How to perform management review in ISO 45001

As with many management systems, the ISO 45001:2018 standard recognizes the importance of having top management involved in the Occupational Health and Safety (OH&S) management system. Due to this important role, the standard includes requirements for top management to review the OH&S management system to determine if there are changes necessary to improve or correct the system. Here are a few things to think about on this very important topic.

Management review: Is it necessarily a meeting?

It is important to note that the requirements of ISO 45001, like other management review standards, do not include a requirement for a management review meeting. It is important to have top management involved in reviewing the information gathered about occupational health & safety, but this does not mean that they need to sit in a meeting to do so. Review of the data, and reacting to the data toward improvement of the OH&S management system, can happen in any format that the company sees as the most beneficial.


What does the ISO 45001 standard require for management review?

The main review that is required of top management in the ISO 45001 standard is for top management to assess any opportunities for improvement and any needed changes in the external and internal issues affecting the OH&S management system. This includes how well you have met the OH&S policy and OH&S objectives. The standard also asks that top management review certain inputs from the OH&S management system listed below:

  • Results of internal audits – What was found during your internal audits? Along with corrective actions that were identified, were there any opportunities for improvement, to investigate or even best practices that should be communicated throughout the company?
  • Results of monitoring and measurement – There are certain things you have chosen to measure as key indicators of how your OH&S management system is working. These need to be reviewed and understood by management.
  • Evaluations of compliance with legal requirements – In your review of how well you meet legal requirements, did you find anything that could be improved, was a near miss, or was done better in one part of the company that other areas of the company could learn from?
  • Results of participation and consultation – In talking with employees and other interested parties, was there something identified that could improve your OH&S system?
  • Communication from interested parties – While this includes complaints, it is not exclusive to those complaints. If someone outside of the company has taken the time to identify something regarding health & safety, such as a potentially hazardous situation that they noticed, take the opportunity to address this before something happens.
  • Adequacy of resources affecting OH&S performance – How many accidents or near misses happen in your company? Is there something that needs to be done to ensure that accidents don’t happen to your employees or contractors? This can help you determine the effectiveness of your OH&S management system and determine if a change in resources is needed.
  • Trends in risks and opportunities – How are your risks changing over time? Looking for trends in this data may give you some insight as to why your risks are affecting you.
  • Extent of meeting the policy and objectives – Since you took the time and effort to define a policy and set objectives for your OH&S management system, how are you progressing toward meeting those goals? By tracking your progress, you can tell if you are going to meet the target in time or if you need to change your approach or increase your resources.
  • Trends in incident investigations, nonconformities, corrective actions, and continual improvement – If you have implemented your corrective action process, or are investigating an incident to correct it, are there trends in what you are finding? The activities should be done in a timely fashion in order to gain the most benefit from the improvement.
  • Follow-up on previous management review actions – Why take actions if you are not going to make sure they are completed effectively and in a timely fashion?
  • Changing circumstances related to the OH&S – This includes knowing any developments in legal requirements for the organization. By keeping up to date with legal and other changes, you can make sure you implement any necessary updates at a time that is most advantageous to you. Also included are changes to your interested parties or risks and opportunities.
  • Recommendations for improvement – If someone has recommended a way that they think you can improve your OH&S performance, you owe it to yourself to see if it is feasible. These opportunities for continual improvement could even save you time and money.

From these inputs, there are a few outputs, including decisions and actions from the review that need to be made. These need to be consistent with the commitment to continually improve, and are to be made available for communication and consultation with internal and external parties, where applicable. These outputs include possible decisions about:

  • The suitability, adequacy and effectiveness of the OH&S – Are there things that need to happen to improve your OH&S performance to an acceptable level?
  • Opportunities for continual improvement – Is there an opportunity that you can work on to find improvement.
  • Changes to the OH&S management system – Has something occurred that means you will need to change your management system processes?
  • Resources – In order to meet your targets and legal requirements, do you need to adjust the resources applied?
  • Actions – What actions are required to make sure that the decisions of the management review are implemented?
  • Implications for the strategic direction – Does anything from the management review affect the strategic direction of the company?

Make management review work for you!

Remember, as always, that the reason you have an OH&S management system is to control your OH&S system and to work toward improvement.  The review of top management is very important for this, but there is no mandate as to how this review needs to happen. If a meeting of top management is the best way to make this occur appropriately, then you should do so, but do not be forced into this if you have better ways to make continual improvement happen. The OH&S management system is there for you, so do what makes the most sense for your company.

Use this free ISO 45001 Gap Analysis Tool to check your compliance with ISO 45001.

Advisera Mark Hammar
Author
Mark Hammar
Mark Hammar is a Certified Manager of Quality / Organizational Excellence through the American Society for Quality and has been a Quality Professional since 1994. Mark has experience in auditing, improving processes, and writing procedures for Quality, Environmental, and Occupational Health & Safety Management Systems, and is certified as a Lead Auditor for ISO 9001, AS9100, and ISO 14001.