Bs OHSAS 18001:2007 Occupational health and safety management systems -— Requirements Scope Ts Oceana sth and Sey Assan Sree (OF5A5) Stmnsaréspertes eqiemers for ay oespeonl hea 08 a (Gres) mnagement seem to sts ongon cone (HRS trond prove te O89 perme it doc tse spose OHS prensa nein nor oer edad Spesendon re cesin ofamanagemen ae Ts SAS Stndanis sph om organza ht ihe 2) sab an OHS management sate o emi or mine Sats to personal and oer inset pares wh cou be ‘Showedtn OMES hens nemcied wh ete ) plete staan and contimaly inrove an OFS agement ee ©) nae ie ot onfnmiy witht tated ORS poi €)emonsre confer ith i OS Standen 1 making x lf deemination and ef decartion, cr 2) seeking conimaton ofits confomance by pares having an ineest nthe engin soc a cstomes or 9) seckingconiaton fs decaien by x at ester the amma 4). sexing conten negation os OHSS management ‘ose by an ese organo {the reuiemens in thi O1S4S Shard ae ntended to be Sncomported no any OHMS management ptem. The extent the sapien il depend om ste ators asthe CHGS poe othe Channon te esas teri an eomplesy of sr onertons Tis O1SAS Standards intended to adess oceapational health and Safe, andisnot tended adress oer hah en snfey res such tmleye welling rogrammes ro fey, pope Saiage or enone act Reference publications (ther publication that provide information or guidance are tein the bblography rfsadeabe tat the latent edons of och palestine be cone, Specialy, reference shouldbe made: CuSAS 18002, Occupational heath and safety management Stems Guidelines forthe implementation of OHSAS 1S001 lncematinal Labour Organizaton:2001, Guldeines on Occupational Health ana Safety Management Systoms (OSHMS) exstoo0r + 13a 33 St 36 Terms and definitions Forthe purpotes ofthis decsment, the following terms and definitions av. acceptable risk Tak tht las been reduced toa level that can be tolerated bythe ‘organization having regard tots legl obligations and its own OH&S policy (3.15) audit systematic, independent and documented process for obtaining “audit evidence” and evaluating it objectivety ta determine the exrene to which ‘audit eriteria" are fulfilled [180 9000:2005, 8.9.11 NOTE 1 Independent does nct neocscarly mean extemal tothe ‘organisation. n many onsen, partculany tn smaen organisations lndependence can be demonstrated by the fredom Sram responsibility or the actedy being audited NOTE 2 For further guidance on “audit evidence” and “audit criteria fee 180 20021 continual improvement recurring process of enluncing the OH&S management system (3.13) inorder to achieve improvement in overall (OWES performance (3.15) consistent with the organization's (3.17) OWES policy (8.16) NOTE 1 The process need not take plac in a areas of acivty imadeanenusy, NOTES Adapted from 150 140012008 3.2. corrective action action to eliminate the cause ofa detected nomeonfermity (3.11) or ‘other undesiable simation NOTE 1 There cam be more than one cee fora nonconformity NOTE? Corvectce action is taken fo prevent vesurrence whereat Dreventive action (2118) i fain to prevent occurrence [150 £000:2005, 8.6.51 document information and its supporting medium NOTE The medéwn can be rarer, magnetic, electronic cr optical ‘computer die, photograph or master sample, oF a combination thereat. {180 14001:2004, 8.41 hazard source, suation, or act with a potential for harm in terms of human injury Gell health (3.8), oF a combination ofthese hazard identification process of recognising that « huzard (3.6) exists and defining ts characteristics38 39 342 BS OHSAS 18001:2007 iM health ‘densifiable, averse physical or mental condition arising from and/or made worse by a work activity andice work-related situation incident ‘work-related event(s) in which an injury or ill ealth (3.8) (regardless of severity) or fatality cecured, or could have cecurted NOTE 1. An accident ix an incident whic has given rice fa injury, ill heath a fealty, NOTE 2 An incident where no injury, it health or fatality ceours may li be refered toe mearomects “heart, ese cal or angers NOTE 5 Am emergency situation eve 4.4.7) isa par cular type af Interested party ‘person or group, inside or ouside the workplace (3.23), conoemed ‘with or affected by the OH&S performance (3.15) of an organization (3.17) nonconformity nowfulflment of a requirement [SO 9000:2003, 8.6.2: ISO 14003, 3.15), NOTE A nonconformity can be any deviation from: + relevant work stands practices, prose + Ona management system (3.15) requirements. oceupational health and safety (OR&S) coneitions and factors that