The organization shall retain appropriate documented information as evidence of the monitoring, measurement, analysis and evaluation results. 9.1.2 Evaluation of compliance with legal requirements and other requirements The organization shall plan, establish, implement and maintain a process for evaluating compliance with applicable legal requirements and other requirements (see 6.1.3). The organization shall: determine the frequency and method(s) by which compliance will be evaluated; evaluate compliance; take action if needed in accordance with 10.1; maintain knowledge and understanding of its status of compliance with legal requirements and other requirements; retain documented information of the compliance evaluation result(s). 9.2 Internal 9.2.1 Internal audit objectives The organization conduct internal audits at planned intervals to provide information on whether the OH&S management system: conforms to: the organization’s own requirements for its OH&S management system, including the OH&S policy and OH&S objectives; the requirements of this International Standard; is effectively implemented and maintained. 9.2.2 Internal audit process The organization shall: plan, establish, implement and maintain an audit programme(s) including the frequency, methods, responsibilities, consultation, planning requirements and reporting, which shall take into consideration the importance of the processes concerned and the results of previous audits, as well as: significant changes impacting the organization; performance evaluation and improvement results (see Clauses 9 and 10); significant OH&S risks, risks and OH&S opportunities; define the audit criteria and scope for each audit;
The control of documented information should not have the effect of, nor be for the purpose of, preventing workers from obtaining a full and complete picture of the hazards and risks of their work. The confidentiality of personal information of individuals should be respected. Operation Operational planning and controls General Operational planning and controls should be established and implemented as necessary to enhance occupational health and safety, eliminate hazards or, if impossible, to reduce the OH&S risks to levels as low as reasonably practicable for operational areas and activities. When planning and developing operational controls, priority should be given to control options with higher reliability in preventing work-related injury and ill health. Operational controls can use a variety of different methods, for example: the introduction of procedures and systems of work; ensuring the competency of workers; establishing preventive / predictive maintenance and inspection programmes; specifications for the procurement of goods and services; compliance with preventive regulations and manufacturer's instructions for equipment; engineering controls (physical devices such as barriers) followed by administrative controls (warnings, safety signs, alarms and signals, or access control procedures and other work instructions). adapt work to workers. Work can be adapted to workers by, e.g.: defining, or redefining, how it is organized; the induction of new recruits; defining, or redefining, processes and working environments to workers; designing a new workplace and new equipment by ergonomic approaches, etc. The OH&S management system’s processes and activities should be established to ensure that operational controls are implemented effectively (see 9.1.1), and actions taken to mitigate issues or determined nonconformities (see 10.1). Hierarchy of controls The hierarchy of controls is intended to provide a systematic approach to enhance occupational health and safety, eliminate hazards, and reduce or control OH&S risks. Each step is considered less effective
Bibliography [1] ISO 9001, Quality management systems — Requirements [2] ISO 14001, Environmental management systems — Requirements with guidance for use [3] ISO Guidelines for auditing management systems [4] ISO 31000, Risk management — Principles and guidelines [5] ISO Guidance on outsourcing [6] ISO 39001, Road traffic safety (RTS) management systems – Requirements with guidance for use [7] ISO Guide 73, Risk management — Vocabulary [8] ILO Guidelines on Occupational Safety and Health Management Systems (ILO-OSH 2001); International Labour Office, Geneva, [9] ILO International Labour Standards (including those on occupational safety and health) (click on "instruments", then "Conventions and Recommendations by subject") [10] OHSAS 18001 Occupational health ans safety management systems – Requirements; OHSAS Project Group; July 2007, 2nd ed., 34p.; London; ISBN 978 0 580 50802 8 [11] OHSAS 18002 Occupational health and safety management systems – Guidelines for the implementation of OHSAS 18001:2007; OHSAS Project Group; Nov 2008, 2nd ed., 88p.; London; ISBN 978 0 580 61674 7 Alphabetical index of terms audit 3.32 competence 3.23 conformity 3.33 consultation 3.5 continual improvement 3.37 contractor 3.7 corrective action 3.36 documented information 2.24 effectiveness 3.13 hazard 3.19 incident 3.35 injury and ill health 3.18 interested party 3.2 legal requirements and other requirements 3.9
management system 3.10 measurement 3.31 monitoring 3.30 nonconformity 3.34 objective 3.16 occupational health and safety management system 3.11 OH&S management system occupational health and safety objective 3.17 OH&S objective occupational health and safety opportunity 3.22 OH&S opportunity occupational health and safety performance 3.38 OH&S performance occupational health and safety policy 3.15 OH&S policy occupational health and safety risk 3.21 OH&S risk organization 3.1 outsource (verb) 3.29 participation 3.4 performance 3.27 policy 3.14 procedure 3.26 process 3.25 requirement 3.8 risk 3.20 top management 3.12 worker 3.3 workplace 3.6