Fundamental Concepts and Principles of OH&S Management and an OH&S MS
What an OH&S management system is
An occupational health and safety management system (OH&S MS) is the set of interrelated or interacting elements an organization uses to establish OH&S policy and objectives and to achieve those objectives. ISO 45001 follows the same high-level structure (Harmonized Structure) as ISO 9001 and ISO 14001, which is why clauses 4–10 read almost identically across these standards. The subject matter, however, is different: ISO 45001 focuses on work-related injury and ill health to workers and other interested parties.
Key concepts to hold onto:
- Hazard - a source with potential to cause injury and ill health. Risk - the combination of the likelihood of a hazardous event and its severity. Do not confuse hazard (the thing) with risk (the chance and consequence).
- Workers and worker participation - workers are not passive recipients of safety; consultation and participation are required, not optional.
- Context of the organization - internal and external issues shape the system.
- PDCA - Plan (clauses 4–6), Do (7–8), Check (9), Act (10). Questions often ask which clause belongs to which phase.
- Hierarchy of controls - elimination, substitution, engineering controls, administrative controls, PPE, in that order of preference.
- Continual improvement - the system is expected to get better over time, not merely stay compliant.
Traps
A common trap is treating ISO 45001 as a prescriptive checklist of hazards or as a zero-accident guarantee. It is a risk-based, outcome-oriented standard; it does not prescribe specific control measures. Another trap is confusing consultation (seeking views before a decision) with participation (joint involvement in decision-making). A third is assuming top management can delegate OH&S responsibility entirely - leadership and commitment cannot be outsourced, though operational tasks can be assigned.
Rule of thumb
When a question asks "what does the standard require?", look for the answer that says establish, implement, maintain and continually improve a process rather than one that names a specific technical control. ISO 45001 requires a system, not a particular safeguard.