FDIS designationISO/FDIS 22316
Stage50.00, FDIS registered
Planning date, an estimate15 Feb 2027
In force todayISO 22316:2017
A.12Annex A
Annex A, security and safety disciplines

Health and safety management

ISO 22316:2017, Annex A (informative), discipline 12Edition in forceRetrieved 20 October 2026

Health and safety management protects people from harm, and it provides the hazard, competence and consultation evidence that a resilience assessment needs for the people dimension.

This annex is informative. Annex A names the discipline and does not define it. A finding cannot rest on the annex alone. The guidance it supports is clause 5.8, and the evidence on this page is our interpretation of what that support looks like in practice.

What Annex A says

Annex A names health and safety management as a supporting discipline; the standard does not define it. Within 5.8, the contribution is the identification of hazards, the control of risk to people, the competence and fitness of the workforce, and the consultation arrangements that let people raise concerns. Resilience and safety meet in the disruption: emergency response, changed working conditions, fatigue, unfamiliar roles and a pressured workforce all raise the risk of harm. The discipline also supplies the speak-up route that the culture attribute depends on.

Why it matters

A strong safety record can coexist with a weak resilience capability if the safety system is designed for steady-state operations. The test is what happens when the process changes, the usual supervisor is absent or the workload doubles. The discipline contributes the habit of assessing risk before the change and the authority to stop work. That authority is also a resilience control: the person closest to the hazard can prevent a larger failure.

What good looks like

Review the hazard assessment for the disruption scenarios, including changed shifts, remote work and emergency roles. Confirm the competence and fitness of the people who will fill unfamiliar roles. Check that the stop-work authority is understood and used. Include contractors and visitors in the emergency arrangements. Record the consultation and the changes it produced.

Evidence a reviewer asks for

There is no ISO certification or accredited assessment scheme for ISO 22316. The assessor here is your internal auditor, a customer assurance team or a consultant.

An assessor will ask how the organization protects people when the operating model changes under pressure. A steady-state safety manual does not answer that.

  • Hazard and risk assessment The hazards in normal and disrupted operations, with the controls
  • Competence record The competence and fitness of people filling unfamiliar roles in a disruption
  • Stop-work authority The authority to stop unsafe work, with a case where it was used
  • Consultation record How workers were consulted and what changed

Where it commonly fails

  • The hazard assessment assumes the normal shift and the usual supervisor.
  • Fatigue and unfamiliar roles are not treated as safety risks in a disruption.
  • Workers can raise a safety concern but cannot stop the work.

What to do before the second edition

Take the disruption scenario and ask the safety lead what new hazard it creates. Add those hazards to the exercise injects.

Read across

← A.11 GovernanceA.13 Human resources management →

Full register / The dates / Free transition check