HSE Management Systems
The shape of a system
Policy → planning → implementation and operation → checking and corrective action → management review, with leadership on top and worker participation throughout. ISO 45001:2018 (which replaced OHSAS 18001), ISO 14001:2015 and ISO 9001:2015 share a high-level structure and the Plan–Do–Check–Act cycle.
Clauses to know (ISO 45001)
Context of the organisation; leadership and worker consultation; planning (hazards, legal and other requirements, objectives); support (resources, competence, awareness, communication, documented information); operation (operational planning and control, procurement, contractors, emergency preparedness); performance evaluation (monitoring, internal audit, management review); improvement (incidents, nonconformity, corrective action, continual improvement).
Practical elements
Signed HSE policy, defined responsibilities, legal register, risk register, objectives and KPIs, training matrix, contractor management, document control, audit schedule, management review minutes and records of corrective actions.
Leading vs lagging
Lagging indicators (LTIFR, days lost) measure harm already done; leading indicators (toolbox talks held, inspections closed out, near misses reported, training completed) predict it. A good dashboard carries both.
Traps
Mapping PDCA wrongly - "Check" covers monitoring, audit and management review, while "Act" is improvement. Believing ISO 45001 certification replaces legal compliance (it does not). Believing a consultant's manual is a system.
Rule of thumb
If it is not written, resourced, measured and reviewed, it is not a management system - it is just a document.