Marking an action complete is not the same as proving that a risk is controlled. A good closure record shows what changed, who checked it, when effectiveness was verified and what should happen if the control does not hold.
Close a health and safety corrective action only when four tests are met: the immediate risk is controlled; the agreed action has been implemented; proportionate evidence shows the control is effective; and a competent person has accepted the result. The evidence may be a photograph, inspection, test result, revised risk assessment, training and competence check, exposure measurement or a combination of these. A note saying “done” is rarely enough for a significant risk.
Completion versus closure
An assignee can complete a task without knowing whether it solved the underlying problem. A guard may have been fitted but left with a new trapping point. A worker may have attended training but still be unable to perform the task safely. A spill kit may have been delivered but stored where the night shift cannot reach it.
Separate the two decisions:
- Completion means the assigned work was carried out and evidence was submitted.
- Closure means an authorised reviewer has checked that the action addresses the hazard, the control works in practice and the supporting record is adequate.
This distinction is especially important when actions come from incidents, inspections, audits or risk assessments. Closing the task without reconnecting it to the original finding can leave the risk unchanged while the dashboard appears green.
What the regulators expect
The law does not normally prescribe one universal photograph, form or approval sequence for every corrective action. The underlying duties and regulator guidance do, however, require employers to manage risk, monitor controls and act when arrangements are not effective.
Ireland: employers must identify hazards, assess risks and set out control measures in the safety statement. Health and Safety Authority guidance on management systems says monitoring should lead to documented action when standards are breached. It also says incident investigations should include corrective action and that audit recommendations should be tracked. The evidence needed should be proportionate to the risk and capable of showing that the chosen control was implemented and reviewed.
Great Britain: legal duties arise from the Health and Safety at Work etc. Act 1974 and supporting regulations, including the requirement under the Management of Health and Safety at Work Regulations 1999 to make suitable and sufficient risk assessments. HSE's Plan, Do, Check, Act guidance is guidance rather than a separate rule. It asks organisations to monitor whether arrangements are effective, learn from shortcomings and put improvements into effect.
United States: applicable federal OSHA standards, state-plan standards and the General Duty Clause determine legal duties. OSHA's Recommended Practices for Safety and Health Programs are advisory, not a new regulation. They recommend assigning responsibility and target dates, tracking progress and following up to confirm that controls are effective. Operators should check the specific standard and state-plan requirements that apply to the hazard.
The four closure tests
1. The immediate risk is controlled
Record any interim measure used while the permanent action was pending: isolation, barriers, restricted access, alternative equipment or a temporary change in work. Do not close a permanent action merely because the interim control remains in place. If a temporary control must continue, assign its own review date and owner.
2. The agreed action is implemented
The evidence should match the task. A purchase order shows that equipment was ordered, not that it was installed correctly. A revised procedure shows that a document changed, not that affected workers understood it. Ask what observable result the action was meant to produce, then collect evidence of that result.
3. Effectiveness is verified
Verification asks whether the control works under real operating conditions. Depending on the risk, that may require a functional test, a workplace observation, a follow-up inspection, worker feedback, exposure monitoring or a review after a defined period. For significant engineering controls, installation evidence alone may be insufficient.
4. A competent reviewer accepts the result
The reviewer needs enough knowledge of the hazard and control to challenge weak evidence. The action owner can confirm what was done, but higher-risk actions often benefit from independent verification by a supervisor, safety professional, engineer, occupational hygienist or other competent person. Define who can close which risk levels before actions are raised.
Evidence for different actions
Use a risk-based evidence standard instead of demanding the same attachment for every task.
- Physical repair or guarding: dated photographs, work order, inspection against the specification, functional test and confirmation that no new hazard was introduced.
- Engineering or exposure control: commissioning results, maintenance requirements and, where appropriate, noise, dust, vapour or other exposure measurements taken by a competent person.
- Procedure or risk assessment: the controlled document and revision date, evidence that affected people received the change, and an observation showing the revised method is usable in practice.
- Training: attendance or completion records plus a competence check suited to the task. A quiz, demonstration, supervised observation or authorisation may be more meaningful than attendance alone.
- Housekeeping or storage: before-and-after photographs can help, but a later inspection may be needed to show the improvement was sustained.
