19.3 Occupational Health & Safety Management Systems (ISO 45001, ANSI Z10)

Occupational Health & Safety Management Systems (ISO 45001, ANSI Z10)

Modern occupational health and safety has evolved from reactive regulatory compliance toward proactive, systematic, and integrated management systems. An Occupational Health and Safety Management System (OHSMS) provides an organized framework that enables an organization to identify hazards, assess and prioritize occupational risks, implement robust engineering and administrative controls, track performance metrics, and drive continual improvement.

For the Certified Industrial Hygienist, mastering international and national consensus standards—specifically ISO 45001:2018 and ANSI/ASSP Z10.0-2019—is essential. CIHs are responsible for integrating industrial hygiene exposure assessment strategies, Hierarchy of Controls, Management of Change (MOC) workflows, quantitative metric evaluations (e.g., TRIR, DART), and Root Cause Analysis (RCA) into enterprise management structures.

---

1. OHSMS Standards: ISO 45001:2018 & ANSI/ASSP Z10.0-2019

The High-Level Structure (HLS / Annex SL)

ISO 45001:2018 replaced OHSAS 18001 and adopted the standardized ISO High-Level Structure (HLS) (now Annex SL), aligning OHS management with quality (ISO 9001) and environmental management (ISO 14001). The standard comprises 10 discrete clauses:

+-------------------------------------------------------------------------+
|                    ISO 45001:2018 CLAUSE ARCHITECTURE                   |
+-------------------------------------------------------------------------+
|  CLAUSE 1: Scope                                                        |
|  CLAUSE 2: Normative References                                         |
|  CLAUSE 3: Terms and Definitions                                        |
|  ---------------------------------------------------------------------  |
|  [ PLAN ]                                                               |
|  CLAUSE 4: Context of the Organization (Internal/External Issues, Needs)|
|  CLAUSE 5: Leadership and Worker Participation (Policy, Roles, Consult) |
|  CLAUSE 6: Planning (Hazard ID, Risk & Opportunity Assessment, Goals)   |
|  ---------------------------------------------------------------------  |
|  [ DO ]                                                                 |
|  CLAUSE 7: Support (Resources, Competence, Awareness, Communication, Doc)|
|  CLAUSE 8: Operation (Hierarchy of Controls, MOC, Procurement, ERP)     |
|  ---------------------------------------------------------------------  |
|  [ CHECK ]                                                              |
|  CLAUSE 9: Performance Evaluation (Monitoring, Internal Audit, Mgmt Rev)|
|  ---------------------------------------------------------------------  |
|  [ ACT ]                                                                |
|  CLAUSE 10: Improvement (Incidents, Nonconformity, Corrective Action)   |
+-------------------------------------------------------------------------+

Key ISO 45001 Clauses in Industrial Hygiene Practice

• Clause 4 — Context of the Organization: Identifies internal factors (facility layout, chemical inventory, workforce demographics) and external factors (regulatory climate, supply chain disruptions, stakeholder expectations) influencing OHS.
• Clause 5 — Leadership and Worker Participation: Top management must take active accountability for worker health (not merely delegating safety). Clause 5.4 establishes explicit requirements for consultation and participation of non-managerial workers in hazard identification, control selection, training design, and incident investigations.
• Clause 6 — Planning: Establishes processes to assess OHS risks and opportunities (e.g., upgrading to automated LEV systems). Requires establishing measurable OHS objectives aligned with qualitative exposure rankings and quantitative baseline monitoring.
• Clause 8 — Operation: Mandates the application of the Hierarchy of Controls (Elimination, Substitution, Engineering Controls, Administrative Controls, PPE). Clause 8.1.3 explicitly governs Management of Change (MOC), and Clause 8.1.4 controls contractor and procurement health risks.
• Clause 9 — Performance Evaluation: Encompasses quantitative exposure monitoring, medical surveillance metrics, legal compliance evaluations, and annual management review meetings.
• Clause 10 — Improvement: Requires root cause investigation of all incidents and nonconformities to drive continual OHS system improvement.

ANSI/ASSP Z10.0-2019

ANSI/ASSP Z10.0-2019 (Occupational Health and Safety Management Systems) is the premier American national consensus standard for OHSMS. While structured similarly to ISO 45001 around the PDCA cycle, ANSI Z10 places heightened emphasis on:

• Operational Risk Assessment: Rigorous risk scoring matrices before and after control implementation.
• Safe Design Principles (Prevention through Design [PtD]): Integrating industrial hygiene engineering controls during the conceptual and design phases of facilities, processes, and equipment.
• Worker Empowerment: Integrating safety committees directly into executive decision-making.

---

2. The Plan-Do-Check-Act (PDCA) Deming Cycle

Both ISO 45001 and ANSI Z10 are anchored in the iterative PDCA management framework, ensuring that occupational health is managed as a continuous, closed-loop process rather than an episodic event.

