Safety Leadership

Stop-Work Authority Explained: 4 Boundaries for Supervisors

Stop-work authority is the defined right and responsibility to pause work when a critical control is uncertain, missing, or failing. Four decision boundaries help supervisors distinguish a legitimate intervention from a vague concern, a production disagreement, or an escalation that should happen after the task is already controlled.

By 4 min read
leadership scene showing stop work authority explained 4 boundaries for supervisors — Stop-Work Authority Explained: 4 Bounda

Key takeaways

  1. 01Define stop-work authority as both a right and a responsibility tied to control evidence.
  2. 02Use the hazard, control, change, and restart boundaries to decide when a pause is legitimate.
  3. 03Protect the person who raises a concern while assigning verification to the responsible control owner.
  4. 04Treat a permit, checklist, or training record as supporting evidence, not proof that a critical control works.
  5. 05Restart only after the exposure is controlled and the remaining uncertainty has a named owner.

F7 glossary explainer for frontline supervisors, operations leaders, and EHS managers

Stop-work authority is often presented as a slogan, yet supervisors need a decision boundary that tells them when a pause is necessary and what evidence permits a restart. The issue is not whether someone feels uncomfortable. The issue is whether a critical control can still be trusted.

Stop-work authority is the defined right and responsibility to pause a task when a hazard is uncontrolled, a critical control is uncertain, or the work has changed beyond its approved conditions. It protects the person who raises the concern and gives the supervisor a clear route from interruption to verification, correction, and controlled restart.

Definition

A useful stop-work process separates three actions that are often blurred together. A worker or supervisor identifies a concern, the responsible leader contains the exposure, and the control owner verifies whether the task can resume. That sequence matters because a pause without verification becomes theater, while a restart without containment turns a speaking-up policy into a liability.

James Reason's work on latent conditions helps explain why the first visible concern is not necessarily the whole failure. A missing barrier may reflect weak planning, unclear ownership, or a design condition whose effect only becomes obvious at the workface. Andreza Araujo makes the same leadership point in Make The Difference: Be a Leader in Health & Safety, where accountability is connected to the decisions that shape exposure rather than assigned only to the person closest to the hazard.

4 Boundaries that define a legitimate stop

1. The hazard boundary

The first boundary is physical. Stop the task when people, equipment, energy, or materials can enter an exposure path that the approved plan does not control. Examples include unexpected movement, an unverified isolation, a changed line-up, a missing guard, or weather that changes the stability of the work.

A concern becomes actionable when the supervisor can identify what could harm someone, where the exposure exists, and which control should prevent it. If the answer remains vague, the task still needs clarification before work continues.

2. The control boundary

The second boundary concerns confidence in the barrier itself. A permit, checklist, or training record is not proof that a control is working. The supervisor should pause when the control is absent, bypassed, damaged, incompatible with the task, or supported only by an assumption that nobody has checked.

This is where Andreza Araujo's approach of combining engineering, creativity, and care becomes practical. Engineering identifies the barrier, creativity tests what could defeat it, and care ensures that the person who reports the weakness is not treated as the problem.

3. The change boundary

Work can become unsafe even when the original plan was sound. Stop-work authority applies when the task, crew, equipment, sequence, environment, or interface changes in a way that invalidates the prior risk decision. A replacement component, a late contractor, a new simultaneous operation, or a rushed handover may each create a new control question.

The relevant question is not whether the change looks small. It is whether the change affects the assumptions on which the control depended. A minor deviation can matter when it occurs at the exact point where the plan had no margin.

4. The restart boundary

The fourth boundary protects the restart decision. Work should remain paused until the responsible person can show what changed, which control was restored, and how the team knows the control will hold during the next step. The evidence may be a field verification, a tested isolation, a revised permit, a corrected method, or a briefing whose questions confirm shared understanding.

A restart is not approved because the schedule is tight or because the team has already lost time. It is approved when the exposure is controlled and the remaining uncertainty has an owner, a due date, and an interim measure.

How to differentiate stop-work authority in practice

SituationCorrect responseWhy it matters
Known hazard with a working controlContinue with the approved method and monitor the controlThe hazard is managed within the agreed boundary
Uncertain or missing controlPause, contain the exposure, and verify the barrierRestarting would rely on an untested assumption
Changed task or interfaceReassess the work boundary before resumingThe original decision may no longer fit the work
Immediate threat to life or serious injuryStop immediately and escalate through the emergency routeContainment takes priority over production continuity

When should a supervisor use it?

Use stop-work authority whenever the supervisor cannot explain which control protects the next action, who owns that control, and what evidence confirms its condition. That test is simple enough for a pre-job brief, yet demanding enough to expose paper compliance.

Across 25+ years of executive EHS experience, Andreza Araujo has treated safety leadership as a decision discipline, not a motivational message. Her work with multinational operations, including the PepsiCo South America plan that reduced the accident ratio by 50% in six months, reinforces why a pause must lead to a better operating decision rather than a ceremonial restart.

Stop-work authority works when leaders make the boundary visible before the task begins, protect the person who raises the concern, and require evidence before production resumes. Safety is about coming home, and that principle becomes operational when the organization knows exactly when work must stop.

Explore more safety leadership guidance from Andreza Araujo.

Topics stop-work-authority safety-leadership supervisors critical-controls worker-voice

Frequently asked questions

What is stop-work authority?
Stop-work authority is the defined right and responsibility to pause work when a hazard is uncontrolled, a critical control is uncertain, or the task has changed beyond its approved conditions.
Who can use stop-work authority?
Any worker or supervisor covered by the organization's procedure should be able to raise a concern, while the responsible leader contains the exposure and coordinates verification.
What are the four boundaries of stop-work authority?
The four boundaries are the hazard boundary, control boundary, change boundary, and restart boundary. Together they define when to pause, what to verify, and what evidence supports resumption.
Is stop-work authority the same as refusing an assignment?
No. Stop-work authority is a structured safety intervention that identifies an exposure, pauses the task, and routes the concern through containment, verification, correction, and controlled restart.
When can work restart after a stop?
Work can restart when the exposure is controlled, the relevant barrier has been verified, the changed conditions are understood, and the responsible owner has addressed any remaining uncertainty.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI