Welcome Guest! The IOSH forums are a free resource to both members and non-members. Login or register to use them

Postings made by forum users are personal opinions. IOSH is not responsible for the content or accuracy of any of the information contained in forum postings. Please carefully consider any advice you receive.

Notification

Icon
Error

Options
Go to last post Go to first unread
Admin  
#1 Posted : 12 October 2005 15:33:00(UTC)
Rank: Guest
Admin

Posted By Smiff I am addressing this new clause of the standard, and wondered if anyone on here has experience of conducting such an evaluation, and in particular any feedback from their certifying body? I want a benchmark for how in depth this exercise needs to be, as I can see potential for going over the top. Any shared experience would be much appreciated.
Admin  
#2 Posted : 12 October 2005 16:03:00(UTC)
Rank: Guest
Admin

Posted By Gary L Good Afternoon, Went through the same thing earlier this year. Before this new clause was introduced we already evaluated compliance through our internal audit procedure. Because evaluation was documented in our internal audit process the auditor was happy. All we had to do was introduce a brief summary of the process in our EMS manual/signposting document (under 4.5.2)& re-number everything below. As far as the actual evaluation within a department is concerned we look at the activities, identify key legislation that applies then, well, conduct an evaluation. So, using a H&S example, if we were looking at a lifting operation we would assess against the various parts of LOLER ie R4: stability, R6: positioning & installation, R7: Marking of equipment, R8: organisation of operation, R9: inspection & examination etc, etc. The same process would be applied to Env legislation (hazardous waste regs, EPA, Water industry Act etc) Hope this helps Gary
Admin  
#3 Posted : 12 October 2005 16:23:00(UTC)
Rank: Guest
Admin

Posted By Carrie Ellerby Smiff, do you have a register of legislation applicable to your workplace? If so, then just go through this making a list of all the controls you have in place for complying, i.e. oil bunds and resulting checks against oil storage regs, and use this as a checklist for monitoring compliance, i.e. making sure the oil bund checks get done. PS: this is not entirely a new requirement of the 2004 standard; it was always covered in Monitoring and Measurement. Carrie
Admin  
#4 Posted : 12 October 2005 16:27:00(UTC)
Rank: Guest
Admin

Posted By Smiff We've always looked at legislative requirements in audits, but it doesn't systematically ensure that we've checked everything identified under planning eg under 4.3.2. Our auditor is looking for something over and above what we've being doing in audits.
Admin  
#5 Posted : 12 October 2005 16:31:00(UTC)
Rank: Guest
Admin

Posted By Smiff Carrie, I agree this is not new, just a clarification what has always been required. I guess this is why I'm struggling to grasp what our auditor wants to see when he's been approving our system as compliant for two years?
Admin  
#6 Posted : 12 October 2005 16:49:00(UTC)
Rank: Guest
Admin

Posted By david cairns Hello Smiffy i have contacted a friend, who has agreed to send you a few things. And to you who know me, I do have one maybe 2 friends!!!:) dingbat Paul
Admin  
#7 Posted : 12 October 2005 17:30:00(UTC)
Rank: Guest
Admin

Posted By Smiff Thank you David, or Dingbat, Paul?
Admin  
#8 Posted : 13 October 2005 09:34:00(UTC)
Rank: Guest
Admin

Posted By Carrie Ellerby Smiff, just had a thought - is it because the new standard is much stricter on the "and other requirements" bit now? You also now have to prove compliance with any other requirements to which the company subscribes. I added any obvious requirements, such as ISO14001, customer specific packaging requirements, etc. to the end of our legislation register (also added other requirements to name of register), covered everything we do to comply and just include that in my six monthly legislation review and compliance checks. Did you get a copy of the transition document that your auditor was using? This may help calrify some. Carr
Admin  
#9 Posted : 13 October 2005 09:42:00(UTC)
Rank: Guest
Admin

