Occupational Safety

How to Run a Line-of-Fire Review Before Maintenance Starts in 8 Steps

Use an eight-step line-of-fire review to map release paths, verify maintenance controls, assign ownership, and stop work when protection is not available.

By 5 min read updated
industrial scene illustrating how to run a line of fire review before maintenance starts in 8 steps — How to Run a Line-of-Fi

Key takeaways

  1. 01Define the maintenance task and the exact exposure boundary before discussing controls.
  2. 02Map credible release paths from the worker position rather than relying on generic hazard labels.
  3. 03Separate controls that prevent contact from warnings that only signal danger.
  4. 04Verify isolation and stored-energy control at the point of work.
  5. 05Assign critical-control ownership and make the stop route explicit before maintenance begins.
  6. 06Return to the worksite after the first critical movement to test whether the plan still matches the job.

Maintenance work can look routine while placing a person directly between stored energy, moving equipment, suspended material, or a pressure release. The line-of-fire review exists to expose that position before the task begins, not to document it after someone has already entered it.

The useful question is not whether the crew knows the hazard name. It is whether the planned control keeps people out of the release path when the equipment behaves differently than expected. The eight-step method below gives a maintenance supervisor a short field review that can change the job before exposure starts.

A line-of-fire review is a pre-task decision process that maps where energy or material could move, confirms the controls that prevent unwanted contact, tests the changed conditions, and stops the task when the planned protection is not available.

Step 1: Define the maintenance task and the exposure boundary

Start with the exact job, equipment, location, and work window. “Repair the conveyor” is too broad because it hides the difference between removing a guard, clearing a jam, replacing a bearing, and testing the drive. State the task in a way that lets the crew identify what can move, fall, rotate, discharge, or restart.

Mark the exposure boundary around the work, including adjacent equipment and routes used by people, vehicles, tools, and materials. OSHA's Control of Hazardous Energy standard, 29 CFR 1910.147, treats unexpected energization, startup, and stored-energy release as maintenance hazards that require control before servicing. The review should therefore include energy that is not obvious from the task name.

Step 2: Draw the credible release paths

Ask the person who performs the job to point to every direction in which something could reach them if a control failed. Include the arc of a rotating part, the drop zone below a lifted component, the travel path of a vehicle, the recoil path of a tensioned hose, and the discharge route of pressure, chemicals, or compressed air.

Do not replace this conversation with a generic hazard list. A line-of-fire map is useful because it connects the hazard to a body position and a movement path. James Reason's distinction between visible actions and latent conditions is relevant here, since a worker may be the final person in the path even though poor access, weak isolation design, or unclear planning created the exposure much earlier.

Step 3: Separate prevention controls from warning controls

List what prevents the release and what merely warns people that it may occur. Isolation, blocking, guarding, engineered restraints, and verified depressurization can prevent contact. Signs, radio calls, spotters, and verbal reminders can support the plan, but they do not create the same margin when energy remains available.

For each control, write the effect it must produce. “Lockout completed” is a record. “The drive cannot start and the belt cannot move while the bearing is accessed” describes the protection. This distinction aligns with the practical difference between a procedure that exists and a control that works, which is also central to Andreza Araujo's writing in Safety Culture: From Theory to Practice.

Step 4: Verify isolation at the point of work

Have the authorized person demonstrate the isolation where the maintenance will occur. Check the energy source, the isolation device, the lock, the tag, the blocking arrangement, and the attempt to start or move the equipment using the normal control. Release or restrain stored energy, then confirm that the verification method matches the equipment.

The point-of-work check matters because a signed isolation sheet can describe the intended state rather than the actual state. OSHA's lockout and tagout guidance requires procedures that address shutdown, isolation, blocking, and verification. If the crew cannot show how the equipment remains unable to move, the task has not reached the start gate.

