What Is an Occupational Health & Safety Management System

In a small paint factory in the Adra industrial zone near Damascus, leftover solvent residue caught fire in a corner of the storage area. The nearest worker grabbed the fire extinguisher and found the pressure gauge at zero — it had expired eight months earlier. The fire was barely put out with a wet blanket and another extinguisher rushed over from the neighboring office. No one was hurt. This time.

The irony is that the factory wasn't negligent by ordinary standards: there were extinguishers in the corners, safety instructions posted on the walls, and a veteran worker assigned to "handle safety matters." What was missing was the answer to a single question: who inspects the extinguishers, when, where is the inspection logged, and who confirms it actually happened? That gap — where everything exists but nothing is guaranteed — is precisely the difference between scattered procedures and a management system.

What turns procedures into a "system"

An Occupational Health and Safety Management System (OHSMS) is the framework that links policy, risk, controls, and measurement into a single closed loop. It rests on five pillars, and their order isn't a checklist to memorize but a sequence in which each pillar feeds the next:

1. Policy and leadership: top management issues a written commitment and backs it with resources and authority.
2. Planning: identifying hazards, assessing their risk, and setting controls and measurable objectives.
3. Support and operation: competencies, training, operating procedures, and emergency preparedness — turning the plan into daily work.
4. Performance evaluation: inspections, indicators, internal audits, and periodic management review.
5. Improvement: addressing nonconformities with corrective actions that target the root cause.

This loop is the PDCA rhythm — Plan, Do, Check, Act — which you'll cover in detail in a later lesson in this track.

The extinguisher itself, inside the system

The clearest way to understand the system is to run the Adra case through it from start to finish:

1. Planning logs "solvent fire" as a high-risk hazard — a reasonable likelihood combined with catastrophic severity in a building full of flammable materials.
2. Controls are defined: storing solvents in a closed metal cabinet, keeping ignition sources away, and placing the right type of extinguisher at calculated points.
3. Operation translates that last control into a recurring task: a monthly extinguisher inspection assigned to a named individual — not to "everyone," because what's assigned to everyone gets done by no one.
4. Every inspection leaves a dated, signed record; that record is the evidence shown to the auditor and the basis on which trust is built.
5. A performance indicator aggregates the inspections: the percentage of safety inspections completed on time. If that percentage drops below a set threshold, the failure shows up on a dashboard — before the incident, not after.
6. A semi-annual management review asks: why has the indicator declined for three consecutive months? A corrective action is then opened.

Here lies the essential difference: with scattered procedures, everything rests on individuals' diligence and memory, so when one person's diligence lapses, the control silently fails — exactly as the Adra extinguisher inspection lapsed for eight months without anyone noticing. Within a system, when the individual fails, measurement catches it.

Workers inside the system, not outside it

The pillar most often forgotten: the person standing on the production line sees what management cannot see from its offices. The paint factory worker knew the extinguisher was outdated — but he had no place to report it, so it stayed unspoken until the corner caught fire. A living system opens channels for reporting hazards and near-misses without fear of blame, and involves workers in assessing the risks they live with daily. A facility whose workers don't speak up has a system that's blind on the ground.

Common mistakes

1. A system on paper: a safety manual copied from another facility or downloaded from the internet that doesn't match your actual operations. An auditor exposes it with the first field question, and worse, it protects no one.
2. A safety officer without authority: held accountable for outcomes but unable to halt hazardous work or fund a control. The standard places leadership responsibility specifically on top management to close this exact gap.
3. Records without review: inspections filled out and filed away in a cabinet no one reads. Without indicators and periodic review, you've built an archive — and an archive doesn't put out fires.

In goiso

goiso is built on this exact system structure. You start by defining your sites, assets, and team, then activate your standard, and the seeding wizard turns clauses and templates into inspections and tasks distributed across sites and team members — the Adra extinguisher would have been a monthly inspection card assigned to a named person, appearing on their board before it came due. Inspections have a kanban board whose cards close by dragging, tasks and incidents each have their own board, and corrective actions (CAPA) can only be closed and documented by the internal auditor role — a separation of duties the system enforces by design, not by good intentions. The KPI board displays thresholds and trends from periodic snapshots, so you see the decline before it becomes an incident. Start with How to get started with goiso, and read The KPI board.

Summary

• A system isn't a pile of procedures but a closed loop: leadership, then planning, then operation, then measurement, then improvement — each pillar feeding the next.
• What isn't assigned to a named person with a due date doesn't happen, and what isn't measured has its failure discovered only after the incident.
• Workers are the system's first source of information; their reporting channel is a core pillar, not a luxury.
• Paper that doesn't match reality isn't a system — it's an extra burden stacked on top of the risks themselves.

What fuels this entire loop is the distinction planning begins with: the hazard as the source of harm, and the risk as the likelihood and severity of it occurring — a simple distinction whose confusion ruins every assessment, and the subject of the next lesson: The difference between hazard and risk.