ISO 45001 in Practice: From System Documentation to the Shop Floor

ISO 45001:2018, the Occupational Health and Safety Management System (OHSMS) standard, has become one of the most widely used OHSMS standards globally since its release. However, a significant reality is that many organizations fall into the trap of "two separate systems" when implementing ISO 45001—comprehensive system documentation and a different set of operational practices on the shop floor. During audits, all the necessary procedures are in place, but in daily operations, the effectiveness of safety management is often lacking. At its core, this issue arises because the "systematization" required by the standard has not effectively translated into "on-site implementation." This article focuses on the integration of ISO 45001 with the shop floor, exploring the top-down design, process integration, risk management, frontline participation, and continuous improvement to systematically outline how to move the OHSMS from the filing cabinet to the production line.

1. The Conceptual Foundation of ISO 45001 On-Site Implementation

The core logic of ISO 45001 is based on the PDCA (Plan-Do-Check-Act) cycle, but this cycle must not remain confined to the management level's document flow. Instead, it must be embedded in every operational position, every process, and every workday.

The first principle of on-site implementation is "dual integration"—horizontal integration into all business processes and vertical integration into the frontline operational level. Horizontal integration means that occupational health and safety management is no longer the sole responsibility of the safety department but is closely intertwined with production, equipment, processes, logistics, quality, and other business activities. Vertical integration means that the standard's requirements must penetrate organizational layers, from management review to pre-shift meetings and operational work instructions at the team level. Only when the requirements of ISO 45001 "automatically occur" in every business action rather than being "additional requirements" can the system be truly integrated with the shop floor.

Theoretically, the High-Level Structure (HLS) of ISO 45001 provides institutional convenience for this integration. Chapter 4, "Context of the Organization," requires the organization to understand internal and external factors and identify the needs and expectations of interested parties, which provides a basis for incorporating the on-site operational environment into the system scope. Chapter 5, "Leadership," emphasizes the commitment of top management to the OHSMS, which must be concretized into resource allocation for on-site safety and attention to on-site safety performance. Chapter 6, "Planning," includes "Actions to Address Risks and Opportunities," which directly links to on-site hazard identification and risk assessment. Chapter 7, "Support," includes requirements for "competence" and "awareness," which correspond to on-site personnel's safety training and job safety awareness. Chapter 8, "Operation," with its "Operational Planning and Control," is the core chapter for on-site implementation—the standard explicitly requires the organization to establish, implement, control, and maintain processes that meet the OHSMS requirements. Chapter 9, "Performance Evaluation," requires monitoring, measuring, analyzing, and evaluating on-site operational performance. Chapter 10, "Improvement," mandates continuous improvement based on on-site data and audit findings.

Understanding this hierarchical and progressive structure is the prerequisite for advancing the on-site implementation of ISO 45001. Organizations should not treat the standard clauses as a guide for document writing but as a roadmap for integrating safety management into on-site operations.

2. Practical Methods for On-Site Hazard Identification and Risk Assessment

Hazard identification and risk assessment are the foundation of the ISO 45001 system and the most closely linked to on-site implementation. If risk lists are compiled in an office without on-site verification, all subsequent control measures will be disconnected from the shop floor. Effective on-site hazard identification should follow the four principles: "go to the site, observe the actual conditions, ask for real situations, and record the actual findings."

Going to the site is the prerequisite. Hazard identification must be conducted by a joint team comprising safety professionals, process engineers, and on-site operators, who should walk through the operational processes step by step. From raw material entry, handling, and storage, to production processing, semi-finished product flow, finished product packaging, and equipment maintenance, every physical space and operational activity should be included in the identification scope. During this process, the team should not overlook any "corner"—are fire escape doors blocked by materials? Are goods on high shelves securely fastened? Are secondary containers provided in the chemical storage area? These seemingly minor details are the litmus test for on-site management.

Observing the actual conditions involves identifying the real state of hazards. For example, a safety operation procedure for a stamping machine might state, "Press the start button with both hands simultaneously," but on-site observation reveals that workers often use one hand to bypass the safety light curtain to increase production. This is a typical example of a disconnect between documentation and on-site practice. Hazard identification should not only focus on "what should be done" but also on "what is actually being done." The team should pay attention to the actual conditions of protective devices, interlock switches, ventilation systems, and personal protective equipment (PPE).

Asking for real situations involves in-depth interviews with frontline operators. Operators are the most knowledgeable about job risks and often know which operations are most easily overlooked, which safety hazards repeatedly occur without resolution, and which safety regulations are difficult to implement. Through these interviews, the identification team can obtain real information that is not available in documents. For instance, an operator in a chemical company reported that a sampling valve was positioned too high and lacked an operating platform, requiring workers to climb pipes and risking falls—a hazard that had never appeared in the risk list compiled in the office.

Recording the actual findings involves systematically documenting and evaluating identified risks. The Job Safety Analysis (JSA) method can be used, breaking down each operational activity into several steps and analyzing the hazards, potential accident consequences, existing control measures, and their effectiveness for each step. For high-risk operations such as hot work, confined space entry, high-altitude work, temporary electrical work, and lifting operations, specialized safety plans should be developed, detailing control measures before, during, and after the operation.

In terms of risk assessment, on-site methods should prioritize practicality and operability over a perfect indicator system. Common assessment methods include the LEC method (Graham-Kinney method) and the risk matrix method. The former quantifies risk through the product of likelihood, exposure frequency, and consequence severity, while the latter visually displays risk levels on a two-dimensional coordinate system. Regardless of the method used, the core principle is to ensure that the assessment results directly guide on-site risk control decisions—not just to complete a risk assessment report.

3. On-Site Practice of Standardized Operational Control

The key to on-site implementation of ISO 45001 is operational control, which involves embedding safety management requirements into specific operational processes so that they become a natural part of operations rather than additional requirements.

On-site standardization of operating procedures is the most fundamental work. Traditional safety operating procedures are often written by the safety department alone, with language that emphasizes textual management requirements, making it difficult for frontline operators to quickly understand and implement them. On-site procedures should be presented in the form of "process cards" or "work instructions," using a combination of text and images to highlight safety points for each step. For critical processes, visual safety operation boards can be set up at the operator's station, displaying operational steps, safety precautions, and emergency procedures, making them easily accessible and immediately applicable.

For example, in a stamping workshop of a manufacturing company, the original safety operating procedure was an eight-page Word document covering equipment overview, general safety requirements, operational steps, maintenance requirements, and emergency procedures. In practice, frontline workers rarely referred to this lengthy document, and new employee training relied on verbal transmission from experienced workers. The improved approach was to condense the procedures into a one-page A4-sized job safety operation card. The front side uses a flowchart to display seven steps from equipment startup to shutdown, with each step labeled with corresponding safety key points (e.g., "confirm that the dual-hand button function is normal," "confirm that the photoelectric protection device is not shielded"). The back side lists the three most common abnormal situations and their emergency response methods. The card, laminated, is hung at a designated location next to the equipment and used as a fixed learning content in pre-shift meetings. This change increased the actual implementation rate of safety requirements from less than 60% to over 95%.

On-site change management is also crucial. Clause 8.1.3 of ISO 45001 requires the management of change processes, including changes in products, services, processes, activities, and regulatory requirements. On-site change management is not just about filling out a form but establishing a complete closed loop: "pre-change risk assessment—change process control—post-change effect verification." Any changes involving new equipment introduction, process parameter adjustments, material substitutions, plant layout changes, or personnel reassignments must be jointly assessed by safety, process, equipment, and production departments before implementation, with the assessment results serving as the basis for change approval. After implementation, at least three to seven days of follow-up observation are required to ensure no new safety risks have emerged before the change is confirmed as closed.

On-site procurement and outsourcing management is often overlooked. ISO 45001 requires organizations to control procurement processes that impact occupational health and safety, covering equipment procurement, raw material procurement, and service outsourcing. On-site practices involve incorporating safety requirements into supplier evaluation criteria and contract terms. For high-risk equipment procurement, safety protection standards must be clearly specified in the technical specifications and verified upon delivery. For outsourced operations, contractors must provide detailed safety plans, receive safety briefings before entry, and sign safety agreements. During operations, the contracting party must conduct on-site supervision.

4. Building a Mechanism for Frontline Employee Participation

A key concept in ISO 45001 is "consultation and participation" (Clause 5.4). The English version of the standard uses the terms "consultation" and "participation," where the former emphasizes seeking employee input before management decisions, and the latter emphasizes employees' active involvement in various activities of the management system. This consultation and participation are the core drivers for integrating ISO 45001 with the shop floor—only when frontline employees become the main actors in safety management, rather than passive recipients, can the system truly move from documentation to the shop floor.

Building an on-site participation mechanism first requires establishing smooth safety communication channels at the organizational level. A mature approach is to set up a "safety officer" role at the team level, rotated among frontline operators, responsible for daily safety inspections, hazard reporting, and leading safety discussions in pre-shift meetings. This rotation mechanism not only reduces the workload of dedicated safety personnel but also allows each operator to reassess their work environment from a safety management perspective, thereby enhancing overall safety awareness and participation.

Team safety activities are important vehicles for activating frontline participation. Regular safety meetings should not be one-way communications from the safety department but should allow each employee to share safety hazards or improvement suggestions they have discovered in their work. A car parts company implemented a "daily safety minute" pre-shift meeting model—each day, one employee spends a minute sharing a safety tip or a safety case from their surroundings. Over a year, more than 200 such shares were compiled into an internal safety case library, becoming valuable resources for new employee training and daily safety education.

Hazard reporting and reward mechanisms are important levers for promoting employee participation. Many companies have launched "safety snap" activities where employees can use their smartphones to photograph safety hazards or highlights and report them through WeChat mini-programs or the company's safety management platform. Valuable safety suggestions are rewarded with points or cash. This low-threshold, high-frequency participation method expands safety management beyond the professional inspections of the safety department to the daily observations of all employees. More importantly, this mechanism can significantly reduce the time lag in hazard discovery—from weekly inspections by the safety department to daily identification by each employee.

Safety Observation and Communication (SOC) is a structured on-site participation tool. Safety managers and supervisors use systematic observation checklists to observe employee behaviors on the shop floor, record safe and unsafe behaviors, and provide one-on-one feedback in a friendly atmosphere. The core principle of SOC is to focus on the issue, not the person—observations aim to identify systemic safety improvement opportunities, not to assign personal blame. Therefore, the communication atmosphere must be constructive and non-punitive. This behavioral observation method helps organizations identify operational deviations that do not appear in risk lists but frequently occur in actual operations, thus precisely targeting training needs, optimizing processes, or improving protective measures.

5. On-Site Performance Monitoring and Continuous Improvement

Chapter 9 of ISO 45001 requires organizations to monitor, measure, analyze, and evaluate occupational health and safety performance. On-site performance monitoring is not about the safety department reviewing computer reports but embedding monitoring activities into the daily work rhythm.

On-site inspections are the most basic means of performance monitoring. Effective on-site inspections should be methodical, standardized, frequent, and have a closed loop. Inspectors should use standardized checklists covering fire protection facilities, emergency exits, chemical management, electrical safety, mechanical protection, and ergonomics. Issues identified during each inspection should be recorded and reported immediately, with immediate rectification where possible, and those that cannot be immediately rectified should be tracked in a rectification log. The inspection frequency should be reasonably determined based on the risk level of the site—daily inspections for high-risk areas, weekly inspections for medium-risk areas, and monthly inspections for low-risk areas.

On-site management of safety indicators also requires a practical mindset. Traditional safety management indicators are often lagging indicators—such as injury rates, lost time rates, and occupational disease incidence. While these indicators are meaningful statistically, they reflect outcomes that have already occurred and have limited value for prevention. On-site performance monitoring should introduce "leading indicators," such as the frequency of safety observations, the quantity and quality of hazard reports, the completion and pass rates of safety training, the participation rate in pre-shift safety discussions, and the adoption rate of safety improvement suggestions. These leading indicators can more sensitively reflect the operational status of the safety management system and provide early warning signals to management.

The management review process should also extend to the shop floor. Traditional management reviews involve a meeting, a report discussion, and a minutes document, with a significant gap between the review process and on-site operations. An improved approach is to arrange a site visit led by top management before the formal management review meeting, directly listening to frontline employees' opinions and suggestions and observing the actual conditions on-site. This "on-site management review" practice has been adopted by many advanced companies and has proven to be more effective than reviewing PPT reports in a meeting room. When top management personally sees the on-site safety conditions and faces employee feedback, the quality and execution of management review decisions are significantly improved.

On-site continuous improvement ultimately involves the closed-loop management of corrective actions and preventive actions. Clause 10.1 of ISO 45001 requires organizations to promptly investigate incidents or nonconformities and take corrective actions. The on-site improvement mechanism should ensure that "every hazard is addressed, every rectification is verified, and every case is shared." After hazard rectification, the person who reported it or relevant professionals should verify the effectiveness on-site to ensure that the corrective measures prevent similar issues from recurring. For hazards or incidents with typical educational value, case analysis materials should be compiled and shared with relevant teams, converting individual lessons into organizational experience.

6. Empowering On-Site Implementation with Digital Tools

In the context of the current industrial digital transformation, digital tools are becoming important enablers for integrating ISO 45001 with the shop floor. Traditional paper-and-pen management methods face issues such as low efficiency, data dispersion, difficulty in traceability, and insufficient analytical capabilities. Digital safety management platforms can effectively address these challenges.

Mobile inspections and hazard identification are typical applications of digital on-site management. Safety inspectors use mobile apps or terminals to complete inspection tasks, with the system automatically recording the inspection time, location, and results. Abnormal situations can be reported immediately through photos and voice descriptions. Compared to the traditional method of manually recording and entering data into a computer, mobile inspections significantly enhance data collection efficiency and avoid inaccuracies and delays caused by secondary entry.

Digital safety training is also a crucial means of improving on-site implementation. Traditional centralized safety training often conflicts with work schedules, with training content disconnected from actual job requirements and limited methods for verifying training effectiveness. Digital training platforms allow employees to complete learning in their spare time near their workstations, with training content presented in more engaging and intuitive formats such as short videos, animation simulations, and interactive VR scenarios. Training effectiveness can be assessed through a combination of online evaluations and practical tests. Some companies have applied VR technology to high-risk operation safety training, allowing employees to experience scenarios like falls from heights, electric shocks, and chemical leaks in a virtual environment, ensuring training realism while avoiding actual risks.

Internet of Things (IoT) technology offers new possibilities for on-site risk monitoring. By deploying sensors on key equipment and in high-risk areas, real-time monitoring of equipment status, environmental parameters (temperature, humidity, harmful gas concentration), personnel location, and behavior can be achieved. When abnormal conditions are detected—such as a photoelectric protection device being shielded on a stamping machine, flammable gas concentration exceeding limits, or an employee entering a confined space without authorization—the system can automatically trigger alarms and notify relevant personnel. This intelligent on-site monitoring method significantly reduces the time from risk occurrence to detection, enhancing the timeliness and precision of risk management.

Data analysis and visualization are the ultimate value of digital management. The large amount of on-site data accumulated by the safety management platform, after statistical analysis, can provide valuable management insights—such as which areas or processes have the highest hazard occurrence, which seasons or times have increased accident risks, which types of incidents recur, and which training content needs reinforcement. These data-driven insights help management make more scientific resource allocation and decisions. Data dashboards present key safety indicators graphically in real-time, allowing management to quickly grasp the on-site safety operational status.

7. From System Certification to On-Site Excellence

In the process of integrating ISO 45001 with the shop floor, a critical question to consider is whether the organization's goal is "certification" or "on-site safety." These two goals may align in the short term—organizations emphasize on-site standardization to pass certification audits, but this standardization is often "prepared for the audit" and can easily slacken after the audit. However, when "on-site safety" is the goal, certification is merely a means, not an endpoint, and the motivation for improvement comes from within, not from external audits.

Transitioning from a "certification-oriented" to an "on-site-oriented" approach requires several key cognitive shifts in the organization. First, from "document completeness" to "execution effectiveness"—focusing not on the perfect format of document templates but on whether the requirements in the documents are truly implemented and followed at the job level. Second, from "compliance baseline" to "pursuit of excellence"—not just meeting the minimum legal requirements but continuously benchmarking and improving against industry best practices. Third, from "safety department sole responsibility" to "shared responsibility"—safety management is not the exclusive function of the safety department but a responsibility shared by everyone from the general manager to the frontline operator.

The ultimate manifestation of these shifts is the formation of a safety culture. Although ISO 45001 does not directly use the term "safety culture," the elements of "leadership," "consultation and participation," and "continuous improvement" in the standard point to the core meaning of a safety culture. When every member of the organization voluntarily focuses on safety, actively identifies risks, and participates in improvements, the OHSMS truly transforms from a "system on paper" to a "system in practice."

Writing ISO 45001 into documents takes only a few weeks, but truly integrating ISO 45001 into the shop floor is a continuous system project requiring sustained investment and improvement. From on-site hazard identification to job-specific transformation of operating procedures; from standardized inspection processes to the application of digital tools; from frontline employee participation mechanisms to the on-site extension of management reviews—every step requires the organization's ongoing commitment and effort. The true power of ISO 45001 does not lie in its written clauses but in whether it can be seen, felt, and practiced in daily operations. When every safety management action occurs on-site, serves on-site, and improves on-site, the OHSMS truly completes the value transformation from a certification certificate to management effectiveness, and the organization's safety performance will see a qualitative leap.

The distance between the system and the site is the distance between safety management effectiveness and reality.

Knowledge code: 14.1.1

Version: v20260719

Author: Quality Think Tank Quality Think Tank is dedicated to providing systematic professional knowledge, methodologies, and practical tools for quality management practitioners, helping companies continuously enhance their quality capabilities.