Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
OHSAS — Occupational Health and Safety Management Systems Implementation Guidelines (OHSAS 18002:2008)
OHSAS 18002:2008 — Guidelines for the Implementation of OHSAS 18001:2007
📗 OHSAS 18002:2008 is the implementation guideline issued by the OHSAS Project Group for occupational health and safety management systems, providing detailed guidance for organizations implementing OHSAS 18001:2007. Together with OHSAS 18001 (requirements), it forms a “requirements + implementation guidelines” pair: 18001 specifies what must be done, while 18002 explains how to do it, and includes practical content such as a hazard identification checklist (Annex C) and a comparison of risk assessment tools and methodologies (Annex D). It is an essential operational handbook for establishing, implementing and improving an OH&S management system.
💡 OHSAS 18002 serves not only organizations seeking certification but also provides a unified interpretation framework for auditors, consultants, training bodies and regulators to understand the OHSAS 18001 requirements.
1. Standard Overview and Series Positioning 📌
This article is the summary review for the “OHSAS” prefix of the BSB223 batch. The standard in this batch is OHSAS 18002:2008 (Guidelines for the implementation of OHSAS 18001:2007). It was published by the OHSAS Project Group in November 2008 as the second edition (ISBN 978 0 580 61674 7), the first edition having been published in February 2000. It is the updated implementation guide corresponding to the 2007 requirements of OHSAS 18001.
| Batch Prefix | Standard | Title | Status |
|---|---|---|---|
| OHSAS | OHSAS 18002:2008 | Occupational health and safety management systems – Guidelines for the implementation of OHSAS 18001:2007 | Second edition (2008-11) |
OHSAS 18002 was developed with the assistance and support of numerous international organizations, including the American Industrial Hygiene Association (AIHA), the American Society of Safety Engineers (ASSE), the British Standards Institution (BSI), AFAQ-EAQA of France, Det Norske Veritas (DNV), the UK Health and Safety Executive (HSE), the Institution of Occupational Safety and Health (IOSH), and many national standardization and certification bodies. Its clause structure is consistent with OHSAS 18001 (four management-system requirement clauses plus a series of annexes), enabling clause-by-clause implementation.
⚠️ OHSAS 18002 is an implementation guide, not a mandatory requirements document. Its “should” statements are largely advisory; organizations should apply them sensibly according to their own size, risk profile and resources, rather than copying them mechanically.
2. Structure and Content of the Implementation Guide 🔧
The structure of OHSAS 18002:2008 corresponds exactly to OHSAS 18001:2007, with four body clauses (Scope, Reference publications, Terms and definitions, OH&S management system requirements) plus several informative annexes.
| Clause / Annex | Content | Implementation Points |
|---|---|---|
| 1 Scope | Guide applicability | Covers all organization types |
| 3 Terms and definitions | Core concept explanations | Risk, hazard, incident, acceptable risk, etc. |
| 4 OH&S management system requirements | Clause-by-clause guide | Policy, planning, implementation, checking, management review |
| Annex A | Correspondence with other standards | OHSAS 18001:2007 / ISO 14001:2004 / ISO 9001:2008 |
| Annex B | Correspondence with ILO-OSH | Clause mapping with ILO guidelines |
| Annex C | Hazard identification checklist | Example checklist items |
| Annex D | Risk assessment tool comparison | Comparison of risk evaluation methods |
2.1 Annex C – Hazard Identification Checklist
Annex C gives an example hazard identification checklist covering mechanical, electrical, chemical, physical, ergonomic, biological and psychosocial hazard factors, and the identification dimensions of routine/non-routine activities, workplaces, equipment, facilities and human behaviour, for organizations to use as a reference in building their own checklists.
2.2 Annex D – Risk Assessment Tools and Methods
Annex D compares several commonly used risk assessment tools and methods, including risk matrices, the LEC (likelihood-exposure-consequence) job-condition risk evaluation method, Hazard and Operability analysis (HAZOP), Fault Tree Analysis (FTA), Event Tree Analysis (ETA) and Failure Mode and Effects Analysis (FMEA), describing the applicability, inputs, outputs, advantages and limitations of each to help organizations select a method matched to their risk characteristics.
💡 There is no “universal” risk assessment method: complex process plants suit structured methods such as HAZOP, general tasks can use rapid matrix/LEC evaluation, and major accident hazards may warrant quantitative analysis such as fault or event trees.
3. Key Implementation Requirements 🔥
3.1 Hazard Identification and Risk Assessment Process
Clause 4 provides a complete methodological guide for clauses 4.3.1 and 4.3.2 of OHSAS 18001. Figure 2 gives an overview of the hazard identification and risk assessment process. The core steps are: divide into activities/job units – identify hazards – evaluate existing controls – estimate residual risk – judge acceptability – determine further controls – review and update.
3.2 Policy, Objectives and Programmes
The guide offers practical advice on developing, communicating and reviewing the OH&S policy, and gives examples for setting measurable, traceable objectives and targets broken down to relevant functions and levels, and for implementing programmes (responsibilities, timescales, resources, milestones).
3.3 Operational Control, Training and Emergencies
The guide provides examples for establishing procedures and implementing elements such as operational control (work permits, maintenance, purchasing, contractor management), competence and awareness, communication and participation/consultation, and emergency preparedness and response, with particular emphasis on contractor activity and change management controls.
🚨 A common implementation pitfall is treating the hazard identification register as a one-time static list that is not updated as processes, equipment, personnel and legislation change; or focusing only on major hazards while overlooking the frequently occurring low-severity injury risks of routine tasks.
4. Practical Application 🛠️
- 📋 System building: build the system documentation (policy, procedures, records) following the 18002 steps, corresponding clause by clause to OHSAS 18001.
- 🔍 Risk assessment: select the appropriate method by comparing those in Annex D, build checklists from Annex C, and produce a risk assessment report.
- 🛡️ Integrated management: use Annex A to integrate OH&S with ISO 14001/ISO 9001 for environmental, quality and occupational health and safety integration.
- 🎓 Training and awareness: build a tiered training plan per the guide to strengthen all personnel’s hazard identification and risk control awareness.
- 📊 Audit and improvement: internal auditors can use 18002 to understand the requirements and more accurately determine conformity and improvement opportunities.
✅ The concepts of OHSAS 18001/18002 have been inherited by ISO 45001:2018. Organizations with systems built under the OHSAS series should, when migrating to ISO 45001, reference the old-new requirement mapping to maintain continuity of hazard identification, risk assessment and operational control.
5. Frequently Asked Questions ❓
❓ Q: What is the difference between OHSAS 18002 and OHSAS 18001?
A: 18001 is the certification requirements standard (what must be done); 18002 is the companion implementation guide (how to do it). Their clause structures are identical and they should be used together.
A: 18001 is the certification requirements standard (what must be done); 18002 is the companion implementation guide (how to do it). Their clause structures are identical and they should be used together.
❓ Q: Are the “should” statements in 18002 mandatory?
A: No. The terminology in the guide is largely advisory; organizations should apply it in light of their own circumstances. Mandatory requirements exist only in the certification clauses of OHSAS 18001.
A: No. The terminology in the guide is largely advisory; organizations should apply it in light of their own circumstances. Mandatory requirements exist only in the certification clauses of OHSAS 18001.
❓ Q: How do you choose a risk assessment method?
A: Refer to the comparison in Annex D and select according to risk type, complexity, the degree of quantification needed and available resources; high-risk processes may combine several methods.
A: Refer to the comparison in Annex D and select according to risk type, complexity, the degree of quantification needed and available resources; high-risk processes may combine several methods.
🔍 Q: Can the Annex C checklist be copied directly?
A: Not ideally. Annex C is an example and should be tailored and expanded to the organization’s own work activities, equipment, workplace environment and personnel.
A: Not ideally. Annex C is an example and should be tailored and expanded to the organization’s own work activities, equipment, workplace environment and personnel.
❓ Q: Is OHSAS 18002 still valid?
A: The OHSAS series has been progressively replaced by ISO 45001, but the 18002 implementation methodology (hazard identification, risk assessment, operational control) is still widely used as a reference for ISO 45001 implementation.
A: The OHSAS series has been progressively replaced by ISO 45001, but the 18002 implementation methodology (hazard identification, risk assessment, operational control) is still widely used as a reference for ISO 45001 implementation.