TIPS – Oil and Gas Safety
8 Continual Risk Assessment Tips
for Oil and Gas Operations
for Oil and Gas Operations
Static risk assessments go out of date the moment conditions change. Continual risk assessment keeps frontline teams ahead of hazards in real time. These 8 tips help oil and gas supervisors and safety coordinators build a live, effective CRA practice that meets OSHA process safety expectations and reduces incident rates.
80%
of Major Incidents
involve a failure to recognise or act on changing hazard conditions before work commenced or during the task.
Energy Institute, Process Safety: Lessons from High-Consequence Events, 2023
29 CFR
1910.119 – PSM Standard
requires employers to establish and implement written operating procedures addressing safety and health considerations for all process phases, including dynamic hazard conditions.
OSHA 29 CFR 1910.119(f)
3x
Reduction in Near-Misses
reported by sites that implemented structured pre-task and mid-task continual risk assessment reviews compared to sites using only pre-shift static assessments.
CCPS, Guidelines for Risk-Based Process Safety, 2007
Continual risk assessment (CRA) is the practice of identifying, evaluating, and acting on hazards as they evolve throughout a task, not just before work begins. In oil and gas operations, conditions change quickly: pressure readings shift, weather moves in, equipment status changes, and adjacent work introduces new hazards. A risk assessment completed at 06:00 may be meaningless by 08:30.
These 8 tips address the most common failures in how oil and gas teams practise CRA. They are ordered from the most frequently cited failure pattern to the least, based on OSHA inspection findings and process safety incident data. Each tip includes a specific action, the common mistake to avoid, and a pro tip from established industry practice.
8 Continual Risk Assessment Tips at a Glance
Quick Summary
Tip 1
Reassess when conditions change, not on a fixed schedule
Tip 2
Make the stop-work authority real and practised
Tip 3
Conduct mid-task reassessments at defined trigger points
Tip 4
Use SIMOPS reviews before work begins and when scope changes
Tip 5
Tie CRA to your permit-to-work system
Tip 6
Document what changed, not just what was assessed
Tip 7
Train for the unexpected, not the planned scenario
Tip 8
Close the loop: debrief every CRA that identified a hazard
The 8 Tips: Full Detail
1
Reassess when conditions change, not on a fixed schedule
Why It Matters
Most LOPC events and process safety incidents occur when conditions changed after the initial risk assessment was completed. A weather change, an adjacent task starting, a pressure anomaly, or a delayed permit can all create hazards that were not present at the original assessment.
What To Do
Define specific condition change triggers in your CRA procedure: weather threshold (wind speed above X, lightning within Y km), equipment status change (adjacent isolation removed, relief valve lifted), scope change (additional workers, different equipment, extended time), and any unplanned event. Any trigger requires a reassessment before work continues.
Common Mistake
Teams treat CRA as a one-time activity tied to the permit issue time, not as a living process. The permit was valid at 06:00. By 10:00, three things have changed. Nobody reassessed.
Pro Tip
Post the trigger list at the worksite, not just in the procedure. If the crew can see it, they are more likely to use it.
Energy Institute, Process Safety: Lessons from High-Consequence Events, 2023
2
Make the stop-work authority real and practised
Why It Matters
Stop-work authority (SWA) is worthless if workers do not believe they can use it without consequence. Research consistently shows that workers who do not feel psychologically safe to raise a concern will not exercise SWA even when they recognise a hazard. In oil and gas, this gap directly contributes to incident escalation.
What To Do
Conduct at least one SWA drill per quarter where a supervisor or team member exercises SWA for a simulated condition change, and the team practises the response: stop, withdraw, reassess, communicate, and re-authorise before resuming. Debrief every real SWA exercise to confirm it was handled correctly and without negative consequence for the person who called it.
Common Mistake
SWA is announced in toolbox talks but never actually exercised. When a real situation arises, workers are uncertain whether they are ‘allowed’ to stop work or whether they will face pressure to continue.