Posted By Robert K Lewis There is a degree of variation in the interpretation of this among 3rd party assessors at this time with some placing a pretty strict interpretation. The key point is to be able to demonstrate that the legal and other requirements identified in your system are managed and that you remain compliant at all times, or effectively at all times, and be able to demonstrate the evidence that it has done so. The scope of the evidence/records is provided in the 2004 guidance to the revised standard and is wide ranging in its posibilities. An example might be: a) Site discharge consents may provide for maximum flow and specific analysis - The evidence of compliance would be management and other procedures/equipment to monitor flow and obtain laboratory analysis and the records of these. If plant maintenance was critical to the compliance, eg regular callibration, then these records also would need to be maintained. Audits only provide a snapshot and tell you if and when the system failed in retrospect, not prevent the failure so far as practicable. It is about proactive management of your risks and not simply recording what has happened and what will be done to correct the problems. In essence you need to identify your aspects, how you control them and ensure that records are able to demonstrate compliance. If I could put a H&S example - WAH regs place requirements to inspect scaffolds at the point of erection completion and thereafter basically every 7 days or when there may have been change etc. By following this legal duty precisely does it demonstrate compliance at all times? - The answer for me is a NO, something else is required which may be simple supervisor diary records to show ongoing inspection is taking place. This is after all that which convinces the HSE that you are managing the scaffold! Bob
Admin  
#10 Posted : 13 October 2005 09:47:00(UTC)
Rank: Guest
Admin

Posted By Robert K Lewis Just as an after thought I think Gary Ls assessor is one of the soft interpretations at this time as Gary is doing a Legal compliance audit which is actually part of the earlier Legal and Other Requirement clause. This is causing a great deal of argument and many people are agressively arguing that this is all they need to do. If I was doing the audit however I would be looking very closely at management committment if someone so vigorously argued this is the meaning of 4.5.2. Bob
Admin  
#11 Posted : 14 October 2005 10:22:00(UTC)
Rank: Guest
Admin

Posted By Fred Pratley Smiff, As Robert posted, if you have set license conditions to meet, record what must be done (as stated in your legislation register) check how well you are doing, write it up and make a formal conclusion of the facts. We are doing this as part of the 6 month legislation review. The "other" requirements bit is proving tricky. I would not regard packaging prescribed by customer as being something to which the company subscribes. My understanding is that it is a self imposed requirement, something you do voluntarily, such as committing to an industry standard or as part of a trading group or business association standard. Our BSI suggested this is more under the Corporate Social Responsibility banner than anything else. Regards Fred
Admin  
#12 Posted : 14 October 2005 10:46:00(UTC)
Rank: Guest
Admin

Posted By Robert K Lewis Fred I think your BSI auditor is perhaps not recognising that not all other requirements are voluntary on a company. They can range from EA consents, Water company consents, through Group Holding company requirements to client specifications before the company imposes any of its own. I am also a little concerned that you are mixing this with your 6 monthly legislation review, as I have said this is not about monitoring whether you have identified the relevant legislation and other requirements but is a deeper question about demonstrating these are complied with during the routine operation of the company. This is ultimately about process and records with input and output through correction and improvement to ensure that the company complies with those environmental controls it has placed upon it and its operations, from whatever source. Bob
Admin  
#13 Posted : 14 October 2005 11:32:00(UTC)
Rank: Guest
Admin

Posted By Gary L I hope you aren't including me in the "arguing aggressively" category Robert! ;) Just to clarify, our audits don't just look at Legal compliance. We audit against our various policies, of which compliance is identified as the minimum standard we should work to. In my opinion there are also other, perhaps more important issues, which you should be looking at during audit, for example the attitude of a crew leader to his team, their perception of risk, and their confidence/competence when performing a task to name but a few. Anyway, getting back to the new clause.. I don't like quoting from regulations etc, but 4.5.2.1 requires an organisation to "establish, implement & maintain a procedure for periodically evaluating compliance with applicable legal requirements." The standard also mentions other requirements, which we interpret as anything from a client, our landlord or leasing company, and other audit systems such as UVDB Verify & the Rail Core Module. BSI looked at our audit system during our 14001 transition audit from the 1996 to the 2004 standard and were satisfied that the audits we've completed meet the requirements under the new clause(s). The commitment from management was never in question. Yours (in a non-argumentative manner) Gary
Admin  
#14 Posted : 14 October 2005 11:52:00(UTC)
Rank: Guest
Admin

Posted By Robert K Lewis The beautiful word is periodically - it does not say how often and can mean whatever the postmodern reader wishes. For me the period is determined by the degree of dynamism in the matter under surveillance and as a good auditor I always say that the company needs to decide the period of review. The objective is to have confidence that the system is compliant and that evidence is available to demonstrate the compliance. The need for specific procedures is a tricky area but there does need to be clarity in the HOW and the WHAT of the matter. Bob
Users browsing this topic
Guest (2)
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.