EHS Management Systems: Significant Improvement in How Organizations Manage Safety. But Is It Enough?
Structured approaches to managing safety began developing in the mid-20th century, with pioneering organizations such as NOSA, the National Occupational Safety Association of South Africa. Early frameworks focused primarily on regulatory compliance, workplace inspections, safety rules and the correction of identified hazards. Over time, these approaches incorporated management accountability, structured audits, training, operational controls and increasingly systematic approaches to risk management.
NOSA demonstrated that an organization’s safety capability could be assessed through a repeatable framework rather than through injury statistics alone. However, there was still no internationally harmonized model defining how organizations should structure safety processes and management responsibilities.
ISO 9001 provided an important foundation for a systematic, process-based approach, although its primary purpose was quality management. The same management philosophy was subsequently applied to environmental management through ISO 14001, which established a globally recognized and certifiable environmental management system based on policy, planning, implementation, evaluation and continual improvement.
The same logic was later applied to occupational health and safety. In 1999, the BSI-led OHSAS Project Group published OHSAS 18001, which became the most widely adopted certifiable OH&S framework of its era. It organized OH&S management around hazard identification, risk assessment, legal requirements, operational controls, competence, auditing, corrective action and management review.
Both ISO 14001 and OHSAS 18001 evolved over time. In 2018, ISO 45001 replaced OHSAS 18001, bringing occupational health and safety into the ISO family of management-system standards. The new standard retained the Plan-Do-Check-Act logic while strengthening requirements related to organizational context, leadership accountability, worker participation, risks and opportunities, procurement and contractor management.
This evolution represented a fundamental improvement in how organizations managed safety. EHS was no longer simply a collection of programs, procedures and inspections. It became an integrated management process designed to define responsibilities, identify hazards, establish controls, measure performance, learn from events and drive continual improvement.
Research suggests that structured EHS management systems can contribute to improved safety performance. Studies of OHSAS 18001 and other certification programs have found reductions in injury rates after implementation. However, some organizations that seek certification are already safer before certification, demonstrating a selection effect. The evidence therefore reasonably supports both the value of the management-system discipline and the need to consider why some organizations adopt it in the first place.
The broader value of these systems is not merely the certificate. It is the organizational discipline they can create: clearer responsibilities, more consistent processes, stronger employee participation and improved learning. Nevertheless, a fundamental question remains:
Are management systems effective enough to consistently direct attention toward what matters most?
This question led to a new phase in safety management: the increasing focus on Serious Injury and Fatality, or SIF, prevention. The National Safety Council (NSC) is a U.S. nonprofit organization that provides safety research, statistics, education and advocacy, including its annual analysis of workplace fatalities and injuries. NSC data and other research highlight an important challenge: recordable injury reductions do not necessarily translate into comparable reductions in fatalities.
The NSC comparison of U.S. preventable workplace deaths and total recordable cases from 2002 through 2022 illustrates this divergence. During the later years of the period, total recordable cases continued to decline, while preventable deaths did not follow the same sustained downward trend. This does not prove that the two measures are unrelated, but it demonstrates that traditional frequency-based metrics may not fully represent an organization’s exposure to catastrophic risk.
This observation is not limited to NSC data. Other studies and industry analyses have questioned whether nonfatal-injury rates are reliable stand-alone indicators of fatal-risk exposure. A low injury rate may reflect strong safety performance, but it may also be influenced by the organization’s hazard profile, workforce characteristics, reporting practices, definitions, production levels and available exposure data.
The implication is not that routine injuries are unimportant. All injuries deserve attention, investigation and prevention. However, hazards do not present the same potential consequences, and they should not always receive the same level of management attention.
An organization may dedicate considerable resources to reporting, investigating and correcting lower-consequence events while devoting comparatively less attention to exposures that could cause permanent harm or death. This does not necessarily indicate a lack of commitment. It may indicate that the organization lacks a sufficiently effective method for distinguishing high-frequency issues from low-frequency, high-consequence risks.
The key question therefore changes from:
How many injuries have we recorded? to: Are we identifying and reliably controlling the exposures capable of causing a serious injury or fatality?
This is the transition from a broad injury-reduction approach to a more targeted SIF-prevention approach.
From Risk Management to SIF Prevention and Energy-Based Safety
ISO 14001, ISO 45001 and related EHS models provide an essential foundation. They create the structure and discipline needed to establish accountability, identify hazards, implement controls, evaluate performance and promote continual improvement.
However, these frameworks are intentionally broad. They do not prescribe one universal risk matrix, one mandatory method for ranking hazards or one common threshold for determining which exposures require the greatest attention. Consequently, risk assessment may vary substantially among organizations.
Risk matrices can differ in their categories, definitions, calibration and application. Judgments about severity and likelihood can also be subjective, especially when an organization has not clearly defined what constitutes a potential SIF event or life-altering consequence.
This variation can create an unintended outcome: risk assessment may become an exercise in assigning scores rather than a disciplined process for identifying the hazards that can overcome existing controls and cause irreversible harm. The PDCA cycle may operate effectively at the process level, while organizational attention remains dispersed across a large number of lower-consequence issues.
Energy-Based Safety: A Complementary Approach
Energy-Based Safety is a relatively recent, evidence-informed approach developed by Professor Matthew Hallowell and other researchers. Hallowell’s 2025 book, Energy-Based Safety: A Scientific Approach to Preventing Serious Injuries and Fatalities (SIFs), presents the approach as a way to improve hazard recognition and risk prioritization by focusing on exposure to hazardous energy.
The approach considers energy sources capable of causing serious harm, including gravitational, electrical, mechanical, chemical, pressure and thermal energy. The Energy Wheel provides frontline workers, supervisors, safety professionals and leaders with a visual prompt to systematically consider energy sources that may otherwise be overlooked during conventional hazard assessments. It is based on the recognition that hazard-recognition limitations are not restricted to inexperienced workers; even experienced safety professionals can have predictable blind spots.
The approach also uses the concept of STKY, meaning “stuff that kills you,” to help organizations identify and define high-energy exposures. Rather than relying only on a numerical risk score, STKY focuses attention on whether an energy source has the potential to cause a serious injury or fatality and whether effective controls are in place.
The basic logic is straightforward:
- Identify the high energy sources present before work begins.
- Determine whether effective direct controls are feasible and applied.
- If direct controls are not feasible, establish appropriate alternative controls.
- Verify that the controls are present and effective under actual work conditions.
Energy-Based Safety should not replace a mature EHS management system. Its value is in strengthening specific components, particularly hazard recognition, risk assessment, operational control, work planning and field verification. It provides an additional lens to ensure that PDCA cycles, audits and improvement efforts remain focused on controls that can prevent irreversible harm.
Compliance is necessary, but it is not enough. A mature EHS management system must provide both the discipline to manage work and the prioritization needed to identify and verify the controls that truly prevent serious injuries and fatalities.