affect, or could affect, the health and safety ofemployees or oiler workers (including temporary workers and contractor personnel), visitors, or any other person inthe ‘workplace (3.28) NOTE Organications can be subject to legal requirements forthe health Gnd safety of persons beyond the immediate workplace. or who are exposed 19 the workplace activities gat OFS management system part of an organization's (3.17) management system used to develop nd implement its OH&S policy (3.16) and manage its OH&S risks (3.21) NOTE 1 A management syctom tase of intersiated elements sed t2 Seebiih poloy and cbjeoions nd to aohisue hase objects, NOTE 2 A management system inclues organizational structure, ‘Planning activities (including for example risk assessment and the Fling of ebjectie’), responses practices, provedures (219). Processes ana reson. NOTE 3 Adapted from 190 140012003, 3.8 ens + 9BS OHSAS 180012001 4 35 3.8 3.9 aaa OH&S objective (OFS goal, in tenms of OH&S performance (8.15), chat an organization (9.17) sets itself to achieve NOTE 1 Objectives should be quantifies wherever Dr NOTE 2 4.5.3 xepuivee that OHES objectives 2 (OM188 poliey 2.10). OHSS performance ‘measurable results of an organization's (3.17) management of its OH&S risks (3.21) NOTE 1 OHS peufermance measurement metus measiring the ‘pectivenes ofthe organisation's entra NOTE? Inthe contest of OHSS management system (9-13) recalls amt also bemeaoivad against the organization’ (8-17) OMS potiey (3.16) OM&S objectives (3.14). amd other OFS performance requirements OH&S policy cveral intentions and diection of an organization (3.17) related tits ‘OHGS performance (3.15) ae formally expressed by top management NOME 1 The OMS plicy provides a ramawork for action and forthe Senna ONES objectives 3.1) NOTE 2 Adapted fom 150 14001:2008, 8.11 sable. organization company, corporation. frm enterprise, autuority or institution o part cx combination therecf whether incerporated or net, public ar pevate ‘har has is os unetions and adeinisertion NOTE For argamizatons with more than one operating unit axing operating watt may be defined asa organi [180 14001-2004, 3.15] proventive action action to eliminate the cause ofa potential nonconformlty (3.11) or ther undesirable potential situation NOTE 1 There can te mare than one cause fora potential noncanformit NOTE 2. Freventie action i taken t prevent aon ‘corrective action (3.1) taken to prevent recwence [uso 9000:2008, 8.6.4), sohereas procedure Specified way to carry ont an activity ora process [180 9000:2008, 8.4.5], record document (3.5) stating results achieved or providing evidence of activites performed [uso 14001:2008, 3.20] risk combination ofthe Hkeinood of an cecumence ofa hazardous event of exosure(s) and the severity of injury or Ml health (3.8) shat can be caused by the event or exposures)BS OHSAS 18001:20 risk assessment process of evaluating theisk(s) (3.21) arising from a hazard), taking into account the adequacy of any existing controls, and deciding ‘shether or not the ists) is acceptable 3.29 workplace ‘any physical location in which work related activities ane performed tuner the contol of the organization NOTE Wien giving consideration to what ecnatitutcs 2 workplace, the organization (3.17 should take into account the OES eects on thabeting avon tans Ce. ning tthe premises aa lent or customer, Pang on bots ov tng). wor orweorking at home 4 OH&S management system requirements 44 General requirements. “The organization shal establish, document, implement, mainain and continually zaprove an OHSS management system in accordance with ‘he requirements of this OHSAS Standard and determine how il ul ‘hese requirements “The organization shall define and document the scape of ts OHES, management system, 4.2 OH&S policy ‘Top management shall define so authorize the organization's OH&S policy an ensure that within the defined scope of its OHS imanagementepstem i a) is appropriate to the nature and seal ofthe organization's OH&S: sk D) includes a commitment to prevention of injury and it health and continwal improvement in OH&S management and OHS performance; ©) includes a commitment to at last comply with applicable legal reaqrements and with other requirements to which the organization subscribes that relate to its OHSS hazards: 4) provides the feamework for setting and reviewing OB&S objectives: ©) ts documented, implemented and maintained: is communicated to al persons working mer the contol of the organization with dhe intent hat they are made aware of