More incidents in offshore operations occur in the first two hours of a shift than at any other point in the working day. The reason is almost always the same: the incoming team did not have an accurate picture of what the outgoing team left behind.
Shift handover is the moment when operational knowledge transfers from one team to another. When it works well, the incoming supervisor walks onto the plant with a clear understanding of what is running, what is isolated, what is in progress, and what needs attention. When it works poorly, they are reconstructing that picture from memory, verbal summaries, and paperwork that may or may not reflect the current state of the asset.
The gap between those two outcomes is where the risk lives.
Why handover fails
The most common handover failure is not dishonesty or negligence. It is compression. An outgoing supervisor who has managed a complex shift — a breakdown, an unplanned isolation, a permit that ran over, a near-miss that needed documenting — arrives at handover with more to communicate than time allows. Something gets summarised rather than explained. An open item gets deferred to the next conversation. A permit that was verbally extended but not formally re-issued gets mentioned in passing rather than handed over with its full context.
The incoming supervisor, hearing a summary rather than a complete picture, does not know what has been omitted. They begin their shift with a level of confidence in their situational awareness that is not matched by the actual state of the plant.
This is the handover gap — and it is structural, not individual. It recurs on every shift where the handover process relies primarily on verbal communication and individual discipline rather than a documented, verified transfer of information.
What good handover looks like
Effective shift handover in offshore operations is not longer — it is better structured. The incoming supervisor should be able to verify the handover against a documented record, not just accept a verbal summary. The key elements that must transfer clearly at every handover are:
The current status of all active permits to work — what is live, what equipment is isolated under each permit, and whether any permits are approaching expiry or require action in the next shift.
Any deviations from the normal operating state — plant running outside normal parameters, equipment on bypass, alarms that have been inhibited and why.
Outstanding actions from the previous shift — maintenance deferred, inspections overdue, follow-up required from a near-miss or abnormal event.
Any changes made during the shift — modifications to operating procedures, temporary isolations applied, equipment returned to service.
Safety critical information that affects the incoming team's first actions — particularly anything that has changed in the last hour of the outgoing shift, which is statistically the period most likely to generate incomplete handover information.
If the handover process does not reliably capture all of these, the incoming supervisor is starting their shift with incomplete situational awareness — regardless of how experienced they are.
The permit to work handover problem
Of all the elements that must transfer at handover, permit to work status is the most consequential if it is missed. An incoming supervisor who does not know about an active isolation may authorise work that puts someone in contact with an energy source they believed was safe to approach. An incoming supervisor who does not know a permit has expired may allow work to continue under a lapsed authorisation.
In offshore operations, where permit to work systems may cover dozens of concurrent jobs across a complex asset, the handover of permit status cannot rely on a verbal summary. It requires a documented, current record of every active permit — what it covers, what it isolates, who holds it, and when it expires — that the incoming supervisor can verify against the physical state of the plant.
Facilities that manage this well treat the permit handover as a distinct step in the shift change process, not as part of a general briefing. The outgoing permit authority and the incoming permit authority walk the permits together — physically, where practicable — before the handover is signed off.
The role of fatigue
Offshore shift patterns — typically twelve hours on, twelve hours off, over a two or three week rotation — place significant demands on cognitive function. The end of a twelve-hour shift is not the optimal moment for a complex information transfer. Fatigue impairs recall, reduces the likelihood that omissions will be noticed, and increases the tendency to compress rather than communicate.
A handover process that depends on an individual's ability to recall and communicate accurately after a twelve-hour shift is carrying a risk that good system design should eliminate. The information that needs to transfer at handover should be in a documented system, not in the outgoing supervisor's head. The handover conversation should be a verification of that record, not the primary source of it.
What auditors look for
When regulators or major clients assess shift handover arrangements, the questions are consistent:
- Is there a documented handover record for every shift change, and is it retained?
- Can the incoming supervisor demonstrate, at the start of their shift, that they have verified the status of all active permits?
- Are there defined time limits for handover, and what happens if the outgoing supervisor is not available?
- How are abnormal conditions — deferred maintenance, inhibited alarms, temporary isolations — communicated and tracked across multiple shifts?
- If an incident occurred two hours into a shift, could you demonstrate from your records what information was transferred at handover and what the incoming supervisor knew?
If any of those questions are difficult to answer from your current records, the handover process is not providing the level of assurance the operation requires.
A practical self-assessment
These questions will give you an honest picture of where your handover arrangements stand:
- Does every shift change produce a documented handover record, or does the process rely primarily on verbal communication?
- Can an incoming supervisor verify the status of all active permits to work without consulting the outgoing supervisor?
- Are deferred maintenance items and outstanding actions tracked in a system that survives the shift change, or do they depend on individual memory and verbal transfer?
- How long does your shift handover take on average, and is that enough time to cover complex or abnormal operating conditions?
- In the last twelve months, has any incident or near-miss investigation identified incomplete handover as a contributing factor?
If the honest answer to any of these is uncertain, that is where the risk is accumulating — one shift at a time.
Elisian's platform supports shift handover as part of a connected operational assurance system — linking permit status, outstanding actions, and abnormal conditions into a single record that transfers reliably at every shift change. If you want to see how that works in practice for an offshore asset, get in touch.