Safety Management Systems and Program Development
What a system actually is
A safety management system (SMS) is a documented, auditable set of interrelated processes that continually reduce risk - not a binder of policies. Candidates should be able to compare the two dominant frameworks. ISO 45001 is international, third-party certifiable, and structured on Plan–Do–Check–Act with clauses for context of the organization, leadership and worker participation, planning, support, operation, performance evaluation, and improvement. ANSI/ASSP Z10 is a U.S. consensus standard organized around management leadership, worker participation, planning, implementation and operation, evaluation and corrective action, and management review. OSHA's Recommended Practices and the Voluntary Protection Programs use the same skeleton, so a question written against any one of them usually maps to the others.
Concepts you must hold
Policy with top management commitment; documented roles and accountability; meaningful worker participation (not just a suggestion box); hazard identification and risk assessment as the engine of the system; hierarchy of controls applied before PPE; competence and training; contractor and supplier control; management-of-change; documented information; incident investigation feeding corrective action; internal audit; management review; and measurable objectives with leading and lagging indicators.
Traps
Questions test ownership: line management owns safety performance; the safety professional advises, facilitates, and analyzes but does not own the risk. Another trap conflates compliance (a legal minimum), conformance (meeting a standard's requirement), and performance (outcome measures). A third trap is treating a written program as implementation.
Worked example
A gap analysis scores each element 0–4 for maturity. If leadership scores 4 and management-of-change scores 1, resources go to the low element first - systems fail at their weakest link, not their average.
Rule of thumb
If a control is not assigned to a named person with a due date, it is a wish, not a control.