Occupational Health and Safety Management System (SUOP) in Ukraine: Engineering Guide from Article 13 of Law No. 2694-XII to DSTU ISO 45001:2019

An occupational health and safety management system (known in Ukrainian regulatory practice as СУОП, or SUOP) was designed by lawmakers as an active engineering and administrative mechanism to protect workers. At many industrial sites, though, it has devolved into a cabinet of stitched logbooks, a stack of generic instructions, and an appointment order naming a responsible safety engineer. While operations run quietly, that paper facade creates an illusion of order. It collapses within the first hour after a severe workplace injury, during a special accident investigation under Cabinet of Ministers Resolution No. 337, or during a pre-qualification audit by an international buyer. Why? Because a signature in a repeat briefing logbook doesn't physically stop an auger conveyor when a worker enters a grain silo, and it doesn't block electrical back-feed when a maintenance technician opens a switchgear cabinet.

Article 13 of the Law of Ukraine "On Labour Protection" No. 2694-XII directly obliges every employer to create working conditions at each workplace in every structural unit that comply with regulatory acts, and to ensure the functioning of an occupational health and safety management system (SUOP). The statute requires specific executive actions from the company's top leader: establish appropriate safety services and appoint responsible officers, develop and fund comprehensive safety programs with trade union or workforce representatives, approve internal regulations, instructions, and local acts on occupational safety, and maintain ongoing operational oversight over safe work execution. State regulatory supervision over these duties is enforced by the State Labour Service of Ukraine (Derzhpratsi).

The practical trap in Ukraine is that Law No. 2694-XII lists mandatory obligations without specifying the process architecture that connects them. When a business treats each statutory requirement in isolation (running briefings in one corner, filing equipment declarations in another, buying personal protective equipment in a third), it ends up with fragmented paperwork. When you map those exact statutory requirements onto the risk-based PDCA (Plan-Do-Check-Act) cycle of ISO 45001 (adopted nationally as DSTU ISO 45001:2019), disconnected legal rules turn into a single, auditable engineering system. Across dozens of industrial, construction, agricultural, and energy projects, the engineering team at Ekontrol sees the same pattern: companies that build their OHS management system by fusing Ukrainian NPAOP regulations with ISO 45001 pass state inspections, cut lost-time injuries, and qualify for European corporate tenders at the same time.

To understand the difference between a statutory SUOP under Law of Ukraine No. 2694-XII and an OH&S management system under ISO 45001, you have to look at how each model treats risk. Ukraine's legacy regulatory framework (the State Register of Normative Legal Acts on Labour Protection, or НПАОП / NPAOP, alongside sector-specific safety rules and Cabinet resolutions) is built on a prescriptive principle. The state wrote an exhaustive catalogue of rules, instruction formats, logbook templates, and inspection intervals in advance. In that paradigm, the employer's job is mechanical compliance with written rules. If a factory installs a new robotic welding cell, an automated packaging line, or a custom chemical mixing station that isn't covered by an existing industry NPAOP, the prescriptive model goes blind: if no explicit rule is broken on paper, the safety engineer records no hazard.

ISO 45001:2018 (DSTU ISO 45001:2019) works from the opposite direction. It relies on a proactive, risk-based methodology that matches the policy frameworks of the International Labour Organization (ILO) and the preventive engineering guidance of the European Agency for Safety and Health at Work (EU-OSHA). The standard doesn't prescribe maximum permissible dust concentrations or dictate column headers for a briefing logbook. Instead, across Clauses 4 through 10, it requires the organization to analyze its operational context, identify every real workplace hazard (mechanical, electrical, thermal, chemical, biological, ergonomic, and psychosocial), evaluate risks by scoring likelihood against severity, and apply a strict hierarchy of controls (Clause 8.1.2).

Ukrainian legislation is moving toward this exact European framework. Draft Law No. 10147 "On the Safety and Health of Workers at Work", drafted to transpose EU Council Directive 89/391/EEC (we examined its provisions in detail in our analysis of Ukraine's upcoming workplace safety law), shifts national regulation from static prescription to employer-led professional risk assessment. While Law No. 2694-XII remains in force, designing and implementing SUOP and ISO 45001 means embedding every mandatory Ukrainian statutory norm directly into the corresponding clause of the international standard.

