The first step is to identify the hazards, both physical and psychosocial. Examples: the site itself (location, layout, condition, access); ladders, badly erected equipment, unguarded holes, voids, excavations, trenches, shafts and lift wells, unstable structures such as incomplete scaffolds, and fragile surfaces; falling objects; trench and structural collapse; hazardous chemicals; asbestos; welding fumes, gases and arcs; hazardous manual tasks; interfaces with other trades; the physical environment (electric shock, immersion or engulfment, fire or explosion, slips and trips, being struck by moving plant, noise, heat, cold, vibration, radiation including solar UV, static electricity, contaminated atmospheres, confined spaces); and psychosocial hazards such as high job demands without breaks, low job control, poor support, remote or isolated work and harmful behaviours (bullying, harassment, conflict, hazing of young or new workers), with poorly controlled physical hazards also acting as psychosocial hazards.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.