OHSAS 18001:2007

OHSAS
INTERNAL Auditor Course
- Anand Dubey

OHSAS 18000 Series of Standards

for Management Systems
SYSTEMS
SYSTEMS
OH
OH &S
&S Management
Management
Systems
Systems
OHSAS
OHSAS
18001:200
18001:200
77
Specification

OHSAS
OHSAS
18002
18002
General
guidelines
on principles,
systems, and
supporting
techniques

OH
OH &S
&S
Auditing
Auditing
IS
IS
14489:1998
14489:1998
Code of practice on occupational safety
and health audit

Contents of OHSAS
18001:2007

1.
2.
3.
4.

Scope
Normative references
Terms and definitions
OH & S management system requirements:
4.1 General requirements
4.2 OH &S policy
4.3 Planning
4.4 Implementation and operation
4.5 Checking
4.6 Management review
3

1 Scope
This International Standard is applicable to
organization that wishes to:
a) establish, implement, maintain and improve an OH &S
system
b) Assure itself of conformity with its stated
OH & S policy
c) Demonstrate conformity with this International
Standard by:
1) making a self-determination and self-declaration
2) seeking confirmation of its conformance by parties having an
interest in the organization, such as customers
3) seeking confirmation of its self-declaration by a party
external to the organization
4) seeking certification/registration of its OH & S management
4
system by an external organization

This standard prescribes requirements for an

occupational health and safety (OH & S) management
system, to enable an organization to formulate a policy and
objectives.
taking into account
legislative requirements and information about
significant hazards and risks,
It does not itself state specific safety performance criteria.
This standard is applicable to any organization that wishes
to:
a) Implements, maintain and continually improve an OH&S
management system;
b) Assure itself of its conformance with its stated OH&S
policy;

2 Normative References
IS NO.

Title

3786 : 1983

Method of computation of frequency

and
severity rates for industrial
injuries and
classification of industrial
accidents (first revision).

IS/ISO 14001:
Requirements
guidance for use

IS 14489 : 1998
safety and health

Environmental management systems

2004
with

Code of practice on occupational

audit

TERMS N DEFINITIONS

3.1 Accident Unplanned/Undesired

event giving rise to death, ill injury,
damage or other losses to personal or
properly.

3.4 Hazard-

A source or a situation
with a potential to cause harm in terms
of human injury or ill health, damage to
property, damage to the environment or
a combination of these.

3.5 Hazard Identification- The

process of recognizing a hazard in existence
and defining its characteristic/impact.

3.17 Risk-

The combination of
frequency, or probability of occurrence and
consequence of a specified hazardous event.

3.18 Risk Analysis

A
systematic use of available information
to determine how often specified
events may occur and magnitude of
their likely consequences.

3.19 Risk Assessment

The
overall process of estimation the magnitude of
risk and deciding whether the risk is tolerable.

3.20 Safety

State in which the risk of

harm to persons or damage to property is
limited to a tolerable level.

3.21 Tolerable Risk Risk that has

been reduced to a level that can be endured
by the organization having regards to its legal
obligations and its own OH&S Policy.

3.15 Occupational Health

Surveillance- Monitoring the health of
people to detect signs or symptoms of
work related ill health so that steps can
be taken to eliminate, or reduce the
probability of further deterioration.

3.16 Rehabilitation The

managed process of maintaining injured
or ill employees in or returning them to
suitable employment.

OHSAS 18001:2007
Requirements

4.1 General Requirements

The organization shall establish,
document, implement, maintain, and
continually improve an OH & S
management system in accordance
with
OHSAS 18001:2007
The organization shall define and
document the scope of its EMS
14

4.2 OH & S Policy

The OH & S policy must:
Be appropriate to the nature, scale, and impacts of
activities
Contain a specific commitment to continual
improvement of OHS performance
Contain a specific commitment to comply with legal and
other requirements
Be documented, implemented, maintained,
and communicated to all
Be made available to the public
Serve as the framework for objectives
and targets
15

4.2OH & S Policy

What evidence can demonstrate conformity?

