ISO 45001 – Other Risks and Other Opportunities

risk_management_supply_chain_1320_892_60ISO/DIS 45001 is the new ISO Standard for Occupational Health and Safety Management Systems.  The public comment period for the draft international standard is open until April 2, 2016.  One of the important issues debated at the recent meeting of the US TAG in Dallas. TX,  Feb 22-25, 2016 was a requirement unique to ISO 45001 that  organizations are required  to assess “other risks” to the OHSMS.  Neither ISO 9001:2015,14001:2015 or OHSAS 18001 have such a requirement.  Here is what is required:

6.1.2.2 Assessment of OH&S risks and other risks to the OH& S management system

The organization shall establish, implement and maintain a process(es) to:

b) identify and assess the risks related to the establishment, implementation, operation and maintenance of the OH&S management system that can occur from the issues identified in 4.1 and the needs and expectations identified in 4.2.

To better understand what is expected one needs to go to the Annex of the standard where there is a list of examples in A.6.1.2.2 of what needs to be considered as follows:

“The organization should also give consideration to those risks which are not directly related to the health and safety of people and address factors affecting the OH&S management system, its performance and intended outcomes. These risks should be assessed using an appropriate method”.

Potential sources of risk to the OH&S management system can include:

  • inappropriate context analysis; outdated analysis;
  • inadequate consideration of OH&S management system requirements, change management and other health and safety issues in strategic planning and other business processes;
  • the absence of resources for the OH&S management system, whether financial, human or other;
  • an ineffective audit program;
  • poor succession planning for key OH&S management system roles;
  • poor top management engagement in the OH&S management system activities;
  • failure to address the needs and expectations of relevant interested parties;
  •  poor OH&S performance leading to reputational risks.

The standard also requires organizations to identify “Other Opportunities” in clause 6.1.2.3(b) when it says:

“The organization shall establish, implement and maintain processes to identify:

b) opportunities for improving the OH&S management system”.

Again the annex provides a bit more guidance regarding “other opportunities” in A 6.1.2.3.  Here is what it says:

Opportunities to improve the OH&S management system can include:

  • improving the visibility of top management’s support for the OH&S management system;
  • enhancing incident investigation processes;
  • improving the processes for worker participation;
  • benchmarking, including consideration of both the organization’s own past performance and that of other organizations;
  • collaborating in forums which focus on topics dealing with health and safety.

Some of the US TAG experts argue that without a requirement to address these other OH&S Risks and Other OH&S Opportunities the management system will be ineffective and will not lead to OH&S performance improvement.  Others on the US TAG maintain that by implementing and operating an ISO 45001 OHSMS the organizations will address these potential risks and requiring an additional step to look at these other risks is redundant and confusing to potential users.

What do you think?  Leave a comment here and… if you like… take the survey and express your opinion.

ISO 45001 – Hierarchy of Controls (HOC) – Should it be a Requirement?

Section 8.1.2 of ISO/DIS 45001 requires that organizations “shall establish a process and determine controls for achieving reduction in OH&S risks using the following hierarchy:

  1. occupational_health_safetyeliminate the hazard
  2. substitute with less hazardous materials, processes, operations or equipment
  3. Use engineering controls
  4. use administrative controls
  5. provide and ensure use of adequate personnel protective equipment

The US Technical Advisory Group at its recent meeting in Dallas, TX Feb 22-26, 2016 had lengthy and at time heated discussion about requiring the use of the HOC.  The basic question is should the phrase “using the following hierarchy” be revised to soften it by saying “considering the following hierarchy”.

Many of the seasoned OH&S professionals in the group believe that the language should remain as “use” . They believe the HOC is well accepted in the industry and it is also required by law.  Others on the US TAG with experience in drafting and auditing ISO standards like ISO 14001 think the use of the HOC should be optional.  They maintain that it will be difficult during audits to prove that the HOC was used and that additional control is not possible or practical.

The standard also requires that the OH&S Policy “includes a commitment to control OH&S risks using the hierarchy of controls.

Give us your opinion and please take the survey.

Results of ISO 45001 US TAG Meets in Dallas, TX  – February 22-26, 2016

We recently participated on the leadership team for the United States Technical Advisory Group (US TAG) for the Development of the  new ISO 45001 standard for Occupational Health and Safety management systems.  Group Photo at ISN

The purpose of the week long meeting held at the ISN headquarters in Dallas, TX was to disposition over 800 comments on ISO/DIS 45001.  The US TAG successfully dispositioned all of the major issues and many of the individual comments.  Our role at this meeting was as co-chair of a subcommittee with Vic Toy for Clause 6 – Planning.  Our section had 157 comments to review and decide how they would be addressed.

The meeting was attended by about 70 participants representing business, organized labor and government.  Major issues addressed during the meeting included questions and comments like:

  • Should organizations be required to use the hierarchy of controls when reducing risk?
  • Does redundancy add clarity or confusion (frequent references to workers and worker representatives)?
  • Should organizations be required to assess risk to the management system (other risks) or is this already addressed by the clauses of the standard?
  • When must workers be asked for an opinion (consultation) and when must workers have authority to influence decisions made by management about risk control and other management system issues (participation)?

We have posted some articles about the following on our website blog if you are interested in learning more about these important issues.

  • ISO 45001 – Hierarchy of Controls
  • ISO 45001 – Other Risks and Other Opportunities

The public comment period in the USA is now open until April 1, 2016 so if you are in the USA and your organization would like to submit comments for consideration send me an email to tagosh@envcompsys.com and I can help you get the comments to the right place. Also please feel free to call or email with any questions about ISO/DIS 45001.

ISO 45001 Update – June 2015

Goole Bikes

The famous Google Bikes!

We recently participated as voting members in a meeting of the United States Technical Advisory Group (TAG) for the new ISO 45001 (Occupational Health and Safety) standard.  The meeting was held at Google Headquarters in San Francisco.  Extensive discussion took place within the TAG regarding the United States TAG position on the proposed ISO 45001 Draft Standard (CD#2).  The consensus was strong that the United States TAG believes the standard is still not ready to move to the next stage of the standards development process (DIS).  To this end, a motion was made, seconded, and unanimously approved during the course of the meeting and at a follow-up conference call.

The motion and its result were communicated in a letter to the American National Standards Institute (ANSI) on June 3. The motion was as follows:

The United States votes “No with Comments” on the draft standard with the position that the proposed standard is not yet ready to move to the DIS stage of the standards development process.

The impact of this negative vote is uncertain because the US has only a single vote on the International ISO 45001 committee (PC283) and there could be enough votes by other nations to move the standard to DIS rather than to another Committee Draft.  The US is voting that the standard go through another cycle as a Committee Draft (CD3) to allow more time to iron out some sensitive and controversial issues.

METADATA-START

When at work Googlers are never more than 100 feet from good, healthy food

Initially many of the TAG and PC members familiar with government mandated safety requirements (OSHA) were of the belief that this standard was much like a new law or labor regulation.  The good news is that the understanding of the standards development process by memberships of the US TAG and members of the International Committee is maturing which in turn has resulted in more flexibility for users of ISO 45001.  Over the last 2 years many of the membership has come to understand that allowing flexibility in how organizations choose to implement their OHSMS is key to its acceptance by potential users.

During the meeting in San Francisco we were able to talk candidly with the US TAG leadership and the belief is that a final draft of the ISO 45001 standard may not be ready until early 2017.  This will require that the PC is granted a 9 month extension to the three year project timeline that was originally approved by ISO.

TC 207 – Survey request on Verification of Environmental Sustainability Reports

652px-Logo-ISO[1]In 2011 the ISO/TC 207/SC 2 – Environmental auditing sub-committee established an ad hoc group to gather information on current developments on auditing/verification of publicly available environmental and sustainability reports. Status reports were given at the 2012 and 2013 meetings. In 2013 the ad hoc group decided to conduct a survey to gather further information on the market needs for a standard on the topic of verification of environmental sustainability reports for discussion at its upcoming meeting in Panama on May 27, 2014.

TC 207 is seeking your assistance in obtaining broad participation in this survey. The survey can be accessed via the following link:https://www.surveymonkey.com/s/RCBL6D5. The survey will be open until May 2, 2014. We understand that this is a short timeframe for capturing this information but the deadline was established by ISO to make sure responses were available in time for consideration at the Panama meeting.

To obtain a statistically diverse and representative sample we are requesting that you consider passing this survey to other experts and stakeholders that you are familiar with personally.  We are hoping to get responses from a variety of organizations, based upon their environmental risk, number of employees, size and type (small, medium, and large as well light, medium, and heavy manufacturing), as well as those in the public and/or private sector.

Day 4 – ISO 14001 EMS Lead Auditor Washington, DC, 4/10/14

Day four of ISO 14001 Lead Auditor is going well.  A great group of folks in the class makes my job here in DC enjoyable.  From time to time I wonder if ISO 14001 is destined for jettison to the ash heap of sustainability irrelevance.  I sometimes question if others will continue to believe as I do that an ISO 14001 environmental management systems is a good way to manage the plant part of sustainability’s triple bottom line.14001_0414_dc

But teaching this class often restores my confidence that ISO 14001 will continue to be relevant for the foreseeable future.  Students continue to appreciate learning the fundamentals of environmental aspects, impacts, significance, auditing including the relationship between audit criteria, evidence, findings and conclusions.   I also believe that the current revision process is tracking well toward delivering an improved model for environmental management systems and I am looking forward to teach this course for the revised standard next year.

ISO High Level Structure and EH&S Management Systems

ISO 14001 and OHSAS 18001 are undergoing significant change intended to improve these standards.  The new ISO High Level Structure will align all ISO standards along a common management systems structure and promote integration.   The recent US Technical Advisory Group meeting in Orlando, Florida was a particularly enlightening conference for us where US TAG members were able to share their ideas of the way the HLS applies to EHS management Systems.

ISO HLS & EHSMS

ISO HLS & EHSMS

An important part of the revision processes is being able to communicate to current and new users how the standards are changing and how these changes will affect an existing EHSMS.  This diagram represents how we at ECSI see the developing changes to ISO 14001 and ISO 45001 and the relationships between some of the important clauses of the revised standards.

We are interested in understanding how users of the EHSMS standards feel about the changes and what information they need to begin to plan for the changes to their EHSMS.  ECSI will be conducting a short, one hour webinar Tuesday, April 22, 2014 from 10am-11am Central Standard Time.  The purpose of the seminar is to provide the current state of the revision process and to discuss how we see the EHSMS standard revisions progressing.  If you are interested in participating in one of these webinars send us an email to webinar@envcompsys.com and we will reply with the logon instructions.

ISO 45001 Annex 6 – Response to Comments

My draft was meant to be for the Annex only.  It was not intended to be included, or as a supplement to, the normative part of the standard.  I offered the draft of the Annex more to stimulate discussion than expecting it to be incorporated in its entirety.  As I have said from the beginning.  I believe that the HLS should remain largely intact without significant discipline specific additions.  Most discipline specific language for clarification of intent should be introduced in the Annex.

I like the idea of working the development process of this and other standards like ISO 14001 from back to front.  In other words, let’s work on the Annex (informative part of the standard) first, agree on what we want it to achieve and what the Annex should contain, and then decide what needs to be changed in the normative part of standard to meet the discipline specific outcome we want.

I also understand the desire to use much of Z10 to form the basis for ISO 45001.  However, I believe that we can improve upon the ideas presented in Z10 as we develop 45001, especially appendix F and the example risk matrix it contains.

