You are on page 1of 59

The Draft OHSAS 18001:2007

by

Charles Corrie
Secretary to the
OHSAS Project Group

May 2007, INLAC, Ixtapa 1

Foreword
Introduction

- Both very similar to those given in ISO 14001
- Informative material only

May 2007, INLAC, Ixtapa 2

1. Scope

This Occupational Health and Safety Assessment Series
(OHSAS) Standard specifies requirements for an occupational
health and safety (OH&S) management system, to enable an
organization to control its OH&S risks and improve its OH&S
performance. It does not state specific OH&S performance
criteria, nor does it give detailed specifications for the design of
a management system.

This OHSAS Standard is applicable to any organization that
wishes to:
a) establish an OH&S management system to eliminate or
minimize risks to personnel and other interested parties who
could be exposed to OH&S hazards associated with its
activities

May 2007, INLAC, Ixtapa 3

1. Scope - continued

b) implement, maintain and continually improve an OH&S
management system;

c) assure itself of its conformity with its stated OH&S policy;

d) demonstrate conformity with this OHSAS Standard by
1) making a self-determination and self-declaration, or
2) seeking confirmation of its conformance by parties
having an interest in the organization, such as customers,
or
3) seeking confirmation of its self-declaration by a party
external to the organization, or
4) seeking certification/registration of its OH&S
management system by an external organization.

May 2007, INLAC, Ixtapa 4

1. Scope - continued

All the requirements in this OHSAS Standard are intended to be
incorporated into any OH&S management system. The extent
of the application will depend on such factors as the OH&S
policy of the organization, the nature of its activities and the
risks and complexity of its operations.

This OHSAS Standard is intended to address occupational
health and safety, and is not intended to address other health
and safety areas such as employee wellbeing/wellness
programs, product safety, property damage or environmental
impacts.

May 2007, INLAC, Ixtapa 5

2. “corrective action”. “preventive action” May 2007. Reference publications Now limited to purely international documents 3. e. for “nonconformity”.g. INLAC. Terms and definitions A number of new terms now imported from ISO 9001 or ISO 14001. Ixtapa 6 .

or a combination of these 3. May 2007. situation.6 hazard source. INLAC. Ixtapa 7 .3.8 ill health identifiable.8).1 acceptable risk risk that has been reduced to a level that can be tolerated by the organization having regard to its legal obligations and its own OH&S policy (3.16) 3. or act with a potential for harm in terms of human injury or ill health (3. adverse physical or mental condition arising from and /or made worse by a work activity and/or work- related situation.

"near-hit".3.7) is a particular type of incident May 2007. or fatality occurs may also be referred to as a “near-miss”.4.8) (regardless of severity) or fatality occurred.9 incident work-related event(s) in which an injury or ill health (3. ill health. or could have occurred NOTE 1 An accident is an incident which has given rise to injury. INLAC. NOTE 2 An incident where no injury. Ixtapa 8 . NOTE 3 An emergency situation (see 4. ill health or fatality. "close call" or "dangerous occurrence".

INLAC. contractor personnel. the health and safety of employees/workers. Ixtapa 9 . or could affect.3.12 occupational health and safety (OH&S) conditions and factors that affect.23) NOTE Organizations can have a legal requirement for the health and safety of persons beyond the immediate workplace. visitors and any other person in the workplace (3. temporary workers. or who are exposed to the workplace activities May 2007.

INLAC.3. May 2007.8) that can be caused by the event or exposure(s). Ixtapa 10 .21 risk combination of the likelihood of an occurrence of a hazardous event or exposure(s) and the severity of injury or ill health (3.

travelling or in transit (e. INLAC. on boats or trains). driving. for example. or working at home May 2007.17) should take into account the OH&S effects on personnel who are. flying. the organization (3.23 workplace any physical location in which work related activities are performed under the control of the organization NOTE When giving consideration to what constitutes a workplace. working at the premises of a client or customer.g.3. Ixtapa 11 .