Auditor
Auditor
Focus
Focus

1. A policy a that is documented and controlled

as a system document (4.4.5)
2. Evidence that the organizations top management approved
it (4.4.1)
3. Clear statement that OH & S objectives
will be established (4.3.3)
4. Clear statement that compliance to legal
and other requirements will complied with
(4.3.2, 4.5.2)
5. Clear commitment to the continual improvement
of OH & S performance
16

4.2OH & S Policy

What evidence can demonstrate
conformity? Cont

Auditor
Auditor
Focus
Focus

6.Specific commitment to prevention of hazards

7.Availability to all interested parties (4.4.3)
8.Regular review and revision as necessary (4.4.5)
9.Evidence of understanding by all (4.4.1,
4.4.2, 4.4.3)

Why is this done?

. To clearly demonstrate the organizations OH &
S system intent and promise
to meet it
17

HOW TO CHANGE BY POLICY

Successful change can be accomplished by

effective leadership in the areas of :

a)

Determining the organization current

position on
OH&S.

b)

Resource allocation including setting

budgets,
responsibilities, authority and
accountability.

c)

agreed

Coordinated management planning and

4.3 Planning
Clause 4.3 includes:
4.3.1 OH & S hazard Identification ,Risk
assessment and determining control
4.3.2 Legal and Other Requirements
4.3.3 Objectives, Targets, and Programs

20

OH&S Planning

The organization shall carry out an initial review of their

existing arrangements for managing OH&S. The current
position of an organization with regard to OH&S shall be
established by means of an initial review of its current
OH&S arrangements to :

a) Identify the gaps between any existing system in place

and the requirements of this standard;
b) Identify all hazards and risks associated with the
organizations activity and facilities;
c) Assess the level of knowledge and compliance with all
OH&S standards and legislation;
d) Compare current arrangements with best practice and
performance in the organizations employment sector and
other appropriate sectors
e) Review past experience with incidents and results of any
previous assessments, associated with OH&S; and
f) Assess efficiency and effectiveness of existing resources
devoted to OH&S management.

Some common techniques for initial review

include:

a) Questionnaires
b) Interviews with employees.
c) Checklists ,
d) Direct inspection and measurement,
e) Assessments (internal and external),
f) Review of records, and
e) comparison with similar organizations.

External source which may be able to help include:

a) Government agencies in relation to laws and permits,

b) Local or regional libraries or databases,
c) Other organizations for exchange information,
d) Industry associations,
e) Larger customer organizations,
f) Suppliers of equipment, and
g) Professional help

4.3.1 OH & S hazard

Identification
The organization is required to:
Establish a procedure that will allow it
to:
Identify the Hazards, Associated risks, and
control methods within the defined scope of
its OH &S that it can control and those that
it can influence taking into consideration
planned or new developments, or new or
modified activities, products and services:
Determine those HAZARDS that have or can
have
significant RISK on the OH &S.
Ensure that the HAZARDS related to the

24

HAZARDS
A-3.2.1 Hazard identification Tools used to assist in the
identification of hazards include:
a)

Consultation--- people who may have experience in aspects of

the job that they like least and may lead to hazardous activities.

b)

Inspection- A physical inspection of the work environment.

c)

Illness and injury records- Records of past incidents involving

injury and illness highlight
sources of potential harm.

d)

Information/Specialist advise--- The identification of some

hazards will require specialist advice research and information.

e)

Task analysis-----By breaking a task down into its individual

elements hazards associated with the task can be identified.

f)

Formal hazard analysis system, for example HAZOP/HAZAN.

C-5.1.2 Broad categories of Hazard

To help with the process of identifying hazards it is
useful to categorize hazards in different ways, for
example:
a) Mechanical,
b) Electrical,
c) Radiation,
d) Substances,
e) Fire and explosion,
f) Toxic release, and
g) Natural calamities.

Hazard Prompt- List

A complementary approach is to develop a prompt list of questions
such as:
During work activities could the following hazards exist?
a) Slips/falls on the level;
b) Falls of persons from heights;
c) Falls of tools, materials, etc, from heights;
d) Inadequate headroom's;
e) Hazards associated with manual lifting/handling of tools, material
etc;
f) Hazards from plant and machinery associated with assembly ,
commissioning, operation, maintenance, modification, repair and
dismantling;
g) Vehicle hazards, covering both site transport, and travel by road;

h) Fire and explosion;

j) Violence to staff;
k) Substances that may be inhaled;
m) Substances or agents that may damage the eye;
n) Substances that may cause harm by coming into contact with, or
being absorbed through, the skin;
o) Substances that may cause harm by being ingested (for example
entering the body via the moth):
p) Harmful energies (for example, electricity, radiation, noise,
vibration);
q) Work related upper limb disorders resulting from frequently
repeated tasks;
r) Inadequate thermal environment , for example too hot;
s) Lighting levels;
t) Slippery, uneven ground/surfaces;
u) Inadequate guard rails or hand rails on stairs; and
v) Sub-contractor s activities.

LIKELYHOOD OF HARM
a) Number of personnel exposed;
b) Frequency and duration of exposure to the hazard;
c) Failure of services, for example, electricity and water;
d) Failure of plant and machinery components and safety
devices;
e) Exposure to the elements;
f) Protection afforded by personal protective equipment and
usage rate of personal protective equipment; and
g) Unsafe acts (unintended errors or intentional violations of
procedures) by persons, for example, who;
1) may not know what the hazards are; may not have
the knowledge, physical capacity, or skills to do the work;

HIERARCHY OF CONTROLS

SO WHAT WE HAVE TO DO.

Classify work activities

Identify hazards
Determine risk
Decide if risk is tolerable
Prepare risk control action plan
Review adequacy of action plan

CALCULATE RISK

4.3.2 Legal and Other Requirements

OHSAS 18001:2007requires an
organization to establish, implement,
and maintain procedures that allow it
to:
Identify and maintain access to the legal
and other requirements it is required to
meet
Determine how its legal and other
requirements apply to its aspects
37

Legal and Other

Requirements
A distinction must be made between
conformity and compliance:
Conformity: acting in accordance with prevailing
standards or customs
Compliance: fulfilling official requirements

An organization conforms to standards

requirements by choice, while it complies
with the law and other requirements by
legislative or other mandate
38

Compliance to Legal and

Other Requirements
Below are a few clauses of OHSAS that
require consideration of compliance
with legal and other requirements:

OH & S Policy (4.2)

Legal and Other Requirements (4.3.2)
Objectives, Targets and Program(s) (4.3.3)
Operational Control (4.4.6)
Evaluation of Compliance (4.5.2)
39

4.3.2 Legal and Other

Requirements
Auditor
Auditor
What evidence can demonstrate conformity?
Focus
Focus

Procedure to identify applicable legal and

other requirements. (4.2, 4.4.5)
The communication of legal and other
requirements
to relevant personnel and parties (4.4.2, 4.4.3)
The up to date maintenance of this information
(4.5.4)

Why is this done?

To promote awareness and understanding of
the
legal and other responsibilities of the
organization

40

4.3.3 Objectives, Targets and

Programs
Programs must include:
Designation of those responsible for
achieving objectives and targets
Means and time frame to achieve
objectives and targets

42

OH & S Objectives
Overall OH & S goal, consistent
with the OH & S policy, that an
organization sets itself to achieve

43

OH & S Targets
Detailed, performance
requirement, applicable to the
organization or parts thereof, that
arises from the OH & S objectives
and that needs to be set and met in
order to achieve those objectives

44

EXAMPLE
Objective
Target
Indicator

Implement an OH&S management system

Full implementation within six months
Percentage of departmental meeting audit criteria

(Objective :
within six

All business units to fully meet system audit criteria

months.)

or
Objective Reduce injuries associated with manual handling
Target
Indicator

20 Percent reduction from previous year

Percentage of manual handling injuries
per year
(Objective : Reduce the percentage of manual handling injuries by
20 percent
from the previous year in the next 12 month)

4.4 Implementation and

Operation
Clause 4.4 includes:
4.4.1
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7

Resources, Roles, Responsibility and Authority

Competence, Training and Awareness
Communication
Documentation
Control of Documents
Operational Control
Emergency Preparedness and Response

46

Structure &
Responsibilities
Documented roles, responsibilities,
authorities, and accountability
Management appointee responsible for
implementation
Resources
Managers must demonstrate commitment
to continual improvement

www.eighty20consulting.co.uk

Training, Awareness &

Competence
Ensure employee awareness and
competence
Take into account differing levels of:

