OK POST cheat sheet

The OK POST exam is delivered in English and is composed of multiple-choice questions; each question has exactly one best answer unless the stem explicitly states otherwise.

The exam blueprint is organized into six content domains: Exam Overview and Structure, Core Concepts and Terminology, Procedures and Best Practices, Tools and Technologies, Regulations and Compliance, and Safety and Risk Management.

Domain weighting is not necessarily equal; candidates should consult the current official candidate handbook for the exact percentage allocated to each domain before scheduling.

A passing score is a scaled score, not a raw percentage; scaled scores are reported on a common scale to account for minor differences in exam form difficulty.

Question stems may include scenarios, tables, or short data sets embedded directly in the item text; no external reference materials are permitted during the exam.

The exam is timed; candidates should know the total appointment time and the number of items so they can calculate an average pace per question before test day.

Identification is required at the test center; the name on the registration must match the government-issued photo ID presented at check-in.

Exam results are typically provided immediately after completion at the test center, with official score reports available through the candidate portal.

Retake policies, waiting periods, and fees are set by the certifying body and can change; verify the current policy in the official handbook rather than relying on older study material.

A standard is a mandatory requirement (the word 'shall'); a guideline is a recommendation (the word 'should'); confusing the two is a common distractor pattern.

Risk is the combination of the likelihood of an event and its consequence; risk score = likelihood × severity when a qualitative matrix is used.

Residual risk is the risk remaining after controls are applied; inherent risk is the risk before controls.

A hazard is a potential source of harm; a risk is the chance that harm occurs given exposure to the hazard.

A control is a measure that modifies risk; controls are classified as preventive (reduce likelihood) or mitigative (reduce consequence).

ALARP means 'as low as reasonably practicable'; it requires reducing risk until the cost of further reduction is grossly disproportionate to the benefit.

A near miss is an incident without injury or damage; it is recorded and investigated because it signals a control failure.

Competence means having the training, experience, and demonstrated ability to perform a task safely; it is distinct from simply holding a certificate.

A procedure is a documented sequence of steps; a work instruction is a more detailed, task-level document derived from the procedure.

A permit-to-work system authorizes specific high-risk tasks for a defined scope, location, and time; the permit must be closed out and signed off when the task ends.

Lockout/tagout (LOTO) requires isolating all energy sources, applying a personal lock and tag, and verifying zero energy before work begins.

A pre-task safety briefing (toolbox talk) is held before work starts and covers the task scope, hazards, controls, and emergency arrangements.

Management of change (MOC) applies whenever a process, equipment, material, or procedure changes; the change is assessed for risk before implementation.

A job safety analysis (JSA) breaks a task into steps, identifies hazards at each step, and specifies controls; it is reviewed with the workers performing the task.

Incident investigation should establish root causes, not just immediate causes; the '5 Whys' and cause-and-effect (fishbone) methods are common techniques.

Corrective actions must have an owner and a due date; effectiveness is verified after implementation, not assumed at closure.

Handover between shifts must include the status of ongoing work, open permits, isolations, and any abnormal conditions.

Emergency drills are documented and evaluated; lessons learned are fed back into the emergency response plan.

A gas detector must be bump-tested before use and calibrated at the interval specified by the manufacturer or site procedure.

Personal protective equipment (PPE) is the last line of defense in the hierarchy of controls; it does not replace engineering or administrative controls.

The hierarchy of controls, from most to least effective, is: elimination, substitution, engineering controls, administrative controls, and PPE.

A lockout device must be individually keyed so that each worker holds the only key to their own lock.

Fire extinguishers are classified by the type of fire they address (A: ordinary combustibles, B: flammable liquids, C: electrical, D: combustible metals, K: cooking oils).

A safety data sheet (SDS) uses a 16-section format; Section 2 covers hazard identification and Section 4 covers first-aid measures.

Confined-space entry requires atmospheric testing for oxygen, flammable gas, and toxic gas before entry and continuously during occupancy.

A JSA or risk assessment matrix is a tool, not a substitute for engineering judgment; the output must be reviewed by a competent person.

Barricades and signage communicate hazard boundaries; the color and shape conventions used should follow the site's standardized system.

Regulations set the legal minimum; a company standard may be stricter than the regulation but may not be less strict.

The employer has a general duty to provide a workplace free from recognized hazards that are causing or likely to cause death or serious harm.

Workers have the right to refuse work they reasonably believe is unsafe, subject to the jurisdiction's specific refusal-of-work procedure.

Recordable incidents are defined by the applicable regulator; the definition includes criteria for injury, illness, and loss of consciousness.

Regulatory inspections may be unannounced; the employer must provide access to records, permits, and personnel for interviews.

Noncompliance can result in citations, fines, and in serious cases criminal liability for individuals and the organization.

Environmental regulations may require permits for air emissions, wastewater discharge, and hazardous waste storage; permit conditions are enforceable.

Training records must be retained for the period specified by regulation; the retention period is often longer than the worker's tenure.

Contractors are covered by the host employer's site rules while on site, in addition to their own employer's obligations.

Risk assessment steps: identify hazards, determine who may be harmed and how, evaluate risk, record findings, and review and update.

A risk matrix uses likelihood and severity scales; the product determines the risk rating and the required approval level.

Hierarchy of controls must be applied in order; PPE is used only when higher-order controls cannot adequately reduce risk.

Safety performance indicators are leading (e.g., near-miss reports, training completion) or lagging (e.g., injury rates, lost-time incidents).

A safety management system typically includes policy, planning, implementation, checking, and management review (the PDCA cycle).

Emergency response planning covers evacuation, shelter-in-place, medical response, and communication with external agencies.

Incident causation models (e.g., Swiss cheese, Heinrich pyramid) explain how multiple failures align; they are used to guide investigation depth.

Risk communication must be understandable to the affected workforce; language, literacy, and shift patterns affect comprehension.

Audits and inspections differ: an audit checks conformity to a standard or system, while an inspection checks physical conditions and behaviors.