12.1 Site-Specific Safety Plans, Job Hazard Analysis, and Safety Audits
Key Takeaways
- Level III task 3.2a.1 requires developing and reviewing a safety plan for a work site, and Level IV 4.2a.2 requires performing on-site or in-house safety audits of personnel.
- A job hazard analysis breaks the job into steps, identifies the hazard in each step, and specifies a control before work begins.
- The hierarchy of controls ranks elimination and substitution above engineering controls, administrative controls, and PPE, with PPE always the last line.
- Every worker retains stop-work authority, which the 2026 Level I outline names as its own graded task.
- A safety audit observes actual behaviour against the plan, and the finding that matters is the gap between the written procedure and what people really do.
Site-Specific Safety Plans, Job Hazard Analysis, and Safety Audits
Quick Answer: Level III task 3.2a.1 requires the technician to "develop and review a safety plan for a work site." Level IV 4.2a.1 requires specifying and evaluating testing of safety equipment, and 4.2a.2 requires performing "on-site or in-house safety audit of personnel" including investigating incidents. The 2026 Level III outline makes 3.1.1 "Develop a worksite safety plan" a domain of its own. This is where a technician stops following the safety programme and starts writing it.
1. Why site-specific
A corporate safety manual describes the company's general rules. It cannot know that this particular substation has an energized adjacent bus three feet from the work zone, that the only egress is through a single door behind the equipment, that the site is a permit-required confined space, or that the client's switching authority is off site and reachable only by radio.
A site-specific safety plan answers: what could hurt someone on this job, at this site, this week, and what specifically are we doing about each?
2. Contents of a site-specific safety plan
| Section | Content |
|---|---|
| Scope of work | What is being done, where, when, and by whom |
| Site conditions | Access, egress, adjacent energized equipment, confined spaces, elevation, environment, traffic |
| Hazard identification | Every hazard, electrical and non-electrical, from the JHA |
| Controls | The specific control for each hazard, per the hierarchy in Section 4 |
| Electrical safety | Voltage levels, available fault current, incident energy, boundaries, required PPE, energized work justification and permit if any |
| Energy control | Isolation points, LOTO procedure, grounding requirements, the switching authority |
| Roles | Person in charge, qualified persons, safety watch, first aid and CPR trained personnel |
| Emergency plan | Nearest hospital and route, emergency contacts, muster point, rescue plan for confined space and elevated work, AED and first aid locations |
| Communication | Radio channels, hand signals, check-in intervals, escalation path |
| Client interface | Site rules, escorts, permits required, notification requirements |
The emergency and rescue plan is the section most often reduced to a phone number, and the one most consequential. A confined space entry without a rescue plan is a prohibited entry, and a fall protection plan without a prompt rescue plan leaves a suspended worker exposed to suspension trauma within minutes.
3. Job hazard analysis
A JHA is a simple, disciplined method:
- Break the job into steps in the order they will be performed.
- Identify the hazards in each step — what could go wrong, and what would the harm be.
- Specify a control for each hazard, before work starts.
| Job step | Hazard | Control |
|---|---|---|
| Open switchgear door to access bus | Arc flash; energized adjacent compartment | Verify de-energized upstream; arc-rated PPE to the label; barricade adjacent live cubicle |
| Apply temporary grounds | Inadvertent re-energization; induced voltage | LOTO verified; live-dead-live; F855 cluster rated to fault duty; hot stick |
| Set up 5 kV megohmmeter | High DC voltage; charged specimen | Barricade; announce; discharge and ground after each test |
| Torque bus connections | Pinch and strike injury; over-torque | Calibrated torque wrench; correct value from manufacturer; gloves |
| Restore covers and remove grounds | Ground left in place | Ground log count; independent second-person verification |
Do the JHA with the crew, not for them. The people performing the steps identify hazards a planner will not see, and participation is what makes them own the controls.
