Planning of an OH&S MS implementation based on ISO 45001
Domain 3 - Planning of an OH&S MS implementation based on ISO 45001
This domain tests clause 6: risk and opportunity planning, hazard identification, assessment, legal requirements and objectives. It is the engine of the system; weak planning produces controls that do not address real hazards.
Core rules
- Planning must address risks and opportunities related to context, interested parties and the OH&S MS itself (6.1.1), with the aim of preventing injury and ill health and achieving continual improvement.
- Hazard identification (6.1.2.1) considers routine and non-routine activities, past incidents, emergencies, work organization, social factors, equipment, materials and people including contractors and visitors.
- Risk assessment (6.1.2.2) must be proactive, systematic and consider the effectiveness of existing controls; the methodology is for the organization to define.
- Opportunities (6.1.2.3) are not just "good ideas"; they must plausibly improve OH&S performance.
- Legal and other requirements (6.1.3) must be determined, accessible and applied.
- Planned actions (6.1.4) must be integrated into OH&S MS processes and consider the hierarchy of controls, best practice, technical options and business needs.
- OH&S objectives (6.2) must be consistent with policy, measurable if practicable, monitored, communicated, updated and supported by plans stating what, resources, who, when and how results are evaluated.
Worked example
A solvent-based painting line identifies inhalation risk. The assessment shows high exposure. Options considered: eliminate the solvent by switching to powder coating; substitute a water-based coating; enclose and ventilate; rotate staff; issue respirators. The objective becomes: reduce airborne solvent exposure below the occupational exposure limit within 12 months, with a responsible manager, budget, exposure monitoring and a review date. The reasoning links hazard, hierarchy, legal requirement, objective and monitoring.
Traps
Listing hazards as risks; relying on PPE first; setting objectives without an owner or indicator; ignoring contractors and visitors; leaving the legal register static; and calling any improvement an "opportunity" without linking it to OH&S performance.