their individual OH&S obligations; 48) is evallable to interested parties; and 1) is reviewed periodically to ensure that remains relevant and propriate to the organization.BS OHSAS 18001:20 43° Planning 4.3.1 Hazard identifieation, risk assessment and determining controls ‘ae organization shall establish, implement and maintain a procedure(s) forthe ongoinghazardidentfiation, risk assessment, and Getermination of necessary controls ‘The procedure(s) for hazard identification and risk assessment shall ‘ake into accom: ) routine and non-routine activities 1b) activites of al persons having access tothe workplace (inchuding contractors and visitors); © Iman behaviour, capabilities and other human factors: ) idemttied hazards originating outside the workplace capable of adversely affeetng the health and satery of persons under the ‘contol ofthe organization within the workplace; ©) hazards created in the vicinity of the workplace by work-related Activities under the contol of the organization: NOTE 1. Seyay be mone appropriate or such hasards tobe astesed 1) infrastructure, equipment and materials at the werkplace, whether provided by the organization or others 2) changes or proposed changes in the organization, its activities, or serial 1) mficatons to the OHS management system, including temporary changes, and their impacts on operations, processes and activities; 4) any applicable legal obligations relating to risk assessment and Jmplementation of necessary controls (see also the NOTE to 3.12); 4) the design of work areas, processes installations, rmachinerylenuipment, operating procedures and work ‘organization, including heir adaptation to human eapabilies, ‘The organization's methodology for hazard identification and rise assessment shall a) be defined with respect tits scope, ature and timing to ensure it js proactive rather than reactive; and 1) provide forthe identification, prioritization and documentation of zisks, andthe application of controls as appropriate For the management of change the organization shall identify the (OFIGS hacards and OHS risks associated with changes in the ‘organization, the OH&S management system, o ts activites, prior 10 the introduction of such changes ‘The organization shall ensure thatthe resus ofthese assessments ane comsidered when determining contol. 6 + ensiaeraaa BS OHSAS 18001:20 \When determining contrls, or considering changes to existing controls, consideration shall be given o reducing the risks according co the following hierarchy @) elimination: substation: ©) engineering controls: 4) signagervarnings andlor administrative controls; ©) personal protective equipment “The organization shall document and Keep the results of identfieation ‘of hazards, rise assessments and determined controls up-to-date “The organization shall ensure thatthe OHS risks and determined contrals are taken into account when establishing implementing and maintaining its OH&S management system, NOTE 2 For Surther uae on has identification, vsk ase ‘and determaningeonsvots ce OASAS 18002. coment Legal and other requirements ‘The organization shall establish implement and maintain & procedures) for identifying and accessing the legal and other OH&S requirements Gat are applicable tot “The organization shall ensure that these applicable legal requirements ‘and other requirements to which the organization subscribes are taken into account in establishing, implementing and maintaining its OH&S management syste “The organization shall keep this information up-to-date, ‘The organization shall conumunicate relevant infornation on legal and other requirements to persoas working under the control of the organization, and other relevant interested parties Objectives and programme(s) ‘The organization shall establish, implement and maintain documented (OHS objectives, at relevant functions and levels win the organization. “The objectives shall be measurable, where practicable, and consistent ‘with the CHS policy, including the commitments tothe prevention of injury and il health, to compliance with applicable Tegal requirements and with other requizements to which the organization subscribes, ad ‘0 continual improvement When establishing and reviewing its objectives, an organization shall take into account the legal requirements and other requirements to ‘which the organization subscribes, and its OHSS risks. It shall also consider its technological options its financial, operational and business requirements, andthe views of relevat interested