The most expensive management mistake we encounter when conducting a workplace safety audit in Ukraine is confusing the management system (SUOP) with the occupational safety service (служба охорони праці). When a company director assumes that safety belongs exclusively to the staff safety engineer, the system is dead on arrival. A safety engineer doesn't run production lines, assign daily tasks to machine operators, purchase raw materials, or schedule preventive maintenance (PM). Under Article 15 of Law No. 2694-XII and the Model Regulation on the Occupational Safety Service (NPAOP 0.00-4.21-04, approved by State Committee for Labour Protection Supervision Order No. 255 of 15.11.2004, also indexed in regulatory databases as 0.00-4.35-04), the safety service is an internal oversight and methodological body, while day-to-day risk ownership sits with line production managers.

Article 15 of the Law of Ukraine "On Labour Protection" and NPAOP 0.00-4.21-04 set strict headcount thresholds for structuring the occupational safety service at an enterprise:

• Enterprises with 50 or more employees: the employer must establish a dedicated occupational safety service (a separate department, bureau, or full-time occupational safety engineer with appropriate engineering training). At large manufacturing plants with hazardous working conditions, multiple shifts, or geographically dispersed facilities, headcount is scaled according to shop complexity and hazard categories.
• Enterprises with fewer than 50 employees: the functions of the occupational safety service may be performed on a part-time basis (за сумісництвом) by an employee who holds appropriate professional training and has passed formal occupational safety training and knowledge verification under NPAOP 0.00-4.12-05.
• Enterprises with fewer than 20 employees: external specialists may be engaged on a contractual basis (occupational safety outsourcing) to perform the functions of the safety service, provided they have verified qualifications and valid safety certificates.

A strict statutory rule under both Article 15 of Law No. 2694-XII and NPAOP 0.00-4.21-04 governs organizational subordination: the occupational safety service reports directly to the employer (the CEO, General Director, or Board Chair). Placing the safety engineer under the Chief Engineer, Operations Director, or Plant Manager is illegal. Why? Because it creates an immediate conflict of interest. By law, an occupational safety specialist has the authority to issue binding prescriptions (приписи) to department heads regarding safety violations and to halt operations on a production section, machine, or piece of equipment if conditions threaten workers' lives or health. Only the company's top executive can overturn a safety engineer's prescription, and only by issuing a signed written order under personal criminal and administrative liability. Furthermore, under Article 19 of Law No. 2694-XII, non-budgetary enterprises must allocate at least 0.5% of the previous year's payroll fund specifically to occupational safety expenditures.

Clause 5 of DSTU ISO 45001:2019 (Clause 5.1 "Leadership and commitment" and Clause 5.3 "Organizational roles, responsibilities and authorities") establishes a clear rule: while operational tasks can be delegated, ultimate accountability for the OH&S management system rests with top management. In a functioning enterprise SUOP, responsibilities are split across four operational tiers:

1. Chief Executive Officer / General Director: approves the OH&S Policy and the Enterprise OH&S Manual (Polozhennia pro SUOP), guarantees statutory financing (at least 0.5% of payroll plus capital expenditure for engineering risk reduction), issues formal appointment orders designating responsible officers across all units, and chairs the Management Review (Clause 9.3 of ISO 45001) at least semi-annually or quarterly.
2. Chief Engineer / Technical Director: owns equipment integrity, preventive maintenance schedules, statutory technical inspections (primary, periodic, and extraordinary inspections of high-hazard machinery), collective engineering controls (machine guarding, interlocks, local exhaust ventilation, fire suppression), and the Management of Change (MoC) process whenever technology or layout changes.
3. Department Heads and Line Supervisors (shop managers, site foremen, warehouse supervisors, master electricians): act as the direct risk owners for their work areas. They conduct primary, repeat, unscheduled, and targeted workplace briefings, issue and close out Permit-to-Work (nariad-dopusk) forms, verify Lockout/Tagout (LOTO) isolation before maintenance, inspect personal protective equipment before each shift, and bar any worker lacking valid medical clearance or training from starting work.
4. Workers and Workforce Representatives (trade union representatives or the enterprise safety commission under Article 16 of Law No. 2694-XII): follow job safety instructions, inspect their workstation before starting a shift, immediately report equipment defects or Near-Miss incidents, and exercise the statutory right to refuse assigned work if a situation arises that threatens their life or health (Article 6 of Law No. 2694-XII and Clause 5.4 of ISO 45001, which explicitly protects workers from retaliation when stopping unsafe work).

