What this is
What is an interim control record?
What is an interim control record?
It is the record of a temporary measure holding a risk down while a permanent fix is designed, funded, or scheduled. It states the control in place, judges whether that control is actually adequate, and carries a replacement date that forces the interim to end. Without this record an interim control has no expiry and no owner chasing it.
How does an interim control differ from a permanent fix?
An interim control is deliberately weaker and time-boxed — a sign, a procedure change, a manual check — put in place because the permanent fix takes longer than the risk can wait. The permanent fix is the engineering or elimination-level change referenced by its own CAPA ID. The interim record exists specifically so the two are never confused with each other on paper.
What does the hierarchy of controls have to do with this record?
ISO 45001's hierarchy ranks elimination and engineering controls above administrative measures and training, because higher-ranked controls don't depend on someone remembering to do something. The Control Level field scores against that hierarchy directly, so an interim built on training alone scores zero — it isn't wrong to use one, but the record should not let it pass as adequate.
Scope
When is an interim control record required?
This is a control-tracking engine, not a corrective action record and not the risk assessment itself. Using it to log the fix, rather than the stopgap holding the line until the fix lands, breaks the audit trail it's built to produce.
Use this template when
- A permanent fix has been identified but will take longer to deliver than the risk can be left unmanaged
- A temporary measure — signage, a procedural change, restricted access — needs a dated expiry and a named owner
- An auditor or inspector needs evidence that a known gap is being actively held, not ignored
- A CAPA has been raised for the permanent fix and the interim needs to reference it explicitly
- The interim's adequacy needs re-checking on a schedule, not left as an assumption from the day it was set up
Do not use it for
- Risk Assessment, which identifies and rates the risk in the first place, rather than tracking the temporary measure holding it.
- Corrective and Preventive Action, which is the permanent fix record this template links out to — don't duplicate CAPA fields here.
- Waiver and Concession Record, which formally accepts a non-conformance rather than holding a risk down while it's fixed.
- Management of Change, which assesses a planned change before it happens, not a stopgap after a gap is found.
- Anything with no replacement date in mind — if there's no permanent fix on the horizon, the record is a waiver in disguise, not an interim.
Compliance mapping
Which ISO 45001 cl.8.1 requirements does this satisfy?
ISO 45001 cl.8.1 requires operational controls to be established, implemented, and reviewed — a temporary control is only compliant with that if its adequacy, monitoring, and expiry are all recorded, not assumed.
| Clause | Requirement | Where it lands |
|---|---|---|
| ISO 45001 cl.8.1 | Operational controls must be established and their adequacy assessed, including temporary measures. | The interim control |
| ISO 45001 cl.8.1.2 | Controls are ranked against the hierarchy of controls; administrative and training measures rank below engineering and elimination. | The interim control |
| ISO 45001 cl.8.1 | Where a control depends on people rather than engineering, briefing and signage evidence should accompany it. | The interim control |
| ISO 45001 cl.8.1 | A temporary control must state what will replace it and by when, not stand as an open-ended measure. | The permanent fix |
| ISO 45001 cl.10.2 | Where the underlying risk requires corrective action, that action is tracked to a CAPA reference, not left implicit. | The permanent fix |
| ISO 45001 cl.9.1 | Controls in place are monitored to confirm they remain effective, rather than checked once at creation. | Verification |
| ISO 45001 cl.8.1 | Removal of a temporary control is confirmed and evidenced once the permanent fix is delivered. | Verification |
What it does not cover
- Control Level marked Training only, which scores zero because a briefing with no engineering backstop degrades within weeks of being delivered.
- Replacement Date left blank or in the past with no extension logged, which strips the record of the one thing that forces the interim to end.
- Extended Previously marked More than once with no escalation raised, which is the exact pattern auditors flag as an interim quietly becoming permanent.
- Monitoring Arrangement Set marked No, which means nobody would notice if the temporary measure simply stopped working between reviews.
- Adequate To Hold The Risk marked Marginal or No while Status still shows Complete, which lets an inadequate control close out as if it were fine.
Global
Interim Control Record requirements by country
Interim controls sit under general risk-management duties rather than a single named regulation, but the expectation that a stopgap has a documented expiry shows up consistently across the frameworks below.
ISO 45001:2018 cl.8.1
Certification bodies expect evidence that operational controls, including temporary ones, are assessed for adequacy and reviewed on a cycle.
An interim with no adequacy score or review date is a documented control gap at audit, even where the underlying risk was properly assessed.
Management of Health and Safety at Work Regulations 1999, reg.5
Arrangements for planning, control, monitoring and review of preventive measures must be recorded proportionate to risk.
A temporary measure with no monitoring or review point falls short of the recorded arrangements the regulation expects.