Regarding the question of how opportunities should be addressed in the standard, I believe it matters little where opportunities are addresses.  It may be appropriate to address them in both 8 and 10 and maybe a little bit in 6.  I do however believe that we need to have a better idea about what we mean by opportunities before we add discipline specific language to the HLS in any or all of those clauses.

I believe there are at least two types of opportunities that can be identified, those being opportunities to reduce risk, and those opportunities that can result in other value enhancement.  Sometimes exploiting one type of opportunity comes at the expense of the other. ice3 Ice diving is a good example.  Personally I think you need to be out of your mind to do it, but some folks find great pleasure in scuba diving below the ice and take every opportunity they can to enjoy it.  One of the hazards of ice diving is getting lost under the ice and not being able to return to  the hole before your air supply is exhausted.  The bigger the hole, the easier it is to find when you want out of the water.  But cutting a big hole through 3 foot thick ice is hard and there comes a point where the discomfort in cutting the hole out weights the fun the divers expect to have on their adventure.  So the divers manage the likelihood of becoming trapped beneath the ice in other ways, like roping up and having folks at the surface holding the other end of the rope.  Managing the risks and enjoyment of an ice dive becomes an optimization problem.

The ISO 45001 standard Annex (either 6, 8 or 10) should include information to help users understand the relationship between risks and opportunities and that there are different types of opportunities they can exploit.  Once we have the right language in the annex, we can then think about what changes might be need in the standard itself to make the HLS work for the OH&S discipline.  Again this is the back to front approach to standard development I prefer.

Spring? Really?

If you are living in the North Country as I am, the weather has been a perpetual topic of discussion.  Just for fun, a couple of years ago, I decided to start to learn how to harvest ice from our local lake.  Last week I got a call from some  local divers needing a hole cut in the lake to do a certification ice dive.

Having cut some ice earlier this year to build Ice Henge, I had an idea that cutting a hole in the ice now was not going to be easy.  20140210_165329_2It turned out that the ice on our local lake is almost 3 feet thick and it took over 3 hours to cut a 3′ x 6′ hole.  At the time they started diving the outside air temperature was about 9 degrees F and dropping.  The entire idea of ice diving offended every sensibility.  Its just not right!

 

32 inch bar

20140301_140300_3DCIM100GOPROice3 Ice Divers

ISO 45001 Update – Annex A Clause 6 Planning

The US Technical Advisory Group (US TAG) for the new Occupational Health and Safety Management System Standard ISO 45001 met in Washington DC in late January which we attended as voting members.  The objective of the meeting was to review the first working draft of the new standard and provide comments on the US position.  The area of greatest interest was Clause 6 Planning where discussion centered on how best to address the concept of hazard identification, risk assessment and risk treatment (control).  A key question discussed was how much discipline specific information should be inserted into the High Level Structure (HLS), the normative part of the standard, and how much should be presented in the Annex (the informative part of the standard).

My opinion is that the requirements part of the HLS should be left mostly as it is with only little additional discipline specific (OH&S) information being added.  Additional discipline specific information should be placed in the Annex as informative interpretation and guidance on how to use the standard.

As the DC meeting concluded several members of the group offered to prepare the Annex portion of the standard to be presented in Morocco next month at the international meeting of the full ISO 45001 Project Committee.

ECSI prepared a proposed Annex A section for the standard which was based partially on other international and national standards like ISO 31000:2009 – Risk Management, ISO 31010:2009 Risk Assessment, OHSAS 18001:2007 and ANSI Z10:2012.

Here is one of the figures we introduces to explain the relationship between the various parts of ISO 45001 and the risk assessment process.

Risk Assessment Parts 8x8

The Annex we prepared explained the different steps in the risk assessment process and also included a figure that could be used to explain the concept of Risk Analysis (Figure A6-2).  The information we provided was combined with information offered by others on the US TAG.  The proposed annex will be presented by the US TAG next month in Morocco. Now we just need to sit back and see what the rest of the international ISO 45001 Project Committee thinks about the US proposal for Annex A clause 6. .

Risk Assessment Matrix