When a company director or newly hired safety specialist searches for a sample OH&S manual structure (положення про СУОП зразок структура), the most common trap is downloading a generic 30-page template written ten years ago, pasting the company's name onto the cover page, and filing it away. Why does that backfire? Generic templates almost always reference job titles your company doesn't have (such as "Chief Mechanic", "Capital Construction Department", or "Trade Union Committee"), cite repealed Soviet GOST standards, and promise weekly three-stage administrative safety inspections that nobody actually performs. When a Derzhpratsi inspector or a certification body auditor arrives (for instance, during an audit described in our complete ISO 45001 certification guide), they open your Polozhennia pro SUOP first and ask to see the exact records your own manual claims you generate every week. Missing records against your own internal regulation become an immediate nonconformity.

A modern Enterprise OH&S Manual (Polozhennia pro SUOP) acts as the top-level engineering blueprint of your safety system, satisfying Article 13 of Law No. 2694-XII while following the Annex SL High-Level Structure of DSTU ISO 45001:2019. In industrial practice, a complete manual comprises ten integrated sections:

• Section 1. General Provisions and Scope of the SUOP: legal entity details, physical locations (plants, warehouses, construction sites, laboratories), economic activity codes (KVED), headcount coverage, and the applicable regulatory baseline (Law No. 2694-XII, sector-specific NPAOPs, DSTU ISO 45001:2019).
• Section 2. Organizational Context and Interested Parties (Clause 4 of ISO 45001): description of core technological processes, shift patterns, seasonal hazards, interaction with subcontractors and landlords, state supervisory authorities (Derzhpratsi, SES fire authorities, public health authorities), and corporate customers.
• Section 3. OH&S Policy, Leadership, and Worker Consultation (Clause 5 of ISO 45001): the full text of the company's OH&S Policy, structure and subordination of the occupational safety service under NPAOP 0.00-4.21-04, the RACI responsibility matrix across all management tiers, and rules for consulting workers during risk assessments.
• Section 4. Hazard Identification, Risk Assessment, and Planning (Clause 6 of ISO 45001): methodology for identifying workplace hazards, risk scoring formula ($R = P \times S$, multiplying likelihood $P$ by severity $S$), risk acceptability thresholds, maintenance of the Legal & NPAOP Register, and preparation of annual Comprehensive Safety Measures.
• Section 5. Resources, Competence, Training, and Document Control (Clause 7 of ISO 45001): budgeting mechanism (tracking the mandatory 0.5% payroll floor under Article 19), safety training and briefing workflows under NPAOP 0.00-4.12-05, and rules for drafting, approving, and reviewing occupational safety instructions under NPAOP 0.00-4.15-98 (reviewed at least every 5 years for standard jobs and every 3 years for high-hazard jobs).
• Section 6. Operational Control and Safe Work Execution (Clause 8 of ISO 45001): application of the five-tier hierarchy of controls, the Permit-to-Work (nariad-dopusk) regulation, Lockout/Tagout (LOTO) energy isolation procedures, operation and technical inspection of high-hazard machinery, and selection and issuance of Personal Protective Equipment (PPE) under NPAOP 0.00-7.17-18.
• Section 7. Contractor Management, Procurement, and Management of Change (Clauses 8.1.3 & 8.1.4 of ISO 45001): pre-qualification and site access procedures for contractors (Act-Dopusk), safety vetting of purchased machinery and chemical Safety Data Sheets (SDS), and mandatory pre-startup risk assessment before modifying equipment or workflows.
• Section 8. Emergency Preparedness and Response (Clause 8.2 of ISO 45001): Emergency Localization and Liquidation Plans (PLAS), fire evacuation protocols, first-aid kit inventory and training, and annual emergency drill schedules.
• Section 9. Monitoring, Workplace Attestation, Medical Exams, and Internal Audit (Clause 9 of ISO 45001): multi-stage operational inspections (shift checks by foremen, monthly inspections by shop heads and the safety engineer, quarterly commission reviews), workplace hygienic attestation under CMU Resolution No. 442, pre-employment and periodic medical examinations under MOZ Order No. 246, and internal ISO 45001 audit procedures.
• Section 10. Incident Investigation, Nonconformities, and Continual Improvement (Clause 10 of ISO 45001): statutory accident reporting and investigation workflows under CMU Resolution No. 337, Near-Miss and micro-injury logging, root cause analysis (5 Whys / Fishbone), and tracking of Corrective and Preventive Actions (CAPA).

