A HIRA risk assessment can be technically complete and still fail at the point of work.

The hazards may be identified. Risk ratings may be assigned. Controls may be documented. The assessment may even have gone through several rounds of approval.

Yet when a maintenance technician opens a line, a contractor begins hot work, an electrical team starts an isolation, or a construction crew enters a changing work area, those controls can become generic, outdated or disconnected from what is actually happening.

That gap matters.

For EHS and operations teams, the real test of a risk assessment is not whether the HIRA exists. It is whether its critical controls reach the task, appear in the work-control process, are understood by the people doing the job and remain valid as site conditions change.

HIRA should establish the risk basis, not become the final field instruction

HIRA — Hazard Identification and Risk Assessment — provides a structured way to identify hazards, assess risk and define controls.

That makes it an important foundation.

But many organisations use HIRA at an activity, department, plant or process level. The assessment may therefore cover broad activities such as:

• welding and hot work
• equipment maintenance
• electrical work
• material handling
• work at height
• excavation
• lifting operations
• confined-space work
• chemical handling

A broad HIRA can identify the expected hazards associated with these activities.

What it cannot always capture is the exact condition of tomorrow’s job.

A welding task beside an operating production line is different from the same task during a shutdown. Maintenance on an isolated machine is different from maintenance where adjacent equipment remains energised. Work at height inside a completed plant is different from work at height on a changing construction or fit-out site.

This is where task-level assessment and work control have to take over.

HIRA, JSA/JHA and PTW should answer different questions

One reason risk-assessment systems become confusing is that HIRA, JSA, JHA and PTW are sometimes treated as interchangeable documents.

They are better understood as connected layers.

HIRA asks: What are the significant hazards and controls associated with this activity or process?

It creates the risk-control foundation.

JSA/JHA asks: How will this particular job be performed safely?

It breaks the task into steps and examines the hazards created by the worker, equipment, work environment and sequence.

OSHA describes Job Hazard Analysis as a technique focused on job tasks and the relationship between the worker, task, tools and work environment. OSHA also provides JHA worksheets and templates for practical use.

Permit to Work asks: Can this specific high-risk job proceed under the conditions present now?

A PTW brings authorisation, location, hazards, isolations, supporting certificates, precautions, roles and time validity into the control-of-work process.

The UK HSE’s permit-to-work guidance makes the same connection explicit: risk assessment, task definition and permit-controlled work should form part of an integrated planning process rather than operate independently.

The strongest systems therefore do not ask teams to choose between HIRA, JSA/JHA and PTW.

They make the information flow between them.

Where HIRA risk assessments commonly lose effectiveness

1. The controls are too generic

A HIRA may say:

Use appropriate PPE.

But the permit or task assessment needs to define what that means for this job.

A HIRA may state:

Ensure isolation before maintenance.

But field control needs to establish:

• what energy sources exist
• which isolation points apply
• who performs the isolation
• how zero-energy state is verified
• whether adjacent equipment creates additional exposure
• what evidence is needed before work begins

The control has to become executable.

2. The assessment reflects the planned job, not the actual job

Planning may happen days or weeks before execution.

By the time work starts:

• equipment configuration may have changed
• another contractor may be working nearby
• access may have changed
• production may still be active
• weather may affect outdoor work
• temporary utilities may have been installed
• a shutdown sequence may have changed
• the intended isolation may no longer be sufficient

A good work-control process checks whether the original assumptions are still valid.

3. Risk controls have no clear owner

Controls such as:

• isolate the line
• inspect the scaffold
• provide ventilation
• establish exclusion zone
• test atmosphere
• stop conflicting work

are incomplete unless somebody is responsible for implementing and verifying them.

A practical control should answer:

Who does it? When? What proves it happened? Who confirms it?

4. The HIRA sits outside the permit process

This is one of the most important control gaps.

If the HIRA says one thing, the JSA another and the PTW does not reference either, workers and supervisors have to manually reconcile three separate sources.

That creates room for inconsistency.

For higher-risk work, the critical HIRA controls should influence the permit fields and verification steps directly.