OSH Act, General Duty Clause (29 U.S.C. §654)
Employers must keep the workplace free of recognised hazards; a known hazard held only by a weak, undated interim can itself become the finding.
An interim run past its replacement date is evidence the hazard was recognised and not adequately abated.
How to complete it
How to complete an interim control record, step by step
The fields are easy to fill in. What actually decides whether this record protects the business at audit is a handful of judgement calls made when the interim is set up and re-checked.
A sign next to an unresolved hazard isn't a control, it's a record that the hazard was known. Score Adequate To Hold The Risk against what would actually happen if the interim were ignored for a shift.
One extension for a genuine parts or budget delay is normal. A second is the point to ask whether the permanent fix is being pursued, or the interim has become the cheaper default. Don't let Extended Previously silently tick up.
Sometimes, briefly — but never as equivalent to an engineering control. If the interim depends entirely on human behaviour, tighten monitoring and shorten the replacement window to compensate.
A missed replacement date with no credible new date is a stalled permanent fix, not an extension request. Route it to the CAPA owner as an escalation rather than letting it sit in Overdue until the next audit finds it.
What auditors find
Most common interim control record findings
The failure modes below are the ones that actually get raised — most trace back to the replacement date being treated as a formality rather than a deadline.
| Finding | Clause | What fixes it |
|---|---|---|
| Interim has run for over a year with no extension logged and no CAPA reference against the permanent fix. | ISO 45001 cl.8.1 | Require Permanent Fix CAPA ID before Status can move past Planned. |
| Control Level recorded as Training only with no monitoring arrangement and no re-briefing schedule. | ISO 45001 cl.8.1.2 | Mandate a shorter review interval on any interim scoring below Administrative. |
| Times Extended shows three or more extensions with Reason For Delay unchanged each time. | ISO 45001 cl.10.2 | Auto-flag interims past two extensions for review by the CAPA owner, not the action owner alone. |
| Signage Or Marking In Place left blank on a control that depends on people noticing a hazard. | ISO 45001 cl.8.1 | Make Signage Or Marking In Place required whenever Depends On Human Behaviour is Partly or Entirely. |
| Interim Control Removed marked Still needed while Permanent Fix Delivered is marked Yes. | ISO 45001 cl.8.1 | Block closure until Interim Control Removed and Permanent Fix Delivered agree with each other. |
| No source record reference, so the interim can't be traced to the risk or incident that raised it. | ISO 45001 cl.8.1 | Enforce Source Record ID as a hard requirement at creation. |
Case in point
Case in point: the sign that outlived three replacement dates
A guarding gap on a conveyor was picked up during a routine walk. The permanent fix — a redesigned guard from the equipment vendor — was quoted at eleven weeks. In the meantime the site put up barrier tape and a warning sign, briefed the shift, and logged it as an interim with a six-week replacement date.
The vendor part slipped twice. Each time the site extended the record rather than escalating, and by month five the tape was worn and nobody on the newer shift had been briefed on why it was there. The audit finding wasn't the guarding gap — it was a control scored Administrative running three times its replacement window with no re-briefing or monitoring check in between.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
4 sections
- Reference
- FDN-032
- Archetype
- Engine
- Record ID
- INT-2026-000
- Scoring
- Overdue interims
- Direction
- Low is good
- Singleton
- Yes
- Basis
- ISO 45001 cl.8.1
- Links
- Links CAPA, Risk register
- Tags
- Engine, Control
- Sections
- 4
- Fields
- 36
- Follow up fields
- 3
- Repeating sections
- 0
- Links out
- 2
Header
10 fieldsInterim ID*
Auto sequence. Format INT-2026-000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Date and Time*
Completed By*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Temporary Means A Date
Interim controls that quietly become permanent are one of the most common audit findings. Every one of these carries a replacement date and gets chased.
Risk Being Held*
Source Record ID*
Immediate predecessor record
Owner*
The interim control
7 fieldsInterim Control Description*
Control Level*
- Eliminated4 pts
- Engineering3 pts
- Aid provided3 pts
- Administrative1 pt
- Training only0 pts
Adequate To Hold The Risk*
- Yes3 pts
- Marginal1 pt
- No0 pts
Depends On Human Behaviour*
Most interim controls are a sign or a briefing, and both degrade within weeks.
- No3 pts
- Partly1 pt
- Entirely0 pts
People Briefed*
- Yes3 pts
- Partly1 pt
- No0 pts
Signage Or Marking In Place
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Monitoring Arrangement Set*
- Yes3 pts
- No0 pts
The permanent fix
6 fieldsPermanent Solution Defined*
- Yes3 pts
- Partly1 pt
- No0 pts
Permanent Fix CAPA ID
The action that will remove the need for this interim control.
