In this article, we will start to expand on the first of the four foundational pillars of Safety Management Systems (SMS): Safety Policy. While the other pillars—Risk Management, Safety Assurance, and Safety Promotion—provide the mechanics and the culture, the Safety Policy provides the "why" and the "how" of the entire organization.
More Than a Document
When organizations talk about Safety Management Systems (SMS), they usually jump straight into risk matrices, reporting systems, or dashboards. But SMS doesn’t start there, it starts with Safety Policy. If the policy isn’t right, everything built on top of it becomes performative instead of functional.
The other pillars—risk management, assurance, and promotion—are operational tools. The Safety Policy is the decision that safety will shape how the business operates. Not sit beside it. Not compete with it. Shape it.
A mature SMS isn’t a side program. It’s the operating model.
The Safety Policy
The priority of any business is the product the organization wants to output. A robust Safety Policy ensures safety and production are not competing interests by integrating the practices required to ensure the best productivity while also ensuring everyone goes home at the end of their shift.
A well-crafted Safety Policy achieves three critical things:
1. Defines The "What, Who, and Whom"
A Safety Policy cannot exist in a vacuum. It must be rooted in a complete understanding of the organization’s unique footprint. This starts with a granular breakdown of three factors:
- What you do: This is the definition of the "Operational Scope." It identifies every process, from high-level maintenance schedules to the minute details of a task. If the policy doesn’t account for the specific technical complexities of your output, the safety controls will be generic and, ultimately, ignored.
- Who does it: This identifies the internal human element—the employees, managers, and specialized technicians. It maps their roles to the risks they encounter, ensuring that policy protections are targeted at the people most at risk.
- Who it affects: A robust policy looks outward. It considers "third-party" impact, including contractors, visitors, the public, and even the environment. By understanding the sphere of influence, the policy ensures that safety boundaries extend to everyone touched by the operation.
2. Integrates Stakeholders into Decisions
One of the most common failures in safety management is creating policy in a boardroom that cannot survive on the shop floor. Integrating stakeholders is the antidote to this "ivory tower" approach.
- Front-Line Expertise: By bringing those closest to the work into the decision-making process, the organization gains awareness of issues that affect production and safety.
- Ownership and Buy-In: When employees are stakeholders in the decision, they aren't just following a rule; they are executing a process they helped design. This shifts the culture from compliance (doing it because I have to) to commitment (doing it because it’s our process).
- Dynamic Feedback: Stakeholder integration creates a two-way street. It allows the policy to evolve in real-time as workers provide feedback on what is working and what is creating new, unforeseen hazards.
3. Establishes the Overarching Framework
The framework is essentially a contract between leadership and the workforce, built on four non-negotiable foundations:
- Leadership Commitment: This is the "Policy" in action. It states senior management will provide the necessary resources—time, money, and equipment—to achieve safety goals. If the resource isn't there, the policy is just a wish.
- Clear Accountabilities: The framework removes ambiguity. It defines exactly who is responsible for what. In a high-consequence environment, knowing where the "buck stops" for a specific safety control is essential for preventing systemic gaps.
- The Just Culture Component: This is arguably the most critical part of the framework. It defines the organization’s stance on errors. A Just Culture encourages the reporting of honest mistakes so the system can learn from them, while still maintaining a clear line for reckless or intentional violations. Without this, the flow of information—the lifeblood of any SMS—will dry up.
- Two-Way Communication Loops: A framework is only as strong as its ability to move information. Communication must be a continuous loop, not a "top-down" broadcast. This means that while leadership communicates safety objectives and changes, there must be a formal, protected channel for the "shop floor" to send information back up. It ensures that when a worker flags a hazard or a flaw in the policy, they aren't shouting into a void—they receive documented feedback on what was done to address it. This transparency builds the trust required for the entire system to function.
The Starting Point for Excellence
Without a strong Safety Policy, the remaining three pillars have no anchor. It is the compass that guides the organization through change and the yardstick by which all safety performance is measured. When the policy is integrated into the very fabric of the business, the "safe outcome" becomes inseparable from the "operational outcome."