Safety management systems
Safety management system questions test whether you understand the architecture of a management system and can distinguish a certificate from real performance. The CSMP exam focuses on ISO 45001 and ANSI/ASSP Z10-style elements, PDCA, and management review.
Core rules and concepts
- Core elements include policy, worker participation, hazard identification, legal and other requirements, objectives, operational controls, competence, communication, documented information, internal audit, corrective action, and management review.
- ISO 45001 follows the Plan-Do-Check-Act cycle and requires consultation and participation of workers.
- ANSI/ASSP Z10 provides a U.S. consensus framework; OSHA VPP recognizes worksites with effective systems, but VPP is not the same as ISO certification.
- Leading indicators and audits test system health; lagging indicators alone are insufficient.
- Corrective actions must be tracked to closure and checked for effectiveness.
Worked example
An internal audit finds that three of five corrective actions from last year’s incidents were never closed. The auditor traces the issue to a spreadsheet with no owner or due date. The corrective action is to move actions into a controlled tracking system with assigned owners, due dates, and management review. The audit finding is not closed when the spreadsheet is replaced; it is closed when the three actions are verified and the new system shows use.
Traps that cost marks
Equating a certificate or a thick manual with an effective system. Treating management review as a paperwork exercise. Setting objectives without measurable targets. Auditing only records and not the shop floor.