Step 5: Check position, access, and escape

Ask each person to show where their hands, feet, torso, and face will be during the critical part of the job. Then ask how they will get out if a component shifts, a temporary support settles, weather changes, or another crew enters the area. A control that protects one position may fail when the worker changes stance to reach a fastener or see a hidden connection.

Review access platforms, footing, lighting, line of sight, tool clearance, and the space needed to remove a part without pulling someone into the release path. If the crew must lean across an opening, hold a component by hand, or work with a blocked exit, redesign the sequence before discussing personal protective equipment.

Step 6: Test the change points before the first movement

Maintenance plans change when the correct part is missing, the isolation point is inaccessible, the job takes longer than expected, or production asks for a different restart time. Name the conditions that would make the original review invalid, then define who must pause the work and who can authorize a revised plan.

Use a short challenge question for each change point. What happens if the component will not release, What happens if a second energy source is discovered, What happens if a contractor takes over the task, The answers should identify a new control or a clear stop decision, rather than relying on a reminder to “be careful.”

Step 7: Confirm control ownership and stop authority

Assign one person to each critical control and ask that person to explain what they will verify. The equipment owner may control isolation, the supervisor may control the work sequence, and the contractor lead may control crew positioning. Shared responsibility often becomes no responsibility when the task becomes urgent.

Make the stop route visible before work starts. Every worker should know who receives the concern, who can change the plan, and what happens after the stop. Andreza Araujo's experience across more than 250 cultural transformation projects supports a simple test of leadership credibility: the person closest to the exposure must be able to trigger a decision without first proving that an injury has occurred.

Step 8: Close the review with evidence, not signatures

Before release to work, have the supervisor walk the boundary, point to the controls, and ask the crew to describe the condition that would stop the task. Record only the decisions that matter, including the exposure path, the control owner, the verification completed, and the escalation trigger.

After the first critical movement or component removal, return to the worksite and test whether the plan still matches the job. If the crew used an unplanned workaround, treat that evidence as a design problem to solve before the next repetition. A signed form proves participation. Field evidence shows whether the review changed exposure.

What a maintenance supervisor should keep

A small record is enough when it preserves the decision trail. Keep the task description, the marked release paths, the critical controls, the verification evidence, the named owners, and the conditions that require a pause or re-review. Link the record to the permit or isolation procedure without turning the line-of-fire review into another duplicate form.

The line-of-fire review is complete when the crew can show where unwanted movement would go, which control prevents contact, who owns its verification, and what decision follows when the control is missing. That standard is more demanding than a signed pre-task form, but it is also more useful because it tests the work before the exposure becomes an incident.

For more practical guidance on turning safety culture into field decisions, visit Headline Podcast and explore Andreza Araujo's work on leadership, safe behavior, and risk control.

When this work shares space or timing with another crew, use a contractor interface review before simultaneous operations begin.

Topics occupational-safety line-of-fire maintenance-safety hazardous-energy field-verification critical-controls headline-podcast

Frequently asked questions

What is a line-of-fire review?
It is a pre-task decision process that maps where energy or material could move, confirms the controls that prevent unwanted contact, tests changed conditions, and stops the task when planned protection is unavailable.
When should a maintenance team run the review?
Run it before maintenance begins and repeat it when the task, equipment condition, energy source, crew, sequence, or restart plan changes.
How is a line-of-fire review different from a job hazard analysis?
A job hazard analysis can describe task hazards broadly, while a line-of-fire review focuses on the actual release path, body position, critical controls, verification evidence, and stop decision at the point of work.
Does lockout and tagout remove every line-of-fire risk?
No. Isolation can control hazardous energy, but teams still need to address gravity, stored pressure, movement of adjacent equipment, dropped objects, access, escape, and unexpected changes in the task.
Who owns the line-of-fire controls?
Ownership should be assigned by control. The equipment owner, supervisor, authorized employee, contractor lead, or another named person should be able to explain what they will verify and what happens if the control fails.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI