Risk Management

Evidence Expiry Explained: 3 Conditions That Make Old Verification Look Current

Evidence expiry shows when an inspection, test, observation, or approval no longer supports the current safety decision because the asset, work context, or underlying assumption has changed.

By 3 min read
risk management scene on evidence expiry explained 3 conditions that make old verification look current — Evidence Expiry Exp

Key takeaways

  1. 01Evidence expires when its proof no longer represents the conditions or claim behind the current safety decision.
  2. 02Three conditions matter most: the object changed, the work context changed, or the decision assumption changed.
  3. 03ISO 45001:2018 supports linking operational control, change management, documented information, and performance evaluation.
  4. 04James Reason's work explains why a credible record can still hide a mismatch between a control and its conditions.
  5. 05A useful review ends with a clear choice to keep, refresh, restrict, or stop the decision.

A control can remain written, assigned, and technically plausible while the evidence supporting it quietly becomes obsolete. Evidence expiry is the point at which a previous inspection, test, observation, or approval no longer gives a decision-maker enough confidence for the conditions now in front of the team.

Evidence expiry is the loss of decision value that occurs when proof no longer represents the equipment, task, people, assumptions, or operating conditions it was meant to verify. An old record may still be accurate, yet no longer strong enough to support the current safety decision.

What is evidence expiry?

Evidence expiry is a practical risk-management concept for deciding whether yesterday's proof still answers today's question. A completed inspection may show that a guard was present at the time of inspection, while a later modification, impact, repair, or change in access makes that record incomplete for the next task.

The concept applies to field observations, permit reviews, contractor qualifications, emergency exercises, control verifications, exposure assessments, and management approvals whose value depends on stable conditions. ISO 45001:2018 places operational control, change management, documented information, and performance evaluation inside the occupational health and safety management system. Evidence should be reviewed because the conditions that gave it meaning may have changed.

James Reason's work on latent conditions helps explain the danger. A record can preserve the appearance of control while hiding a mismatch between what was verified and what the organization now assumes. Andreza Araujo's Safety Culture: From Theory to Practice adds the leadership test, because leaders reveal their real safety culture when they decide whether inconvenient evidence deserves a new review or a quiet extension.

What are the three conditions that make evidence look current when it is not?

These conditions describe how stale evidence survives ordinary management routines. They are prompts for deciding when existing proof must be challenged.

1. The object changed after verification

Evidence loses strength when equipment, layout, software, material, or a protective device changes after verification. The change may be formal, such as an engineering modification, or informal, such as a field repair that never reached the register or the next shift.

Ask whether the change could alter the control mechanism or the way a person is exposed. A new access route, bypassed interlock, changed set point, or replacement component can make a previous test relevant history rather than current proof.

2. The work context changed after verification

Evidence may expire when the asset stays the same but the work around it changes. A maintenance team may use a different sequence, a contractor may take over, production may run at another rate, or a night shift may rely on less support than the team that completed the original review.

Context includes staffing, competence, supervision, simultaneous operations, workload, communication, and the time available to stop or recover. These factors can change practical control performance even when the control is technically present.

3. The decision assumption changed after verification

Sometimes the physical system and work context appear stable, but the assumption behind the decision changes. A supplier's competence may be questioned, a failure mode may be reclassified, or a near miss may show that a control was credited for a function it could not perform.

The old evidence may still be accurate on its own terms. The problem is that the organization is asking it to support a broader or different claim. A test that confirms availability does not automatically confirm effectiveness under a new demand or failure sequence.

How can a team recognize evidence expiry in practice?

QuestionWhat it testsEvidence of a sound answer
What changed since verification?Asset stabilityThe record identifies formal and temporary changes.
Who and how is the work being performed now?Context stabilityThe proof reflects the current task, crew, supervision, and operating state.
Does the original claim still hold?Decision validityThe acceptance criteria still match the exposure and control function.

A review should end with one of three decisions. Keep the evidence because the conditions and claim remain stable. Refresh it because the decision can continue only after a new check. Or restrict or stop the work because current proof cannot support the exposure being accepted. Each decision needs an owner, a trigger, and an expiry point.

When should evidence expiry be tracked separately from overdue actions?

An overdue action concerns work that has not been completed. Evidence expiry concerns proof that may no longer support a decision, even when every action in the original plan was closed. Track it separately when the decision depends on changing conditions, temporary controls, high-consequence barriers, contractor interfaces, or verification that is meaningful only in a specific task context.

A short evidence register can show the claim, evidence date, conditions observed, change triggers, owner, and next review point. The goal is not to force every record into a short validity window. It is to prevent old proof from carrying more authority than its conditions deserve.

Topics risk-management evidence-expiry control-verification change-management safety-leadership headline-podcast

Frequently asked questions

What does evidence expiry mean in safety management?
Evidence expiry means that a previous inspection, test, observation, or approval may no longer provide enough support for the current safety decision because the equipment, work context, or underlying assumption has changed.
What causes safety evidence to expire?
Safety evidence can expire when equipment or configuration changes, when the task, crew, supervision, workload, or simultaneous operations change, or when new information challenges the assumption behind the original decision.
How is evidence expiry different from an overdue inspection?
An overdue inspection is a missed scheduled activity. Evidence expiry is a decision-validity problem, and it can occur before the scheduled review date when conditions change.
How should leaders respond when evidence has expired?
Leaders should identify the affected claim, define the evidence needed to refresh it, assign an owner, and set interim boundaries. The right decision may be to continue with verified protection, restrict the work, or stop.
Should every safety record have a short expiry period?
No. The useful validity period depends on how stable the asset, work context, and decision assumptions are. Calendar reviews help, but change triggers are essential.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI