Transitioning OHSAS 18001:2007 to ISO 45001:2018

Transitioning OHSAS 18001:2007 to ISO 45001:2018

Migrating

Introductions

Founder and MD of Kingsford Consultancy Services Limited

Former Head of Tech Services CQI/IRCA, CQI SMT

Chair of CQI Standards Panel & CQI Technical Assessor

PECB Scheme Committee member

ISO PC 283 and ISO TC 283

• 1 work-related death every 15 seconds (240 during this presentation)

• 300 million work related accidents per annum

• 160 million work related diseases per annum

• Cost = 4% of world GDP = U$3 trillion

Source = International Labour Organization (ILO)

Why is OH&S important?

OH&S- Link to UN sustainable development goals

Helping organisations develop the effectiveness of their OH&S management systems aligns with several of the United Nations (UN) Sustainable Development Goals (SDGs).

Goals effective from01.01.2016

Time horizon 01.01.2030

ISO 45001 contributes towards

Benefits of operating an OH&S Mgt System

Improved ability to respond to regulatory

compliance issues

Reduces the overall cost of incidents (probability

and/or impact)

Reduced downtime and costs of disruption

Reduced insurance premiums

Reduced absenteeism and turnover rates

Increased business, tender requirement

Morally it’s the right thing to do

Protects reputation Avoiding jail

OH&S Management Standards

1993

BS 8750

1996

BS 8800

1999

OHSAS 18001

2000

OHSAS 18002

2007

OHSAS 18001revised

2008

OHSAS 18002revised

Nov 2013

ISO 45001 proposed

Mar2018

ISO 45001 published

Some other stuff going on

A very long time

ago

2019 2020

promotion relegation

HSG 65

2013

HSG 65revised

1991 1997

HSG 65revised

Mar2021

Won’t bother me

2004

BS 8800revised

Migration

1987

ISO 9001QMS

OHSAS 18001

• Provides requirements for an occupational Health & Safety (OH&S) system

• First published in 1999 and revised in 2007 (changes to structure / new requirements / aligned with ISO 14001)

• 4 main clauses – Scope, Reference publications, Terms and definitions (23), OH&S management system requirements

• P-D-C-A based. Identification of hazards, risk assessment, determine controls, implement controls, evaluate controls, evaluate compliance, seek improvement.

• Not an ISO standard but globally adopted (92,000+ certificates, 130 countries)

• Had an associated guidance standard BS OHSAS 18002

• Was withdrawn March 2018 (when ISO 45001 published)

ISO 45001Occupational Health and Safety Management Systems -Requirements with guidance for use

TC 283 committee membership

71 participating members (blue) and 19 observing members (orange).

Figures correct as of January 2019

It provides a framework to establish OH&S management policies, objectives, processes and governance, and facilitates an organization's achievement of its strategic goals.

What is ISO 45001?

Helps organizations integrate OH&S into their overall business management system.

ISO 45001 defines the requirements for an OH&S management system and gives guidance what they mean.

It focuses on the need for a management system, not the management of specific types of hazards and risks.

BSI shop = £126 (£63 for BSI members)ISO shop = CHF 158ANSI shop = $185

Provides criteria for internal and external audit

ISO 45001’s stated aims

To prevent work related injury and ill

health (including mental ill health) to

workers

To provide safe and healthy workplaces

Eliminate hazards and minimise

OH&S risks

Taking effective preventive and

protective measures

Continual Improvement of

OH&S performance

How? How? Outcomes?Fulfilment of legal requirements and

other requirements

Achievement of health and safety

objectives

DoAct

Check

Plan

Internal and external issues(4.1)

Needs andexpectations of interested

parties(4.2)

Context of the organization(4)

PerformanceEvaluation

(9)

Improvement(10)

Support and Operation

(7 & 8)

Planning(6)

Leadership and Worker participation

(5)

Scope of the OH&S management System (4.3/4.4)

ISO 45001 clauses

0. Introduction1. Scope2. Normative references3. Terms and definitions4. Context of the

organization5. Leadership and worker

participation6. Planning7. Support8. Operation9. Performance Evaluation10. ImprovementAnnex A – Guidance on use (clarification of requirements) continual improvement of OH&S performance

fulfilment of legal requirements and other requirements

achievement of health and safety objectives

How does an OHSMS lead to improved OH&S performance?

