Systematic OHS management

    Written by Nicolai Bjerknes Slinning, Founder, Sydera.io Technologies AS. Last reviewed .

    Systematic occupational health and safety management means health, safety and the working environment are something the organisation steers in advance, before anything has happened. Internal control rules describe what has to exist in writing: objectives, responsibilities, hazard identification with risk assessment, plans and measures, non-conformity handling, and review of the system itself. This guide looks at what those requirements mean for the governance document, and where a document typically starts too late.

    What has to exist in writing

    Objectives for health and safety. How responsibilities and tasks are allocated. Hazards and problems identified, with a risk assessment. Plans and measures. A process for finding and correcting breaches. And systematic monitoring and review of the internal control itself. Employee participation is part of the requirement. The order matters: it describes a chain from objective to action to learning. When one link is missing from the document, the chain falls back on individual initiative.

    Handbook, routine, and what makes it systematic

    The handbook states what the organisation has decided. The routine states how it is done. Systematic means the two hang together, and that what happens leaves a trail that can be reviewed. A handbook with no routine below it is a statement of intent; a routine with no handbook above it is local practice.

    Where documents start too late

    The most common weakness is a missing trigger. The document describes what happens after someone reports something, and says nothing about what exists before that. Responsibility sits with an unnamed function. Non-conformity handling is described as a form without a process for follow-up and closure. And the review of the system has no date and no note of what changed.

    Documentation that does not become personal data

    Systematic work needs a trail, and the trail should be about arrangements. Describe what exists, for whom, how it is triggered, who owns it, and when it was last reviewed. Individual matters belong in a separate track with restricted access. Written this way, the documentation is designed to avoid holding special category data under GDPR Article 9.

    Size changes only the length

    A small organisation needs the same links as a large one, written shortly: three sentences per element is often enough. What auditors and inspectors look for is whether the chain holds and whether the last review is dated.

    Standards as guidance alongside the legal requirements

    ISO 45001 is a certifiable management system standard; ISO 45003 and ISO 45010:2026 are guidance standards and cannot be certified against. All three are useful as guidance alongside relevant legal requirements. None of them replaces the legal duty or an assessment of your lawful basis for processing.

    Start with one routine

    Use the guide «The Body Comes to Work» to see what you can arrange in advance, and what your procedures should say. It is open online and as a PDF. For groups, we prepare an Executive Brief, free of charge,, built only on published sources.

    The guide is open online and as a PDF. The Executive Brief is built only on published sources.

    Sources

    Frequently asked questions

    What does systematic OHS management mean?
    That objectives, responsibilities, hazard identification, plans, non-conformity handling and review exist in writing and hang together, and that what happens leaves a reviewable trail.
    How much documentation does a small organisation need?
    Enough to show the chain from objective to action to review. Three sentences per element is often enough.
    How often should the system be reviewed?
    On significant change and at least once a year, with a date and one line on what changed.
    Does ISO 45001 certification replace the legal requirement?
    No. Certification says something about the management system; the legal duty applies regardless. ISO 45003 and ISO 45010 are guidance and cannot be certified against.
    What does the review look at?
    Use the guide «The Body Comes to Work» to see what you can arrange in advance, and what your procedures should say. It is open online and as a PDF. For groups, we prepare an Executive Brief, free of charge,, built only on published sources.

    Related