Safety Management Systems
Domain scope
This domain tests safety management systems, especially ISO 45001:2018 and ILO-OSH 2001. You need to know the PDCA structure, required processes and common implementation gaps.
Core rules and concepts
- ISO 45001 uses Plan-Do-Check-Act: context, leadership and worker participation, planning, support, operation, performance evaluation and improvement.
- The standard requires an OH&S policy, hazard identification and risk assessment, legal and other requirements, objectives, operational controls, contractor control, emergency preparedness, incident investigation and management review.
- Worker consultation and participation are explicit requirements, not optional goodwill.
- ILO-OSH 2001 provides a national and organisational framework with policy, organising, planning and implementation, evaluation, and action for improvement.
- OHSAS 18001 is withdrawn; certification to ISO 45001 is voluntary but can be a contractual requirement.
Worked example
A company has three lost-time injuries, no policy and no contractor controls. A gap analysis against ISO 45001 shows failure in leadership (no top-management role), planning (no risk register) and operation (no permit-to-work for contractors). The corrective plan assigns owners, dates and evidence, then checks effectiveness at the next management review. Certification is deferred until the system is functioning, not just documented.
Traps
Equating a certificate with a safe workplace; writing procedures nobody follows; treating the safety officer as the only owner; and omitting contractor and temporary-worker controls.