How to Run a Stop-Work Authority Drill Before High-Risk Work in 8 Steps

A high-risk job can have a written stop-work rule and still leave people unsure about when to use it. The uncertainty appears before the task starts, when a worker sees that the permit, isolation, equipment, or sequence no longer matches the field condition but does not know whether the concern will be treated as useful evidence or as a delay.

A short drill exposes that gap without waiting for an incident. On the Headline Podcast, Andreza Araujo and Dr. Megan Tranter return often to the difference between a leadership promise and a behavior that survives pressure. Stop-work authority belongs in that test. This guide gives operations and safety leaders eight steps for rehearsing the route before high-risk work begins.

A stop-work authority drill is a controlled exercise in which a team practices recognizing a defined warning condition, protecting people from immediate exposure, reaching the person who owns the decision, and verifying the evidence required before work restarts. It tests the operating route, not the employee's willingness to perform a slogan.

What you need before starting

Choose one upcoming high-risk task, one realistic control concern, and the smallest group that must respond. The task might involve energy isolation, lifting, confined-space entry, line breaking, work at height, or simultaneous operations. Keep the scope narrow, because a drill that tries to cover every hazard becomes a meeting instead of a test.

Agree that the exercise will examine the system rather than grade an individual. James Reason's work on active and latent failures supports this distinction, because a visible hesitation may reflect unclear authority, weak supervision, conflicting incentives, or a reporting route that has never been tested. In Safety Culture: From Theory to Practice, Andreza Araujo makes a related point about declared culture and repeated operating choices. The drill should produce a decision and a system improvement, not a public winner or loser.

Step 1: Define the decision the drill must support

Write the decision in plain language before anyone enters the exercise. Examples include whether the crew may start the lift, whether an isolation is complete, whether an entry can proceed, or whether a changed sequence requires a new review.

Ask the supervisor to say the decision aloud. Verify that the team can distinguish pausing the affected task from shutting down an entire operation. A common error is to make the exercise so broad that nobody knows what authority is actually being tested.

Step 2: Choose one observable trigger

Select the earliest condition that should cause a pause. The trigger might be a missing isolation confirmation, a rescue resource that is not available, a lifting plan that no longer matches the load, or a work front that has moved beyond the approved boundary.

Describe what someone can see, hear, measure, or compare. Do not write “the crew is complacent” or “the team seems unsafe,” because those phrases invite argument about intent. Verify the trigger with a document comparison, equipment status, or field observation that the team can recognize without a long debate.

Step 3: Name who can raise the pause

State that every person who can observe the trigger may raise the concern and protect the affected area while the decision is made. Include a worker, contractor, or new supervisor when that person could realistically be first to see the mismatch.

Ask each participant to repeat the words they would use. “I am pausing this task because the isolation evidence does not match the point of work” is more usable than “I do not feel comfortable.” Verify that the language identifies the condition without accusing a colleague, and correct the error of routing the concern through a senior person before protection begins.

Step 4: Practice the immediate protection

Once the trigger is raised, the first receiver must say what happens in the next minute. The response may involve stopping the affected movement, keeping people outside an exclusion zone, holding an entry, securing energy, or preventing a restart while the condition is checked.

Do not accept “we will investigate” as the complete response. Investigation can happen after immediate protection is in place. Verify the physical boundary, the person responsible for maintaining it, and the information that must be preserved. A frequent failure is protecting paperwork while leaving people exposed to the condition that started the drill.

Step 5: Test the communication route

Send the concern through the same route the team would use during the real task. Call the named supervisor, radio the control room, notify the permit coordinator, or use the field reporting process. Record the time from the first signal to the acknowledgment and the time to a usable decision.

Keep the message short enough to work under pressure. It should state the task, the trigger, the immediate protection, and the decision required. Verify that the receiver repeats the condition accurately. If the message changes as it travels upward, the route is losing evidence before leadership can act.

Step 6: Introduce the pressure that usually defeats the rule

Add one realistic pressure, such as a delayed production window, an executive visitor, a contractor waiting for access, or a supervisor who believes the difference is minor. The purpose is to discover whether schedule and hierarchy quietly outrank the stated authority.

Ask the senior leader to respond as the organization expects in real work. A credible response acknowledges the pause, asks for the evidence, and protects the person who raised the concern while the control is checked. Verify that nobody labels the reporter difficult, disloyal, or inexperienced. If that social penalty appears in the drill, it is a control weakness that deserves action before the next high-risk job.

Step 7: Define and verify the restart condition

Write the evidence that would allow the task to restart. It could be an independently confirmed isolation, a corrected plan, a restored rescue resource, a revised boundary, or a new briefing that addresses the changed condition.

Name the person who verifies the evidence and the person who authorizes restart. Those roles may be different. Check that the team can explain what changed, why the change addresses the trigger, and how the field will know that the control remains in place. A signature alone is not restart evidence when the physical condition has not been checked.

Step 8: Close the loop and repeat the test

End the drill by telling participants what the exercise found, what will change, and who owns the change. Share the result with the next shift when the task crosses a handover, because an authority route that works only for the original crew is not yet dependable.

Repeat the drill after the change or before another task with a different pressure. Track whether the response became faster, clearer, and more respectful, but do not reduce success to a speed score. The stronger measure is whether the concern reached the right decision, the exposure was protected, and the team could restart from evidence rather than optimism.

Final checklist for a credible drill

• One defined high-risk task and one observable trigger.
• A named person who can raise the pause without waiting for permission.
• Immediate protection that addresses the physical exposure.
• A communication route that preserves the original evidence.
• A realistic pressure test involving schedule, hierarchy, or production.
• A restart condition with a named verifier and decision owner.
• A documented improvement, owner, and repeat date.

What the drill should change

The exercise is useful when it changes what the team can do on the next shift. If the route depends on a particularly brave worker, a patient supervisor, or a leader who happens to be nearby, the organization has not yet built reliable stop-work authority.

Use the result as a leadership conversation, not as a compliance trophy. The Headline Podcast exists as a space where leadership and safety come together to shape better workplaces and better lives. A drill makes that idea concrete when it gives someone a safe, direct way to challenge a decision before the work creates harm.

If your operation is preparing high-risk work, share this guide with the person who owns the permit, the supervisor who will receive the first concern, and the leader who must protect the pause. Then listen to the real conversations on the Headline Podcast for more practical discussions about visible felt leadership.

Frequently asked questions

What is a stop-work authority drill? It is a controlled exercise that tests whether a team can recognize a defined warning condition, protect people, reach the decision owner, and verify restart evidence before real work begins.

Who should participate in the drill? Include the people who can observe the trigger, receive the first concern, own the control, and resolve conflicts with schedule or production. Add EHS when the decision exceeds line supervision.

Should the drill stop real work? Plan it so the exercise does not create unnecessary exposure. A controlled pre-job window or isolated scenario can still test the same authority and restart decisions required in real work.

How do leaders know whether the drill passed? Check whether the trigger was recognized, affected work was protected, the concern reached the right decision owner, the reporter was treated seriously, and restart evidence was verified.

What if nobody uses stop-work authority? Recheck the scenario, the wording of the trigger, the social cost of challenging a decision, and whether people trust the response. Silence is a system signal, not proof that the risk was absent.