                    +------------------------+
                    |       1. PLAN          |
                    | - Hazard Identification|
                    | - Exposure Risk Matrix |
                    | - Legal Requirements   |
                    | - OHS Objectives       |
                    +-----------+------------+
                                |
                                v
+------------------------+              +------------------------+
|        4. ACT          |              |        2. DO           |
| - Corrective Actions   |              | - Hierarchy of Controls|
| - System Optimization  | <----------- | - LEV & Eng Controls   |
| - Management Review    |              | - MOC & Procurement    |
| - Continual Improvement|              | - Worker Training      |
+------------------------+              +-----------+------------+
                                                    |
                                                    v
                                        +------------------------+
                                        |       3. CHECK         |
                                        | - Air & Noise Sampling |
                                        | - Medical Surveillance |
                                        | - Metric Tracking      |
                                        | - Internal OHS Audits  |
                                        +------------------------+

---

3. Leading vs. Lagging Safety and Health Indicators

Measuring the efficacy of an industrial hygiene program requires a balanced combination of leading (proactive, input-driven) and lagging (reactive, outcome-driven) metrics.

+-------------------------------------------------------------------------+
|                    SAFETY & HEALTH METRIC SPECTRUM                      |
+-------------------------------------------------------------------------+
|                                                                         |
|   [ LEADING INDICATORS ]                [ LAGGING INDICATORS ]          |
|   (Proactive / Predictive Inputs)       (Retrospective / Outcome Loss)  |
|   - IH exposure monitoring completed    - OSHA Recordable Injuries      |
|   - LEV static pressure inspections     - Lost Workday Cases            |
|   - Near-miss incident reports          - Total Recordable Incident     |
|   - Safety audit closure velocity         Rate (TRIR)                   |
|   - Worker training completion %        - Days Away, Restricted,        |
|   - Ergonomic assessments closed          or Transferred (DART) Rate    |
|   - Pre-startup safety reviews          - Lost Time Incident            |
|                                           Frequency Rate (LTIFR)        |
+-------------------------------------------------------------------------+

Quantitative Lagging Metric Formulas

In the United States, standard occupational injury and illness incidence rates are calculated using the base established by the Bureau of Labor Statistics (BLS) and OSHA: 200,000 employee-hours (equivalent to 100 full-time workers working 40 hours per week for 50 weeks per year).

1. Total Recordable Incident Rate (TRIR)

$\text{TRIR} = \frac{\text{Total Number of OSHA Recordable Injuries and Illnesses} \times 200,000}{\text{Total Hours Worked by All Employees in Reference Period}}$

2. Days Away, Restricted, or Transferred (DART) Rate

$\text{DART} = \frac{(\text{Number of Cases with Days Away from Work} + \text{Number of Cases with Job Transfer/Restriction}) \times 200,000}{\text{Total Hours Worked by All Employees in Reference Period}}$

3. Severity Rate (SR)

$\text{SR} = \frac{\text{Total Number of Lost Workdays (Days Away + Days Restricted)} \times 200,000}{\text{Total Hours Worked by All Employees in Reference Period}}$

4. Lost Time Incident Frequency Rate (LTIFR — International Standard)

In global operations (e.g., under ISO reporting guidelines), incidence rates are frequently normalized to 1,000,000 hours of exposure: $\text{LTIFR} = \frac{\text{Number of Lost Time Injuries (LTI)} \times 1,000,000}{\text{Total Hours Worked by All Employees in Reference Period}}$

Comparison Table of Core Performance Metrics

---

4. Management of Change (MOC) Protocol

Uncontrolled operational modifications are a primary root cause of chemical overexposures, catastrophic releases, and toxic exposures. An effective OHSMS enforces a formal Management of Change (MOC) procedure before any temporary or permanent process alteration is executed.

+-------------------------------------------------------------------------+
|                       MANAGEMENT OF CHANGE (MOC) WORKFLOW               |
+-------------------------------------------------------------------------+
|                                                                         |
|   [ STEP 1: CHANGE PROPOSAL INITIATION ]                                |
|   - Operational description, business rationale, and scope             |
|   - Identifies: Chemicals, equipment, ventilation, piping, throughput   |
|                               |                                         |
|                               v                                         |
|   [ STEP 2: MULTI-DISCIPLINARY EHS & IH REVIEW ]                        |
|   - Evaluates chemical toxicity, physical hazards, flammability         |
|   - Reviews LEV airflow, duct velocities, and containment impact        |
|   - Identifies new Similar Exposure Groups (SEGs) or altered OELs       |
|                               |                                         |
|                               v                                         |
|   [ STEP 3: RISK ASSESSMENT & CONTROL SPECIFICATION ]                   |
|   - Hierarchy of Controls: Engineering redesign, interlocks, PPE        |
|   - Updates Operating Procedures (SOPs), HazCom labels, and SDS library |
|                               |                                         |
|                               v                                         |
|   [ STEP 4: PRE-STARTUP SAFETY REVIEW (PSSR) ]                          |
|   - Field verification: Ventilation commissioning, sensor calibration   |
|   - Employee and maintenance technician training completed             |
|                               |                                         |
|                               v                                         |
|   [ STEP 5: AUTHORIZATION & SYSTEM COMMISSIONING ]                      |
|   - Formal sign-off by Plant Manager, Operations Lead, and Lead CIH     |
|                               |                                         |
|                               v                                         |
|   [ STEP 6: POST-STARTUP IH VALIDATION SAMPLING ]                       |
|   - Quantitative personal air monitoring to validate control efficiency |
+-------------------------------------------------------------------------+

MOC Trigger Conditions

An MOC review must be triggered by any of the following events:

1. Chemical Changes: Introduction of a new raw material, solvent substitution, catalyst alteration, or vendor reformulation.
2. Equipment & Engineering Controls: Installation, modification, or re-routing of local exhaust ventilation, ductwork, hoods, pumps, or reaction vessels.
3. Process & Operational Parameters: Increases in operating temperature, system pressure, batch throughput, or mixing speeds.
4. Organizational & Staffing Alterations: Shift length changes (e.g., transitioning from 8-hour to 12-hour shifts requiring OEL mathematical adjustments), staffing reductions, or maintenance contractor onboarding.
5. Facility Layout: Construction of partition walls affecting general dilution ventilation patterns or emergency egress.

---

5. Incident Investigation and Root Cause Analysis (RCA)

An investigation that merely blames "worker inattention" or "failure to wear PPE" fails to address systemic latent conditions. OHSMS standards require systematic Root Cause Analysis (RCA) to identify organizational, procedural, and engineering root causes.

1. The 5 Whys Technique

An iterative interrogative technique that explores the cause-and-effect relationships underlying a specific occupational incident by asking "Why?" successively (typically five times) until systemic root causes are uncovered.

2. Ishikawa (Fishbone / 6M) Diagram

A structured visual causal analysis tool that categorizes potential contributors into six primary domains (the 6Ms):

• Manpower / People: Training deficiencies, fatigue, improper supervision, ergonomic strain.
• Machine / Equipment: Mechanical wear, fan belt failure, interlock malfunction, pump seal leak.
• Method / Procedures: Outdated SOPs, lack of MOC review, missing pre-startup checks.
• Material: Unannounced chemical raw material change, incompatible packaging, elevated vapor pressure.
• Measurement: Calibrated detector drift, missing static pressure gauges on LEV, delayed lab reporting.
• Milieu / Environment: High ambient heat load, poor lighting, cross-drafts disrupting hood capture velocity.

+-------------------------------------------------------------------------+
|                    ISHIKAWA (FISHBONE / 6M) DIAGRAM                     |
+-------------------------------------------------------------------------+
|                                                                         |
|   MANPOWER             MACHINE                 METHOD                   |
|   (Untrained Tech)    (Duct Damper Stuck)     (No SOP for Purging)      |
|          \                    \                    \                    |
|           \                    \                    \                   |
|            +--------------------+--------------------+--------+          |
|            |                                                  |======>  |
|            +--------------------+--------------------+--------+ (TOXIC |
|           /                    /                    /            VAPOR  |
|          /                    /                    /            RELEASE)|
|   MATERIAL             MEASUREMENT             MILIEU                   |
|   (Volatile Solvent)  (Sensor Out of Cal)     (Cross-Drafts in Bay)     |
+-------------------------------------------------------------------------+

3. Fault Tree Analysis (FTA)

A deductive, top-down logic diagram that models the pathways leading to an undesired system-level event (the Top Event). FTA uses Boolean logic gates to calculate failure probabilities:

+-------------------------------------------------------------------------+
|                        FAULT TREE ANALYSIS LOGIC                        |
+-------------------------------------------------------------------------+
|                                                                         |
|                      [ TOP EVENT: Vapor Cloud Ignition ]                |
|                                      |                                  |
|                                   [AND GATE]                            |
|                                    /    \                               |
|                                   /      \                              |
|         [ Flammable Vapor Accumulation ]  [ Ignition Source Present ]   |
|                        |                                |               |
|                    [OR GATE]                        [OR GATE]           |
|                    /       \                        /       \           |
|                   /         \                      /         \          |
|           [LEV Fan Failure] [Solvent Spill]   [Static Spark] [Hot Work] |
+-------------------------------------------------------------------------+

Quantitative Boolean Probability Calculations

• AND Gate: The output event occurs only if all input events occur simultaneously. For independent events: $P(\text{Output}) = P(A) \times P(B) \times \cdots \times P(n)$
• OR Gate: The output event occurs if at least one input event occurs. For independent events: $P(\text{Output}) = 1 - \prod_{i=1}^{n} (1 - P(i)) \approx \sum_{i=1}^{n} P(i) \quad (\text{when } P(i) \ll 1)$

---

6. Worked Step-by-Step OHSMS Calculations

Worked Example 18.2.1: Enterprise Incident Rate Benchmarking

Problem: A chemical manufacturing enterprise employs 450 full-time workers and 50 part-time workers across a calendar year.