Translating hazards into job-specific controls

Consider a familiar industrial example:

Planned job

Hot work on pipe support near operating process equipment.

HIRA-level hazards

• ignition
• sparks and hot material
• combustible material
• process release
• burns
• nearby personnel exposure

These are valid hazards, but they are still broad.

At the task level, teams need to establish the actual controls.

Job-specific questions

• Is combustible material present within the work zone?
• Is nearby equipment operating?
• Could a leak introduce flammable vapour?
• What isolation is required?
• Is gas testing necessary?
• Who performs the test?
• How often should conditions be rechecked?
• Is a fire watch required?
• What firefighting equipment must be positioned?
• Is another contractor working nearby?
• What condition should immediately stop the job?

That is the transition from hazard recognition to work control.

OSHA’s hazard-prevention guidance recommends selecting controls systematically, involving workers and following up to confirm that controls remain effective. It also specifically highlights the need to review job hazard or job safety analyses before non-routine operations.

Build a HIRA-to-permit control map

For high-risk activities, EHS teams can make this relationship explicit.

HIRA Hazard	Required Control	PTW / Task Field	Owner	Verification Evidence
Unexpected energisation	Positive isolation	Isolation section	Authorised isolator	Isolation record + field verification
Flammable atmosphere	Atmospheric testing	Gas-test section	Competent tester	Recorded test result
Hot-work ignition	Remove combustibles / fire watch	Hot-work controls	Area owner / fire watch	Pre-start check
Fall from height	Approved access and fall protection	Work-at-height controls	Supervisor	Inspection / pre-use confirmation
Conflicting activity	Area coordination	SIMOPS / work-area review	Area authority	Coordination confirmation
Unauthorised worker	Competency verification	Workforce / approval section	Supervisor / permit issuer	Training or competency status

This gives the assessment an operational destination.

Instead of leaving critical controls inside a PDF, spreadsheet or risk register, the system makes them visible at the exact point where work is authorised.

Risk assessment must also address control quality

Another common mistake is to identify a hazard and immediately settle on an administrative control.

For example:

Hazard: worker exposure to moving machinery
Control: conduct toolbox talk

Training may be useful, but the more important question is whether the hazard can first be eliminated, isolated or engineered out.

The NIOSH Hierarchy of Controls places elimination, substitution and engineering approaches ahead of administrative controls and PPE because stronger controls reduce dependence on individual behaviour.

That principle is particularly relevant when converting HIRA findings into task controls.

If a risk can be removed physically, a reminder should not become the primary defence.

Dynamic changes need an explicit stop-and-reassess trigger

Risk assessment is not finished when the permit is issued.

Conditions can change during execution.

Typical examples include:

• job scope changes
• different equipment is used
• additional workers join
• another contractor begins nearby work
• process conditions change
• isolation configuration changes
• weather deteriorates
• lighting or access becomes poor
• unexpected material or energy source is discovered
• work sequence changes

When these occur, workers and supervisors should know when to stop.

A useful rule is:

If the job, people, equipment, location, conditions or work sequence changes materially, verify whether the assessment and permit are still valid before continuing.

HSE guidance on dynamic assessment similarly illustrates that when circumstances change, the risks should be reassessed and work should not proceed if effective controls cannot be applied.

Contractor work makes the HIRA-to-work connection even more important

Contractor-intensive sites add another layer of complexity.

A site may have:

• a corporate HIRA
• a contractor method statement
• contractor JSA
• site PTW
• equipment isolation procedure
• toolbox talk
• area-specific rules

Every document may be individually correct, but the overall control can still be weak if they do not agree.

This is especially relevant across OQSHA’s target environments:

• manufacturing plants
• automotive and component facilities
• heavy engineering and metals
• rail manufacturing
• construction and precast
• interior fit-out
• energy infrastructure
• oil and gas services
• food and beverage facilities
• medical-device manufacturing

Before contractor work begins, the site should be able to confirm:

• which risk assessment governs the activity
• whether the task-specific assessment reflects site conditions
• whether contractor controls align with site controls
• which hazards require permit authorisation
• which competencies are required
• who verifies each critical control
• what triggers reassessment

The HSE’s contractor guidance also links hazardous contractor work with permit-to-work systems and stresses the need to specify the work, hazards and precautions.