Links to FDN-014 CAPA ID
Reason For Delay*
Replacement Date*
Extended Previously*
- No3 pts
- Once1 pt
- More than once0 pts
Times Extended
Verification
13 fieldsInterim Control Still In Place
- Yes3 pts
- Partly1 pt
- No0 pts
Still Effective
- Yes3 pts
- Partly1 pt
- No0 pts
Permanent Fix Delivered*
- Yes3 pts
- Scheduled1 pt
- No0 pts
Interim Control Removed
- Yes3 pts
- Still needed2 pts
- No0 pts
Days Held As Interim
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Owner*
Signature*
Safety Lead*
Second Signature*
FDN-032 · record IDs look like INT-2026-000 · Links CAPA, Risk register
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The record itself is straightforward. Chasing every open interim against its replacement date, and catching the ones quietly sliding into a second or third extension, is the part that needs a working memory the form alone doesn't have.
Tracks every open interim against its replacement date, flags repeated extensions automatically, and routes overdue ones to the CAPA owner.
Watches the permanent fix side — parts, budget, shutdown-dependent delays — and surfaces when maintenance could unblock a stalled interim.
Pulls interim control patterns into audit prep, so a surveillance visit finds interims already reviewed, not discovered.
Holds the interim control library against the risk register and CAPA queue, and asks before it touches a live record.
This template lives in General — control tower. The orchestration layer. Registries and engines every other workspace reads from.
Meet General→Glossary
Interim Control Record definitions and key terms
- Interim control
- A temporary measure put in place to hold a known risk down while a permanent fix is designed, funded, or scheduled.
- Hierarchy of controls
- The ranked order of control types — elimination, engineering, administrative, training — used to judge how robust a given control actually is.
- Permanent fix
- The engineering or elimination-level change that removes the need for the interim control, tracked through its own CAPA record.
- Replacement date
- The date by which the interim control must be replaced by the permanent fix or formally extended with a stated reason.
- Adequacy
- A judgement of whether a control, temporary or permanent, actually reduces the risk it's meant to address, as distinct from whether it exists.
FAQ
Frequently asked questions about interim control record
Can an interim control ever be upgraded to a permanent solution without a separate CAPA?+
No — the design keeps them separate. If a temporary measure is going to become permanent, that decision goes through the CAPA record so it's assessed and approved, not inherited by default because the interim was never replaced.
What happens if the permanent fix is delayed indefinitely?+
Repeated extensions and an overdue replacement date should trigger escalation to the CAPA owner, and often a more urgent interim measure if the current one is judged inadequate for an extended run.
Does every risk need an interim control record?+
No — only where a permanent fix has been identified but can't be delivered immediately. If the fix can be actioned straight away, there's no gap for an interim to hold.
Who signs off on closing an interim control record?+
The action owner confirms removal and the safety lead countersigns, mirroring the second signature most safety-critical closures require.
Is a training-only interim ever acceptable?+
It can be the only realistic short-term option, but never scored as equivalent to an engineering control. Expect tighter monitoring and a shorter replacement window in return.
How is this different from a waiver or concession record?+
A waiver formally accepts a non-conformance, often indefinitely. An interim control holds a risk while actively working toward eliminating the gap — a bridge, not an acceptance.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Master Data and Foundations
Site and Location Register
Holds every site, building, area and zone your organisation operates
Asset Register
Holds every piece of equipment, machine, vehicle and tool you track
Worker Profile
Holds a record for each worker, including role, department, site and start date
Job and Task Register
Lists the jobs and tasks people perform, so risk assessments and ergonomic assessments can be tied to real work rather than job titles
Vendor and Contractor Register
Holds every supplier, contractor and service provider you work with, including their status and approval level
Chemical and Substance Register
Lists every chemical and hazardous substance held on site, with quantity, location and hazard class
More in Engines
Risk Assessment
The single risk assessment used across the whole business
Root Cause Analysis
Finds out why something happened rather than who was involved
Corrective and Preventive Action
The single action record used everywhere
Finding
Records a single deficiency picked up during an audit, inspection or check
Effectiveness Verification
Checks whether an action actually worked, some time after it was put in place
Just Culture Determination
Separates a system problem from a genuine choice to take a risk, using a consistent set of questions
Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- ISO 45001:2018, Clause 8.1 — Operational planning and control
- ISO 45001:2018, Clause 9.1 — Monitoring, measurement, analysis and performance evaluation
- ISO 45001:2018, Clause 10.2 — Incident, nonconformity and corrective action
- Management of Health and Safety at Work Regulations 1999, Regulation 5
- Occupational Safety and Health Act, General Duty Clause, 29 U.S.C. §654
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.