Section 5 of the Enterprise OH&S Manual must codify the exact training and knowledge verification matrix required by NPAOP 0.00-4.12-05 (Model Regulation on the Procedure for Conducting Training and Testing Knowledge on Occupational Safety Issues). Gaps in training records account for more than half of all citations issued during Derzhpratsi inspections and nonconformities raised against Clause 7.2 "Competence" of ISO 45001. Your procedure must govern five statutory briefing types plus specialized training:

1. Introductory Briefing (Вступний інструктаж): conducted by the occupational safety specialist for all newly hired permanent or temporary employees, seconded personnel from outside contractors who perform work on the enterprise's site, and vocational or university interns before they step onto the premises. Recorded in the Introductory Briefing Logbook.
2. Primary Briefing (Первинний інструктаж): conducted at the specific workstation by the direct line supervisor (shop manager, foreman) before independent work begins for new hires, employees transferred from another department, or workers assigned to a new task.
3. Repeat Briefing (Повторний інструктаж): conducted at the workplace using the primary briefing program at strict statutory intervals: at least once every 3 months for high-hazard work, and at least once every 6 months for all other work.
4. Unscheduled Briefing (Позаплановий інструктаж): conducted when new or revised NPAOP regulations or internal safety instructions take effect, when technological processes or equipment change, after a safety violation that caused or nearly caused an injury, or when a worker returns after an absence exceeding 30 calendar days for high-hazard work (or exceeding 60 calendar days for standard work).
5. Targeted Briefing (Цільовий інструктаж): conducted before emergency response or cleanup operations, before any task requiring a formal Permit-to-Work (nariad-dopusk), written order, or disposition, and before one-off tasks outside a worker's normal job description.

Beyond workplace briefings, workers performing high-hazard operations or roles requiring professional selection must complete annual specialized occupational safety training and pass a formal examination, followed by mandatory on-the-job internship (стажування) for 2 to 15 shifts (or shadowing / дублювання for at least 6 shifts) and a signed executive order authorizing independent work. Managers, supervisors, and engineering specialists must complete occupational safety training and pass knowledge testing upon appointment and periodically once every 3 years. An internal examination board at the enterprise is legally valid only if it comprises at least three appointed members who hold current training certificates issued through an external training center with Derzhpratsi participation.

Two statutory pillars determine whether an occupational health and safety management system in Ukraine satisfies both state inspectors and Clause 6.1.3 "Determination of legal requirements and other requirements" of DSTU ISO 45001:2019: the high-hazard authorization regime under CMU Resolution No. 1107 and workplace hygienic attestation under CMU Resolution No. 442.

Cabinet of Ministers of Ukraine Resolution No. 1107 of 26.10.2011 ("On Approval of the Procedure for Issuing Permits for the Performance of High-Hazard Work and for the Operation (Application) of High-Hazard Machines, Mechanisms, and Equipment") divides hazardous operations and industrial equipment into two schedules (Group A and Group B):

• Group A (Requires a formal Permit from Derzhpratsi): covers the highest-risk industrial operations (such as gas-hazardous work, work in explosive or fire-hazardous zones, underground and open-pit mining, and mounting, dismantling, commissioning, repair, maintenance, or reconstruction of Group A machinery) as well as Group A high-hazard equipment (pressure vessels and steam boilers, load-lifting cranes and hoists, elevators, escalators, and heavy technological vehicles). To obtain a Permit, the employer commissions a formal technical examination from an accredited Expert Technical Center (ETC) and submits the positive expert conclusion to Derzhpratsi. Permits are issued for a 5-year term and can be extended.
• Group B (Requires registering a Declaration of Compliance of the Material and Technical Base): covers a wide spectrum of everyday industrial and construction operations, including work at height above 1.3 meters, steeplejack (climbing) work, welding, gas-flame, and soldering work, inspection and cleaning of chimneys and ventilation ducts, work on live electrical installations and cable lines, and storage of compressed or liquefied gas cylinders. The employer files the Declaration electronically or via an administrative service center at least 5 business days before commencing those operations or operating Group B equipment.

