Shift Handover & Overlap Risk: The Gaps Most Risk Assessments Miss

• Serious failures emerge at the boundaries – when shifts change or activities overlap – not from individual tasks performed in isolation.
• Shift handover controls fail when the shared understanding of system state – what is isolated, live, in progress, or under temporary arrangements – is assumed rather than actively verified.
• Fatigue is a design variable, not an individual factor: scheduling handover at peak fatigue exposure reduces the safety margin before the transfer even begins.
• Overlap risk arises when one activity changes plant condition in ways another team is relying on – and permit systems only control this if interaction is actively revalidated as conditions change.

Shift handovers create risks that RAMS routinely miss because RAMS describe how a task should run while it is being performed, not what must hold when responsibility for it transfers. A risk assessment that captures task hazards is silent on the conditions of transfer itself – and those conditions are where most documented controls quietly weaken.

Shift handover risk arises at the point where responsibility transfers.

One person, team or shift stops holding the operational picture and another takes it on. That transfer is not just informational. It is legal, operational and practical. Someone new becomes accountable for plant condition, outstanding hazards, temporary controls and work in progress.

The risk is not the handover itself. It is the loss of an accurate and shared understanding of system state – the current operational condition of the plant – during the transfer.

The risk is amplified when the plant is not in a normal state – during maintenance, when safety controls are temporarily bypassed or overridden, when workarounds are in place, or during abnormal operating conditions. In these situations, assumptions about how things usually run are unreliable, and the incoming shift must understand what is different, not just what is planned.

In practice, that system state includes:

• What is isolated and what is live
• What has been opened, removed or overridden
• What work remains incomplete
• What temporary arrangements are in place

RAMS typically describe the hazards of the task itself – lifting, confined space entry, hot work, electrical isolation. They are less reliable when the task continues beyond a shift, when controls are partially applied at the moment a handover occurs, or when work is paused with the plant in a temporary configuration.

Work on shift handover consistently shows that when the outgoing and incoming teams do not share an accurate picture of what is happening in the system, mistakes become more likely – particularly during maintenance and non-routine work where conditions are less familiar (Lardner, 1996).

HSE guidance is clear that handover requires active cross-checking, not a broadcast (HSE, n.d.). What the guidance cannot account for is the organisational routine of treating those 15 minutes as recoverable time when a shift runs late – which is precisely when the plant is most likely to be in a non-standard condition.

Non-routine work, maintenance, returning after absence, gaps in experience and unfamiliar plant states all increase the difficulty of reaching a shared picture (Lardner, 1996). Those are exactly the conditions that often sit around shift boundaries – especially where planned maintenance and operational continuity collide.

Handover risk is not limited to formal shift change. It also arises at day–night transitions, supervisory changes and operations–maintenance planning interfaces. Organisations rarely treat these as safety-critical transfer points, even though responsibility and system assumptions still shift.

This is why claims about handover being covered in a RAMS often overstate what is actually verifiable in the document. The document might say that handover takes place. It rarely states:

• What must be transferred (system state, constraints, outstanding hazards, what has changed, what is still uncertain)
• How transfer is verified (incoming cross-checks, physical confirmation where needed, permit continuation sign-off)
• What triggers a re-brief (scope change, abnormal operating conditions, new interfaces, loss of key personnel, unexpected extension)

And even when those points are written down, the control fails in familiar ways:

• Time compression: handover time is typically the first thing reduced when a shift is late or the job has drifted. The reduction is often treated as a scheduling issue rather than a safety-critical decision.
• One-way broadcast: information tends to be delivered rather than exchanged. The outgoing shift talks through events; the structure of the handover commonly discourages incoming questions because they appear to slow the process.
• Paperwork substitution: the log or handover sheet can become a substitute for shared understanding, even though it cannot capture uncertainty, nuance or competing constraints.
• Authority ambiguity: the incoming shift formally inherits responsibility, but without the explicit authority or confidence to pause the job, re-check plant condition or challenge assumptions.

If you recognise those patterns, you are not looking at individual behaviour problems. You are looking at an organisational design problem: the boundary is not resourced or enforced as a safety-critical task.

Fatigue is not a secondary issue in shift handover. It is a predictable amplifier of failure.

HSE guidance on managing shift work (HSG256) makes clear that fatigue reduces alertness, slows reaction time and impairs decision-making, particularly in safety-critical tasks (HSE, 2006).

HSE guidance on reducing error and influencing behaviour (HSG48) also links fatigue directly to reduced attention, less reliable monitoring, and a greater likelihood of mistakes (HSE, 1999).

Shift handover typically occurs at the end of a duty period, during night work, or after extended hours – precisely when cognitive performance is most vulnerable. The task demands disciplined recall, careful explanation, questioning and cross-checking. The conditions undermine those abilities.

The organisational implication is uncomfortable but clear: the moment when the system most depends on accurate transfer of responsibility is often the moment when human performance is least reliable.

Yet fatigue is frequently treated as an individual matter rather than a design factor. RAMS rarely reference it. Handover duration is reduced to protect production. Overtime extends shifts. Breaks are compressed. Overlap time is minimised.

