Y2.05.2Risks of prolonged alarm shelvingdesign

Shelving a disruptive alarm for good leaves its underlying risk exactly where it was

Aliases: risks of prolonged alarm shelving · alarm shelving · nuisance alarm

What it is

Prolonged shelving is a manual action — an operator or engineer removes a known, frequently disruptive alarm from the active view while its trigger condition and the underlying equipment risk remain exactly as before. This is meant to be a temporary, bounded relief, unlike the first leaf in this group, where suppression is automatic and tied to equipment state. Here the question is what happens after a person manually turns an alarm off: without an expiry, an owner, and a repair plan, a temporary fix quietly converts a visible nuisance alarm into an invisible, standing risk.

Why it happens

Shelving genuinely reduces the operator's immediate load, but at the cost of removing the one cue that would otherwise flag a future change in that object. Over time the shelved item drops out of the operator's mental model entirely, and whoever takes over the next shift or the next quarter often has no idea why it was shelved or whether the reason still holds. A more hidden problem is that shelving is easy to renew repeatedly, gradually substituting for the root-cause repair that should have happened instead — renewal is simply less work than real troubleshooting, and that trade-off is invisible at the moment the renewal is approved.

Where it stops holding

"Longer shelved means more dangerous" is not a mechanical rule to apply on its own — shelving a well-understood condition during a maintenance window can be entirely reasonable, especially when independent protection still covers the underlying risk. What actually determines danger is the state of remaining safeguards, the current operating mode, and whether the conditions under which shelving was first approved still hold; duration by itself is only a cue to review, not proof of risk.

Applying it

Require every shelving request to state its rationale, a risk assessment, what compensating monitoring will be used while shelved, an owner, and an automatic expiry date; continuing past expiry requires fresh authorization rather than a silent renewal. Keep the current count of shelved alarms and the highest-risk items visible at every shift handover, and periodically spot-check whether field conditions still match the assumptions made when shelving was approved — restoring the alarm immediately if they no longer do.

Related

  • Same group: Y2.05.1 State-based alarm suppression · Y2.05.3 Visible and reviewable alarm suppression
  • Nearby: Y2.09 Alarm fatigue and false-alarm cost · Y2.08 Alarm-system performance metrics
  • Search terms: alarm shelving · nuisance alarm · bad actor alarm

Cards in the same group

Quick Actions

Share

Share this page

ios_share

https://hci.top/en/handbook/Y2.05.2