Safety Management Systems
Frameworks a candidate must recognize
- ANSI/ASSP Z10. A voluntary U.S. consensus standard built on Plan-Do-Check-Act. Its core elements are management leadership and commitment, employee participation, planning, implementation and operation, evaluation and corrective action, and management review.
- ISO 45001. An international standard, certifiable by third-party audit, that adds context of the organization, worker consultation and participation, and documented OH&S objectives to the PDCA cycle.
- OSHA VPP. Star, Merit, and Star Demonstration sites; participation requires injury and illness rates below the industry average plus a written safety and health management program.
Traps to expect. Questions that ask which framework is certifiable (ISO 45001). Questions that ask who owns the management system - top management owns it; the safety professional administers it. Employee or worker participation is a requirement, not an optional nicety. And a management system standard sets a framework and process expectations; it does not prescribe a numeric exposure limit or a specific engineering control.
Diagnostic rule of thumb. If an organization has a written policy but no measurable objectives, no assigned responsibilities, no measurement of performance, and no scheduled management review, it has a policy, not a management system. Management review is the element most often skipped and most often tested.
Worked example. A plant has extensive training but no OH&S objectives and no management review on the calendar. The best corrective answer is to establish measurable objectives, assign responsibility, and institute a scheduled management review - not to add another training module. The gap is in the Check and Act phases of PDCA, and adding training leaves the system loop open.