• Total recorded employee hours worked across all staff = 980,000 hours.
• During the year, the enterprise logs the following incidents:
  • 3 cases involving fractured bones resulting in days away from work (total lost days = 42).
  • 4 cases of toxic chemical dermatitis resulting in temporary transfer to non-chemical duties (total restricted days = 28).
  • 5 cases of eye irritation treated with prescription eye drops (no lost or restricted workdays).
  • 6 cases of minor lacerations treated exclusively with first-aid adhesive bandages.
  • 8 near-miss toxic vapor releases captured in the internal reporting system.

Calculate:

1. Total number of OSHA Recordable Injuries and Illnesses.
2. Total Recordable Incident Rate (TRIR).
3. Days Away, Restricted, or Transferred (DART) Rate.
4. Severity Rate (SR).
5. Lost Time Incident Frequency Rate (LTIFR) per 1,000,000 hours.

Solution Steps:

1. Determine Recordable Cases:

   • Fractures with days away: 3 cases (Recordable — Days Away).
   • Dermatitis with job transfer: 4 cases (Recordable — Job Transfer/Restriction).
   • Eye irritation with prescription drops: 5 cases (Recordable — Medical Treatment beyond first aid).
   • Minor lacerations treated with bandages: 6 cases (Exempt — First Aid under 29 CFR 1904.7).
   • Near-miss releases: 8 events (Leading indicator, not an OSHA recordable incident).
   • Total Recordable Cases (N) = 3 + 4 + 5 = 12 cases.
   • Total DART Cases (NDART) = 3 + 4 = 7 cases.
   • Total Lost/Restricted Days = 42 + 28 = 70 days.

2. Calculate TRIR: $\text{TRIR} = \frac{12 \times 200,000}{980,000} = \frac{2,400,000}{980,000} = 2.45$

3. Calculate DART Rate: $\text{DART} = \frac{7 \times 200,000}{980,000} = \frac{1,400,000}{980,000} = 1.43$

4. Calculate Severity Rate (SR): $\text{SR} = \frac{70 \times 200,000}{980,000} = \frac{14,000,000}{980,000} = 14.29\,\text{days per 100 FTE}$

5. Calculate LTIFR (per 1,000,000 hours):

   • Lost Time Cases = 3 (cases involving days away from work). $\text{LTIFR} = \frac{3 \times 1,000,000}{980,000} = 3.06\,\text{lost-time injuries per million hours}$

---

Worked Example 18.2.2: Fault Tree Analysis (FTA) Probability Modeling

Problem: An industrial hygienist conducts an FTA on a catastrophic local exhaust ventilation (LEV) failure that could result in an acute toxic overexposure in a pharmaceutical cleanroom.

• The top failure event (Uncontrolled Cleanroom Vapor Accumulation) occurs only if both Sub-Event 1 (Primary LEV Fan Failure) AND Sub-Event 2 (Backup Standby Fan Fails to Start) occur.
• The probability of Primary LEV Fan Failure during a given operational campaign is P(Fan 1) = 0.04.
• The probability of the Backup Standby Fan failing to start upon demand is P(Fan 2) = 0.05.
• The Cleanroom Emergency Overexposure alarm triggers if either the Differential Pressure Sensor fails (P(Sensor) = 0.02) OR the Audible Alarm Horn burns out (P(Horn) = 0.01).

Calculate the probability of complete simultaneous LEV ventilation failure (PLEV) and the probability of alarm system failure (PAlarm).

Solution Steps:

1. Calculate LEV Ventilation Failure (AND Gate):

   • Because both fans must fail simultaneously for the ventilation system to collapse: $P_{\text{LEV}} = P(\text{Fan 1}) \times P(\text{Fan 2}) = 0.04 \times 0.05 = 0.0020 \quad (0.20\%)$

2. Calculate Alarm System Failure (OR Gate):

   • Because failure of either the sensor OR the horn disables the warning: $P_{\text{Alarm}} = 1 - [(1 - P(\text{Sensor})) \times (1 - P(\text{Horn}))]$ $P_{\text{Alarm}} = 1 - [(1 - 0.02) \times (1 - 0.01)] = 1 - [0.98 \times 0.99] = 1 - 0.9702 = 0.0298 \quad (2.98\%)$