Risk Management

How to Prepare a Risk Register for the Weekly Work Plan

A risk register becomes useful when it changes the weekly work plan. This eight-step method helps supervisors and EHS practitioners connect each material exposure to a named owner, a working control, current evidence, and a decision boundary before work is scheduled.

By 5 min read
risk management scene on how to prepare a risk register for the weekly work plan — How to Prepare a Risk Register for the Wee

Key takeaways

  1. 01A risk register should change the weekly work plan, not merely store hazards in a central list.
  2. 02The most useful entries describe exposure in work terms, identify the control that must work, and name the person with authority to respond when it does not.
  3. 03A control claim is incomplete until the team can state what evidence will be checked, when it will be checked, and what result changes the plan.
  4. 04Risk-register reviews should include deferred work, temporary conditions, contractor interfaces, and production pressure because those factors often alter exposure between formal assessments.
  5. 05A concise register with live ownership and escalation is more valuable than a large register that no supervisor uses before assigning work.

A weekly work plan can look organized while carrying forward hazards that nobody has actively decided to accept, control, or remove. The problem is rarely the absence of a spreadsheet. It is the gap between a risk register and the work that supervisors release on Monday morning.

A practical risk register should answer one operational question before work is scheduled. What must be true for this work to proceed safely, and who will act when that condition is not true? The method below is designed for maintenance and operations teams that need a concise review before the next work cycle.

What you need before starting

Bring the next weekly work plan, the current list of open risk actions, recent field-verification notes, maintenance deferrals, temporary changes, contractor activities, and any control impairments known by the team. The review does not require a new risk assessment for every task. It requires enough current evidence to identify which conditions can change the method, timing, resources, or authority needed to perform the work.

Keep the register small enough to discuss. If every low-level hazard receives the same space as an unverified isolation or a degraded safeguard, the document will hide the decisions that matter most. The related risk-matrix calibration guide can help when different teams are assigning inconsistent levels to similar exposure, while the control-handoffs article is useful when ownership crosses departmental boundaries.

Step 1: Set the review boundary

Define the work cycle, area, and decision forum before collecting entries. A weekly review might cover planned maintenance, production changes, contractor work, and overdue inspections for the next seven days. State what is inside the boundary and what requires a separate major-hazard or management-of-change process.

This boundary prevents the register from becoming a general repository for every concern in the facility. It also gives the team a clear closure point. An item remains open until the weekly plan reflects the decision, not until someone has typed a comment into the register.

Step 2: Describe the exposure in work terms

Replace labels such as “electrical risk” or “contractor risk” with a description of what people could encounter during the planned work. Name the task, equipment, energy source, location, affected group, and condition that makes the exposure credible.

For example, “pump maintenance” is too broad to guide a decision. “Maintenance technicians may open the solvent transfer pump while residual pressure and a remote valve position remain unverified” gives the planner something to test. Specific language also makes later field verification faster because the reviewer knows what evidence to seek.

Step 3: Identify the decision the entry must support

Every entry should lead to a decision. The decision may be to proceed with a defined control, change the work method, reschedule the task, add a competent person, isolate an energy source, or stop the work until evidence improves.

Write the decision in the register rather than leaving it implicit. A risk entry that says “review before work” leaves the supervisor to interpret the required action under time pressure. A stronger entry states, “Do not release the task until the isolation is independently verified and the rescue route is confirmed.” The wording should match the authority available at the point of work.

Step 4: Name the control that must work

List the control that prevents the exposure or limits its consequence, then state its intended effect. A permit, inspection, procedure, alarm, guard, competent person, or exclusion zone is not automatically a working control because it appears in the system.

Ask what failure the control is meant to prevent. If the answer is vague, the entry needs clarification. The control-owner interview method can be used when the team knows the control by name but cannot explain its operating limit, impairment response, or accountable owner.