Developing and implementing an OH&S policy and OH&S objectives establishes a

clear direction of travel

Establishing systematic processes based on context and legal and other

requirements increases the probability of achieving intended outcomes

Determining the hazards and risks associated with activities and then

eliminating or controlling them reduces the chance of adverse OH&S outcomes

Increasing awareness of the importance of the OHSMS means

conformance is more likely

Evaluation of OH&S performance allows the organisation to make evidence

based OH&S decisions and undertake fact based improvement planning

Consultation with and participation of workers in the OHSMS results in shared

ownership and higher motivation

• Existing national legislation – potential conflicts with an ISO OH&S standard

• National standards – well established Australia/New Zealand, USA

• Concern about the standard being used as a charter for consultants

• Concern regarding the costs associated with certification

An international OHS standard - why so long in the making?

ISO 45001 – specific delay factors

Problem areas:

• OH&S or OS&H?

• Consultation and participation or Participation and consultation?

• Extent of worker participation?

• Role of workers representatives

• Definition of ‘worker’ and ‘workplace’

• Outsourcing

• Volume of comments at each stage – WD=1,500 CD=2,500, DIS=3,000

• Proportionality (applicability to SMEs)

HSE’s view of ISO 45001

May help demonstrate compliance with H&S law but ..... it goes beyond what the law requires

If you are familiar with implementing Standards then adopting ISO 45001 will be straight forwarded, but if you aren’t.........

ISO 45001 states it is applicable to organisations of all sizes and complexities but ......

There is a danger contracting organisations will demand ISO 45001 but OH&S compliance can be achieved in other ways

The costs of audit and certification associated with ISO 45001 could be prohibitive for small organisations

• Context of the organisation – must consider wider business ‘environment’. PESTLE and stakeholder requirements

• Leadership – top management to take a much more active role, setting direction, fostering trust, promoting positive OH&S culture, communicating importance of OH&S management system

• Documented information – includes electronic and processed information, no reference to ‘documentation’, ‘records’ or ‘documented procedures’.

How does ISO 45001 differ from OHSAS 18001?

Greater focus on:

• Worker participation – top management to ensure more non-managerial participation in OHSMS

• Continual improvement – OH&S performance and the OHSMS itself

• Hierarchy of control – apply at planning and operational stages to design out problems asap

• Risk management – ongoing assessment of risks and opportunities for OH&S and OHSMS

How does ISO 45001 differ from OHSAS 18001?

• Compliance status – requires a process to ensure relevant legal and other requirements are taken into account, kept up to date and compliance status is checked

• Contractors, procurement, outsourcing – requirement for specific processes to manage these issues safely

• Performance evaluation – requires criteria for evaluating not only OH&S performance but also the OHSMS’ ability to produce its intended results

How does ISO 45001 differ from OHSAS 18001?

• Confirm you wish to undertake migration

• Understand the new requirements

• Secure approval and resources to migrate (including budget)

• Communicate intentions internally and externally

• Educate top management

• Undertake training of key personnel including auditors

• Proceed as follows .....

Migration - first steps

Migration process – March 2021

Gap Analysis

(ISO 45001 as criteria)

Design Action Plan

Implement Plan

The length of any journey depends on two things....

intended destination and your starting point

Achieved ISO 45001 Conformty

On the home front – HS/1

Occupational health and safety management systems

• BS ISO 45001:2018 - Requirements with guidance for use

British (only) standards

• BS 45002-0:2018 – General guidelines for the application of ISO 45001

• BS 45002-1:2018 - Guidance on managing occupational health

• BS 45002-2:2019 - Risks and opportunities

• BS 45002-3:2018 - Guidance on incident investigation

ISO 45003Psychological Health & Safety in the Workplace – Guidance

Mental health - UK context

• 1 in 4 people will experience a mental health problem each year

• 6 out of every 100 people suffer ‘general anxiety’

• 3 out of every 100 people are clinically depressed

• 21 out of every 100 people have had suicidal thoughts during their lifetime

• 7 out of every 100 people have attempted suicide during their lifetime.

- Source Mind 2016

How will it benefit users?

• It will be the first international standard dealing with psychological health and safety in the workplace.

• It is hoped that the credibility of a global standard will encourage more organisations to address this important issue.

• Provides guidance on how large and small organizations can manage workplace psychosocial risk by identifying the primary risk factors and determining what would improve the working environment.

What guidance will ISO 45003 provide?

ISO 45003 will provide guidance to organisations on:

• how to identify the conditions, circumstances and workplace demands that have the potential to impair the psychological health and wellbeing of employees

• how to identify primary risk factors and assess them to determine what changes are required to improve the working environment; and

• how to identify and control work-related hazards and manage psychosocial risk within an occupational health and safety (OH&S) management system.

Structure ISO 45001 vs WD 45003

Essentially the same 10 headline clauses 9 = Performance evaluation and management review

but their respective sub-clauses are very different.

6.2.1.1 – human factors6.3 - objectives to address psychosocial risk7.6 - confidentiality8.1.6 - rehabilitation

Psychosocial risk - definitions

Psychosocial risk – ‘things that may affect workers' psychological response to their work and workplace conditions (including working relationships with supervisors and colleagues)

Psychosocial risk – ‘combination of the likelihood of occurrence of work-related hazard(s) of a psychosocial nature and the severity of injury and ill-health that can be directly associated with these hazards’.

Note to entry: Hazards of a psychosocial nature can include aspects of work tasks, work organization, management, work environment and organizational conditions that have the potential for psychological and physical harm.

Work-related psychosocial hazards

Workers have little control over their work and work methods

Workers are unable to make full use of their skills

Workers are not involved in decision making

Workers carry out repetitive, monotonous tasks

Work is machine or systems paced Work demands are excessive

Payment systems encourage working too quickly or without breaks

Work systems limit opportunities for social interaction

High levels of effort result in insufficient reward

Psychological health and safety

ISO 45003

• “Guidelines” in the title confirms it is not a “requirements” standard. Therefore, organisations will not be able to certify against this standard.

Review current arrangements

and competence vs ISO 45003

Consult workforce and

identify opps for improvement

Produce action plan

Implement action plan

Review outcomes

Implementing ISO 45003

Focus on causes, not effects e.g. poor leadership, cultural issues, organisational issuesRoot cause analysis!

The big but...

• ISO 45003 is due for publication in June 2021 however it has stalled at working draft (WD) stage.

• ISO rules permit 45003 to go straight to DIS, avoiding CD. This will save 5 months.

• If DIS not approved by June next year, 45003 is likely to be cancelled

• Main issue – ‘Why do we need 45003 when 45001 is supposed to cover mental well-being as well physical well-being?’

Preliminary work item (PWI)

New work item proposal (NWIP)

Working draft(WD)

Committee draft(CD)

Draft international standard (DIS)

Final draft international standard (FDIS)

International standard(IS)

ISO 45002Occupational Health and Safety Management Systems -General Guidelines for the Implementation of ISO 45001:2018

ISO 45002

New project for TC 283 – approved only this month

36 month development track

WG3 will expand the ISO small business handbook

OHSAS 18001 + OHSAS 18002 ISO 45001 + ISO 45002

Structure of ISO Small Business Handbook

4 Context of the Organization

4.1 Understanding the organization and its contextWhat is it and why is it important? Understanding all the different things that can affect your business activities is essential for getting OH&S management right and preventing people becoming ill or getting injured because of work. It is important to consider issues both inside and outside of your organization that can impact your OH&S performance. This includes for example, the hazards associated with your work activities as well as external laws or regulations.

Implementation approaches To set up a management system that works for you, you need to fully understand your organization. For example, what do you do? Where do you do it? Who could get hurt? How? You also need to consider what can improve - or lessen - your OH&S performance. It can be things inside your own business, or changes in how you do business, as well as external things such as new laws or pressure from suppliers or customers, etc. Use your current and past health and safety issues as a starting point for analysing your context. Aim to keep your OH&S system simple and in proportion to your risks. A small organization is often less complex than a larger one, so if this is true for you, your context is simpler, and the assessment will be too. However, small doesn’t always mean simple and large doesn’t always mean complex. So smaller organizations that are more complex should make a more detailed assessment of their context to make sure nothing is missed. See the end of 4.2 for an example of how a small organization supplying goods reviewed the requirements in 4.1 and 4.2.

December 2019 - Chargeable

BSI - Small Business Handbook

https://committee.iso.org/files/live/sites/tc283/files/Documents/S19015_BSI_Little%20book%20of%20Health%20%20Safety_Web%20(003).pdf

ISO 17021-10 Conformity assessment -- Requirements for bodies providing audit and certification of occupational health and safety management systems was published in March 2018; it highlights the competence requirements for auditing and certification of OH&S management

Standards relating to the auditing of OH&S

If you need advice about auditing to ISO 45001 then a key standard you should refer to is ISO 19011:2018 Guidelines for auditing management systems.

Future meetings

Kigali – October 2019 Marrakesh – March 2020 San Salvador – Sept 2020

Future meetings

Kigali – October 2019

Group Task

TG1 Communication

TG2 Terminology

TG3 Revision of Annex (S)L

WG2 Psychological health and safety (45003)

WG3 Implementation (45002)

New WG OHS metrics (TC260 – Human Resources)

Public meetings

Nottingham University Business School

Public meeting of HS/1

11th September (yes, you’ve missed it)

16th December - Chiswick

Ms Sally Swingewood

sally.swingewood@bsigroup.com

https://committee.iso.org/home/tc283

Opportunity for questions

TC 283 – Dallas, March 2019

Thank you

rgreen@kingsfordconsultancyservices.co.uk