Safety Decision Log in 30 Days
Build a safety decision log in 30 days so leaders capture risk acceptance, evidence, challenge, expiry dates, and follow-up before harm.

Key takeaways
- 01Define the 5 decision triggers that deserve logging before exceptions, deferrals, and critical-control impairments disappear into meetings.
- 02Assign 1 owner and 1 challenger to each high-risk decision so leadership judgment is tested before exposure becomes routine.
- 03Require dated evidence from field verification, worker input, and control status rather than accepting confidence as proof.
- 04Review open and expired entries weekly with operations, then feed 4 leadership signals into the executive dashboard.
- 05Use Headline Podcast conversations to sharpen your leadership cadence and turn safety decisions into visible governance practice.
OSHA recordkeeping under 29 CFR Part 1904 can show what happened after harm, but it cannot show why a leader accepted, delayed, escalated, or rejected a safety decision before the event. This guide gives senior EHS leaders a 30-day method for building a safety decision log that preserves judgment, evidence, ownership, and follow-up before weak signals become serious exposure.
Why does a safety decision log matter?
A safety decision log matters because safety risk changes faster than monthly governance meetings, while OSHA Forms 300, 300A, and 301 record outcomes after a case meets recording criteria. A decision log captures the live choices that shaped exposure: who approved a temporary control, who accepted a delay, who challenged the risk rating, and what evidence was available at the time.
On the Headline Podcast, Andreza Araujo and Dr. Megan Tranter often return to one practical leadership question: what did the organization make easy or hard before the incident? A decision log answers that question without turning the review into a memory contest. It makes the invisible part of safety governance visible.
Co-host Andreza Araujo's own work in Muito Além do Zero warns that lagging indicators look in the rearview mirror because they show consequence, not cause. The decision log complements that view by capturing the moment when a leader could still change the path, which is exactly where prevention has executive value.
Step 1: What safety decisions need a log?
A safety decision log should capture decisions that change exposure for more than 1 shift, affect a critical control, alter staffing for high-risk work, defer a corrective action, or approve work under uncertainty. The threshold should be narrow enough for daily use, since a log that receives 200 trivial entries in 30 days becomes administrative noise.
The trap is to log only formal approvals. Many serious exposures are created by ordinary postponements, such as accepting a scaffold repair for next week, allowing a missing interlock to operate under supervision, or approving overtime after a fatigue complaint. Those decisions rarely look dramatic in the moment.
Start with 5 entry triggers: critical-control impairment, corrective-action deferral, permit exception, staffing deviation, and unresolved technical dissent. This keeps the log close to temporary risk waiver decisions without making every supervisor note into a board artifact.
Step 2: Define the minimum fields before anyone writes
The minimum safety decision log should contain 12 fields: date, site, work area, decision owner, decision type, risk scenario, affected control, evidence reviewed, dissent or concern raised, decision taken, expiry date, and verification owner. OSHA 1904.29 specifies structured injury and illness forms, and the same discipline helps leaders avoid vague safety narratives.
A weak log says, "Approved temporary control." A useful log says, "Approved temporary fixed guard bypass for packaging Line 3 until Friday 18:00, based on locked speed reduction, additional observer, and maintenance work order 4821." That second version can be challenged, verified, and learned from.
Use plain language in every field. If the EHS director cannot read the entry in 90 seconds and understand the exposure, the log is serving the person who wrote it rather than the person who must govern it.
Step 3: Assign one owner and one challenger
Every logged safety decision needs 1 accountable owner and 1 named challenger, because decisions under pressure are vulnerable to confirmation bias when the same person defines the problem, selects the evidence, and approves the answer. The owner holds execution, while the challenger tests whether the decision is proportionate to the exposure.
On a Headline Podcast conversation about leadership quality, Dr. Thomas Krause emphasized that safety leadership develops through field conversation, not slogans. That translates directly into this step: the challenger should ask operational questions at the workface before accepting the entry as complete.
For executive decisions, the challenger can be the EHS director, operations director, or a rotating member of the site leadership team. For supervisor-level decisions, use the area manager or a peer supervisor from another department.
Step 4: How do you separate decision evidence from opinion?
Decision evidence should be observable, dated, and traceable, while opinion should be labeled as judgment rather than treated as proof. In the first 30 days, require at least 3 evidence types for high-risk entries: field verification, worker input, and control status.
The NIOSH hierarchy of controls explains that elimination, substitution, and engineering controls generally reduce exposure more effectively than administrative controls or PPE. A decision log should therefore ask whether the approved answer improves the control, merely adds supervision, or pushes risk onto worker attention.
