What is a Health and Safety Management System?
If you run a business, you almost certainly have some form of health and safety management in place — even if you have never thought of it in those terms. The question is not really whether you have a health and safety management system, but whether the one you have is structured, documented and effective enough to genuinely protect your people and keep your business on the right side of the law.
​
A health and safety management system is the framework through which a business identifies its health and safety risks, puts measures in place to control them, monitors whether those measures are working, and continuously improves its approach over time. It is not a single document — it is a collection of policies, procedures, responsibilities, tools and practices that together determine how health and safety is managed day to day.
​
At LESH we see companies getting confused over this all the time, this doesn't need to be a 500 page mammoth document that no one ever looks at, but it needs to be relative to your business size and risk profile.
​
The best way to understand what a health and safety management system consists of is to look at its three core components: policy, organisation and arrangements.
​
Policy — Setting the Direction
The health and safety policy is the foundation of the management system. It is the formal statement of a business's commitment to managing health and safety, and under the Health and Safety at Work Act 1974, every employer is legally required to have one. For businesses with five or more employees, it must be in writing.
​
A well-written health and safety policy does three things. It declares the organisation's intent — a clear statement from senior leadership that health and safety is taken seriously and will be properly resourced. It defines the organisation of health and safety responsibilities — who is accountable for what, from the employer at the top to individual workers on the ground. And it describes the practical arrangements through which health and safety is managed — the specific processes, procedures and controls that are in place across all relevant areas of the business.
​
That third element — the arrangements — is where a policy becomes genuinely useful rather than just a legal formality.
​
Arrangements — How Health and Safety Actually Works
The arrangements section of a health and safety policy is the most substantial and the most important. It describes in practical terms how the business manages the full range of health and safety topics relevant to its activities — risk assessment processes, accident reporting and investigation procedures, CoSHH management, noise monitoring, PUWER compliance, contractor management, fire safety, first aid, manual handling, induction and training, and more.
​
Good arrangements are specific, realistic and actually followed. They reflect how the business genuinely operates — not how it would like to operate in an ideal world. A business that has thorough, well-communicated arrangements gives its managers and workers a clear framework for doing their jobs safely. One that has generic, outdated arrangements — or arrangements that exist on paper but are ignored in practice — has a significant gap between its documented position and its real-world risk. This is why we always suggest a robust auditing programme to be implemented alongside a competent person service.
​
Organisation — Roles, Responsibilities and Accountability
Alongside policy and arrangements, the organisation component of a health and safety management system defines who is responsible for what. This means clearly setting out the health and safety responsibilities of every level of the business — from directors and senior managers who bear overall accountability, to line managers who supervise day-to-day activities, to workers who have their own duties under health and safety law.
​
Clear accountability matters enormously. When health and safety responsibilities are vague or poorly communicated, things fall through the gaps — risk assessments are not reviewed, incidents are not reported, training lapses go unnoticed. A well-structured organisation section ensures that everyone knows what is expected of them and that there is genuine ownership of health and safety at every level.
​
Externally Accredited Systems — SSIP and ISO 45001
For many businesses, developing an internal health and safety management system is only part of the picture. Clients, principal contractors and public sector organisations increasingly require formal, independently verified evidence that a business's health and safety management meets a recognised standard. This is where external accreditation comes in.
​
SSIP — Safety Schemes in Procurement — provides a widely recognised framework for contractor pre-qualification. Schemes such as SafeContractor, CHAS and Constructionline assess businesses against a common health and safety standard, providing clients with independent assurance of a contractor's basic competence. For businesses working in construction, facilities management, maintenance and related sectors, SSIP accreditation has become close to a commercial necessity — a prerequisite for winning contracts from larger clients and principal contractors.
​
ISO 45001 is the international standard for occupational health and safety management systems, and it takes things significantly further than SSIP. Where SSIP provides a baseline assessment of health and safety arrangements, ISO 45001 certification demonstrates that a business operates a comprehensive, systematically managed approach to health and safety — one that involves genuine leadership commitment, worker participation, objective-setting, performance monitoring and continuous improvement. Certification is awarded by an accredited certification body following a rigorous two-stage audit process, and it is increasingly required or valued in higher-risk sectors and larger supply chains.
​
Both SSIP accreditation and ISO 45001 certification have real commercial value beyond the immediate compliance requirement. They signal to clients, insurers and regulators that health and safety is taken seriously — and in competitive tendering situations, they can genuinely make the difference between winning and losing a contract.
​
Putting It All Together
A health and safety management system is not about paperwork for its own sake. When it is built properly — with a genuine policy, clear and practical arrangements, well-defined responsibilities, and appropriate external accreditation where needed — it becomes one of the most powerful tools a business has for protecting its people, managing its legal obligations, and building a reputation as a professional, responsible organisation.
At LESH, we help businesses of all sizes build health and safety management systems that actually work — tailored to the specific needs and risk profile of each client, and designed to stand up to scrutiny from the HSE, from clients and from certification bodies alike. Contact us today on 01623 239705 or email Info@LESHonline.co.uk to find out how we can help.