How to Build a Weekly Exposure-Control Review for a Small Plant in 6 Steps
Use a six-step weekly exposure-control review to connect field evidence, control performance, and decision ownership in a small plant.

Key takeaways
- 01Select one exposure that requires a management decision.
- 02Describe the control by the effect it should produce.
- 03Observe the control during the real task and normal operating pressure.
- 04Test the response when the control is unavailable.
- 05Assign the decision to the person who controls the required change.
- 06Verify closure in the field during the next weekly review.
A small plant can have a serious exposure-control problem without having a large safety department. The warning usually appears in the weekly rhythm. A recurring task changes, a control is checked from the office, and the same unresolved condition returns because nobody owns the decision that would remove it.
A weekly review should not become another inspection checklist. Its purpose is to connect field evidence with one decision about exposure, control performance, and ownership. The six steps below give a small plant manager or EHS lead a repeatable review that fits a normal operating week.
A weekly exposure-control review is a short management process that selects one meaningful exposure, tests the control in the real task, assigns the next decision to a named owner, and verifies that the response changed the work.
What you need before starting
Choose a fixed review window and protect it from routine status reporting. Bring the current risk assessment, the relevant procedure, the latest field observation, open corrective actions, and any change record that affects the task. If the plant uses a permit, isolation record, chemical inventory, or equipment inspection, include the record that proves the control is expected to exist.
Keep the group small enough for a decision. Include the supervisor who directs the work, the person who performs or maintains the control, and the manager who can change resources, sequence, equipment, or authorization. Andreza Araujo's experience across more than 250 cultural transformation projects supports a practical rule here: participation matters when it gives the review access to the decision, not when it only increases the meeting size.
Step 1: Select one exposure that deserves a decision
Start with one exposure rather than a list of every open safety concern. Select a task where the potential harm is serious, the control is important to the work, and the evidence is recent enough to support a useful conversation. A recurring bypass, an unverified guarding change, a chemical transfer, or a manual-handling task that depends on an unavailable device can all qualify.
State the exposure in operational language. Name the energy, substance, movement, pressure, or work condition, along with the people and task that may be affected. “Machine safety” is too broad for a weekly review. “An operator reaches into the infeed zone during jam clearance when the normal isolation point is unavailable” gives the group something that can be tested.
Verify the selection by asking whether the team can identify the next decision. If the answer is only “we need more awareness,” choose a narrower exposure. The common error is to select the most visible complaint instead of the condition that requires management action.
Step 2: Map the control that should hold
Write the control as an effect, not as a document title. “Complete the machine checklist” describes an activity. “Prevent access to moving parts during jam clearance by isolating and confirming zero energy” describes the protection the work depends on.
Separate the primary control from supporting activities. Training, signage, supervision, and a form may help people use a barrier, but they are not interchangeable with the barrier itself. ISO 45001:2018 expects operational controls to be planned and maintained, so the review should test the control that changes the exposure rather than rewarding the existence of a record.
Verify the map with the person who performs the task. Ask where the control starts, who confirms it, what condition proves it is available, and what happens when it cannot be used. If the procedure and the worksite describe different controls, record the difference as a decision gap. The common error is to let the most senior participant define the control without checking how the task is actually performed.
Step 3: Observe the control under normal pressure
Visit the task when the plant is operating normally, because an office explanation rarely shows the small adaptations that determine whether a control is usable. Observe the setup, the handoff, the awkward movement, the equipment condition, and the point at which production pressure could make the control inconvenient.
Ask the worker to explain what they would do if the control were missing, damaged, blocked, or too slow for the task sequence. Do not turn the observation into a performance score. James Reason's work on latent conditions remains useful because the immediate action may be shaped by design, staffing, maintenance, layout, or authorization decisions made elsewhere.
Verify the observation with evidence from the real task. A control passes this step only when it is present, accessible, understood, and compatible with the work sequence. The common error is to observe the easiest part of the task, then assume that the control remains effective during cleaning, changeover, troubleshooting, or recovery from a stoppage.
Step 4: Test the failure response
Ask what the team does when the control is unavailable. The answer should identify the immediate protection, the person who can stop or restrict the work, the escalation route, and the condition that allows restart. A response that says “tell the supervisor” is incomplete unless the supervisor has authority and a defined next action.
Use a short scenario based on the exposure selected in Step 1. For example, ask what happens when the isolation point cannot be reached, the guard does not close, the ventilation alarm fails, or the lifting aid is already in use. The point is not to rehearse a dramatic emergency. It is to reveal whether the organization has a decision path for an ordinary control failure.
Verify the response by asking two people from different roles to describe it separately. Their answers should converge on the same stop, protect, escalate, and restart logic. The common error is to treat a contingency document as evidence that the shift can execute the response.
Step 5: Assign the decision to the person who controls the change
Convert the evidence into one decision statement. The statement should say what must change, who owns it, when the next check occurs, and what evidence will show that the change worked. “Improve guarding” is not an action. “Engineering will restore the interlock before the next Monday production run, and the supervisor will verify the function during startup” is decision-ready.
Give the decision to the person who controls the relevant resource or authorization. The supervisor may own the immediate work restriction, while maintenance owns repair and engineering owns a redesign. If the plant cannot identify who can change the condition, record the authority gap instead of assigning the action to an EHS coordinator who lacks control of the work.
Verify ownership by asking the owner to repeat the decision in their own words. Record any interim control separately from the permanent correction. In The Illusion of Compliance, Andreza Araujo examines the gap between documented conformity and operating reality. A weekly review closes that gap only when the record names the changed condition and the person accountable for making it real.
Step 6: Close the loop in the next weekly review
Begin the next review by checking the evidence from the previous decision before selecting a new topic. Did the control change, and can the worker use it under the same operating pressure? Did the action transfer the exposure to another task, shift, or contractor? If the condition did not change, keep it open and escalate the decision rather than creating a new action that hides the delay.
Use a simple record with the exposure, expected control, field evidence, decision owner, interim protection, due date, verification method, and current status. The record should help the next reviewer understand what happened without requiring a long narrative. Keep personal details and blame-oriented language out of it, because the purpose is to manage exposure and improve the control.
Verify closure in the field with the person who relies on the control. Ask what changed, what they would do if the control failed again, and whether the new arrangement creates a practical conflict with quality, maintenance, production, or access. The common error is to close an item when the action is completed in a system, not when the exposure is reduced in the task.
Weekly review checklist
Use this short checklist to keep the review decision-focused.
- Is one specific exposure stated in operational language?
- Is the expected control described by its protective effect?
- Was the control observed during the real task?
- Can the shift explain what happens when the control is unavailable?
- Does one named owner control the required change?
- Will the next review verify the changed condition in the field?
A small plant does not need a large review apparatus to make exposure visible. It needs a disciplined weekly question, evidence from the task, and a decision owner who can change the conditions that shape the work. That is how a review becomes a control process rather than another record of concern.
Explore more leadership and safety conversations on the Headline Podcast.
Frequently asked questions
What is a weekly exposure-control review?
Who should attend the review?
How is the review different from an inspection?
What should happen when a control is unavailable?
How should a small plant verify closure?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.