By the end of this lesson, you will be able to:
- Objective 1 (Cognitive/Understanding): Explain the structure of a Job Safety Analysis (JSA) and why generic, high-level statements fail to protect field personnel.
- Objective 2 (Diagnostic/Analytical): Calculate a basic operational risk score by analyzing a task's Severity and Probability parameters.
- Objective 3 (Field/Practical): Break down a complex industrial machinery repair into discrete, sequential steps, mapping distinct hazards and specific engineering or administrative controls to each step.
📋
Prerequisites: TECH-1.1 (Safety as an Engineering Discipline) and TECH-1.2 (LOTO Mechanics) should be completed before this lesson. The JSA process builds directly on energy isolation principles introduced in those modules.
💡 The 2:00 AM Reality Check
You are sent to replace a cracked drive sprocket on a heavy conveyor system. The customer is frantic because their shipping dock is paralyzed. You pull out your daily JSA card, rapidly write "Step 1: Fix conveyor. Hazard: Getting hurt. Control: Be careful and wear gloves." You sign it, shove it in your pocket, and climb up onto the frame.
As you break the chain link, the high-tension chain snaps back under residual tension, striking your hand and fracturing two fingers. Your JSA didn't protect you because it wasn't an analysis — it was a compliance formality. You didn't identify the specific stored mechanical energy hazard of a tensioned chain, so you didn't implement the control (using a chain puller to safely relieve tension before breaking the link).
⚠️
The lesson: Customer pressure creates urgency. Urgency creates shortcuts. Shortcuts bypass the pre-task mental walkthrough that a properly constructed JSA forces you to do. The JSA is your protection against your own rushed instincts.
A Job Safety Analysis (JSA) — sometimes called a Job Hazard Analysis (JHA) — is an active field engineering tool used to identify and mitigate hazards before a specific maintenance task begins.
A JSA is not a passive HR form; it is a systematic pre-task layout. It forces your brain to walk through the physical job in order, identifying where the traps are before your hands are inside the machine.
The Risk Assessment Equation
To evaluate the severity of a field hazard, safety engineers use a quantified risk matrix. Risk is calculated as:
Risk Score Formula
$$\text{Risk Score} = \text{Severity } (S) \times \text{Probability } (P)$$
Severity (S) — The potential consequence of an incident: ranked 1 (minor scratch) to 5 (fatality).
Probability (P) — The likelihood the incident will occur: ranked 1 (highly improbable) to 5 (virtually certain).
Your primary job during a JSA is to apply controls that drive the final Risk Score down to a safe, acceptable operating range before initiating work. A Risk Score of 16 (like 4×4) sits deep in the Red Zone — work cannot begin until controls bring it down.
The 5×5 Risk Assessment Matrix plots Severity (vertical axis) against Probability (horizontal axis). The intersection cell shows the Risk Score. Color indicates the acceptable operating zone.
VA-1-4-01 — Risk Assessment Matrix (S × P)
Severity (S) →
S \ P
S=5
Fatality
5
10
15
20
25
S=4
Major
4
8
12
16
20
S=3
Moderate
3
6
9
12
15
S=2
Minor
2
4
6
8
10
S=1
Negligible
1
2
3
4
5
Probability (P) →
Green (1–4): Acceptable — Proceed with standard controls
Yellow (5–9): Moderate — Add controls before starting
Red (10–25): Unacceptable — Do not start; escalate
Risk Score = S × P. Your goal is to implement controls that move the post-control score into the Green or Yellow zone before work begins.
A proper JSA functions by breaking down a job into three core pillars:
- Sequence of Steps: Break the job into distinct, chronological phases. Avoid being too broad ("Fix pump") or too granular ("Turn wrench counter-clockwise"). Aim for logical task boundaries — phases where your tool, body position, or energy state changes.
- Identified Hazards: For each step, look for specific energy vectors, environmental traps, or physical hazards introduced by the task. Name the hazard precisely: not "electricity" but "accidental energization of 480V motor starter while hands are inside the terminal box."
- Actionable Controls: For each hazard, define a concrete, measurable action based on the Hierarchy of Controls. "Be careful" is not a control. "Install personal LOTO lock #7 on MCC disconnect breaker #4 and verify dead with calibrated DMM" is a control.
