Safety Review vs Capital Approval vs Stop-Work Authority: Which Decision Gate Fits Critical Risk?

A critical risk can appear in a monthly review, a capital request, or an active job, yet the leadership response is often the same. Someone asks for more information, the meeting ends, and the exposure remains in operation. That pattern is not a lack of data. It is a mismatch between the risk and the decision gate.

Safety review, capital approval, and stop-work authority each answer a different leadership question. This comparison shows which gate fits the consequence, the time available, and the control that must change.

What should a decision gate answer?

A decision gate should answer one practical question, which is what leadership must decide before the work can continue, change, or receive resources. If a meeting only receives a report, it is a communication forum rather than a control.

ISO 45001, published in 2018, expects organizations to monitor, evaluate, and improve the occupational health and safety management system. That expectation becomes useful only when review information reaches a person who can change the work. A dashboard without decision rights can describe exposure while leaving the exposure untouched.

Andreza Araujo makes this distinction central to the leadership logic in Safety Culture: From Theory to Practice. A mature safety system does not confuse visible activity with dependable control. The gate must make the next decision harder to avoid.

When is a safety review the right gate?

A safety review is the right first gate when leaders need to establish whether a critical exposure is understood, whether its controls are present in the field, and whether the assigned owner has enough authority to act. It is especially useful when evidence is fragmented across operations, engineering, maintenance, and EHS.

The review should bring together the exposure definition, credible worst consequence, control standard, recent verification, open actions, and the person who can remove the gap. A useful review does not reward a thick slide deck. It tests whether the stated control matches the work that people actually perform.

The weakness appears when the review becomes a recurring ritual. If every meeting ends with “monitor the situation,” leaders have not created a gate. They have created a delay mechanism that can make normal drift look acceptable.

Use the review gate when the immediate question is whether the organization knows enough to escalate, redesign, fund, or pause. The safety governance blind spots guide is useful for testing whether critical-risk information reaches the right forum.

When is capital approval the right gate?

Capital approval is the right gate when the exposure cannot be reduced reliably through reminders, short-term supervision, or another temporary administrative action. The required change may involve equipment, layout, automation, ventilation, guarding, access, redundancy, or a redesign whose value extends beyond one shift.

The request should describe the control failure in operational terms. “Improve safety” is too vague for a funding decision. A stronger request explains what exposure remains, what control will change, what performance standard will be verified, and which executive owns the result after the project closes.

Capital approval also protects leaders from a common distortion. When a permanent control is delayed because the current incident rate looks acceptable, the organization may be treating outcome history as proof of control reliability. That is a weak basis for a decision about a low-frequency, high-consequence exposure.

Use this gate when the decision is primarily about resource allocation and the risk reduction depends on a durable change. The board decisions on safety numbers article helps connect funding conversations to exposure and control evidence instead of activity volume.

When is stop-work authority the right gate?

Stop-work authority is the right gate when a serious exposure is active and the existing control cannot be trusted until someone with authority resolves the condition. It is not a motivational phrase, and it is not a substitute for design improvement. It is a time-critical decision right.

The trigger should be specific enough to use under pressure. Examples include a missing critical barrier, an unverified isolation, a rescue arrangement that cannot reach the work in time, or a change that invalidates the original risk assessment. The person who stops the work should know who will decide the recovery conditions.

Leaders weaken this gate when they praise the pause but punish the delay it creates. They also weaken it when a stop is lifted because production needs the task completed, even though the control condition has not changed. The message becomes clear, regardless of the wording in the procedure.

Use stop-work authority when waiting for a scheduled review would leave people exposed. The decision should record the condition, the immediate safeguard, the recovery owner, and the evidence required to restart.

How do the three gates compare?

The comparison shows why a leader should not ask which gate is “strongest.” A stop-work decision can protect people now, but it cannot fund a redesign. A capital decision can remove a recurring exposure, but it cannot replace an immediate pause. A review can expose the gap, but it cannot be allowed to end without a consequence.

Which gate fits each leadership context?

Use a safety review when several functions disagree about the exposure or when the control standard is unclear. The goal is to make the risk legible and assign the next decision to someone with authority.

Use capital approval when the organization already understands the gap and the durable answer requires money, engineering, procurement, or a change to the asset. The funding request should preserve the connection between the approved design and the field verification that will prove it works.

Use stop-work authority when the exposure is present now and the barrier is missing, bypassed, or unverified. The restart condition should be observable, because “everyone understands the risk” is not proof that the risk has been controlled.

When the same exposure appears in all three contexts, use the gates in sequence. Stop the work if people are exposed, review the evidence to understand the failure, and fund the permanent change if routine management cannot make the control dependable.

What should leaders verify after the decision?

A decision is incomplete until someone verifies that the condition changed. For a safety review, verification may mean confirming that the action owner has authority and that the control is visible in the field. For capital approval, it means testing the control against the design requirement after commissioning. For stop-work authority, it means confirming the restart condition before work resumes.

Verification should also test whether the decision created a new exposure. A guard may reduce contact risk while increasing maintenance access time. A schedule change may reduce fatigue while moving work into a weather window with higher exposure. The decision gate needs enough operational detail to catch that trade-off.

The executive safety dashboard should therefore show decisions, owners, due dates, and verification status rather than only counts. A comparison of risk registers, Bow-Tie, and critical-control verification can help leaders choose evidence that matches the control question.

What should a safety leader do next?

Map each critical risk to the gate that fits its decision. Write the trigger in plain language, name the person who can act, define the evidence threshold, and set the verification point before the next review. If the gate cannot produce a clear decision, redesign the gate rather than adding another report.

Safety leadership becomes credible when people can see how evidence changes approval, funding, or the permission to continue. The goal is not to create more meetings. It is to ensure that a known serious exposure cannot pass through the organization simply because it arrived in the wrong forum.

For organizations building that connection between culture, risk ownership, and field proof, Andreza Araujo's safety leadership resources provide a broader reference for turning management intent into operating discipline.