ISO 45001 certification without safety performance: a hospital's management review gap
A 900-bed teaching hospital holds ISO 45001 certification. In the last 12 months, reported sharps injuries have fallen from 46 to 21, but the occupational health unit says actual presentations are unchanged. Near-miss reports from portering and domestic staff are 40% lower than two years ago. The health and safety committee meets quarterly; minutes show 18 recurring actions, 11 still open after six months. Top management's management review has not met for 19 months because of 'operational pressure'. The internal audit programme has audited the same two clinical areas three times and never audited Estates. A recent external surveillance audit found no major nonconformities because the auditor sampled only documents provided by the safety team.
1. Evaluate the OHSMS against ISO 45001 clauses 5, 6, 9 and 10, identifying the most significant weaknesses.
Read the worked answer
Clause 5 (leadership and worker participation): Top management has not reviewed the OHSMS for 19 months; this is not a paperwork gap but a failure of leadership and accountability. The safety committee exists, but 11 of 18 actions remain open, showing consultation without influence. Clause 6 (planning): Risks are not being addressed at the right level. Falling reported sharps injuries while OH presentations are unchanged suggests under-reporting, not control. Near-miss reporting down 40% is a warning sign, not a success. Clause 9 (performance evaluation): Monitoring is skewed to documents the safety team supplies. Internal audit has not covered Estates, a high-risk area, and repeats the same clinical areas. The external auditor's sampling was too narrow to test effectiveness. Clause 10 (improvement): Corrective actions are recorded but not verified or closed. There is no evidence of learning. Most significant weakness: management review and internal audit are not providing independent challenge; the system is certified but not self-correcting.
2. Propose a 90-day recovery plan with prioritised actions, owners and measures of success.
Read the worked answer
0-30 days
- Convene a management review with top management, OH, unions and safety representatives; review sharps, near-miss, absence and audit data together.
- Reopen and triage all 18 actions; assign owners and dates; verify closure with evidence.
- Stop treating falling reports as improvement until reporting culture is tested.
30-60 days
- Commission an independent audit of Estates and portering; include contractor controls, asbestos, electrical and work at height.
- Introduce a confidential worker survey and focus groups on reporting barriers.
- Revise the near-miss process so feedback is visible and blame-free.
60-90 days
- Report to the board with leading indicators: actions closed on time, audit coverage, survey response, near-miss reports per 100 staff, and time to close.
- Re-audit the two clinical areas to test whether actions have changed practice.
Success measures: management review minutes with decisions, 90% of overdue actions closed, audit coverage of all high-risk areas, and improved reporting without an increase in concealment.
3. How should the hospital respond to the falling reported injuries? Distinguish between under-reporting and genuine improvement.
Read the worked answer
Falling reported injuries can mean fewer injuries, but here three data points contradict that: OH presentations unchanged, near-miss reports down 40%, and repeated open actions. The most likely explanation is under-reporting, possibly because staff see no response or fear blame. However, it is also possible that a genuine reduction is masked by changes in reporting routes.
To distinguish between the two:
- Compare first-aid, OH and regulator-reportable data, not just internal reports.
- Check denominators (staff numbers, agency staff, shift patterns) and case definitions.
- Ask workers anonymously whether they would report a sharps injury and why.
- Sample case notes for unreported events.
Do not set targets that reward low numbers; reward reporting and timely correction.