✅
The mental model: Think of your JSA like a mental walk-through of the machine before you touch it. You are narrating every trap the machine has set for you — and then pre-answering each one. The analysis stage is where you get hurt on paper instead of in the field.
Technicians must watch for these common categories of field hazards during their JSA walkthrough:
| Hazard Category |
Specific Field Examples |
Target Control Mechanisms |
| Line of Fire |
Standing behind a hydraulic cylinder under pressure; working beneath a crane-suspended load. |
Modify body positioning; clear the drop zone; establish a barrier tape exclusion line. |
| Pinch Points |
Gearing meshes; belt/sheave interfaces; sliding access guard channels. |
Keep physical machine guards bolted in place during operation; use mechanical extension tools to maintain standoff distance. |
| Stored Energy |
Wound compression springs; hydraulic accumulator bladders; high-tension conveyor chains. |
Execute a full Zero Energy State Verification (ZEV) routine per TECH-1.2 LOTO protocol before breaking any fasteners. |
| Environmental |
Poor overhead lighting in equipment vaults; slick oil patches on walking surfaces; freezing ambient temperatures degrading grip strength. |
Set up auxiliary LED work lights; apply commercial absorbent material to all oil patches in the work zone; use insulated liner gloves beneath work gloves. |
🔧
Related tools for this step: Gas Detectors (atmospheric hazard detection) and Infrared Thermometers (residual thermal energy in components). Both can reveal hidden hazard conditions not visible to the naked eye.
A highly effective JSA process on a LEO job site looks like this:
- The JSA form describes the exact machine asset ID and documents current site conditions (date, time, ambient temperature, lighting status, surrounding contractor activity).
- The steps are written sequentially, matching the mechanical teardown or procedure manual for that specific asset.
- Controls are explicitly actionable — for example: "Apply personal LOTO lock to disconnect breaker #4 at the MCC panel" instead of "Use standard safety rules."
- Every team member performing the work physically signs the JSA before tools come out of the truck.
🚫
"Pencil Whipping": Filling out the JSA card uniformly every day by copying from a previous card without actually inspecting the machine footprint or accounting for changing environmental variables (outdoor rain, nearby contractor activity, shift changes).
🚫
Vague Language: Using lazy phrases like "Be careful," "Watch out," or "Use caution." Caution is an emotion, not an engineering control. Controls must be physical, verifiable actions that another technician can confirm were completed.
🚫
Failing to Re-Assess: Sticking strictly to the initial JSA plan when the scope of work shifts mid-job. A simple bolt extraction that turns into an emergency oxy-fuel torch-cutting operation is a completely different risk profile — stop, re-JSA, then proceed.
❌
The Myth: "The JSA is just to cover the company's liability if I get hurt."
✅
The Reality: The JSA is designed to keep you from getting hurt in the first place. It forces you to pause for 5 minutes and visually audit the machine when your mind might otherwise be rushed or distracted by production pressure. It is a tool built explicitly for the field technician's physical preservation — not the company's legal defense.
A JSA completed at 2:00 AM for a panicked customer is when the tool matters most. High-pressure situations are precisely the conditions that cause experienced technicians to skip the mental steps they normally do automatically. The JSA makes that audit mandatory regardless of external pressure.
Task Checklist: Constructing an Effective Field JSA
When arriving at an asset, structure your JSA entries exactly like this example for removing an electric motor:
STEP 1
Isolate power to the motor assembly.
Hazard
Accidental machine energization causing high-voltage electrocution.
Control
Apply personal padlock to MCC breaker panel disconnect; execute Live-Dead-Live verification check with calibrated DMM before touching any conductors.
STEP 2
Unbolt motor from baseframe mount.
Hazard
Sharp rusted threads causing hand lacerations; heavy motor casing shifting and pinching fingers during unbolting.
Control
Wear Level-A4 cut-resistant gloves; place wooden blocking beneath the motor housing before loosening any fasteners to prevent uncontrolled shift.
STEP 3
Lift motor away from baseframe.
Hazard
Spinal strain and acute injury from manually lifting a compact 90 lb mass in an awkward, restricted access position.
Control
Do not attempt manual lift. Position a portable gantry crane directly overhead and utilize a rated nylon lifting sling certified for the motor's weight class.