partesBS OHSAS 18001: 8 4a 4A ‘The organization shall establish, implement and maintain a brogranume(s) for achieving its objectives. rogrammes) shall inelude 8) desiguation of responsibility and autherty for achieving objectives at relevant fonctions and levels ofthe organization; and 'b)_ the means and sime-frame by which the objectives are to be achieved. ‘The progsame(s) shal be zeviewed at regular sud planed intervals, and adjusted as necessary, to ensure thatthe objectives are achieved. Implementation and operation Resources, roles, responsibility, accountability and authority Top management shall take ultimate responsibilty for OHSS and the (OHS management sysieu, ‘Top management shall demonstrate its commitment by 8) ensuring the avalabiity of resources essential to establish, simplement, maintain and improce the OS management system: NOTE 1 Resources scluce human resource anc apacialises sls organizational npractrucure, technology an financial resouroce. 1). defining roes, allocating responsibilities and accountabilities, and delegating authorities, to facilitate effective OH&S management; roles, responsibilities, ccoumtailtes, and authorities shall be documented and comnicated. ‘The organization shall appoint a member(s) of top management with specific responsiilty for OHS, imespective of other responsibilities, suid with defined roles andl authority fr: 8) ensuring thatthe OHSS management system is established. smmplemented and maintained in accordance with this OHSAS Standards 1) ensuring that reports on the performance of the HBS Ianagement system are presented to top managemert for review and used as basis for improvement of Hie OH&S management ‘stem, NOTE 2 The tap management appoint (29. a large organisation aBoard or azecutive committes member) may dclzgate Some af theo duties too subordinate managemens representative) while sl retaining acoowntabiley, The identity of che cop management appointee shall be made avalable ‘tall persoms working under the contol of te organization, All those ith management responsibilty shall desuonstrate their commitatent vo the continua improvement of OHSS performance. The organization shall ensure that persons in the workplace take responsibility for aspects of OHSS over which they have contol, including adherence 1 the organization's applicable OH&S requirementsBS OHSAS 18001:2007 ‘Competence, training and awareness “The organization shall ensure thst any person(s) under its control performing task that ean impact en OHS is (are) competent on the Dasis of appropriate education, craining or experience, and shall retain associated record, ‘The organization shall identity training needs asociated with ts ORS ‘sks edits OHSS management stem: Itshall provide training or take other action to mect these ncede, evaluate the effectiveness ofthe ‘raining or action taken, and retain associated record, “The organicatcn shal establish, inplement and maintain 2 procedure(s) to make persons working under its comtel aeare of 4) the OHSS consequences, actual or potential, oftheir work activites, their behaviour, andthe OHS henefite of improved personal performance: 1b). their roles and responsibilities and importance in achieving conformity to the OHS policy and procedures and tothe requirements of te OHS management system, including emergency preparedness and response requirements (see 4,4 ©) the potential consequences of departure from specified procedures ‘Training procedures shall ake into account difering levels of: responsibil: ability lmguage skis and literacy: and b) isk, ‘Communication, participation and consultation, Communication ‘With regard to its OH6S hazards and OH&S management syste, the orguuzation shall establish, implement and maintain a procedure(s) fer ) internal communication among the various levels an functions of the erganizaron 1) communication with contractors and other visitors tothe workplace: © receiving, documenting and responding to relevant communications fromm external interested pasties, Participation and consultation ‘The organization shal establish, implement and maintain 2 procedure(s) for: ) the participation of workers by their ‘+ appropriate involvement in hacard identification, risk assessments tnd determination of controle ‘+ appropriate involvement in incident investigations ‘+ incolvement in the development and review of OHAS policies and objectives: weasta07 + 944.6 44.7 45 BS OHSAS 18001:2007 Operational control ‘The organization shall determine those operations and activities that are