Pro Tip
If SWA has not been exercised in the last 90 days, it has probably never been used in a real situation either. Schedule a drill this week.
OSHA, Process Safety Management, 29 CFR 1910.119
3
Conduct mid-task reassessments at defined trigger points
Why It Matters
Pre-task assessment only captures hazards at the start of work. For tasks that extend over multiple hours, shifts, or phases, the hazard profile changes. A mid-task reassessment at a defined checkpoint prevents the team from operating on an assessment that no longer reflects reality.
What To Do
Define mid-task reassessment points in your work procedure for any task lasting more than 2 hours, any task that crosses a shift handover, any task with multiple phases (isolation, break, work, reinstatement), and any task where conditions are expected to change during execution. At each checkpoint, the crew lead reviews current conditions against the original assessment and documents the outcome.
Common Mistake
Mid-task reassessment is treated as optional or informal. The crew ‘checks in’ verbally but does not document the review. If an incident occurs in the second phase of a task, there is no record showing the risk was re-evaluated before phase two began.
Pro Tip
For multi-shift tasks, the incoming supervisor should conduct and document a fresh CRA at the start of each shift, not just accept the handover briefing.
CCPS, Guidelines for Risk-Based Process Safety, 2007
4
Use SIMOPS reviews before work begins and when scope changes
Why It Matters
Simultaneous operations (SIMOPS) create dynamic hazard interactions that individual task risk assessments cannot capture. A safe lift plan and a safe hot work permit can become a hazardous combination when both tasks are running on the same deck at the same time.
What To Do
Require a SIMOPS review for any combination of: lifting over active process areas, hot work within 15 metres of open-drain systems, pressure testing while adjacent equipment is in service, and any task within the 5-metre envelope of a permitted isolation. The SIMOPS review must be repeated any time a task’s scope, timing, or location changes.
Common Mistake
SIMOPS reviews are conducted at the planning stage but not revisited when task timing slips. The hot work permit was issued for 09:00-12:00. The crane lift was delayed until 10:30. Now they overlap. Nobody reviewed the combination.
Pro Tip
Assign one person on each shift specifically responsible for tracking active permits and flagging SIMOPS conflicts. This role should not be the permit issuer.
Energy Institute, Guidance on Permit-to-Work Systems, 2021
5
Tie CRA to your permit-to-work system
Why It Matters
A permit-to-work (PTW) system that does not require documented CRA at key points creates a gap between paper compliance and actual hazard management. When CRA is embedded in the PTW workflow, it becomes non-negotiable rather than advisory.
What To Do
Configure your PTW system so that: initial CRA is a mandatory field before permit issue, mid-task reassessment is required to extend a permit beyond its original time window, and any scope change requires a new CRA before the permit amendment is authorised. CRA outcomes should be recorded in the permit record, not in a separate document that may not be reviewed together.
Common Mistake
CRA is treated as a separate activity from the PTW process. Workers complete the permit. They also complete a risk assessment form. The two documents are not cross-referenced, and the person issuing the permit does not review the CRA before authorising the work.
Pro Tip
When a permit is extended, require the crew lead to physically sign the CRA update before the permit extension is countersigned. This forces the two documents into alignment at every time extension.
Energy Institute, Guidance on Permit-to-Work Systems, 2021
6
Document what changed, not just what was assessed
Why It Matters
Most CRA forms record what hazards were identified at the time of the initial assessment. They do not record what changed during the task. Without a change record, it is impossible to reconstruct the hazard timeline after an incident, and difficult to demonstrate to an OSHA inspector that conditions were actively managed.
What To Do
Add a ‘Changes Noted’ field to your CRA record that requires the crew lead to document any change in conditions identified during the task, even if no reassessment was triggered. At the close of the permit, the change record should show a complete picture of how conditions evolved from permit issue to task completion.
Common Mistake
The CRA form is completed at the start of the task and filed without update. If conditions changed but no incident occurred, there is no record. If an incident does occur, the investigation team has no CRA trail to follow.