4. The hierarchy of controls
| Rank | Control | Example on a testing job |
|---|---|---|
| 1 | Elimination | De-energize completely — remove the electrical hazard rather than manage it |
| 2 | Substitution | Use an infrared window instead of opening an energized door |
| 3 | Engineering controls | Barriers, insulating blankets, remote racking, arc-resistant switchgear, arc flash maintenance mode |
| 4 | Administrative controls | Procedures, permits, training, barricades, briefings, work scheduling |
| 5 | PPE | Arc-rated clothing, rubber gloves, face shield, hard hat |
PPE is the last line, not the first. It does not prevent the event; it limits the injury when the event occurs. A plan whose only control for a serious hazard is PPE has not been thought through. This ranking is directly examinable and candidates routinely reach for PPE as the answer.
NFPA 70E's parallel rule is that energized work is permitted only where de-energizing introduces additional or increased hazards, or is infeasible due to equipment design or operational limitations. Inconvenience, schedule pressure, and production loss are explicitly not justifications. That single sentence resolves a large family of exam scenarios.
5. Pre-job briefing
OSHA 1910.269 requires a briefing before work begins, and again when conditions change. It covers:
- Hazards associated with the job.
- Work procedures involved.
- Special precautions.
- Energy source controls.
- PPE requirements.
Good practice adds: emergency and rescue arrangements, roles including who has switching authority, the communication plan, and an explicit statement of stop-work authority.
Re-brief when anything changes — scope, personnel, conditions, weather, or equipment status. A crew briefed on Monday and working a changed scope on Thursday has not been briefed.
6. Stop-work authority
The 2026 Level I outline makes this its own task: 1.3.3, "Identify hazards and exercise stop work authority." Placing it at Level I is significant — the most junior technician on site holds it.
The principle: anyone, at any level, may stop work when they believe conditions are unsafe, without fear of reprisal, and work does not resume until the concern is resolved.
For it to be real:
- It must be stated explicitly in the briefing, not merely written in a manual.
- The response to a stop must be to investigate, not to argue.
- Someone who stops work and turns out to be mistaken must be thanked, not corrected. One dismissive response teaches an entire crew never to use it again.
7. Safety audits
Level IV's task is to audit personnel, not paperwork. The distinction matters: an audit that reviews documents measures whether the programme is written down; an audit that observes work measures whether it is being followed.
Method:
- Observe actual work in progress, unannounced where policy permits.
- Compare against the plan, the procedure, and the regulation.
- Note both unsafe conditions and unsafe behaviours — and note good practice as well, because an audit that only produces criticism gets avoided.
- Talk to the crew. Ask why a step is done the way it is. The answer often reveals that the written procedure is impractical, which is a procedure defect rather than a discipline problem.
- Report findings with specific corrective actions, owners, and dates.
- Follow up. An unclosed audit finding is worse than no audit, because it documents a known hazard that was not corrected.
What auditors consistently find:
- PPE available but not worn, or worn incorrectly, or past its inspection date.
- Rubber goods beyond their test interval.
- LOTO applied but the absence-of-voltage test skipped.
- Grounds omitted where induced voltage is possible.
- Test equipment out of calibration.
- Briefings held but not documented, or documented but not held.
- The gap between the written procedure and what people actually do — which is the most valuable finding of all, because it either means the procedure is being ignored or the procedure is unworkable, and those need different fixes.
Incident investigation (Level IV 4.2a.2) follows the same principles as failure analysis: preserve the scene, gather facts before opinions, build a timeline, find the root cause rather than the proximate act, and correct the system rather than blame the individual. An investigation that concludes "the technician was careless" has almost always stopped short of the root cause — the real questions are why the procedure allowed it, why the training did not prevent it, and why the condition existed at all.
Exam trap: A question presents a hazard and offers arc-rated PPE as the control. PPE sits at the bottom of the hierarchy of controls and does not prevent the event. Where de-energizing is feasible, elimination is the required answer, and NFPA 70E permits energized work only when de-energizing introduces additional hazards or is infeasible by design — never for schedule or production convenience.
Under NFPA 70E, which justification permits working on energized equipment?
Where does personal protective equipment rank in the hierarchy of controls?
A junior technician stops work over a safety concern that turns out to be unfounded. What is the correct supervisory response?