May 2007. implement. Ixtapa 12 . maintain and continually improve an OH&S management system in accordance with the requirements of this OHSAS Standard and determine how it will fulfil these requirements. The organization shall define and document the scope of its OH&S management system.1 General requirements The organization shall establish. INLAC.4. document.

Ixtapa 13 .4.2 OH&S policy Top management shall define and authorise the organization's OH&S policy and ensure that within the defined scope of its OH&S management system it: a) is appropriate to the nature and scale of the organization’s OH&S risks. b) includes a commitment to prevention of injury and ill health and continual improvement in OH&S management and OH&S performance c) includes a commitment to at least comply with applicable legal requirements and with other requirements to which the organization subscribes that relate to its OH&S hazards May 2007. INLAC.

Ixtapa 14 .4. May 2007. implemented and maintained. and h) is reviewed periodically to ensure that it remains relevant and appropriate to the organization. f) is communicated to all persons working under the control of the organization with the intent that they are made aware of their individual OH&S obligations.2 OH&S policy d) provides the framework for setting and reviewing OH&S objectives. g) is available to interested parties. INLAC. e) is documented.

risk assessment. capabilities and other human factors. b) activities of all persons having access to the workplace (including contractors and visitors). and determination of necessary controls. The procedure(s) for hazard identification and risk assessment shall take into account: a) routine and non-routine activities. d) identified hazards originating outside the workplace capable of adversely affecting the health and safety of persons under the control of the organization within the workplace May 2007.1 Hazard identification.4.3. Ixtapa 15 .3 Planning 4. implement and maintain a procedure(s) for the ongoing hazard identification. c) human behaviour. risk assessment and determining controls The organization shall establish. INLAC.

or materials. INLAC. f) infrastructure.1 . g) changes or proposed changes in the organization. Ixtapa 16 .continued e) hazards created in the vicinity of the workplace by work- related activities under the control of the organization. May 2007. equipment and materials at the workplace.3. NOTE 1 It may be more appropriate for such hazards to be assessed as an environmental aspect. its activities.4. whether provided by the organization or others.

processes. machinery/equipment.4. and activities. including temporary changes. INLAC. processes. including their adaptation to human capabilities May 2007. i) any applicable legal obligations relating to risk assessment and implementation of necessary controls (see also the NOTE to 3.12) j) the design of work areas.1 . installations. operating procedures and work organization.continued h) modifications to the OH&S management system. Ixtapa 17 .3. and their impacts on operations.

May 2007. as appropriate. For the management of change. nature and timing to ensure it is proactive rather than reactive. prioritization and documentation of risks.continued The organization’s methodology for hazard identification and risk assessment shall: a) be defined with respect to its scope. the organization shall identify the OH&S hazards and OH&S risks associated with changes in the organization. or its activities.1 . the OH&S management system. INLAC.4. prior to the introduction of such changes. and b) provide for the identification.3. Ixtapa 18 . and the application of controls.

continued The organization shall ensure that the results of these assessments are considered when determining controls.4. INLAC. see OHSAS 18002. risk assessment and risk controls. May 2007. or considering changes to existing controls. Ixtapa 19 . NOTE 2 For further guidance on hazard identification. consideration shall be given to reducing the risks according to the following hierarchy: a) elimination b) substitution c) engineering controls d) signage/warnings and/or administrative controls e) personal protective equipment.3. When determining controls.1 .

May 2007. The organization shall ensure that the OH&S risks and determined controls are taken into account when establishing.1 . NOTE 2 For further guidance on hazard identification. see OHSAS 18002. Ixtapa 20 . implementing and maintaining its OH&S management system. risk assessments and determined controls up to date. risk assessment and risk controls.3.continued The organization shall document and keep the results of identification of hazards.4. INLAC.

