An organization should: set, apply and keep up a policy on occupational health and safety resting on the idea that high health and safety standards and good organizational performance support each other; understand and use health and safety management principles, including the hierarchy of controls (eliminating the hazard, substituting it, engineering controls, administrative controls, safe work procedures and, last, personal protective equipment); analyse the health and safety risks of what it does and control them; require workers to follow safe practice and correct procedures and make sure they do; supply the safety equipment needed, personal protective equipment included, both for prevention and for emergencies; record and investigate every health and safety incident and problem so as to reduce or remove them; deal with the different ways occupational risks affect women (including those pregnant, recently given birth or breastfeeding) and men, and workers in particular situations such as people with disabilities and young or inexperienced workers; protect part-time, temporary and subcontracted workers equally; work to remove psychosocial hazards that cause stress and illness; train all staff on the relevant topics; respect the principle that workers do not pay for workplace health and safety measures; and build its health, safety and environmental systems on the involvement of the workers affected, respecting their rights to receive timely, complete and accurate information on risks and good practice, to ask questions and be consulted, to refuse work they reasonably believe poses an imminent or serious danger, to get outside advice, to report concerns to the authorities, to take part in decisions and in investigating incidents, and to be protected from retaliation, with joint management-worker health and safety committees where relevant.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.