Safety Management Systems
Safety Management Systems
The exam tests whether you can distinguish a genuine management system from a binder of procedures. ANSI/ASSP Z10.0 and ISO 45001 share the same skeleton: policy, planning, implementation, evaluation, and management review, with worker participation and the hierarchy of controls embedded throughout.
Core rules
- Top management owns the system; accountability cannot be delegated to a safety officer.
- Planning starts with hazard identification and risk assessment, not with last year's incident list.
- ISO 45001 uses the plan-do-check-act cycle and requires documented context, legal and other requirements, objectives, and operational controls.
- Controls follow the hierarchy: elimination, substitution, engineering, administrative, PPE. PPE is the last line, never the first.
- Performance is judged by leading indicators such as inspections completed, corrective actions closed on time, and training competency, as well as lagging outcomes such as TRIR and DART.
- Certification is not the same as effectiveness; ISO 45001 requires internal audit and management review to drive improvement.
Worked example
A plant has a TRIR of 1.8, below its industry average, but three near-misses in six months involved the same conveyor. Reasoning: the lagging metric looks acceptable; the recurrence signals a failed risk-treatment loop. A system response is to reopen the risk assessment, verify guarding and LOTO, add a leading indicator for repeat findings, and track corrective action effectiveness at management review. Moving the conveyor guard alone, without changing the assessment and review process, leaves the system defect in place.
Traps
- Treating certification as proof of safety.
- Writing corrective actions as retrain employees when the cause is design or procurement.
- Confusing safety climate surveys with a management system.
- Leaving management review as a paperwork exercise with no resourcing decisions.