INLAC. Ixtapa 21 .2 Legal and other requirements The organization shall establish. The organization shall communicate relevant information on legal and other requirements to persons working under its control. and to other relevant interested parties.3. The organization shall keep this information up-to-date. implementing and maintaining its OH&S management system. May 2007.4. The organization shall ensure that these applicable legal requirements and other requirements to which the organization subscribes are taken into account in establishing. implement and maintain a procedure(s) for identifying and accessing the legal and other OH&S requirements that are applicable to it.

INLAC. and to continual improvement. May 2007. Ixtapa 22 . The objectives shall be measurable. including the commitments to the prevention of injury and ill health. implement and maintain documented OH&S objectives.3. at relevant functions and levels within the organization.3 Objectives and programme(s) The organization shall establish. to compliance with applicable legal requirements and with other requirements to which the organization subscribes. and consistent with the OH&S policy. where practicable.4.

Ixtapa 23 . and its OH&S risks. its financial. It shall also consider its technological options. an organization shall take into account the legal requirements and other requirements to which the organization subscribes.3. operational and business requirements.continued When establishing and reviewing its objectives. INLAC.4.3 . and the views of relevant interested parties. May 2007.

3 .continued The organization shall establish. and b) the means and time-frame by which the objectives are to be achieved.3. The programme(s) shall be reviewed at regular and planned intervals. INLAC. Ixtapa 24 . May 2007. Programme(s) shall include as a minimum a) designation of responsibility and authority for achieving objectives at relevant functions and levels of the organization. implement and maintain a programme(s) for achieving its objectives.4. and adjusted as necessary. to ensure that the objectives are achieved.

4. responsibilities. b) defining roles. NOTE 1 Resources include human resources and specialized skills. Top management shall demonstrate its commitment by a) ensuring the availability of resources essential to establish. roles.1 Resources. and authorities shall be documented and communicated. allocating responsibilities and accountabilities. Ixtapa 25 . to facilitate effective OH&S management. May 2007. maintain and improve the OH&S management system.4. and delegating authorities. technology and financial resources. INLAC. organizational infrastructure. roles. accountabilities. responsibility.4 Implementation and operation 4. implement. accountability and authority Top management shall take ultimate responsibility for OH&S and the OH&S management system.

a Board or executive committee member) may delegate some of their duties to a subordinate management representative(s) while still retaining accountability.4.1 – continued The organization shall appoint a member(s) of top management with specific responsibility for OH&S. and with defined roles and authority for: a) ensuring that the OH&S management system is established. implemented and maintained in accordance with this OHSAS Standard. NOTE 2 The top management appointee (e. b) ensuring that reports on the performance of the OH&S management system are presented to top management for review and used as a basis for improvement of the OH&S management system.4. May 2007. INLAC. in a large organization. irrespective of other responsibilities.g. Ixtapa 26 .

All those with management responsibility shall demonstrate their commitment to the continual improvement of OH&S performance. including adherence to the organization’s applicable OH&S requirements. The organization shall ensure that persons in the workplace take responsibility for aspects of OH&S over which they have control. INLAC.1 – continued The identity of the top management appointee shall be made available to all persons working under the control of the organization. May 2007.4. Ixtapa 27 .4.

training and awareness The organization shall ensure that any person(s) under its control performing tasks that can impact on OH&S is (are) competent on the basis of appropriate education.2 Competence. Ixtapa 28 .4. It shall provide training or take other action to meet these needs. and shall retain associated records. evaluate the effectiveness of the training or action taken. INLAC. training or experience. and retain associated records. The organization shall identify training needs associated with its OH&S risks and its OH&S management system. May 2007.4.

Ixtapa 29 . and b) risk. b) their roles and responsibilities and importance in achieving conformity to the OH&S policy and procedures and to the requirements of the OH&S management system. INLAC. language skills and literacy.4. implement and maintain a procedure(s) to make persons working under its control aware of a) the OH&S consequences. May 2007. Training procedures shall take into account differing levels of: a) responsibility.continued The organization shall establish.4. and the OH&S benefits of improved personal performance.2 . including emergency preparedness and response requirements (see 4.4. their behaviour.7). c) the potential consequences of departure from specified procedures. actual or potential. ability. of their work activities.