In practice, the evidence field should reject phrases such as "team aware," "low risk," or "controls in place" unless the entry names what was observed. A stronger entry states that the supervisor inspected the isolation point at 09:20, interviewed 2 mechanics, and confirmed that the temporary barrier remained fixed during the trial run.
Step 5: Set expiry dates for every exception
Every safety decision that accepts temporary exposure needs an expiry date, because exceptions become normal when no one is forced to revisit them. Use 24 hours for active high-risk work, 7 days for corrective-action deferrals, and 30 days as the maximum review window for governance exceptions unless a formal management-of-change process takes over.
30 days is long enough for a decision pattern to become culture, especially when production teams learn that the same exception keeps passing review. This is where safety leadership becomes concrete: leaders either close the exception, improve the control, or openly accept the exposure with named accountability.
Connect expiry dates to your bad-news escalation route. If an entry expires without closure, the log should automatically move from site management to the next governance level rather than waiting for someone to feel brave enough to escalate.
Step 6: Review the log every week with operations
A weekly 45-minute review is enough for most sites during the first month, provided the meeting reviews decisions rather than slides. The chair should ask which entries increased exposure, which reduced exposure, which expired, and which revealed a repeated management pattern.
The Bureau of Labor Statistics reported 2.5 million injury and illness cases in private industry in 2024, which reminds leaders that occupational harm is not an abstract compliance topic. Yet the value of the decision log is not that it predicts every case. Its value is that it exposes repeated choices before the injury record does.
Keep the review small: site manager, operations leader, EHS leader, maintenance leader, and HR only when staffing, fatigue, or psychosocial exposure is part of the decision. The weekly review should produce 3 outputs: closure, escalation, or control improvement.
Step 7: How should the log connect to the executive dashboard?
The safety decision log should feed the executive dashboard through 4 signals: open high-risk decisions, expired exceptions, repeat exposure themes, and verified control improvements. It should not become another lagging indicator, because its purpose is to show leadership judgment before the injury statistics move.
This is why a decision log belongs beside leadership cadence, not beneath a compliance clerk. The board or executive team does not need every entry, but it does need patterns that reveal whether leaders are absorbing risk silently or converting weak signals into action.
4 signals are enough for the first dashboard view. More indicators can wait until the organization proves that the first 4 are discussed, challenged, and used to change decisions.
Step 8: Audit the first 30 days and remove friction
The first 30-day audit should test whether the log changed decisions, not whether people filled fields perfectly. Review 20 entries if volume is high, or all entries if volume is low, and ask whether each one had a real owner, evidence, expiry date, challenger, and closure path.
What most organizations underestimate is friction. If the form takes 18 minutes and the supervisor has 6 jobs waiting, entries will move into email, WhatsApp, or memory. A decision log only works when the fastest path is also the governed path.
After the audit, remove 1 field if it is not used, clarify 1 trigger if people are confused, and add 1 escalation rule if expired decisions are still tolerated. That small discipline turns the log into an operating habit rather than another safety campaign.
Comparison: informal decisions vs logged decisions
A safety decision log does not make leaders slower. It makes the risk trade-off visible enough for faster correction when the chosen path proves weak.
| Decision element | Informal decision | Logged decision |
|---|---|---|
| Ownership | Often implied by role or meeting attendance | 1 owner named for execution and follow-up |
| Challenge | Depends on who feels safe enough to object | 1 challenger named before approval |
| Evidence | Usually summarized as confidence or experience | Field verification, worker input, and control status recorded |
| Expiry | Temporary exceptions drift into normal work | 24-hour, 7-day, or 30-day review clock applied |
| Executive signal | Appears only after delay, incident, or audit finding | Feeds open high-risk decisions and expired exceptions into governance |
Each week without a safety decision log leaves high-risk judgment scattered across meetings, text messages, and private memory, while the organization continues to govern only what has already become recordable or visible.
A decision log becomes stronger when the first management layer knows what to record. The related role plan for a new shift supervisor in 30 days shows how routine exceptions, weak controls, and escalation needs can enter the log before risk becomes normal.
Conclusion
A safety decision log protects leadership quality by making risk acceptance, evidence, challenge, expiry, and follow-up visible before injury data tells the story too late, while a connected safety objection register preserves the dissent that started the decision.
Headline Podcast exists for leaders who want real safety conversations, not ceremonial compliance. If your next governance meeting includes unresolved exceptions, start with 1 page, 12 fields, and 30 days of disciplined decisions, then bring the lessons back to the table at Headline Podcast.
Frequently asked questions
What is a safety decision log?
Who should own a safety decision log?
How often should leaders review a safety decision log?
What is the difference between a decision log and a risk register?
How does a decision log support psychological safety?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.