Critical RiskGovernanceSafety Leadership

Stop Counting Actions. Start Verifying Controls.

An action tracker can be busy while the barriers that prevent fatal events remain unavailable, misunderstood or untested.

A technician applying lockout equipment while a supervisor independently verifies the energy-isolation control.

Hazards, controls and critical controls

Hazard identification names a source of harm. A control changes the likelihood or consequence of that harm. A critical control is different: its absence or failure would materially increase the likelihood of a fatal or serious outcome. This distinction matters because organizations have limited attention. A risk register with dozens of controls may look comprehensive, but it can obscure the handful that must be available every time high-risk work occurs.

Verification is not inspection theater

Control verification asks a specific question: is this control present and capable of meeting its defined performance requirement now? A generic site inspection may record that a permit exists. Verification checks whether the isolation points match the equipment, locks are applied, stored energy is released and the zero-energy state has been proved. The verifier needs enough technical understanding to recognize failure, and the evidence should be close to the work rather than inferred from a completed form.

What verification looks like

For lifting, verify the planned load, configuration, ground conditions, equipment certification and exclusion zone. For work at height, verify anchor suitability, continuous protection and rescue readiness. For confined space, verify isolation, atmosphere, communication and rescue capability. For pressure systems, verify depressurization, positive isolation and the boundary. For driving, verify journey controls, vehicle condition, fitness and separation. The exact checks must come from the risk and control design, not a universal checklist.

Assurance operates at several levels

Frontline verification confirms controls before and during work. Supervisory assurance tests the quality of that verification and responds to degradation. Functional assurance examines whether standards, competence and maintenance support the control across sites. Independent assurance challenges the entire picture. These levels should be connected. Repeating the same checklist at four levels creates volume without added confidence. Each level should answer a different question and escalate exceptions.

Why action counts mislead

Closing actions can improve conditions, but the count says little about material risk. One repaired guard on a high-energy machine may matter more than fifty repainted lines. Closure also says nothing about effectiveness unless the result is checked. Dashboards should distinguish actions that restore critical controls, actions that reduce lower-level risk and administrative improvements. Overdue critical-control restoration should be visible to leaders as risk exposure, not buried among routine tasks.

What leaders should do differently

Define the organization’s material risks and select critical controls deliberately. Give every critical control an owner, a performance requirement, a verification method and a clear response when it is degraded. Sample verification quality in the field. Report exceptions, temporary arrangements and time at risk. Ask whether assurance findings change operational decisions. The aim is not a higher verification count. It is reliable evidence that the barriers between high-energy hazards and people will work when demanded.

Test a control at the job

Pick one material hazard and identify the controls that must work to prevent a fatal or serious outcome. For each control, define what good performance looks like and how someone can verify it at the job. Sample a live task. If a control is missing or degraded, record the exposure and the operational response, not only an action for later closure.

Questions about control performance

Which controls must work today? What evidence shows they can perform as intended? Where are temporary arrangements carrying risk? Who can accept that exposure, and for how long? When will the organization check whether the repair or replacement restored the control?

Count less and test more

Count less and test more. Leaders need evidence that critical controls work where people face the hazard.

Sources & Further Reading

  1. IOGP: Life-Saving Rules
  2. ISO 45001:2018: Occupational health and safety management systems
  3. UK HSE: Human factors: Human failure

Author/editor: Myaser HSE Hub Editorial

Last reviewed: August 4, 2026

Disclaimer: This article provides general HSE education. Apply applicable law, standards, engineering judgment and competent professional advice to your specific operation.