There is no such thing as a "stupid" or "daft" health and safety question!
This is just a select few articles you may be interested in.
My current job as a Health, Safety and Radiation Advisor has given me some amazing and interesting opportunities to learn and share best practice, both internally in our heavy engineering manufacturing facilities and by visiting hundreds of our suppliers. I want to share my experiences because I think it would be wrong not to.
I've found that regardless of the industry, the basics of any positive health and safety culture are the same. I've also discovered over the past 11 1/2 years that many businesses aspiring to achieve 45001 accreditation (previously 18001) often think they are a long way off, but in reality they are closer than they think.
My articles will give you practical and meaningful advice with real world examples to help provide assurance that your health and safety management system is effective in reality and doesn't just look good on paper. They will also help identify areas of improvement. By the way, is it 'continuous' or 'continual' improvement? There's been many a debate on that one for sure!
So, whenever I conduct an internal audit or external supplier audit, I go right back to basics. Hazard control and risk assessment…
My audits often start by asking the auditee 'what's the most dangerous activity on site, what can kill me if things go bad?' For me, the response to this question gives me an indication of the auditee's perception of risk, potentially the organisation's perception of risk and their priorities.
Some of the responses I've had in the past will very often set the tone and direction of the day. Here's some examples I've come across, a few links to useful resources and my thought process from the conversations:
Can I see it please?
This question is so important and in my experience, not used nearly often enough. As human beings, we typically don't want to offend people and when doing audits its important and helpful to build positive relationships with the auditee, it's my preferred approach at least. However, if I'm looking at legal compliance, it isn't good enough to simply accept people's word that it is done. If there are statutory records required for things like specified timescales for thorough examinations highlighted above, I want to see the certification, examination schemes, defect reports, LEV records or whatever is appropriate.
I've seen it all too often that somebody thinks somebody else has it all under control. You may have already seen the story of Everybody, Somebody, Anybody And Nobody?
Take nobody's word for it, see it for yourself and don't publish an audit report based on assumptions.
Now that I've satisfied myself that the high hazard activities are at least understood by the business and any specific legislative requirements are being met, I want to know if there is an effective system in place to identify and adequately control the 'significant' hazards. I much prefer to tackle this on a risk based, practical and sensible approach.
A large business should have the resources available to have this covered. They may use a mix of online risk management software, corporate software and databases, industry specific guidance, internal risk registers or even specialist third party consultants. I would still be looking to see if a business verified their own approach by way of internal audit and/or inspections and to see if they had a robust corrective action and non-conformance system.
A small business with limited resources available on the other hand will likely have a fairly simple process in place and they might not even know it! Ask for a list of their hazards on site and you might not find one. Ask for the process they follow when buying new machinery for example and they might describe a robust process of how they verify the machine is fit for purpose before buying it, what existing controls prevent harm to people, what additional controls the company needs to implement, training requirements, maintenance requirements, PUWER risk assessment requirements etc. The process may not be written down but if the company can demonstrate it to be effective, maybe they just need to capture it on a simple flow diagram.
I have certainly audited places where there is little in the way of a documented management system, maybe even little or no formalised risk assessments, but the people doing the job are skilled and fully aware of the hazards and risks they are working with. That, at least, is something to work with as an health and safety professional.
What would you prefer?
A) An all singing, all dancing documented health and safety management system, but people on the workshop floor are swinging from the rafters, putting themselves in harm's way for production, ignoring safety rules, have a bad attitude to health and safety, OR,
B) Not much in the way of a formalised management system, but employees are demonstrating a positive, proactive approach to improving the health and safety at their work, looking out for their colleagues, following rules, getting involved, well trained and motivated
B all the way for me please. Formalised systems can be developed.
I say 'effective' for a reason. All too often I see risk assessments created without input from the people involved in the hazardous activities, or without consulting with others in the business who might have valuable input. These can sometimes be seen purely as a tick-box exercise to cover one's backside! These are the risk assessments filed away on a computer, kept in a nice shiny folder in the office or pinned to a noticeboard.
Do people pick these up, read and follow them? I guess some do, but many don't.
Do people know and understand the controls without needing to refer to the risk assessments all the time? I would hope they do, but if not, training, communication and consultation could be your next audit focus area.
So, back to basics. The law requires us to record the 'significant findings' of an assessment of risk if you employ five people or more. Having them recorded ticks the box, great. Communicating them, providing training on them and checking they are being followed is the key.
When my auditing takes me to risk assessments, I quickly drop into the 'can I see it?' mode. Here's a real world example…
Take nobody's word for it, see it for yourself and don't publish an audit report based on assumptions.
Real world example - spray painting
A risk assessment for a spray painting operation calls for a pre-start checklist to be completed by the operator. The checklist has several safety critical items on it, one of them being to check there are records for the bi-annual maintenance of the pressurised paint mixing unit.
When asked, the operator was fully aware of the requirement for the maintenance and was confident it was completed, so the box was ticked.
When asked, the operator explained the records would be held in the office.
When the office was asked for the records, they weren't there but were reported to be at head office.
Head office did in fact have the records and they were current, accurate and all correct. It took several hours to have visibility of these records.
In the end, my concern was not that it took several hours to see the records, it was the fact that the operator was given responsibility of checking records on a pre-start checklist immediately prior to painting. It was not the operator's responsibility to develop a maintenance plan, implement it, ensure it was completed bi-annually and maintain accurate records which are easily retrievable.
The checklist, in my opinion, could only then be seen as a tick box exercise.
If the operator was simply ticking this box on assumptions (albeit confidently), what other boxes are being ticked without absolute certainty? Ultimately, the operator is being set up to fail from the beginning. That's unacceptable in my personal rule book.
The company now needs to look at that risk assessment and their risk assessment process to see what other controls are misplaced, incorrect or irrelevant. Otherwise, the importance of the risk assessment's controls could be diluted, making them ineffective.
Risk assessment doesn't need to be complicated. It does need to work for those who rely on its content no matter how the information is relayed to them.
Here's the HSE's risk management pages, set a shortcut to it on your browser and use it often, regardless of whether you are a beginner or seasoned health and safety professional - http://www.hse.gov.uk/risk/index.htm
Back to basics please.
I hope you have found my ramblings useful. If you have, please consider sharing the article on your social networks.
Many thanks.