Pro Tip
For digital PTW systems, a simple time-stamped text field for ‘condition changes noted’ costs nothing to add and is invaluable in an incident investigation or OSHA inspection.
OSHA Process Safety Management Guidelines for Compliance, OSHA 3132
7
Train for the unexpected, not the planned scenario
Why It Matters
Most CRA training involves walking through a pre-planned scenario where the hazards are known in advance. This builds familiarity with the CRA process but does not build the most critical skill: recognising an unplanned hazard that was not in the original assessment.
What To Do
Include at least two ‘unknown hazard injection’ exercises per year in your CRA training programme. Present the team with a normal task scenario, then mid-exercise introduce an unexpected condition (a gas reading above baseline, a dropped object zone established by an adjacent team, an equipment failure notification) and require the team to respond in real time. Debrief on what they noticed, what they missed, and how quickly they escalated.
Common Mistake
CRA training exercises always use the same hazard scenarios. Experienced workers begin to recognise the ‘planted’ hazards and respond from memory rather than from observation. New workers see competent-looking responses and assume the skill transfers to real conditions.
Pro Tip
Base your unknown hazard scenarios on actual incidents and near-misses from your site. This increases realism and the likelihood that the training sticks.
Energy Institute, Process Safety Competency Framework, 2022
8
Close the loop: debrief every CRA that identified a hazard
Why It Matters
When a CRA identifies a hazard and triggers a control measure or a work stop, the outcome of that decision should be reviewed and recorded. Without a debrief, the organisation loses the opportunity to learn whether the control worked, whether the reassessment was timely, and whether similar conditions are likely to recur.
What To Do
After any task where a CRA identified a new or changing hazard: conduct a 5-minute verbal debrief at task close, record the hazard identified, the control applied, and the outcome in the CRA record, and flag any recurring hazard patterns to the site safety team for trend analysis. A monthly review of CRA hazard records should identify patterns that indicate systemic issues.
Common Mistake
Debriefs only happen after incidents, not after successful hazard management. If the job finished safely, the team moves on without reviewing what worked. The learning is lost, and the same hazard recurs on the next similar task.
Pro Tip
If your CRA data shows the same hazard type being identified repeatedly across similar tasks, you have a systemic issue that the task-level CRA is managing but not solving. Escalate it to the engineering or process safety team.
CCPS, Guidelines for Risk-Based Process Safety, 2007
Pre-Task CRA Checklist for Oil and Gas Operations
Source: Energy Institute, Guidance on Permit-to-Work Systems, 2021 | OSHA 29 CFR 1910.119
Key Takeaways
CRA is a process, not a form
Completing a risk assessment form before work starts satisfies a documentation requirement. Continual risk assessment is the practice of maintaining hazard awareness throughout the task. Both are necessary. Neither replaces the other.
Trigger-based reassessment beats scheduled reassessment
Scheduling a reassessment every two hours is less effective than defining the conditions that require one. Condition-based triggers respond to actual hazard changes, not to clock intervals that may have no relationship to what is happening on site.
Stop-work authority must be exercised to remain credible
If SWA has never been used without negative consequence, workers will not use it in a real situation. Drills that simulate real SWA exercises build the muscle memory and the psychological safety that makes SWA function when it matters.
PTW integration makes CRA non-negotiable
When the permit system cannot be extended or amended without a documented CRA update, the practice becomes procedurally enforced rather than individually dependent. This is the most reliable route to consistent CRA compliance across all crews and all shifts.
Frequently Asked Questions
What is continual risk assessment in oil and gas?
Continual risk assessment (CRA) is the ongoing practice of identifying and evaluating hazards throughout a task, not just before it begins. In oil and gas, it means actively monitoring conditions during drilling, maintenance, lifting, and permit-controlled work, and taking action when conditions change from those assessed at the start of the task.
Is continual risk assessment required by OSHA?
