Shift handover: how to hand over safely to the next crew

A shift handover is the moment when the outgoing crew passes the state of the plant, the work in progress and the open risks to the crew taking over. In a plant that runs shifts it is one of the most vulnerable moments of the day: whatever does not get across at the change simply does not exist for the next crew. A structured handover, spoken and written and ending in an explicit takeover, reduces the chance that an open permit, a half-finished start-up or an emerging fault falls between two shifts.

Why shift handover is a high-risk moment

The crew changes, but the plant keeps running. The incoming crew can see the current process values, but knows the history only through what the outgoing crew says and writes down, and that is where things regularly go wrong. According to the UK Health and Safety Executive's guidance on shift handover, many accidents have occurred because of failed communication at handover, and most of them involved planned maintenance work.

Two investigated disasters show how this plays out:

• Piper Alpha, 1988. The disaster on this North Sea production platform killed 167 people. The official inquiry, the Cullen Report, named the failure of information transmission at shift handover as one of the many factors that contributed.
• Texas City, 2005. An explosion at a refinery during the start-up of a process unit killed 15 people and injured 180. According to the final report of the US Chemical Safety Board, critical information about the start-up was poorly communicated at shift turnover, and the company had no requirement for how turnover should be done. From a brief logbook entry, the day board operator concluded that only the column had been filled, while heat exchangers and piping were full as well. A face-to-face conversation between the operator who began the start-up and the operator who finished it never took place.

A handover is therefore not a formality but a safety barrier: the moment you check whether the incoming crew's picture matches reality.

Checklist: what a good shift handover covers

A handover should meet the information needs of the incoming crew, not the memory of the outgoing one, and HSE advises basing it on exactly that: what does the incoming crew need to know? The table is a checklist you can use as a template, filled in here for the handover from the afternoon shift to the night shift at 22:00.

Two agreements make the difference. Every open item has an owner and a next step. And whatever was closed during the past shift stays visible for one handover, so the night crew can see that P-3 has been resolved and does not have to guess. Take any work the maintenance team has scheduled for the coming shift from the maintenance schedule; see maintenance planning and scheduling.

A good shift handover in five steps

HSE describes effective handover in three parts: preparation by the outgoing crew, the handover itself, and cross-checking by the incoming crew as they take on responsibility. Worked out as steps:

1. 1Prepare. The outgoing crew updates the logbook before the end of the shift, not during the handover. Open items get an owner and a next step.
2. 2Hand over face to face at a fixed time. Build overlap into the roster, a quarter of an hour in the example below, and hand over role by role: shift supervisor to shift supervisor, operator to operator.
3. 3Spoken and written. The logbook is the basis, the conversation is the check. Discuss critical items at the screen or at the plant itself.
4. 4Ask and read back. The incoming crew asks questions and repeats the critical items in their own words. That shows straight away whether the picture is right.
5. 5Take over explicitly. The incoming crew confirms the takeover, preferably on record. Until then, the outgoing crew remains responsible.

The diagram below follows three open items through 24 hours with three shifts (06:00–14:00, 14:00–22:00 and 22:00–06:00), with a 15-minute overlap at each change.

Pump P-3 is resolved after one handover, but permit 112 is handed over twice before the work is signed off at 02:15, and notification MR-0042 is still open at 06:00. Items that pass through several crews run the greatest risk of losing information along the way, so record for each item who took it over last.

Extra care at start-up, shutdown and upsets

Not every handover carries the same weight. HSE recommends identifying higher-risk handovers, and Texas City shows why: things went wrong during a start-up that ran across the shift change. Give extra attention to:

• Start-up and shutdown. Record step by step what has been done and what is still to do, preferably in the procedure itself. Think of firing up an incineration line in a waste-to-energy plant after a shutdown, or restarting a gas turbine after a trip.
• Faults and abnormal operation. A temporary setting, a bypassed alarm or a valve in manual belongs explicitly in the handover, with the reason and the moment it must be restored.
• Fatigue. At the end of a night shift or a long run of shifts, attention can slip just when the handover needs to be sharp. At Texas City, according to the CSB, the operators were likely fatigued after working 12-hour shifts for 29 or more consecutive days.
• Returning after days off. Someone coming back after a few days off has missed more than one shift. Read back over those days too, not just the last handover.

For these handovers, take more time, hand over at the plant and let the people who did the work talk to each other in person.

Handing over maintenance work in progress

Handover failures often involve maintenance work, and that applies to more than the operating crew. Maintenance teams hand over work too: a job that runs on into the next day, an on-call technician taking over from the day team, a contractor working through the night. HSE advises planning maintenance so that it is finished within one shift where possible. Where that is not possible, cover:

• The state of the work. Record what has been done, what is still to do, which parts have been ordered or reserved and which steps deviate from the work instruction.
• Permits, isolations and locks. State which permits are open, which isolations are in place and who holds the locks. Agree how the lockout is passed on, for example by having the incoming technician fit their own lock before the outgoing technician removes theirs. How permits, LOTO and LMRA fit together is explained in safe maintenance: LMRA, LOTO and permit to work.
• Temporary situations. An open manhole, a temporary hose or a removed guard belongs in the handover and must be clearly marked on site.
• The on-call service. Whoever takes over for the evening or the weekend needs to know which faults are open, which temporary fixes are in place and who can be reached.

A logbook that carries the handover

The logbook is the crew's memory and the basis of every handover. A good logbook:

• is organised by system or unit, with fixed headings, so you know where to find things and can see what is missing;
• includes tasks per shift that you tick off, such as rounds, samples and checks;
• carries open items forward to the next shift until they are closed, instead of retyping them every shift;
• records the time and author of each entry, with a photo where that helps;
• makes looking back easy, for anyone returning after days off or looking for a pattern.

A study cited in the CSB report shows what happens without that structure: at one refinery the information handed over was not always complete, and the logbooks were lined notebooks with no guidance on what to write in them. Fixed headings stop each writer from deciding for themselves what to record. What such a logbook looks like digitally, with tasks per shift and an explicit takeover, is shown under digital shift handover.

The logbook is not a work order system. If something needs doing on an installation, the crew raises a maintenance notification for the maintenance team, which turns it into a work order; the logbook tracks the notification until it has been picked up. That fits with TPM, in which operators spot and report deviations early. If the same entries keep coming back, such as a pump that vibrates every week, that is a reason for a failure analysis.

Common shift handover mistakes

• "All OK." A handover without content says nothing about what is different. Write down what you see, with tags, values and times.
• Spoken only, or written only. A conversation without a note is forgotten after two shifts; a note without a conversation gets misread, as at Texas City.
• Information via chat, email or scraps of paper. Whatever bypasses the logbook does not always reach the next crew and cannot be traced afterwards.
• Handing over in a rush. A handover in the middle of an upset, or with a coat already on, ends up short and incomplete. Wait until the situation is stable, with the outgoing crew still present.
• Open items without an owner. An item that "someone" needs to pick up drifts from shift to shift.
• Leaving early or arriving late. At Texas City, an operator on the night shift left about an hour before the end of the shift, and the experienced day supervisor arrived more than an hour late and held no handover with anyone from the night shift. If someone is absent, arrange a stand-in who does hand over.