Energy-Based Safety and HOP: how they fit together

The question we hear most from safety leaders is some version of “we already run HOP, so where does Energy-Based Safety fit?” It is a fair question. Nobody wants a third framework stapled on top of two that took years to embed.

The short answer is that EBS is not a competing philosophy. It is the piece that makes HOP and critical risk programmes concrete at the task. Here is how we explain it in the room.

What HOP settles

Human and Organisational Performance starts from a simple position: people make mistakes, and that is normal. Blame fixes nothing. The system around the person has to absorb error, so the question after an event is not “who slipped” but “what would have had to be true for that slip to be harmless”.

Most organisations running HOP have done the hard cultural work. Leaders respond to error with curiosity. Learning teams run after events. Workers are more willing to report. That is real progress, and we would never suggest unwinding it.

What HOP does not do on its own is tell a leading hand, standing in front of a task on a Tuesday morning, which hazards matter most and whether the control in place is good enough. The principle is sound. The field test is missing.

What EBS adds

Energy-Based Safety starts from a different fact: an injury is an unwanted release of energy. Gravity, motion, mechanical, electrical, pressure, temperature, chemical, biological, radiation and sound. Those ten sources sit on the Energy Wheel, and a crew walks the task against the wheel rather than relying on who has been on site longest.

Then it draws a line. Dr Matthew Hallowell’s research puts the high-energy threshold at about 1,500 joules. Above that, contact is likely to kill or cause life-altering injury. A person at height, a suspended load, a vehicle moving near workers, a live conductor, an unsupported trench. Those are the hazards that need a different class of control.

That control is a Direct Control. It has to be a real energy control first: timely, tangible and targeted at the specific high-energy source. Then it has to pass two more tests.

1. It works when installed, verified and used properly.
2. It is effective even with unintentional human error during the work.

Read that second test again. “Effective even with unintentional human error” is HOP, written as a test.

EBS does not argue with HOP. It takes HOP’s central claim and turns it into a yes-or-no question a supervisor can ask about a specific guardrail, isolation or exclusion zone.

Where critical risk programmes come in

Critical risk management and life-saving rules do a related job from the other direction. They name the handful of risks that can kill and list the controls that must be in place. Most organisations with a mature programme have a register, a set of verification checklists and a cadence of audits.

Two gaps show up in practice. The first is recognition. The register names the risks, but a crew on an unfamiliar task still has to notice that one of them is present. The Energy Wheel gives them a method for that, so recognition stops depending on experience alone.

The second gap is control quality. A register can say “fall protection in place” and the checklist can be ticked, while the actual control on the day is a sign and a toolbox talk. The Direct Control test catches that. Training, procedures, signage and general PPE support safety, but they are not energy controls at all, let alone Direct Controls. They should never be recorded as if they were.

HECA ties it together

The High Energy Control Assessment is where the three programmes meet. One crew, one task. List every high-energy hazard present. For each one, record whether a Direct Control is in place. A hazard with a Direct Control is a success. A hazard without one is an exposure, even though nothing has happened yet.

The HECA score is the percentage of high-energy hazards with a Direct Control.

65 to 75%In Hallowell’s research, even at industry-leading companies only 65 to 75 percent of high-energy hazards had one. That number is the point.

It measures the state of controls on live work before an incident, which is exactly what a critical risk programme wants to know and exactly what HOP says should be the focus.

HECA also feeds learning the HOP way. An exposure is not a disciplinary finding. It is a conversation about what the system would need to look like for that task to be safe when someone makes a mistake.

What changes for your programme

Nothing in your existing programme gets thrown away.

The cultural work you have already done is what makes EBS land. Crews who are used to being asked “what would make this safe if you got it wrong” take to the Direct Control test fast. That is not a coincidence. It is the same question.

The VR workshops cover the Energy Wheel, the high-energy threshold and the Direct Control test, with crews practising on a working site.