Ixtapa 30 .4. documenting and responding to relevant communications from external interested parties. May 2007.1 Communication With regard to its OH&S hazards and OH&S management system.4. participation and consultation 4. b) communication with contractors and other visitors to the workplace c) receiving.3 Communication. INLAC. the organization shall establish. implement and maintain a procedure(s) for a) internal communication among the various levels and functions of the organization.3.4.

INLAC.3.appropriate involvement in incident investigation.involvement in the development and review of OH&S policies and objectives. Ixtapa 31 . implement and maintain a procedure(s) for: a) the participation of workers by their : . risk assessments and determination of controls.4. .4. including who is their representative(s) on OH&S matters. .appropriate involvement in hazard identification. Workers shall be informed about their participation arrangements.2 Participation and consultation The organization shall establish. May 2007. .consultation where there are any changes that affect their OH&S.representation on OH&S matters. .

3. Ixtapa 32 . when appropriate.2 -continued b) consultation with contractors where there are changes that affect their OH&S.4.4. The organization shall ensure that. May 2007. relevant external interested parties are consulted about pertinent OH&S matters. INLAC.

c) description of the main elements of the OH&S management system and their interaction. and reference to related documents. Ixtapa 33 . May 2007.4. b) description of the scope of the OH&S management system. INLAC.4 Documentation The OH&S management system documentation shall include a) the OH&S policy and objectives.4.

4 .4. hazards and risks concerned and is kept to the minimum required for effectiveness and efficiency. INLAC. Ixtapa 34 .continued d) documents. determined by the organization to be necessary to ensure the effective planning. operation and control of processes that relate to the management of its OH&S risks. May 2007. and e) documents. including records. NOTE It is important that documentation is proportional to the level of complexity.4. including records. required by this OHSAS Standard.

b) review and update as necessary and re-approve documents. The organization shall establish.5 Control of documents Documents required by the OH&S management system and by this OHSAS Standard shall be controlled.4. INLAC. implement and maintain a procedure(s) to a) approve documents for adequacy prior to issue. May 2007.4.4. c) ensure that changes and the current revision status of documents are identified.5. Ixtapa 35 . Records are a special type of document and shall be controlled in accordance with the requirements given in 4.

4. INLAC.continued d) ensure that relevant versions of applicable documents are available at points of use. Ixtapa 36 . May 2007. and g) prevent the unintended use of obsolete documents and apply suitable identification to them if they are retained for any purpose. e) ensure that documents remain legible and readily identifiable. f) ensure that documents of external origin determined by the organization to be necessary for the planning and operation of the OH&S management system are identified and their distribution controlled.5 .4.

6 Operational control The organization shall determine those operations and activities that are associated with the identified hazard(s) where the implementation of controls is necessary to manage the OH&S risk(s). b) controls related to purchased goods.1) For those operations and activities. the organization shall implement and maintain: a) operational controls. This shall include the management of change (see 4. Ixtapa 37 . as applicable to the organization and its activities. equipment and services May 2007.4. the organization shall integrate those operational controls into its overall OH&S management system.4. INLAC.3.

continued c) controls related to contractors and other visitors to the workplace d) documented procedures. INLAC.4. to cover situations where their absence could lead to deviations from the OH&S policy and the objectives. e) stipulated operating criteria where their absence could lead to deviations from the OH&S policy and objectives May 2007.6 .4. Ixtapa 38 .

INLAC.4. implement and maintain a procedure(s): a) to identify the potential for emergency situations. The organization shall respond to actual emergency situations and prevent or mitigate associated adverse OH&S consequences. b) to respond to such emergency situations.4. In planning its emergency response the organization shall take account of the needs of relevant interested parties.g. Ixtapa 39 . May 2007.7 Emergency preparedness and response The organization shall establish. e. emergency services and neighbours.

revise its emergency preparedness and response procedure(s). involving relevant interested parties as appropriate.continued The organization shall also periodically test its procedure(s) to respond to emergency situations. where practicable.3). in particular.4. where necessary. INLAC. The organization shall periodically review and.5.4.7 . Ixtapa 40 . May 2007. after periodical testing and after the occurrence of emergency situations (see 4.