OSHA’s Process Safety Management standard (29 CFR 1910.119) requires employers to establish written operating procedures that address safety and health considerations for all phases of a process, including normal and abnormal conditions. This creates an obligation to manage hazards dynamically, not just at the start of a shift. Many OSHA 1910.119 citations arise from failures to respond to changing conditions during work.
How is CRA different from a job hazard analysis?
A job hazard analysis (JHA) is typically conducted before a task and documents foreseeable hazards and controls in advance. CRA is the ongoing monitoring activity during the task. Both are necessary. The JHA defines the baseline; CRA manages deviations from that baseline when conditions change. A JHA alone is not sufficient for tasks where conditions change during execution.
What triggers a mid-task CRA reassessment?
Common triggers include: any weather change that crosses a defined threshold (wind speed, lightning proximity, visibility), any change in adjacent work activity or new SIMOPS risk, any unplanned equipment status change, any scope change to the current task, any abnormal reading or observation not covered in the original assessment, and any crew change or shift handover during a multi-phase task.
How should CRA be documented for OSHA PSM purposes?
CRA documentation should include: the initial hazard assessment linked to the permit record, a field for documenting condition changes observed during the task, timestamps for any mid-task reassessments, and the identity of the person who conducted the reassessment. Under 29 CFR 1910.119(g)(2), training on CRA procedures must also be documented and certified for each employee involved in process operations.
What is the most common failure in CRA practice?
The most common failure is treating CRA as a one-time pre-task activity. Workers and supervisors complete the initial risk assessment form, attach it to the permit, and then operate on that assessment for the duration of the task regardless of changing conditions. The second most common failure is treating stop-work authority as a theoretical right rather than a practised skill.
How do we integrate CRA with our permit-to-work system?
CRA should be embedded as a mandatory step in permit issue, permit extension, and scope change workflows. The permit should not be extendable without a documented CRA update showing that conditions at the time of extension were assessed. Many PTW systems allow a ‘condition review’ field to be added to the extension form; this is the minimum integration required.
Sources
Government and Regulatory Sources
- OSHA. (2024). 29 CFR 1910.119: Process Safety Management of Highly Hazardous Chemicals – PSM operating procedure and training requirements for dynamic hazard management.
- OSHA. (2000). Process Safety Management Guidelines for Compliance, OSHA 3132 – compliance guidance on operating procedures, employee training, and documentation.
- OSHA. (2024). 29 CFR 1910.132: Personal Protective Equipment – PPE hazard assessment requirements applicable to CRA in oil and gas operations.
Research and Industry Sources
- Energy Institute. (2023). Process Safety: Lessons from High-Consequence Events – analysis of major incidents citing failure to reassess changing conditions as a primary causal factor.
- Energy Institute. (2022). Process Safety Competency Framework – role-based competency standards for CRA in oil and gas operations.
- Energy Institute. (2021). Guidance on Permit-to-Work Systems – PTW-CRA integration requirements and SIMOPS review standards.
- Center for Chemical Process Safety (CCPS). (2007). Guidelines for Risk-Based Process Safety – industry guidance on continual hazard management and near-miss reduction data.
Related VelSafe Articles
Insights
Oil and Gas Breaking Containment: LOPC Evidence and Trends
Evidence and trend analysis of loss of primary containment in oil and gas, covering inspection data, causes, and what the enforcement record shows.
Worker Safety
Oil and Gas Worker Safety: Hazards, Controls, and Rights
Practical hazard and control guidance for oil and gas workers covering the most common process safety risks and worker rights.
Guides
Oil and Gas Breaking Containment: Microlearning Guide
How to build a PSM-compliant breaking containment microlearning programme, including role competencies, delivery intervals, and permit-to-work integration.
Oil and Gas Safety
More Oil and Gas Safety Tips and Guides
VelSafe covers continual risk assessment, process safety, permit-to-work, and training for oil and gas safety teams. Browse all oil and gas content.
Browse All Oil and Gas Articles