Inside an ISO 45001 system, every piece of Group A and Group B machinery is logged in an engineering equipment register tied to mandatory primary, periodic (PTO), and extraordinary (ChTO) technical inspection dates, while every Group A and Group B activity automatically enters the Hazard & Risk Register (Clause 6) and the Permit-to-Work schedule (Clause 8).

The second statutory pillar is workplace attestation by working conditions (атестація робочих місць за умовами праці) under CMU Resolution No. 442 of 01.08.1992. Any enterprise where technological processes, equipment, or raw materials generate potentially harmful or hazardous occupational factors must conduct workplace attestation within the timeframe set by its collective agreement, and at least once every 5 years. During attestation, specialists measure physical and chemical parameters across workstations: airborne chemical concentrations, welding aerosols, fibrogenic dust, noise, infrasound, ultrasound, whole-body and hand-arm vibration, microclimate (temperature, relative humidity, air velocity), illumination, electromagnetic fields, and physical workload intensity. Based on those measurements, the enterprise compiles Workplace Condition Cards, determines statutory entitlements to preferential pensions (Lists No. 1 and No. 2), additional paid annual leave, hazard pay surcharges, and preventive nutrition, and compiles employee rosters for periodic medical examinations under MOZ Order No. 246.

While Clauses 4 through 7 of DSTU ISO 45001:2019 build the administrative spine of your SUOP, Clause 8 "Operation" is where engineering controls prevent fatalities on the shop floor and construction site. Clause 8.1.2 mandates a strict five-level hierarchy of controls applied in descending order: 1) Elimination of the hazard; 2) Substitution with less hazardous materials or processes; 3) Engineering controls and collective protection (interlocked machine guards, light curtains, local exhaust ventilation, acoustic enclosures); 4) Administrative controls (Permit-to-Work workflows, LOTO energy isolation, safety signs, shift rotation); and 5) Personal Protective Equipment (hard hats, full-body harnesses, respirators, dielectric gloves). PPE sits at the very bottom of the hierarchy because a hard hat or harness never prevents the mechanical failure or fall itself; it only limits injury severity after other barriers fail. For non-routine high-hazard operations, the core operational control barrier is a rigorous Permit-to-Work (наряд-допуск, PTW) workflow paired with physical Lockout/Tagout (LOTO) isolation.

Work at height in Ukraine is governed by the Occupational Safety Rules During Work at Height (NPAOP 0.00-1.15-07). Engineers and site supervisors must distinguish between two statutory thresholds:

• Work at height (1.3 meters or more above the ground, floor slab, or working platform, or within 2 meters of an unguarded drop of 1.3 m or more): primary protection relies on collective guardrails or scaffolding; where guardrails cannot be installed, workers must use personal fall arrest or restraint systems (full-body harnesses with shock absorbers and lanyards certified to EN 361 and EN 355).
• Steeplejack / climbing work (верхолазні роботи, performed directly from structural elements, equipment, or climbing gear at heights of 5 meters or more where the fall arrest system is the worker's sole protection against falling throughout the operation): requires a mandatory written Permit-to-Work (nariad-dopusk), a targeted pre-task briefing, verification of structural anchor points rated for at least 12 to 15 kN of static load, wind speed checks (< 10 m/s), and pre-shift inspection of carabiners and lifelines.