1 Performance measurement and monitoring The organization shall establish. May 2007.4. b) monitoring of the extent to which the organization’s OH&S objectives are met. INLAC. c) monitoring the effectiveness of controls (for health as well as for safety) d) proactive measures of performance that monitor conformance with the OH&S programme(s). controls and operational criteria. appropriate to the needs of the organization.5. Ixtapa 41 . implement and maintain a procedure(s) to monitor and measure OH&S performance on a regular basis. This procedure(s) shall provide for: a) both qualitative and quantitative measures.5 Checking 4.

near-misses. May 2007. incidents (including accidents. Records of calibration and maintenance activities and results shall be retained. If equipment is required to monitor or measure performance.4.1 . as appropriate.continued e) reactive measures of performance that monitor ill health. f) recording of data and results of monitoring and measurement sufficient to facilitate subsequent corrective action and preventive action analysis. the organization shall establish and maintain procedures for the calibration and maintenance of such equipment.5. and other historical evidence of deficient OH&S performance. Ixtapa 42 . etc.). INLAC.

1 Consistent with its commitment to compliance (see 4. INLAC.3.2 Evaluation of compliance 4. Ixtapa 43 .5. The organization shall keep records of the results of the periodic evaluations. NOTE The frequency of periodic evaluation may vary for differing legal requirements May 2007. the organization shall establish.2c)).5.4.2). implement and maintain a procedure(s) for periodically evaluating compliance with applicable legal requirements (see 4.2.

2). NOTE The frequency of periodic evaluation may vary for differing other requirements to which the organization subscribes May 2007. The organization shall keep records of the results of the periodic evaluations.3. The organization may wish to combine this evaluation with the evaluation of legal compliance referred to in 4.5.2.2 The organization shall evaluate compliance with other requirements to which it subscribes (see 4.2. Ixtapa 44 .4.5. INLAC.1 or to establish a separate procedure(s).

5. nonconformity. corrective action and preventive action 4.1 Incident investigation The organization shall establish. investigate and analyze incidents in order to a) determine underlying OH&S deficiencies and other factors that might be causing or contributing to the occurrence of incidents. INLAC. Ixtapa 45 .5. implement and maintain a procedure(s) to record.3 Incident investigation.4.3. b) identify the need for corrective action c) identify opportunities for preventive action d) identify opportunities for continual improvement May 2007.

Ixtapa 46 . The results of incident investigations shall be documented and maintained.2. May 2007.1 .3.continued e) communicate the results of such investigations The investigations shall be performed in a timely manner.4. Any identified need for corrective action or opportunities for preventive action shall be dealt with in accordance with the relevant parts of 4.5.5.3. INLAC.

2 Nonconformity. Ixtapa 47 occurrence. The procedure(s) shall define requirements for a) identifying and correcting nonconformity(ies) and taking action(s) to mitigate their OH&S consequences. c) evaluating the need for action(s) to prevent nonconformity(ies) and implementing appropriate actions designed to avoid their May 2007. implement and maintain a procedure(s) for dealing with actual and potential nonconformity(ies) and for taking corrective action and preventive action.3. corrective action and preventive action The organization shall establish.4. . INLAC. b) investigating nonconformity(ies). determining their cause(s) and taking actions in order to avoid their recurrence.5.

and e) reviewing the effectiveness of corrective action(s) and preventive action(s) taken.3.5.2 . INLAC.4. the procedure shall require that the proposed actions shall be taken through a risk assessment prior to implementation. Ixtapa 48 . Where the corrective action and preventive action identifies new or changed hazards or the need for new or changed controls.continued d) recording and communicating the results of corrective action(s) and preventive action(s) taken. May 2007.