- Contractor action: the contractor's completion evidence, site verification and acceptance by the person controlling the work. Do not rely on an email assertion where the site can check the result.
- Behavioural or supervisory action: revised expectations, briefing records and a planned series of observations. Avoid vague actions such as “tell staff to be careful”.
- Incident action: evidence that the immediate cause and relevant underlying causes were addressed, with the related risk assessment, procedure or inspection regime updated where necessary.
Personal data, medical information and images of people should be minimised and access-controlled. Evidence must be useful without creating an unnecessary privacy or record-management problem.
Verification and reopening
Some controls can be verified immediately. A damaged cable can be removed from service and replaced, then checked before use. Other changes need time. New cleaning arrangements, traffic routes or supervision standards may need a follow-up after several shifts or weeks.
Set the verification method and date when the action is assigned, not after the assignee uploads evidence. Useful trigger points include:
- the first use of repaired or modified equipment;
- the next relevant shift, delivery or contractor visit;
- a follow-up inspection after normal working conditions resume;
- review of leading indicators such as repeated defects or overdue checks; and
- review after an incident, near miss, complaint or worker concern suggests the control failed.
Reopen the action when the evidence does not match the requirement, the control is not used, the hazard remains, a new hazard appears or the improvement is not sustained. Record the reason for rejection and the next required step. Reopening is useful governance, not a failure of the person who raised the action.
What the record should contain
A defensible closure record is concise but traceable. It should normally include:
- the original hazard, finding or incident reference;
- the location, activity and people potentially affected;
- the required action, priority, owner and due date;
- any interim control and its review date;
- what was actually done and when;
- the evidence supplied, with dates and document versions;
- how effectiveness was checked and the result;
- the verifier's name, role and acceptance date;
- changes to the risk assessment, procedure, training or maintenance plan; and
- any continuing monitoring or scheduled follow-up.
Keep the record linked to its source. An inspection finding should point to the action and final evidence. An incident investigation should show which recommendations were accepted, rejected or superseded and why. This lets a later reviewer follow the decision without reconstructing it from emails.
Applying one standard across sites
Distributed teams need a common closure test with room for local evidence. Define organisation-wide fields, approval levels and overdue rules, then let sites attach evidence that fits the hazard. A low-risk housekeeping task should not face the same approval burden as a failed lifting accessory or uncontrolled chemical exposure.
Leaders should review exceptions rather than only totals. Useful questions include:
- Which high-priority actions are overdue or still relying on temporary controls?
- Which sites close actions without attachments or verification?
- Which findings recur after earlier actions were closed?
- Are the same control failures appearing across several locations?
- Do rejected actions reveal unclear standards, weak resourcing or poor ownership?
A consistent record also makes cross-site learning easier. When one site finds an effective control for a shared hazard, other sites can review whether the same issue and solution apply rather than copying the action blindly.
A practical closure workflow
- Define the outcome. Describe the hazard to be controlled, not just the activity to complete.
- Assign ownership. Name the person responsible, due date, priority and interim controls.
- Specify evidence. Decide what will prove implementation and how effectiveness will be checked.
- Complete the work. The owner records what changed and submits dated evidence.
- Verify. A competent reviewer compares the result with the original finding and tests the control where appropriate.
- Close or return. Accept adequate evidence, or return the action with a clear reason and next step.
- Review trends. Monitor overdue, rejected, reopened and recurring actions across sites.
Ensure365 is Fit2Trade's publicly available safety and environmental management platform. Its public tour shows how teams can connect incidents and risks with corrective actions, follow actions through to evidence of completion, and give leaders a view of owners, exceptions and outstanding work across locations. Module scope and rollout should be confirmed for each operation.
Primary sources
- Health and Safety Authority: Safety and health management systems
- Health and Safety Authority: Safety statement and risk assessment
- Health and Safety Authority: Managing health and safety in health and social care
- Health and Safety Executive: Managing for health and safety (HSG65)
- Health and Safety Executive: Act — review performance
- Health and Safety Executive: Review controls and act on lessons learned
- Occupational Safety and Health Administration: Hazard prevention and control
- Occupational Safety and Health Administration: Program evaluation and improvement
Important: This article provides general information, not legal advice. Duties depend on the jurisdiction, hazard, sector and applicable regulations. Verify the requirements that apply to each workplace and use competent advice for higher-risk or specialist controls.