A Handover Transfers Risk, Not Just Information

The incoming shift inherits the plant as it is

A shift handover is a transfer of operational responsibility. The incoming team inherits the real plant condition: live process deviations, unavailable safeguards, temporary arrangements, permits, isolations, maintenance interactions, deferred work and actions that may become urgent after the outgoing team leaves. If that picture is incomplete or misunderstood, the new shift may make a reasonable decision using the wrong assumptions.

UK HSE describes the goal of handover as accurate, reliable communication of task-relevant information so safe and effective work continues across shifts or teams. HSE identifies three elements: preparation by outgoing personnel, an exchange between outgoing and incoming personnel, and cross-checking by the incoming personnel as they assume responsibility. This makes handover a process of building shared understanding—not simply reading a log.

Prioritise what changes the next decision

A long list is not necessarily a good handover. The most important information is what can affect the incoming team's priorities, operating envelope or response to an upset. That normally includes abnormal plant conditions and trends; active alarms, overrides and inhibited trips; impaired safety-critical equipment; open permits and isolations; temporary changes; ongoing startup or shutdown steps; SIMOPS; environmental constraints; and actions with time-dependent consequences.

The outgoing team should distinguish facts from assumptions. State what has been verified, what remains uncertain, what changed during the shift and what must happen next. A statement such as 'the pump is unreliable' is less useful than a concise account of the observed symptoms, current operating arrangement, approved restrictions, defect status and escalation trigger. The exact content and format must follow the installation's approved handover procedure.

Hypothetical example: an unfinished instrument intervention

Consider a hypothetical offshore shift ending while technicians investigate an erratic level transmitter on a separator. A second indication is being used under an approved temporary arrangement, and the associated high-level protection has a defined status. The written log records that instrument work is ongoing, but does not clearly state the temporary operating restriction, the protection status or the condition that requires escalation.

This is an illustrative scenario, not a documented incident. If the incoming operator sees only 'instrument maintenance in progress', they may interpret the plant as normally protected and accept a production change that narrows the available margin. The missing information is not administrative detail; it changes how the plant should be operated and monitored.

The handover should identify the verified field condition, the approved temporary control, the responsible owner, relevant trends, outstanding actions and the trigger for holding, reducing or stopping the operation under site procedures. The incoming operator should cross-check critical information against the control system, permit or override register and field status as required.

Make the exchange two-way and challenge assumptions

HSE recommends that shift handover be face-to-face, two-way, supported by verbal and written communication, based on the incoming person's information needs, and given adequate time and resources. Two-way exchange allows the receiver to question vague statements, repeat back critical information and test whether both people attach the same meaning to words such as stable, isolated, available or temporary.

Cross-checking is especially important for high-risk or unusual states. Confirm critical values and trends on the appropriate display; verify active overrides and permits against their authorised records; and compare the intended equipment line-up with reliable field or system information where the procedure requires it. A signature can record that handover occurred, but it cannot prove that the mental model transferred accurately.

Protect the handover from predictable human-factor pressures

Handover often occurs when one team is tired and eager to leave while another is orienting itself to a complex situation. Interruptions, simultaneous radio traffic, late-running work, missing logs and pressure to resume production can compress the exchange. These are foreseeable conditions, so the organisation should provide protected time, a suitable location, usable logs and clear responsibility for conducting and receiving the handover.

Higher-risk handovers deserve additional attention—for example during startup, shutdown, abnormal operation, degraded safeguards or maintenance that spans shifts. If essential information cannot be established, the correct response is to pause the affected activity and escalate through the approved process. Continuity of production must not depend on the incoming team guessing what the outgoing team meant.

Link control room, field and maintenance perspectives

The control-room log cannot always capture what field operators and maintenance teams have observed. A structured handover should connect these perspectives. An unusual sound, intermittent leak, difficult valve movement, temporary access restriction or incomplete reinstatement may not yet appear as an alarm, but it can change the meaning of the process data seen at the console.

Where responsibility crosses functions, make ownership explicit. Identify who controls the equipment, who owns the permit or defect, what work remains authorised, and who must approve the next operating step. HSE notes that safety-critical communication also occurs between operations and maintenance and that permit-to-work is itself a means of communication. Conflicting records or unclear ownership should be resolved before work or operation continues.

Three practical actions for today's shift

First, prepare before the formal exchange: update the approved log and identify the few conditions most likely to change the incoming shift's decisions. Second, conduct the handover as a two-way conversation, using written and verbal information and inviting questions or read-back for critical points. Third, cross-check high-risk information—such as active overrides, impaired barriers, permits, isolations and abnormal trends—against the authorised records and current plant condition before accepting responsibility.

Discussion question: Which single condition on our installation could be recorded as a routine log entry but would materially change the incoming shift's response to an upset—and how do we confirm it has been understood?

This article provides general process-safety learning. Handover content, timing, verification, transfer of responsibility and escalation must follow the installation's approved procedures and operating arrangements.