associated with the identified hacard(s) where the implementation of controlsis necessary to manage the ORS risk(s), This shal inelude the management of change (see 4.3.1) Forthose operations and activities, the organization shall implement and maintain a) operational controls, as applicable to the organization audits ‘activities: the organization shal incegrae chose operational controls into ts overall OH&S management system 1) controls related to purchased goods, equipment and services; ©) concecls rated to contractors and other isiters tothe workplace: 4) documented procedines, to cover situations witere thei absence could lead to deviations trom the OH&S policy and the objectives; ©) stipulazed operating criteria where their absence could lead to deviations from the OH&S policy and objectives. Emergency preparedness and response ‘The organization shall establish, implement and maintain 3 procedure} 1). to identity the potential for emergency situations: 1b) to respond to such emergency situations, ‘The organization shall respond to actual emergency situations and prevent or mitigate associnted adverse OH&S consequences, [In planning its emergency response the organization shall take aceount ofthe needs of relevant intersted parties, eg. emergency services and neighbours. ‘The organization shall also periodically test its procedure(s) to respond ‘to emergency sitntions, where practicable involving relevant ierested parties as appropriate. ‘The organization shal perioccally review and, where necessary, revise its emergency preparedness and response procedure(s), in particular, after periodical testing and afer the occurrence of emergency situations Gee 45.3) Cheeking Performance measurement and monitoring ‘The organization shall establish, implement and maintain 2 procedure(5) to monitor and measure OHS performance on a regular Dasis. Tis procedure(s) shall provide for a) both qualitative and quantitative measures, appropriate tote needs of the organization: 1b) monitoring of the estens co which the organization's OH&S objectives are met: ©) monitcring the esfectiveness of controls (for health as well as for safery) epsizoor + 11BS OHSAS 18001:2007 45.2 43 45.3.1 proactive measures of performance that monitor conformance ‘with the OHS progranme(s),comtols and operational criteria: 2) reactive measures of performance that moniter health, incidents (Gncluting accidents, near-mises, ef.) and other historical evidence of deficient OHAS performance {recording of data and results of monitoring and measurement sulicent to facilitate subsequent corrective action and preventive action analrss 1 equipments required to monitor or measure performance, the ‘organization shall establish and maintain procedures for the elibration and maintenance of such equipment, as appropriate Records of ‘ablration ond maintenance activites and results shall be retsined Evaluation of compliance 4.2.1 Consistent with its commitment fo compliance [see 4.20). the ‘organization shall establish, implement and maintain procedwre(s) for periodically evaluating compliance with applicable legal requzements (ee 4.3.2), “The eeganizaton shall Keep records ofthe results ef the periodic evaluations NOTE Thefrecuency ofseridic valuation may vary for dering legal 4.5.2.2 The organization shall evaluate compliance with other reauitemtents to which t subscribes (sce 4.3.2), The orgasization may ‘wish to combine this evaluation with the evaluation of legal compliance referred to in 4.5.2.1 or to establish a separate procedures) ‘The organization shall keep records ofthe restts ofthe periodic cevanntions NOTE The frequency of priadie valuation may vary for digiering ether Pequivemonts 2 whiah he organisation subecrBes Incident investigation, noneonformity, corrective action and preventive action Incident investigation ‘The organization shall establish, implement and maintain 3 procedures) to record, investigate and analyse incidents in order to: 4) determine underiying OHS deficiencies andl other factors that, might be causing or Contributing co he oceurrence of incidents; 1) identity the need for corrective action: © identity opportunities for preventive action: 4) identity opportunities for continua improvement ©) commnicate the results of such investigations, “The investigations shall be performed ina timely manner. Any identified need for corrective action or oppormmites for preventive action shall be dealt within accordance wt the relevant parts oft 5.32.BS OHSAS 18001:2007 ‘The rests of incident