A second high-fatality domain across utilities, food processing, chemical plants, and agribusiness is work in confined spaces and grain silos (inspection manholes, underground sewers, fuel tanks, fermentation vats, hoppers, and elevator silos). In an engineering SUOP, no worker may enter a confined space or grain bin until every verification step on the Permit-to-Work checklist is signed off:

1. Forced ventilation and multi-level gas testing prior to entry and continuously during work: a calibrated portable multi-gas detector must sample the atmosphere at three depths (top, middle, bottom). Oxygen ($O_2$) must remain strictly between 19.5% and 23.5%; flammable gases and methane ($CH_4$) must stay below 10% of the Lower Explosive Limit (LEL); and toxic gases including hydrogen sulfide ($H_2S$), carbon monoxide ($CO$), and carbon dioxide ($CO_2$) must stay below occupational exposure limits.
2. Retrieval tripod, harness, and dedicated top-side attendants: the entrant wears a full-body rescue harness connected via lifeline to an external mechanical winch and tripod, and uses a supplied-air or self-contained breathing apparatus (SCBA) whenever atmospheric hazards exist (never a filtering cartridge mask, which offers zero protection in oxygen-deficient air). At least two trained attendants (spotters) remain stationed outside the hatch at all times to winch the worker out without entering the toxic atmosphere themselves.
3. Grain elevator and silo hazards: entering a grain silo carries two lethal risks: engulfment and asphyxiation in shifting grain (bridged grain crusts collapsing or funnel flow pulling a person under in seconds) and combustible grain dust explosions (ATEX zones). The elevator's Permit-to-Work procedure requires physical disconnection and LOTO padlocking of all filling and discharge augers, bucket elevators, and slide gates before entry, use of 12 V explosion-proof lighting, and an absolute prohibition against walking on top of free-flowing grain.

Temporary hot work (arc welding, gas cutting, soldering, or abrasive disc cutting that generates sparks outside designated permanent welding booths) is regulated by the Fire Safety Rules in Ukraine (NAPB A.01.001) and sector NPAOPs. Under your SUOP operational control procedure, a Hot Work Permit-to-Work requires clearing all combustible materials within a radius of at least 5 meters (expanding to 10 meters or more when welding at height based on spark trajectory), covering floor grates and wall openings with fireproof blankets or metal shields, stationing at least two certified fire extinguishers (powder VP-5 or $CO_2$ VVK-3.5) right at the work point, testing for flammable vapors, and maintaining a mandatory 2 to 4 hour post-work fire watch to detect smoldering insulation.

Work on live or de-energized electrical installations follows the Rules for Safe Operation of Consumer Electrical Installations (PBEES, NPAOP 40.1-1.01-97) and the Technical Operation Rules (PTEES). The enterprise SUOP mandates appointing a qualified Person Responsible for Electrical Facilities (holding Group IV electrical safety certification for systems up to 1000 V and Group V for systems above 1000 V) and enforces both organizational and technical safety barriers:

• Organizational measures: authorizing work via a written electrical Permit-to-Work (nariad-dopusk), formal disposition (розпорядження), or approved list of routine maintenance tasks; formal workplace admission (допуск); continuous supervision during work; and documented transfer or closure of work. The procedure strictly separates the roles of the permit issuer, the admitting officer (допускач), the work supervisor, the crew leader, and the crew members (classified across Electrical Safety Groups I through V).
• Technical measures to prepare a de-energized electrical workplace (executed in strict sequence): 1) perform all required switching disconnects and take mechanical steps to prevent accidental or automatic re-energization of switchgear; 2) hang prohibitory safety placards ("Do Not Switch On! People Working!") on manual drive handles and remote control keys; 3) verify the absence of voltage on all current-carrying parts using a tested portable voltage indicator; 4) apply protective grounding (close stationary grounding blades or attach portable grounding clusters on all sides from which voltage could be fed); and 5) fence off the work zone and any adjacent live parts, posting warning and prescriptive safety signs.

Why isn't a paper sign reading "Do Not Switch On! People Working!" enough in a modern factory? On a busy shop floor, a paper sign can fall off a cabinet door, or an operator on the next shift can press a remote SCADA start button fifty meters away without seeing the maintenance mechanic inside the mixer. That is why every industrial SUOP we design under DSTU ISO 45001:2019 incorporates a physical Lockout/Tagout (LOTO) energy isolation standard covering maintenance, cleaning, jam clearing, and commissioning.

