ISO 45001:2018 10.2: Incident, nonconformity and corrective action

The organization sets up, runs and keeps processes, covering reporting, investigation and action, for identifying and managing incidents and nonconformities. Whenever one of these arises, it: responds promptly, acting to bring it under control and correct it and dealing with what it has caused; decides, with workers taking part and other relevant interested parties involved, whether corrective action is needed to remove the root causes so that the problem neither happens again nor happens somewhere else, by looking into the incident or examining the nonconformity, finding its causes, and finding out whether similar incidents or nonconformities exist or might arise; reviews, where appropriate, the assessments already made of OH&S risks and of other risks; decides on and carries out corrective action following the hierarchy of controls and the management of change; assesses the OH&S risks tied to new or altered hazards before acting; reviews whether the action taken worked; and changes the system where needed. Documented information is retained on what the incidents and nonconformities were, what was done about them, and what the corrective action achieved and how effective it was, and this is communicated to the relevant workers, their representatives and other relevant interested parties.