In practice, fatigue is a work design variable. Shift patterns, staffing levels, overtime norms and the protection of overlap time sit within management control. If the organisation expects precise verification at the boundary while designing the boundary for maximum fatigue exposure, it has weakened its own control barrier.

Fatigue does not cause handover failure on its own. It reduces the margin for error in a process that already depends on accurate shared understanding.

Overlap between simultaneous activities creates unmanaged risk because each activity assumes the others do not change the conditions it is relying on. When one team isolates a system, another opens it, or a third sequences work around plant condition, the risk emerges from interaction – not from any individual activity.

Overlap risk arises when multiple activities operate at the same time within the same system.

Different trades, functions or organisations may work in parallel, often affecting the same plant, space or process. One activity can alter the conditions another is relying on – sometimes deliberately, sometimes incidentally.

The risk is not simultaneous work itself. It is unmanaged interaction.

HSE’s permit-to-work guidance (HSG250) recognises that one permitted activity can create danger for another and requires coordination where work overlaps or spans shifts (HSE, 2005).

Most organisations assume overlap risk is already managed through their permit-to-work system.

HSG250 makes clear that permit systems are intended to manage interaction between activities and ensure continuity across shifts (HSE, 2005). Permit systems fail in a predictable way: the failure is not the absence of permits, but the drift from active coordination to administrative continuation.

Common weaknesses include:

• Open permits becoming routine rather than actively reviewed
• Continuation signatures treated as renewal rather than verification
• Isolation status assumed to remain unchanged across time
• Interaction checks performed at issue, but not revisited when sequencing changes
• Shift extensions managed as scheduling decisions rather than control revalidation

HSG250 requires formal handover where work continues beyond one shift, with incoming personnel made aware of outstanding permit-controlled jobs and plant status (HSE, 2005).

When plant condition, sequencing or staffing changes mid-task, the permit may remain open – but the system state has shifted. Unless reassessed, the control barrier weakens.

The paperwork exists. The interaction control may not.

Where multiple employers share a workplace, Regulation 11 of the Management of Health and Safety at Work Regulations 1999 requires co-operation and co-ordination of health and safety arrangements (HM Government, 1999). HSE guidance on managing and using contractors reinforces the need for active supervision and information exchange, particularly for non-routine and specialist work (HSE, 2011; HSE, 2012).

The predictable weakness is operational, not contractual.

Client teams review contractor RAMS, site H&S delivers inductions, and the principal contractor aligns documentation across the contracting chain. But real-time coordination between overlapping activities is left to whoever is available at the boundary.

When contractors finish mid-task, when temporary conditions remain in place, or when sequencing changes under pressure, overlap risk becomes dependent on informal awareness rather than structured verification.

That is not a behavioural failure. It is a system design gap.

If risk assessments are to address handover and overlap properly, they must include transition controls – controls that apply specifically when responsibility transfers or activities interact. HSE guidance on shift handover and permit-to-work systems makes clear that structured transfer, cross-checking and coordination across shifts are required control features, not optional additions (HSE, n.d.; HSE, 2005).

The questions below are not a checklist. They are the points at which transition controls most commonly exist on paper but fail under pressure:

• What can change while this work is in progress?
• What must be true before work continues after a boundary?
• Who is accountable for rebuilding the shared picture?
• What verification is required beyond paperwork?
• What triggers a formal re-brief or pause?

Boundary controls fail in a predictable way: they exist in the RAMS but are not protected against the pressures that dissolve them. Continuation signatures get treated as renewal. Re-brief triggers are written down but never activated because activating them requires someone to pause the job – and pausing the job requires someone to own that call under pressure. The control questions are not hard to answer in principle. The difficulty is that each one requires a named person to hold a boundary at the moment when production, scheduling and informal authority are all pointing the other way.

Organisations routinely audit the presence of handover forms and permit signatures. They rarely test whether shared understanding was actually achieved – and that gap between the record and the reality is where the system looks clean and is not.

Two conclusions apply to anyone responsible for producing or reviewing a RAMS. First, the conditions that defeat shift handover and overlap controls are not exotic – they are the conditions present on most operating sites: time pressure, fatigue, parallel work and contractor turnover. Second, documented controls fail under these pressures because they are designed around tasks rather than around the boundaries where those tasks intersect.

The implication for your risk assessment is structural. Controls hold when the boundary itself is treated as engineered work – protected time for handover, named accountability for rebuilding the shared picture, interaction review during overlap, and verification before continuation. Without those, the RAMS describes a task that is fully controlled in normal conditions and silent on what happens when those conditions move.

If you want to test your system, do not review the quality of your RAMS. Trace one task that crosses a shift or overlaps with another activity. Identify where continuation depends on assumption rather than confirmation. That is where your real exposure lies.

The handover and overlap failures described in this article begin in the risk assessment and method statement. Human Focus’s RAMS Training covers risk assessment methodology, method statement structure, and how to write transition controls that hold under operational pressure. It is suitable for safety managers, site supervisors and anyone with responsibility for producing or reviewing RAMS.

Where overlap risk is the primary concern, Human Focus’s Permit to Work Training covers the purpose and limits of permit systems, the responsibilities of permit issuers, receivers and authorising authorities, and how interaction is verified across shifts and overlapping activities.