and resourcing, EHS should own the method and challenge, and the supervisor should own the field verification. If one person owns all three, the organization usually gets speed in one place and blindness in another.
| Scenario | First owner | Second owner | Why this order works |
|---|---|---|---|
| Barrier missing at the line | Supervisor | EHS | The supervisor can stop the exposure and EHS can test the method |
| Design gap needs capital | Plant manager | EHS | Only the manager can release budget and re-rank production pressure |
| Audit says green, field says weak | EHS | Plant manager | EHS should challenge the evidence while the manager forces a real fix |
| Repeat failure after a near miss | Supervisor | Plant manager | The supervisor shows the failure point and the manager removes the block |
The comparison is not about hierarchy for its own sake. It is about matching the decision to the role that can actually move it. That is the practical difference between governance and ceremony.
Which role owns what in practice
The clean division is simple. The supervisor owns first verification, the EHS function owns method and challenge, and the plant manager owns priority, conflict resolution, and the resources needed to change the system.
When this is clear, the organization stops pretending that one function can carry the whole burden. When it is not clear, the site gets exactly what Leadership Change Safety Reset in 30 Days warns about: a fresh leadership layer that inherits old habits because nobody rewired the decision path.
For a broader map of ownership, Risk Owner in 90 Days: Critical Control Plan shows how to define authority around a control, while Safety Ownership: 6 Myths Plant Managers Must Stop shows why line ownership must stay visible. These two pieces, read together, make the model harder to fake.
A Ilusão da Conformidade belongs in this conversation because compliance language can hide ownership gaps. If the action log is full but the barrier still fails, the organization has paperwork, not control.
What leaders should do next
Start with one critical control and write down three owners: who verifies it in the field, who challenges the method, and who releases the resources if it fails. Then test the handoff in one real case, not in a workshop.
Andreza Araújo’s work in Make The Difference: Be a Leader in Health & Safety is a good reminder that leadership is visible only when a decision changes the work. If you want a sharper lens on false order, A Ilusão da Conformidade explains why a clean report can still leave exposure untouched.
If you are building the role map for the first time, the next read should be Critical-Risk Owner in 45 Days: Accountability Map. If your problem is the handoff itself, Risk Owner in 90 Days: Critical Control Plan shows how to stabilize it before the next gap appears.
In practice, the supervisor owns the check, EHS owns the challenge, and the plant manager owns the priority. When that order is explicit, risk controls stop floating between departments and start behaving like controls.
Frequently asked questions
Who owns risk controls in a plant?
What does EHS own that supervisors do not?
When should a plant manager take the lead on a control gap?
How is this different from a critical-risk owner role?
Which Andreza Araujo book fits this topic best?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.