What is an OSH management system
An occupational health and safety management system ( OHSMS) outlines how an organization establishes its policy, understands its context, identifies hazards, determines obligations, sets objectives, controls operations, prepares for emergencies, provides training, consults, measures results, and drives improvements. Its logic is cyclical: plan, do, check, and act. The ILO formalized this approach in ILO-OSH 2001, and ISO 45001 specifies international requirements for a certifiable system.
The system must be tailored to the organization’s size, activity, structure, and risks. It can be integrated with quality, environmental, continuity, or compliance systems, but this integration should not obscure technical expertise or the involvement of employees. A spreadsheet might suffice for a simple task, while a complex platform may be inadequate if no one acts upon its results.
Differences between an OSHMS, a prevention plan and ISO 45001
- SG-SST. Complete architecture with which occupational safety and health is managed and improved ; the term is widely used internationally.
- Prevention plan. In Spain, this is a tool that integrates preventive activity into the general management system and establishes policy; it must reflect structure, responsibilities, functions, practices, procedures, processes, and resources.
- Assessment and planning. Essential tools that identify risks and specify measures, deadlines, responsibilities and resources; they are part of the system, but they are not the entire system.
- ISO 45001. Voluntary international standard with requirements for a management system. Certification can provide external verification, but it does not replace legal compliance nor does it guarantee that all risks are controlled.
Essential elements
A functional system includes leadership and policy, assignment of responsibilities, participation and consultation, hazard identification , risk and opportunity assessment, legal requirements, objectives, competence, communication, control of operations, purchasing and contractors, change management , emergency preparedness, health surveillance, incident investigation, measurement, auditing, management review and improvement.
The elements must be connected. If purchasing acquires a product without risk assessment, the evaluation comes too late; if maintenance fails to communicate a modification, the control becomes outdated; if an investigation doesn’t change procedures or design, the learning is lost. Effective traceability allows you to follow a chain: hazard, assessment, measurement, responsible party, verification, and result.
How to implement it
- Define scope, centers, activities, contracts, and stakeholders.
- Obtain management commitment and establish roles with authority and resources.
- Conduct an initial assessment of existing risks, obligations, and practices.
- Consult with the staff and agree on channels for participation.
- Assess risks and prioritize controls according to the preventive hierarchy.
- Set objectives, plans, indicators and operational criteria.
- Deploy competence, communication, maintenance and emergencies.
- Manage purchases, changes and coordination of activities.
- Measure performance, investigate events, and audit.
- Review by department and correct causes of non-compliance.
It is advisable to implement by priority processes and risks, avoiding the production of manuals disconnected from real work.
How is its effectiveness verified?
Leading indicators show whether controls are working before harm occurs: percentage of critical actions effectively closed, safeguards testing, maintenance compliance, observations of non-routine tasks, response times, participation, or exposure reduction. Outcome indicators include incidents, injuries, and illnesses, but should be interpreted with caution: a low number may be due to chance or underreporting.
The audit examines whether the system is compliant, implemented, and effective. Management review considers changes, performance, resources, and opportunities for improvement. A measure is not considered closed simply because it has been purchased or documented, but rather when it is verified that it controls the risk. Nonconformities require correcting the immediate problem, analyzing the root cause, and preventing recurrence.
Practical example
A logistics company with several centers has recorded near misses involving forklifts and pedestrians. The Occupational Health and Safety Management System (OHSMS) links these reports to assessments and identifies inconsistent traffic flow patterns and unclear responsibilities. Management establishes a common standard: physical separation where feasible, traffic directions, speed limits, maintenance, and driver authorization.
Each center plans temporary works and measures. Purchasing incorporates requirements for new forklifts; training uses real routes; maintenance verifies devices; and the committee reviews incidents and observations. The audit is not limited to checking signs: it observes shifts and measures traffic conflicts. After layout changes, a prior review is required. The system transforms local learning into reproducible organizational control.
Regulatory framework and standards
In Spain, Article 16 of Law 31/1995 requires the integration of prevention into the general management system through a prevention plan, risk assessment, and planning. Royal Decree 39/1997 details the content of the plan, the assessment, the planning, the preventive measures, and the legally required audits in the specified cases. These obligations are enforceable regardless of whether certification exists.
ILO-OSH 2001 offers voluntary guidelines for national and organizational systems based on policy, organization, planning, evaluation, and improvement. ISO 45001:2018 specifies requirements for preventing injuries and ill health and improving performance; ISO 45002:2023 provides guidance for its implementation. The revision of ISO 45001 is in international draft form as of 2026: until a new edition is published, the current reference remains ISO 45001:2018 with its applicable amendment.
