How to Run a Shift Handover That Preserves Risk Ownership

A shift can end on time while risk ownership quietly disappears between teams. The outgoing supervisor signs the log, the incoming supervisor acknowledges it, and both believe the transfer is complete. Yet a temporary control may still be unverified, a maintenance boundary may have changed, or a production decision may remain with nobody who knows they own it.

A reliable handover does more than communicate events. It transfers the context required for the next safe decision, including what changed, which barriers are working, what remains uncertain, and who has authority to stop or re-plan the job. The process below is designed for frontline supervisors in plants, warehouses, construction projects, logistics operations, and other work where conditions can change during a shift.

Why does a shift handover need more than a checklist?

Checklists are useful when they prompt a real conversation, although they become weak controls when completion is mistaken for understanding. A form can show that a permit was discussed without showing whether the isolation remained intact, whether the work boundary moved, or whether the next supervisor understood the conditions that would require a stop.

ISO 45001:2018 expects organizations to manage operational changes, communication, competence, and documented information as connected parts of the occupational health and safety system. A handover is where those expectations meet the work. It should make operational change visible before the next team inherits an incomplete picture.

James Reason's work on latent failures provides a useful lens. The person receiving the shift may make a poor decision because planning, staffing, equipment status, or communication failed earlier. That does not remove individual accountability, but it does show why a handover must examine the conditions that shaped the decision.

Step 1: Define the decision the incoming supervisor must make

Begin with the decision that the next supervisor will need to make, because this prevents the meeting from becoming a chronological report. The decision may concern continuing a high-risk task, releasing equipment, accepting a temporary measure, changing a work sequence, or escalating a condition to the plant manager.

Ask one direct question at the start: “What must the incoming supervisor know before authorizing the next piece of work?” Write that decision at the top of the handover record. If the team cannot name the decision, the discussion is probably too broad or too detached from current work.

Step 2: Separate completed work from unresolved exposure

The outgoing supervisor should distinguish finished work from conditions that remain active. A completed inspection, a closed permit, and a repaired guard belong in the record, but they should not compete for attention with an open isolation, an incomplete inspection, a temporary pedestrian route, or a contractor interface that still needs confirmation.

Use three labels in plain language: closed, active, and uncertain. “Uncertain” is important because it prevents a missing observation from being presented as a completed control. That distinction also gives the incoming supervisor a reason to verify the field rather than trust the appearance of a tidy log.

Step 3: Identify what changed during the shift

Review changes in people, equipment, materials, weather, work sequence, access, and production pressure. The point is not to list every event. It is to identify changes that alter the assumptions behind the risk assessment or the operating plan.

A shift handover should call out when a maintenance crew moved to another area, when a safeguard was bypassed under an approved process, when a contractor arrived late, or when a planned task was compressed. These details matter because the control that was adequate at the start of the shift may no longer match the work at the end.

Step 4: Verify the critical controls in the field

Do not verify every detail with equal effort. Select the controls whose failure could create serious injury or fatality exposure, then inspect those controls at the workface with the outgoing and incoming supervisors together. The verification may include an isolation point, an exclusion zone, a lifting boundary, a confined-space readiness condition, or a traffic separation arrangement.

The field check should answer whether the control exists, whether it is in the expected position, whether people understand its purpose, and whether another change has weakened it. A handover that never reaches the field may still be efficient, but it cannot reliably confirm that the documented condition matches the operating condition.

Step 5: Transfer ownership by name and role

Assign each unresolved item to a person who has the authority and resources to act. “Operations” is not an owner, and “the next shift” is not a deadline. Name the supervisor, planner, maintenance lead, or manager who will make the next decision, then state what that person is expected to verify.

Ownership should follow decision rights. If the incoming supervisor can pause the task but cannot approve a design change, the handover must identify the escalation point for that change. This makes the boundary visible and reduces the chance that a worker or supervisor carries a decision that belongs higher in the organization.

Step 6: State the stop and escalation conditions

Describe the conditions that require work to pause, the person who must be contacted, and the information that should accompany the escalation. A vague instruction to “raise concerns” is weaker than a defined trigger such as loss of isolation evidence, movement of a barricade, change in simultaneous operations, or inability to complete a required verification.

Supervisors should also agree on what happens when the responsible manager cannot be reached. The fallback may be a higher duty manager, a control-room authority, or a formal stop-work route. The rule must be clear enough to use under pressure, when people are more likely to rely on the last instruction they heard.

Step 7: Test understanding through teach-back

The incoming supervisor should explain the current risk picture in their own words. This is not an examination of the outgoing supervisor. It is a practical test of whether the transfer preserved the information needed for action.

Ask the incoming supervisor to state the most important active exposure, the control that needs verification, the next decision, the owner, and the escalation route. If those answers do not match the outgoing supervisor's account, stop the handover and resolve the difference before work continues. The disagreement is useful evidence that the communication system has exposed a gap.

Step 8: Close the loop at the next verification point

End the handover with a time or event that will trigger review. The point may be the start of a lift, the completion of an isolation, the arrival of a contractor, the next production change, or the first field round after the shift begins. Without a verification point, the record can become a storage place for unresolved risk.

At the next review, compare the planned condition with what actually happened. Repeated surprises should not be treated as isolated communication mistakes. They may indicate weak work planning, unclear decision rights, poor staffing assumptions, or a control that was never designed for changing conditions.

What should a supervisor record after the handover?

The record should be short enough to use and detailed enough to support accountability. Capture the decision, the current exposure, the status of the critical control, the named owner, the escalation route, and the next verification point. A useful record preserves decisions and uncertainty rather than copying every sentence spoken in the meeting.

• Current work and the decision that must be made next.
• Material changes since the previous shift.
• Critical controls that were verified, not merely listed.
• Open items with named owners and clear due points.
• Stop-work triggers and escalation contacts.
• Next field verification and the evidence expected.

Andreza Araujo makes a related point in Safety Culture: From Theory to Practice, where the strength of a safety system is tested by the decisions people make in real operating conditions. The handover is one of those tests because it reveals whether the organization can preserve responsibility when people, priorities, and conditions change.

How can leaders improve a weak handover without adding bureaucracy?

Start by observing several handovers and comparing the discussion with the field condition shortly afterward. Look for information that was repeated but not used, controls that were assumed rather than checked, and items that moved from one shift to another without an owner. The improvement target is not a longer form. It is a clearer transfer of risk and authority.

Then remove fields that do not influence a decision and strengthen the prompts that expose uncertainty. Train supervisors to ask what changed, what is not yet verified, who decides next, and what would require a stop. Those questions create a practical rhythm that can be audited without turning the handover into paperwork for its own sake.

Across 25+ years leading EHS work at multinationals, Andreza Araujo has emphasized that culture becomes visible through repeated operating choices. A handover that protects bad news, assigns ownership, and checks the workface is therefore more than a communication routine. It is a daily demonstration of safety leadership.

Frequently Asked Questions

If your supervisors need a practical way to turn safety leadership into repeatable field decisions, explore the technical resources from Andreza Araujo and use the next handover as a live test of risk ownership.