Recovery Readiness: What If the Plan Stops Working?

Human Performance weekly series: lesson 52 of 52.

A 5–10 minute crew discussion, plus time to verify the actual controls. The crew talk and Word version are public. Separate supervisor and attendance records are included with free Safety & Systems membership.

Why this matters

A missing resource or blocked planned access can leave a crew between normal work and an unfamiliar alternative. Prepare for that interruption before it happens. Recovery means regaining a verified, authorized arrangement; it does not mean finding a way to keep production moving at any cost.

Learning objective

Rehearse one plausible interruption and identify the safe response, decision owner and evidence needed for restart.

Key hazards or failure points

Unavailable backup; unclear hold condition; improvised alternatives; unfamiliar duties; lost restrictions during handoff; restarting because the disruption appears over.

Practical controls

• Choose one credible operational interruption for today’s task. Identify the approved response and who keeps the work in a safe condition. Use actual procedures; this discussion cannot invent a shutdown or stabilization method.
• Name the decision owner, backup and resources needed to assess the changed situation. Identify what stays restricted while they respond. Alternatives require the appropriate review and authorization before use.
• Agree how status and restrictions reach affected crews and the next shift. Distinguish an ordinary work interruption from conditions requiring the emergency plan. Do not delay evacuation or emergency reporting to finish a recovery discussion.

Verify It in the Field

• Use an announced tabletop scenario, such as the designated reviewer becoming unavailable. Ask the crew to identify the affected hold point and explain the prescribed next step. Do not disable equipment, withdraw real protection or stage a surprise failure.
• Trace the planned contact and resource arrangement through approved normal channels. Confirm actual availability for the task and shift; record any gap. Do not call emergency services or send a false incident report as an exercise.
• Have the responsible person state restart prerequisites and the required verifier. For actual work, record the governing criteria, safe check, actual result, checker and time. A successful tabletop is practice, not proof that physical controls work.

Stop and reassess

Hold affected work when the response is unclear, necessary support is absent or the proposed alternative exceeds authority or approved limits. Escalate, maintain the prescribed safe condition and rebrief after authorized changes. Restart only after required verification and release.

Crew discussion questions

• What interruption could defeat today’s arrangement?
• Who keeps the work safe while decisions are made?
• What evidence is needed before restart?

For each required control, record its acceptance source and criterion, safe verification method, responsible checker, actual result and time. Use VERIFIED, HOLD/NOT VERIFIED, or N/A with a reason. A tick alone is not evidence. Complete all applicable task inspections; do not enter danger or improvise a test to fill out a form.

Leader preparation and practical detail

Rehearse a disruption without creating one

Illustrative situation: a designated reviewer is unavailable when a package reaches its release point. Use paper to trace the hold, responsible contact and authorized replacement process. The exercise should reveal missing support before real work depends on it. Do not appoint an unqualified substitute merely to complete the scenario.

Maintain boundaries while adapting

The DOE excerpt provides historical background on anticipating disruption and maintaining resources. This lesson does not adopt wording about operating outside a safety envelope. A fallback must remain within applicable limits and authority. If no approved response exists, the responsible people must establish one while affected work remains safely held.

Separate recovery planning from emergency readiness

TBT42 checks supplies, communications and response coverage. This lesson rehearses decision ownership and restart evidence after an operational interruption. Emergencies invoke the applicable emergency plan. OSHA prevention guidance addresses nonroutine operations and emergencies; it does not supply this task’s safe-state procedure or a universal recovery deadline.

Short supervisor field check

• Credible interruption and hold point identified.
• Approved safe response understood.
• Decision owner and backup confirmed.
• Resources and restrictions communicated.
• Restart evidence and authority specified.

Confirm the relevant trained/authorized people, unresolved items, interim protection, correction owner and recheck. Record required release authority and rebrief anyone affected. The separate sheet supports these records; it does not replace a specialist inspection, permit or engineering determination.

Attendance and follow-through

Use the separate attendance sheet for participants, roles, discussion concerns, actions and late-arrival rebriefs. Attendance is not proof of competence, functioning controls or authorization to work. Keep completed records private under employer procedures.

Source acknowledgment

This resource draws on the U.S. Department of Energy’s DOE-HDBK-1028-2009, Human Performance Improvement Handbook, Volume 1 (June 2009). Todd Jerome Jenkins makes no claim of authorship or copyright ownership in the original U.S. Government work. New explanations, examples, exercises and layouts are Todd Jerome Jenkins adaptations. No endorsement by DOE or the U.S. Government is implied. Third-party material credited in the handbook remains attributed to its source; this notice does not claim rights in that material.

Source excerpt: Volume 1/VOLUME 1 CHAPTER 5 - HUMAN PERFORMANCE EVOLUTION INTRODUCTION.pdf; Chapter 5, printed pp. 5-16 through 5-18 (PDF pages 16–18). The June 2009 handbook supplies concepts; this lesson uses original explanations and exercises.

Technical scope and references

References reviewed October 9, 2026. DOE human-performance tools and OSHA recommended practices support preparation and discussion; they do not establish universal technical acceptance criteria. Apply the current task procedure, manufacturer instructions, permit and required competent or qualified decisions. A successful exercise does not replace required training, technical verification or work authorization.

1. DOE-HDBK-1028-2009, Volume 1 — Chapter 5, printed pp. 5-16 through 5-18 (PDF pages 16–18); June 2009 conceptual background only. Selected original excerpt pages read and visually inspected, not whole chapters.
2. OSHA — Hazard Prevention and Control — Recommended practices, action item 4 and follow-up: prepare for nonroutine work and verify protection. Does not prescribe task-specific recovery or restart methods.

Connect this discussion to your JHA/JSA

Use the JHA/JSA planning and field-verification worksheet to record the actual task steps, hazards, responsible roles and controls. No task-specific worked example is linked for this topic yet. Return to What Changed Today? when the plan or conditions change.

Related Todd Jerome Jenkins articles: How to Conduct a Job Safety Analysis and What Is Human and Organizational Performance?.

Related crew discussions

• Pause When Unsure: Make the Restart Clear
• Work Turnover: Transfer the State, Not Just the Story

Continue the weekly series

• Lesson 51: When the Schedule Pushes Against the Safety Plan

Put one check into practice

Use the free JHA/JSA planning and field-verification worksheet to record today’s change, the required protection and the evidence needed before exposure.