investigations shall he documented and maintained, Nonconfornuity, corective action and preventive action ‘The organization shall establish, implement and maintain 2 rocedare(s) for dealing with actual and potential nonconformiryties) and for taking corrective action and preventive action. The ‘procedate(s) shall define requirements or 8) identifying and correcting nonconformit(es) and taking action(s) to mitigate their OHS consequences; 1D) investigating nonconformigies) determining their cause(s) and ‘abing actions in order to avoid their recwrence © evaluating the need for action(s) so prevent nonconformiy(ies) and implementing appropriate actions designed to avoid their 4) recording and communicating the results of corrective action(s) ‘and preventive action(s) taken: and ©) reviewing the effectiveness of corretive action(s) and preventive action(s) taken, ‘Where the corrective action and preventive action identities new or changed hazards or the need for new or changed coutrols, the ‘procedure shall requir thar the proposed actions shallbe taken through ask assessment prior 1 implementation Any comectve action or preventive action taken to eliminate the cases of actual and potential nonconformityties) shall be appropriate to the magnitude of problems and commensurate withthe OHS risk(s) cencomtered, ‘The organization shall ensure that any necessary changes arising from corrective action and preventive action are made tothe OH&S ‘management system documentation. Control of records ‘The onganization shall establish and munintain records as necessary to demonstrate conformity tothe requirements ofits OH&S management system and of this OHSAS Standard, and the results achieved. ‘The organization shal establish, implement and maintain a rocedate(s) for the idencifieation, storage, protection, rtrier etention and dispasal of records ‘Records shall be and remain legible, identifiable and craceable Internal andit, ‘The onganization shall ensure that ermal audit of the OH&S: management system are conducted at planned intervals to: 8). determine whether the OHSS management system: 1) conforms to planed arrangewents for OHS management, ‘ching the requirements ofthis OHSAS Standard; anc 2) has been properly amplemtented sud is misintained: and 2) is effecsve in meeting the organization's pole and objectives exsiz07 + 18BS OHSAS 18001:2007 1») ptovide information on the rests of audits to management Aik programme(s) stall be planned, established, implemented and ‘maintained by the organization, based onthe reslisofzsk assessments ofthe organization» actrities, ad the results of previous audits Andie procedie(s) shal be established, implemented and maintained that adress 8) the esponsibiitis, competencies, and requirements for planning fd condeting audits, reporsing results and retaining associated records; an 1) dhe determination of audit criteria, scope, requeney and methods. Selection of anétors and conduct of ants shall ensure objectivity and ‘he impartiality cf che audit process. 4.6 Management review ‘Top management shall review the organization's OHAS management system, at panned intervals, o ensure its continuing suitably. ralequacy and effeediveness. Reviews shall ined assessing ‘opportunitis for improvement and the need for ehanges tothe OHS -manageatent syste, including the OH&S policy and OH&S objectives Records cf the management eviews shall be retained Input to management reviews shall include: 8) results of internal audits and evaluations of compliance with applicable legal requirements and with olher requirements to ‘hich the crganizaton subscribes: 1) the results of participation and consultation (see 4.4.8); ©) relevant commuunication(s) from external interested partes including complaints the OHS performance of dhe organization; ©) the exten to which objectives have been met 1) stams af ncidene investigations, conrective actions and preventive 8) follow-up actions from previous management reviews: 1) changing circumstances, including developments in legal and other requirements rested to OHS: and 1) recommendations for improvement. ‘Tae outputs from management reviews shall be consistent with the organization's commitment to continual improvement and shall ineiude ‘ny decisions and actions related to posible changes to: 8) OH&S performance: bb) OFS potiey and objectives: © resources and 12) other elements ofthe OHSS management system Relevant ouputs from management revive shall be made available for ‘communication and consultation (se2 44.3). 1a + ostaoe