Control verification should happen before work begins

A written control is not the same as a verified control.

For example:

Written: Barricade the work area.
Verified: Supervisor confirms the exclusion zone is physically established before lifting begins.

Written: Ensure isolation.
Verified: Isolation points are identified, applied and independently checked.

Written: Only competent personnel to work.
Verified: The assigned worker’s required competency is current before authorisation.

Written: Maintain safe access.
Verified: The actual job route is inspected before the permit is released.

This is where risk assessment becomes operational.

Permit approval should not be the end of risk review

Permit issuers should ask more than:

Is the HIRA attached?

A stronger review asks:

• Does this assessment describe the job being done today?
• Which controls from the HIRA are critical to this permit?
• Have those controls been translated into explicit field requirements?
• Who owns each critical control?
• What evidence proves readiness?
• Are there simultaneous activities nearby?
• Has anything changed since planning?
• What conditions require work to stop?
• Who can reauthorise work after a change?

This turns permit approval from document checking into control verification.

Use learning to improve the HIRA itself

The information flow should also move backward.

Findings from:

• inspections
• incidents
• near misses
• CAPA
• permit deviations
• stop-work events
• maintenance history
• contractor observations

should influence future risk assessments.

If the same risk repeatedly appears in actual work but is missing from the HIRA, the HIRA should change.

If a listed control repeatedly proves impractical, the control should be redesigned.

If field teams continuously add the same additional precaution during permits, the organisation should ask whether that precaution belongs in the standard risk assessment.

This closes the learning loop.

How OQSHA supports HIRA-to-work control

For industrial and project environments, the value of digitising HIRA is not simply replacing a spreadsheet.

The greater value comes from connecting risk information with the processes that actually control work.

With OQSHA, organisations can connect:

• HIRA
• task-level risk controls
• e-PTW
• contractor readiness
• training and competency
• MoC
• corrective actions
• inspections
• field evidence
• analytics

This allows teams to move toward a clearer chain:

Hazard → Risk → Control → Owner → Permit → Verification → Work → Review

For EHS leaders, this improves visibility.

For permit issuers and supervisors, it makes controls easier to apply.

For workers and contractors, it reduces dependence on interpreting disconnected documents at the point of work.

A practical HIRA-to-work-control review

Select one high-risk task from your site and test the following:

HIRA

• Are the major hazards current?
• Are controls specific enough to act on?
• Have previous incidents and findings been incorporated?

Task assessment

• Does the JSA/JHA reflect the actual work sequence?
• Does it include location-specific hazards?
• Does it address nearby activities?

Permit

• Are critical controls carried into the permit?
• Are isolations and supporting certificates linked?
• Are competent people identified?

Field verification

• Is each critical control visibly in place?
• Is there evidence for the verification?
• Do workers understand the stop conditions?

Change management

• What changes require reassessment?
• Who can stop the work?
• Who can reauthorise it?

Learning

• Are deviations and observations captured?
• Do lessons feed back into the HIRA?

If those six layers cannot be followed clearly, the risk-assessment process may be documented but not fully connected.

Conclusion

A HIRA risk assessment should not end at hazard identification or risk scoring.

Its real value appears when the critical controls reach the job.

That means connecting HIRA to task-level assessment, permit requirements, accountable roles, field evidence, changing conditions and learning after the work is complete.

For EHS teams managing manufacturing plants, contractor work, shutdowns, construction projects and non-routine maintenance, the question should therefore move from:

“Do we have a risk assessment?”

to:

“Can we prove that the controls from that assessment are active at the point of work?”

That is the difference between documented risk assessment and practical work control.

---

Turn risk assessment into verified work control

Your HIRA should not sit apart from the job it is intended to control.

OQSHA helps connect HIRA, e-PTW, contractor readiness, actions and field verification so critical risk controls can move from assessment to authorisation and execution with a traceable evidence trail.

Map the hazard. Assign the control. Verify it before work begins.

---

FAQs