Lon Bartoli
How QHSE, risk management and compliance support the building of safe, high-quality, profitable and resilient operations
Resilient operations result from rigorous systems, not slogans. My QHSE, risk management and compliance experience confirms one lesson: at scale, routine—not intent—drives outcomes. Strategy sets direction, but routine delivers results. When routine relies on individual judgment rather than built-in certainty, risk accumulates and surfaces as injury, quality escapes, outages, claims or a crisis that distracts leadership when focus is most needed.
Early in my career, I saw ‘programs’ look strong on paper while field performance, cost and outcomes drifted. This gap is rarely about caring; it’s usually the result of a lack of system clarity. People want to do good work, but they need clear expectations, the right tools and feedback cycles for performance to matter. That insight drove me to build practical field frameworks such as handbooks, job aids and observational feedback tools that translate enterprise intent into what supervisors and technicians do daily. Consistent with Occam’s Razor, a resilient operation is one in which the safest path is also the easiest because the workflow is designed that way. There are four pillars that support operational resilience.
The first pillar of resilience is standardized work. This isn’t rigid bureaucracy; it establishes a shared baseline for critical tasks. Examples are pre-task planning, energy control, housekeeping, equipment readiness and safe work boundaries. With standard work, training is teachable, supervision is coachable and performance is repeatable and measurable. I’ve built these baselines through field safety handbooks and structured observations, focusing on leading indicators rather than lagging outcomes. Leaders repeatedly observe and verify key signals: Are hazards identified before work starts? Is the stop-work authority understood and used? Are critical controls like lockout or tagout, arc flash boundaries, fall protection, driving and traffic control applied consistently?
The second pillar is contractor and vendor readiness. In fast-moving energy environments, multi-site and multi-employer settings are common. Engineering, Procurement and Construction (EPC) contractors, Original Equipment Manufacturers (OEMs), service teams, site owners and subcontractors work together. In that context, the main risk is the interface between organizations. Hand-offs, permits, documentation and assumptions about ‘how we do things’ can all cause issues. My approach is to treat contractor readiness as an operational control, not a procurement checkbox. Clear vendor Quality, Health, Safety and Environment (QHSE) guidelines, defined documentation, onboarding expectations and validation mechanisms reduce variability before work starts. This is how resilience scales: reduce unknowns up front and verify execution continuously.
The third pillar is decision rights and escalation. A resilient company responds consistently under pressure. Consistency comes from clear thresholds, roles and escalation triggers for safety incidents, quality deviations, claims and operational problems. In risk management, ambiguity is costly. When teams are unsure about escalation, they delay. Delay degrades evidence, narrows options and increases risk and cost. That’s why I’ve built escalation matrices with dollar gates and triggers. They ensure issues surface at the right level, early enough to manage outcomes.
“Knowing how to experiment with Lean Construction, Agile, and Scrum confronts the complexities head-on. Wasteful practices fall off with each swing of the efficiency sword, and work transforms into predictable order.”
The fourth pillar is audit-defensible documentation and control. This isn’t paperwork for its own sake; it’s about organizational memory, decision quality and continual improvement. If you cannot show what you expected, what you trained, what you verified and how you responded, you cannot consistently improve—or defend your position to customers, insurers, lenders or regulators. I’ve invested heavily in document numbering, version control and crosswalk readiness to standards such as ISO and ESG. These systems provide speed and confidence when scrutiny arrives. The goal is simple: when asked, ‘How do you know this is controlled?’ the answer should be immediate, evidence-based and repeatable.
Finally, visualize the pillars resting on a foundation of standardized work. This foundation also represents the intersection of quality and safety, particularly within safety-sensitive infrastructure. For example, in the electrical field, torque control is not simply workmanship; it is risk control. Loose terminations cause heat, failures and hazards to users, workers, the product and the environment. Standardizing torque through SOPs, decision trees that reflect OEM data and training directly convert safety intent and compliance into verifiable workmanship. This principle also applies to commissioning documentation, labeling and configuration control. Quality disciplines often prevent downstream safety events, but should also be catching Quality at the Source before issues leave the door and transfer or pervade.
These pillars create an operating system: standardized work, contractor readiness, escalation discipline, audit-ready evidence and technical controls that eliminate reliance on heroics, luck or circumstance. Resilience means recognizing weak signals early, organizational learning, responding consistently and avoiding repeated mistakes. Compressed schedules and rising complexity in contemporary production and service render this approach vital for protecting people, customers and businesses while delivering at pace and scale.