⚠️ Safety Operational Boundary
A JSA is a living document. If you are executing a task and discover an unexpected hazard — uncovering hidden chemical piping, a severely corroded structural support member, or an unmarked pressurized line — you must:
- Stop Work immediately. Lay your tools down.
- Secure the area. Prevent any other personnel from entering the work zone.
- Pull out your JSA card and update the steps and controls with your team before touching the machine again.
An unchanged JSA in a changed environment is not a valid JSA. Proceeding without re-assessment is the same as having no JSA at all.
Stop the task completely and contact a Lead Technician or LEO Operations Manager if:
- The calculated pre-control Risk Score lands in the Red Zone (≥10) on the matrix and your available tools cannot safely drive the post-control score into the green zone — for example, a confined space entry scenario with unknown atmospheric conditions and no supplied-air equipment on site.
- The client's operational environment changes rapidly around you — a gas alarm triggers elsewhere in the plant, uncoordinated cranes begin moving overhead, or weather conditions (lightning, high wind) enter the work zone.
🛑
Remember: You always have the right to stop work without penalty. A stopped job is recoverable. An injury may not be.
- Risk Assessment Matrix Cards: Pocket-sized laminated reference guides for rapid field risk scoring — clip to your toolbag zipper for immediate access.
- Gas Detectors: Used to identify atmospheric hazard conditions (confined space or chemical leak scenarios) that must be added to the JSA before entry.
- Infrared Thermometers: Used to detect residual thermal energy in components (e.g., a recently-run motor) — a hidden hazard that would not appear in a standard visual inspection.
🏭
Applies universally. The JSA process applies across all industrial asset types — conveyor systems, pump assemblies, hydraulic power units, electrical distribution panels, pneumatic actuators, and all rotating machinery. Any task that modifies, inspects, or services an industrial asset requires a pre-task JSA.
- TECH-1.1: Safety as an Engineering Discipline — the Hierarchy of Controls framework that governs which control type to select for each hazard identified in your JSA.
- TECH-1.2: Lock-Out/Tag-Out (LOTO) Mechanics: Energy Isolation Types — the specific execution protocol for the stored-energy controls that frequently appear in a JSA.
- TECH-1.3: Personal Protective Equipment (PPE) Selection — the last-resort control tier, and how to correctly specify PPE in a JSA control column.
- TECH-10.2: Permit to Work Systems — the formal permitting layer that sits above the JSA for high-risk operations (confined space entry, hot work).
IE-1-4-01
Interactive JSA Sandbox Builder
A split-screen layout displays an industrial pump rebuild scene on one side and an empty JSA table template on the other. Sequence the maintenance steps correctly and assign the appropriate specific hazard and control to each step to pass the module. Inadequate controls (e.g., "Be careful") are flagged in red with corrective guidance. You must select the engineering or isolation control to advance.
🛠 Interactive Module — Coming Soon
💡
Activity goal: When you pair a step like "Disconnecting fluid flanges" with an administrative control like "Be careful not to spill fluid," the interface highlights the block red: "Inadequate Control. Fluid lines may retain residual pressure. Choose an engineering or isolation control instead." You advance only by selecting "Close and lock upstream fluid supply block valve."
- Regulatory Reference: OSHA 3071 — Job Hazard Analysis Publication Guide. U.S. Department of Labor, Occupational Safety and Health Administration.
- Technical Standard: ANSI/ASSP Z590.3 — Prevention through Design: Guidelines for Addressing Occupational Hazards and Risks in the Design and Redesign of Work Tasks, Processes, Equipment, and Facilities.
⚠ SME Validation Required — Review Urgency: YELLOW
SME Validation Required For: Field risk scoring parameters and matrix boundary definitions outlined in Section 3 (Risk Assessment Equation) and Section 4 (Risk Assessment Matrix). Specifically, the boundary thresholds between Green/Yellow/Red zones should be verified against LEO's internal safety standards before this lesson goes live.
LEO Approver: Pending SME Sign-off / Assigned to EH&S Manager
Status: Draft v1.0.0 — Do not distribute to field technicians until SME sign-off is confirmed.
📋
Safety content constraint: A qualified professional should conduct a final review of module content mapping and reference sources before committing to the live platform to preserve safety-critical compliance boundaries.
✅ Lesson 1.4 Complete
You can now construct a field JSA, calculate a Risk Score, and identify specific energy hazards and actionable controls for industrial maintenance tasks.