Step 5: Assign ownership to a person with authority

Name the person who can make the required decision, not only the department that is associated with the hazard. A maintenance manager may own equipment restoration, a production supervisor may own task release, and an engineering leader may own a design change. Those roles can collaborate, but they do not have interchangeable authority.

Check whether the owner controls the resources and timing needed to close the gap. When the answer is no, add the escalation owner. This prevents the common pattern in which a frontline supervisor is made responsible for a condition created by design, staffing, budget, or production decisions that sit elsewhere.

Step 6: Define the evidence that will be checked

Turn each control claim into an evidence question. The question may ask for an independent isolation check, a current inspection result, a function test, a field observation, a competent-person confirmation, or a documented emergency drill. Choose evidence that can distinguish an available control from a planned activity.

Record who will check it, where the check will occur, and when the result expires. A control that was verified last month may not be verified for next week if the equipment, crew, configuration, or work scope has changed. The evidence should be visible to the person who releases the work, not buried in a folder that only an auditor opens.

Step 7: Test the change and failure conditions

Ask what could change between the review and the task. Consider a delayed isolation, a different contractor, reduced staffing, a changed production sequence, bad weather, a temporary bypass, or an overdue inspection. Then state what happens if the required control is unavailable.

The response should be operational. It may require a revised method, additional protection, a new authorization, a lower exposure window, or postponement. If the only response is “monitor closely,” the register has not established a decision boundary. The temporary-risk-waiver guide is relevant when work must continue under a time-limited deviation.

Step 8: Reconcile the register with the weekly plan

Before the plan is issued, compare every open material entry with the scheduled work. Confirm that the method, sequence, staffing, isolation, contractor interface, and supervision reflect the current decision. A task should not remain on the schedule unchanged simply because its risk entry has an owner.

Close an entry only when the required evidence exists or when the exposure has been removed from the work plan. If the risk remains, carry the decision into the next review with a clear deadline and escalation route. The temporary-change review process can support this step when the weekly plan contains work outside the normal operating envelope.

Final checklist before releasing the work plan

  • Does each material entry describe a specific exposure in the next work cycle?
  • Is the decision to proceed, change, defer, or stop stated in plain language?
  • Is the required control identified by its intended effect rather than its document name?
  • Does the named owner have the authority and resources to act?
  • Is current evidence defined, with a person, place, and timing for verification?
  • Does the entry explain what happens if the control is impaired?
  • Does the issued work plan reflect the register instead of merely linking to it?

A risk register earns its place in weekly planning when it changes a decision before exposure reaches the field. It should make uncertainty visible, connect control performance to ownership, and give supervisors a credible route to delay or redesign work when conditions are not ready. A shorter register that people use at the point of release is stronger than a complete register that records yesterday’s assumptions.

Topics risk-management risk-register weekly-work-planning control-ownership field-verification decision-quality headline-podcast

Frequently asked questions

What is a risk register used for in weekly work planning?
It gives the team a decision-ready view of material exposures that may affect the next work cycle. A useful entry connects the task or condition to its controls, owner, evidence, due date, and escalation route so the plan can change before people are exposed.
Who should maintain the risk register?
The person who coordinates the work should maintain the operational view, while control owners and EHS practitioners provide evidence and challenge assumptions. Senior leaders must resolve entries that require resources or authority beyond the worksite.
How often should a risk register be reviewed?
Review it before the weekly work plan is released and update it when work scope, equipment condition, staffing, contractors, weather, production demand, or control availability changes. A fixed cadence does not replace event-driven review.
What makes a risk-register entry weak?
An entry is weak when it uses broad labels, has no named owner, treats a planned control as a verified control, hides uncertainty in a low rating, or has no clear action when the required barrier is unavailable.
How can a small plant start using a risk register?
Start with the next weekly work plan and capture only the exposures that could change task timing, method, staffing, isolation, contractor coordination, or stop-work decisions. Review the list with the people who will execute the work, then close entries only when evidence supports closure.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI