Critical Risk Management
Turn fatal risks into controls that can be demonstrated in the field.
A practical operating model for mining, energy, Oil & Gas, construction and process industries. The objective is not to add another safety procedure, but to ensure the controls capable of preventing a fatal event are present, effective and maintained at the time of exposure.
The foundations of an effective programme
Critical Risk Management complements the HSE management system. It focuses attention on low-frequency events that could cause a fatality, multiple fatalities or life-altering illness.
Start from a clearly described unwanted event, not a generic hazard label.
Separate a true control from training, procedures and other supporting activities.
Prefer elimination and engineered barriers over dependence on human action.
Define observable performance requirements and clear Go / No-Go conditions.
Give operational leaders ownership of risks and controls; HSE owns the method.
Involve workers and contractors in design, localisation and verification.
Respond positively to reported gaps so weak signals remain visible.
Measure control health instead of relying only on injury-frequency indicators.
Why “zero fatality” is a management ambition, not a myth
Industrial organisations can have mature procedures and still expose people to fatal events when critical controls are assumed rather than verified. The decisive shift is to stop treating fatality as an inevitable cost of business and to focus leadership attention on the small number of hazards capable of causing irreversible harm.
Lesson 1 · Rewrite the history
Examples from high-risk industries show that long periods without a fatality are achievable when critical controls are designed, owned, verified and improved as a system. The result is not luck: it is disciplined execution and learning.
Lesson 2 · Do not overload the frontline
A Take 5 or similar tool remains useful for local awareness, but it cannot ask one worker to discover every systemic weakness under noise, fatigue and production pressure. Critical Risk Management gives the worker a shorter, clearer question: are the controls that protect life present and effective?
Lesson 3 · Replace “tick and flick” with cross-checking
A completed form is not evidence that a control worked. Evidence must connect the person exposed, the supervisor observing and the manager assuring the standard, competence and corrective action.
A nine-step implementation process
Plan the process
Assess readiness, define scope, appoint the executive sponsor and fund the programme.
Identify fatal hazards
Create the register of fatal hazards and precisely describe the related unwanted events.
Identify controls
Use BowTie, HAZOP, LOPA or another suitable barrier method to identify preventive and mitigating controls.
Select critical controls
Select the limited set whose absence or failure would materially increase likelihood or consequence.
Define performance
Specify the objective, requirements, failure modes, supporting activities and verification method.
Assign accountability
Name the risk owner, control owner and verification activity owners.
Implement locally
Adapt corporate content to each site and integrate it into work planning, maintenance and change management.
Verify in the field
Confirm that controls are present and effective, and stop or modify work when they are not.
Evaluate and improve
Combine verification, incidents, internal information and external learning to improve control design.
Minimum critical control performance standard
Related fatal hazard and unwanted event
Control objective in plain language
Specific, measurable and realistic performance requirements
Degradation and failure modes
Go / No-Go criteria and operating limits
Maintenance, inspection, calibration and competency requirements
Expected evidence and verification questions
Frequency based on exposure, variability and reliability
Owner, escalation and degraded-operation rules
Management-of-change requirements
Operational governance
Set appetite, challenge control health and fund material improvements.
Protect scope, remove obstacles and keep operations accountable.
Oversee the fatal hazard and accept or reject the aggregate control position.
Maintain design adequacy and operating effectiveness of the assigned control.
Confirm implementation at the point of exposure and act on gaps.
Maintain the method, coach operations and independently assess verification quality.
Provide risk-based assurance to the audit and risk committee.
Layered verification
Physically confirm the controls required for the task. Do not start when a mandatory control is absent or ineffective.
Check field application, evidence quality and alignment between the documented check and actual conditions.
Test design, technical integrity, maintenance, competency and supporting systems.
Assess the quality and sustainability of the overall process without replacing line accountability.
The rule that protects life: stop when a critical control fails
If a mandatory control is absent, degraded or ineffective, the work must stop, be made safe and only restart after the gap is corrected or a formally approved safe alternative is in place. This is a production decision as much as a safety decision: the control is a condition of operation.
Physically confirms the presence and immediate functionality of the controls before exposure.
Observes field application, checks the standard and challenges evidence quality during execution.
Assures the design, regulatory alignment and competence, then assigns a corrective plan when a gap is found.
Deployment roadmap
Mobilise
Sponsor, readiness assessment, governance, fatality criteria and pilot site.
Design
Fatal hazard register, BowTie workshops, critical-control selection and ownership.
Specify
Performance standards, Go / No-Go rules, field tools and competency programme.
Pilot
Layered verification, dashboards and integration with PTW, LOTO, maintenance and MOC.
Assure
Effectiveness reviews, recurrence analysis and independent assurance.
Scale
Multi-site and contractor deployment, internal benchmarking and formal maturity review.
The indicators leaders should see
A dashboard that is always green is not proof of control. A healthy programme detects weaknesses, makes them discussable and demonstrates that corrective action is effective.
Leading indicators: see weakness before the event
Digital tools should not merely replace paper. They should reveal where control health is weakening: recurring failures, degraded exposure time, invalid evidence, abnormal site or contractor patterns, and work stopped because a protection was missing. Benchmarking sites and teams can surface outliers that appear green on injury metrics while critical-control integrity is declining. Geolocation and time-stamped evidence can also test whether verification happened at the point of exposure rather than from an office.
Maturity scale
1 · Limited
Initial activity, limited understanding and mainly compliance-driven behaviour.
2 · Emerging
Basic processes exist but design and implementation gaps remain visible.
3 · Established
A consistent approach is in place with proactive implementation and operational learning.
4 · Leading
The programme is integrated, sustained, operationally owned and continuously improved.
Failure modes to avoid
Calling every control critical
Using generic yes/no checklists without performance criteria
Making HSE the owner of operational controls
Setting verification quotas that encourage automatic green answers
Keeping verification separate from maintenance and work planning
Closing actions administratively without testing effectiveness
Assess your critical-control maturity
Nordik can facilitate the readiness assessment, fatal-hazard workshops, performance standards and a site deployment roadmap.