Responsibility
Ability
Literacy
Risk

Much of required training driven by

regulation
www.eighty20consulting.co.uk

Consultation &
Communication
More internally focused than ISO 14001
Employee involvement and consultation
in development/review of policies and
procedures
about changes that affect workplace safety or
health
ensuring representation in OH&S matters

Buy-in, ownership, motivation

Insights of shop floor perspective
www.eighty20consulting.co.uk

Documentation & Data

Documentation of core elements
aids employee awareness
shows how the various system relate
extremely valuable during certification
process

Document and data control procedures

critical documents are available
obsolete documents and data are removed

www.eighty20consulting.co.uk

Operational Control
Identify operations and activities where
risk requires further control
Plan these to ensure that
documented procedures are developed
operating criteria specify key steps and
requirements
procedures addressing risks related to
contractor goods and services
establish design procedures to
reduce/eliminate source of risks
www.eighty20consulting.co.uk

Operational Controls
Sample procedures can include:
Those developed to guide regulatory
compliance for activities such as:
Transferring chemicals to or between tanks
Minimizing waste when painting
Hazardous waste management
Permitted operations (air emissions, waste
water, storm water, etc)
Spill control contingency countermeasures
plans (SPCCP)
Purchasing guidelines for hazardous materials

52

Operational Control

www.eighty20consulting.co.uk

Emergency Preparedness
& Response
Emergency response procedures to
address
identifying potential for incidents and
emergencies
preventing and mitigating resultant illnesses
and injuries
responding to incidents and emergencies
when they occur.

www.eighty20consulting.co.uk

Emergency Preparedness
& Response

www.eighty20consulting.co.uk

4.5.Checking & Corrective

Action
Performance measurement and
monitoring
Accidents, incidents, non-conformances
and corrective and preventive action
Records and records management
OH&S management system audit

www.eighty20consulting.co.uk

Performance
Measurement &
Monitoring
Monitoring the achievement of objectives
Quantitative and qualitative measures
Proactive and reactive methods
Records to facilitate corrective and
preventive actions
Calibration of monitoring equipment

www.eighty20consulting.co.uk

Quantitative & Qualitative

Direct Quantitative Measures
number of lost work days following an injury
decibel levels of noise in a work area

Indirect Qualitative Measures

review of inspection logs
observation of a task
interviews

www.eighty20consulting.co.uk

Proactive & Reactive

Measures
Proactive monitoring of compliance
routine basis, independent of any event
monitoring may be required by regulations
daily equipment checks
periodic review of hot-work permits

Reactive monitoring of accidents or

incidents
in response to an event or trigger
accident investigation
monitoring in response to a complaint
www.eighty20consulting.co.uk

Accident, Incidents, Nonconformances & Corrective and

Preventive Action

Handle, investigate, mitigate

Accidents
Incidents
non-conformances

Corrective and preventive actions

Review action plans through risk
assessment process

www.eighty20consulting.co.uk

Accident, Incidents & Nonconformances

Handle = immediate action
Notification
emergency response
recordkeeping to facilitate investigation

Investigation process
team and procedures
root cause analysis

People are involved

human elements

www.eighty20consulting.co.uk

Corrective and Preventive

Action
Correct immediate problem
Mitigate consequences
Eliminate or control root cause
Prevent recurrence
Review action plans through risk
assessment process
Communicate results and monitor

www.eighty20consulting.co.uk

Records & Record

Management
Identification, maintenance, and
disposition
Records must be:

Legible
Identifiable
traceable to the activities involved
easily retrievable
protected from damage, deterioration, or loss
held for specified and documented retention
times
www.eighty20consulting.co.uk

OH&S Management System

Audit
Determine if OH&S-MS:
conforms with planned arrangements
is properly implemented and maintained
is effective in meeting policy and objectives

Results provided to top management

Audit program and schedule reflect risks
and previous audit results

www.eighty20consulting.co.uk

Management Review

www.eighty20consulting.co.uk

OHSAS 18001 Occupational health

and safety
management system

www.eighty20consulting.co.uk