BCSP ASP cheat sheet

Hierarchy of controls, most to least effective: elimination, substitution, engineering controls, administrative controls, personal protective equipment.

Heinrich's ratio for a typical workplace is 1 major injury : 29 minor injuries : 300 no-injury incidents, implying near misses outnumber serious outcomes.

Reason's Swiss cheese model holds that an accident occurs when holes in multiple defensive layers align; holes arise from active failures and latent conditions.

Leading indicators measure preventive activity (inspections completed, training hours, near-miss reports); lagging indicators measure outcomes already realized (TRIR, DART, fatalities).

TRIR = (number of recordable cases x 200,000) / total hours worked; the 200,000 constant represents 100 employees working 40 hours for 50 weeks.

DART rate = (cases with days away, restricted work, or transfer x 200,000) / total hours worked.

Risk homeostasis theory: individuals adjust behavior toward a target level of perceived risk, so a single engineered safeguard may be partially offset by changed behavior.

Safety culture maturity progresses pathological, reactive, calculative, proactive, generative; generative cultures treat information and failure reporting as primary value.

Normalization of deviance: repeated tolerance of small out-of-specification conditions gradually redefines the accepted norm until margin is exhausted.

ISO 45001 is organized in clauses 4 context, 5 leadership and worker participation, 6 planning, 7 support, 8 operation, 9 performance evaluation, 10 improvement.

ANSI/ASSP Z10 is the US consensus OHSMS standard; ISO 45001 is the international certifiable standard that superseded OHSAS 18001.

Both systems run on PDCA: Plan (objectives, hazard identification, legal requirements), Do (operational control, training), Check (monitoring, audit), Act (management review, corrective action).

Top management must demonstrate leadership, ensure resources, assign OHS roles and responsibilities, and participate in management review.

Management review inputs include audit results, incident and nonconformity data, compliance evaluation, objective status, and stakeholder input; outputs include resource and improvement decisions.

Documented information must be controlled for version, availability, legibility, and protection from loss or unintended alteration.

Contractor control requires OHS criteria in selection, communicated requirements, and monitoring of contractor performance on site.

OSHA's Voluntary Protection Programs (Star, Merit, Demonstration) recognize sites with injury and illness rates below the industry average and a functioning safety management system.

A management system audit verifies conformance to the system standard or procedure; a worksite inspection identifies uncontrolled hazards, and the two serve different purposes.

Risk is the combination of the likelihood of occurrence and the severity of harm; the hazard is the source or situation with potential to cause harm.

ISO 31000 process: establish context, identify risk, analyze risk, evaluate risk, treat risk, then monitor/review and communicate/consult throughout.

ALARP (as low as reasonably practicable): risk must be reduced until further reduction is grossly disproportionate to cost, time, or difficulty.

Risk treatment follows the hierarchy of controls; residual risk remaining after treatment must be documented and judged acceptable against pre-set criteria.

A risk matrix multiplies likelihood by severity; acceptance criteria and action bands must be defined before scoring to avoid justifying a desired result.

FMEA ranks failure modes by severity x occurrence x detection = risk priority number; highest RPN items are addressed first.

HAZOP applies guide words (no, more, less, reverse, part of, other than) to process parameters to find deviations from design intent.

LOPA tests whether independent protection layers reduce a scenario frequency to a tolerable level; each layer must be independent, auditable, and validated.

A bow-tie diagram links threats and preventive barriers to a top event, then mitigating barriers to consequences, making barrier ownership visible.

JHA/JSA sequence: select the job, break it into steps, identify hazards at each step, assess risk, prescribe controls, implement, then review and update.

A walk-through survey identifies uncontrolled exposures; an audit verifies conformance to a standard; a job hazard analysis examines task-level exposure step by step.

Apply the hierarchy of controls at each task step; PPE is the last line of defense and cannot substitute for feasible engineering or administrative controls.

LOTO (29 CFR 1910.147) sequence: notify affected employees, shut down, isolate the energy source, apply lock and tag, release stored energy, verify zero energy state.

Permit-required confined space entry (1910.146) requires pre-entry and continuous atmospheric testing (oxygen 19.5 to 23.5 percent), ventilation, an attendant outside, and a rescue plan.

