Chatbot

Internal control – systematic health, safety and environment work

The purpose of the system is to ensure that problems are identified and handled in time. The manager of the enterprise has a duty to make sure to systematically follow up on all HSE requirements. This follow-up shall be carried out in collaboration with the workers and their representatives.  

How to establish an HSE system?

The Internal Control Regulations (Regulations relating to Systematic Health, Environment and Safety Activities in Enterprises) outline how this work should be organised for small enterprises with low risk as well as for enterprises with many workers or HSE challenges. The regulations have been published with guidelines and comments.  

In addition to regular follow-up, including mapping and appropriate measures, the enterprise must also review the system it has established and assess whether it has been effective in practice or whether it needs to be changed.  

Internal control requires that the enterprise must 

  1. ensure that the health, safety and environment rules that apply to the enterprise are available to all. It also entails maintaining an overview of requirements that are especially important for the enterprise.
  2. ensure that the workers have sufficient knowledge and skills in the enterprise’s systematic health, safety and environmental work, including knowledge about changes.
  3. ensure that workers contribute, so that the enterprise can take full advantage of the combined knowledge and experience of everyone in the enterprise.
  4. define goals for health, safety and the environment. These goals must be documented in writing.
  5. maintain an overview of how the enterprise is organised, and of how responsibilities, tasks, and authorisations for the health, safety and environment work are distributed. This organisation must be documented in writing.
  6. map risks and problems in the workplace. Based on this mapping, the enterprise must assess risks and prepare plans and measures to mitigate these risks. The mapping and plans must be documented in writing. Read more about risk assessment (in Norwegian).
  7. implement procedures to identify, remedy and prevent non-conformance with requirements laid down by or pursuant to HSE legislation. These procedures must be documented in writing. Read more about non-conformance and non-conformance handling.
  8. carry out systematic monitoring and review of the internal control to ensure it is working as intended. The result of this review must be documented in writing. 

Application of the regulations

The Internal Control Regulations apply to all enterprises subject to certain acts on health, safety or environmental considerations.  

You can assume that the regulations apply to your enterprise, provided it produces, sells or offers goods and services. Internal control is primarily an employer responsibility, but all workers have both rights and duties related to the HSE work. Read more about different roles in the HSE work (in Norwegian)

If you are not sure what the Internal Control Regulations require of your enterprise, you can contact us.  

The supervisory authority makes sure HSE requirements are met by carrying out supervisory inspections, random inspections or a more systematic audit of the enterprise’s entire HSE system. If non-compliance is discovered, authorities may order the situation to be remedied within a certain time. If the enterprise fails to comply with the order within the time set, the enterprise may be fined daily penalties until the order has been met. In case of major non-compliance, pollution fees or police complaints may also be issued. 

Many customers and suppliers also have HSE requirements. Many now require all contractors and sub-contractors to document good HSE work. Having good HSE procedures can also influence insurance premiums. Inadequate procedures, however, can lead to problems with insurance payouts in case of loss.  

The Internal Control Regulations are linked to a number of acts and regulations, and multiple authorities are involved in its administration. The specific rules that apply to your enterprise will depend on the nature of the activities your enterprise performs. Central authorities include the Labour Inspection Authority, the Directorate for Civil Protection, the Norwegian Environment Agency and the Norwegian Industrial Safety Organisation. These all ensure compliance with relevant rules. 

Regulations

Regulations relating to Systematic Health, Environment and Safety Activities in Enterprises (Internal Control Regulations)