May 2007.continued Any corrective action or preventive action taken to eliminate the causes of actual and potential nonconformity(ies) shall be appropriate to the magnitude of problems and commensurate with the OH&S risk(s) encountered.4.5. The organization shall ensure that any necessary changes arising from corrective action and preventive action are made to the OH&S management system documentation.3. Ixtapa 49 . INLAC.2 .

identifiable and traceable. protection. and the results achieved. retention and disposal of records.5. implement and maintain a procedure(s) for the identification. storage.4. INLAC. The organization shall establish. May 2007. Records shall be and remain legible. Ixtapa 50 .4 Control of records The organization shall establish and maintain records as necessary to demonstrate conformity to the requirements of its OH&S management system and of this OHSAS Standard. retrieval.

5.5 Internal audit The organization shall ensure that internal audits of the OH&S management system are conducted at planned intervals to a) determine whether the OH&S management system 1) conforms to planned arrangements for OH&S management including the requirements of this OHSAS Standard and 2) has been properly implemented and is maintained.4. INLAC. May 2007. and 3) is effective in meeting the organization’s policy and objectives. Ixtapa 51 . b) provide information on the results of audits to management.

Audit procedure(s) shall be established.continued Audit programme(s) shall be planned. Selection of auditors and conduct of audits shall ensure objectivity and the impartiality of the audit process. implemented and maintained that address a) the responsibilities. May 2007. based on the results of risk assessments of the organization’s activities.4. and the results of previous audits. Ixtapa 52 . and requirements for planning and conducting audits.5. scope. reporting results and retaining associated records. implemented and maintained by the organization. b) the determination of audit criteria. established.5 . INLAC. competencies. frequency and methods.

at planned intervals. adequacy and effectiveness. May 2007.6 Management review Top management shall review the organization's OH&S management system. to ensure its continuing suitability. Input to management reviews shall include a) results of internal audits and evaluations of compliance with applicable legal requirements and with other requirements to which the organization subscribes. Reviews shall include assessing opportunities for improvement and the need for changes to the OH&S management system. including the OH&S policy and OH&S objectives.4. INLAC. Ixtapa 53 . Records of the management reviews shall be retained.

3) c) relevant communication(s) from external interested parties.continued b) the results of participation and consultation (see 4. d) the OH&S performance of the organization. May 2007. corrective actions and preventive actions.6 .4.4. INLAC. Ixtapa 54 . e) the extent to which objectives have been met. including complaints. g) follow-up actions from previous management reviews. f) status of incident investigations.

INLAC. including developments in legal and other requirements related to OH&S.continued h) changing circumstances. Ixtapa 55 .6 . and i) recommendations for improvement. and May 2007. The outputs from management reviews shall be consistent with the organization's commitment to continual improvement and shall include any decisions and actions related to possible changes to a) OH&S performance b) OH&S policy and objectives c) resources.4.

6 .continued d) other elements of the OH&S management system.4.3). Ixtapa 56 . INLAC.4. Relevant outputs from management review shall be made available for communication and consultation (see 4. May 2007.

1 Provision of 6. 5.2 Management representative 6. roles. responsibility.Annex A – Correspondence between OHSAS 18001:2007. Resources.5. roles.1 Responsibility and authority authority 5.1 Resources.4.3 resources Infrastructure May 2007. 4. responsibility and commitment 1 accountability and authority 5.1 Management 4. ISO 14001:2004 and ISO 9001:2000 Example of the tabular presentation OHSAS 18001:2007 ISO 14001:2004 ISO 9001:2000 4. Ixtapa 57 . INLAC.5.

following final editing and typesetting May 2007. Ixtapa 58 . INLAC.Publication of OHSAS 18001:2007 is expected at the end of June/ early July.

Ixtapa 59 . INLAC.Thank you For Your attention Charles Corrie May 2007.