Incident investigation steps: secure and preserve the scene, collect physical evidence and statements, build a timeline, determine causal and root causes with 5 Whys or cause-and-effect analysis, assign corrective actions, verify effectiveness.

Near misses are incidents with no injury or damage; they should be reported and investigated as leading indicators of control failure.

Machine guarding (1910.212) is required at the point of operation, power transmission apparatus, and other moving parts that expose employees to injury.

Fall protection triggers at 4 feet in general industry and 6 feet in construction; guardrails, nets, or personal fall arrest with a 5,000 lb anchor are accepted systems.

A training needs assessment compares task requirements with current knowledge, skill, and ability for a defined audience before content is designed.

Learning objectives must be observable and measurable and tied to specific job tasks, using action verbs such as identify, demonstrate, or perform.

ADDIE model: Analysis, Design, Development, Implementation, Evaluation.

Kirkpatrick's four evaluation levels are reaction, learning, behavior, and results; behavior change on the job and results are the strongest evidence of transfer.

ANSI/ASSP Z490.1 addresses training program management, development, delivery, evaluation, and documentation of safety, health, and environmental training.

Hazard Communication (1910.1200) requires training at initial assignment and whenever a new chemical hazard is introduced into the work area.

Adult learners require relevance to their job, opportunity to practice, timely feedback, and respect for prior experience; hands-on demonstration improves retention over lecture alone.

Printed training materials should match the audience's reading level; many US safety guidance documents target a 5th to 8th grade readability level.

Training records should capture trainee name, date, content, trainer identity, and the evaluation method or demonstration used to confirm competence.

The OSH Act was signed December 29, 1970 and created OSHA within the Department of Labor; 29 CFR 1910 covers general industry, 1926 construction, 1915 and 1918 maritime.

OSH Act Section 5(a)(1), the General Duty Clause, requires a workplace free from recognized hazards likely to cause death or serious physical harm; it applies where no specific standard governs.

Section 5(a)(2) requires compliance with the specific standards promulgated under the Act.

OSHA inspection priority order: imminent danger, fatality or catastrophe, employee complaints and referrals, programmed inspections, follow-up inspections.

Recordkeeping (29 CFR 1904): entries on the OSHA 300 log within 7 calendar days; fatalities reported within 8 hours; in-patient hospitalization, amputation, or loss of an eye within 24 hours.

The OSHA 300A annual summary is posted from February 1 through April 30; the 300 log and supporting documents are retained for 5 years.

A case is recordable only if it is work-related and results in death, days away, restricted work or transfer, medical treatment beyond first aid, loss of consciousness, or a significant diagnosed condition.

Employee rights include protection from retaliation under Section 11(c), the right to request an inspection, to accompany the compliance officer, and to access exposure and medical records.

OSHA's multi-employer policy permits citation of the creating, exposing, correcting, and controlling employers on the same worksite.

ISO 14001 follows PDCA and requires an aspect and impact register, compliance obligations, objectives, operational controls, monitoring and measurement, and management review.

An environmental aspect is an element of an activity, product, or service that interacts with the environment; an environmental impact is the actual or potential change to the environment resulting from it.

Aspect significance is determined by defined criteria such as severity, likelihood, regulatory status, and interested-party concern; the criteria are set before evaluation.

Pollution prevention hierarchy: reduce at the source, reuse or recycle, treat, then dispose as the last option.

RCRA hazardous waste generator categories by monthly generation: very small quantity generator under 100 kg, small quantity generator 100 to 1,000 kg, large quantity generator over 1,000 kg.

Accumulation limits: large quantity generator 90 days; small quantity generator 180 days, extended to 270 days when the treatment facility is over 200 miles away.

A CERCLA release of a hazardous substance at or above its reportable quantity must be reported immediately to the National Response Center.

EPCRA Section 313 Toxic Release Inventory Form R is due July 1 and covers releases for the prior calendar year.

Construction stormwater permits under NPDES require a Stormwater Pollution Prevention Plan with best management practices; SPCC plans are required for oil storage above the regulatory threshold.