An engineering LOTO program controls all six categories of hazardous energy: electrical (circuit breakers, disconnect switches), pneumatic (compressed air lines and receivers), hydraulic (pressurized oil accumulators), thermal and chemical (steam mains, acid, alkali, ammonia, or natural gas pipelines), mechanical (compressed springs, tensioned cables), and gravitational (raised forklift carriages, crane booms, heavy press dies). The standard six-step LOTO workflow inside the SUOP runs as follows:

1. Identification of isolation points via an Equipment-Specific LOTO Card: every complex machine carries a laminated graphical placard showing photographs and tag numbers for every electrical breaker, pneumatic valve, hydraulic bleed port, and mechanical block point.
2. Orderly equipment shutdown and area notification: stopping the machine via normal operating controls and notifying affected operators on the line.
3. Physical energy isolation: throwing main electrical disconnect switches to the OFF position, closing ball valves and gate valves, and inserting blind flanges where required.
4. Application of lockout devices, personal padlocks (Lockout), and identification tags (Tagout): placing a multi-lock scissor hasp over the breaker toggle or valve wheel so every technician entering the danger zone attaches their own uniquely keyed padlock ("One Person, One Lock, One Key") alongside a durable tag showing their name, photo, department, and phone number. For multi-crew overhauls, keys are secured inside a group LOTO lockbox.
5. Dissipation of stored or residual energy: bleeding trapped pneumatic and hydraulic pressure to zero through drain valves, discharging capacitor banks, venting hot steam lines, and inserting solid mechanical safety props under elevated machine parts.
6. Zero Energy State Verification (Tryout / LOTOTO): before anyone reaches inside the machine guard or steps into the vessel, the supervisor and technicians physically push the local and remote "Start" buttons and check pressure gauges and voltage testers to prove that the equipment cannot move.

Industrial accident statistics across manufacturing plants and construction sites reveal a harsh truth: a disproportionate share of severe and fatal workplace injuries happen not to the plant's own permanent employees, but to outside contractor crews (installers, roofers, electrical subcontractors, maintenance teams) working on the client's premises. In a paper-only compliance model, company lawyers often try to shift liability by inserting a single sentence into the commercial contract: "The Contractor bears full responsibility for the occupational safety of its personnel." Yet neither during a state accident investigation under CMU Resolution No. 337 nor during a third-party certification audit under Clause 8.1.4.2 "Contractors" of DSTU ISO 45001:2019 does that contract clause absolve the host employer.

ISO 45001 explicitly requires the host organization to coordinate its procurement processes with contractors to identify hazards and assess and control OH&S risks arising from: a) the contractor's activities and operations that impact the host organization's workers; b) the host organization's activities and operations that impact the contractor's workers; and c) the contractor's activities that impact other interested parties in the workplace. In an engineering SUOP, contractor safety management rests on four operational gates:

1. Pre-Contract OH&S Qualification: before signing a works contract or issuing gate passes, the host company's safety service vets the contractor's statutory credentials: a valid Derzhpratsi Permit or registered MTB Declaration under CMU Resolution No. 1107 covering the exact work and machinery to be used, appointment orders for responsible engineering supervisors, valid training certificates and examination board protocols under NPAOP 0.00-4.12-05, medical fitness certificates under MOZ Order No. 246 for every crew member, and load-test certificates for harnesses, ladders, and lifting gear.
2. Introductory Briefing and Bilateral Site Access Act (Акт-допуск): every contractor employee completes an introductory safety briefing with the host company's safety specialist before entering the site. Whenever construction, installation, or overhaul work takes place inside an operating plant or active shop, the managers of both companies sign a bilateral Site Access Act (Act-Dopusk) defining physical hazard boundaries, simultaneous operations (SIMOPS) schedules, power and utility tie-in points, and physical barriers isolating active production lines.
3. Daily Permit-to-Work Co-Signing: whenever a contractor performs hot work, work at height, excavation, or confined space entry inside an active facility, the daily Permit-to-Work must be co-signed by the host department manager so incompatible tasks (for example, overhead welding above a solvent unloading bay or an active overhead crane runway) never occur simultaneously.
4. Active Shop-Floor Supervision and Stop-Work Authority: every contractor agreement includes a binding OH&S schedule granting the host safety engineer and shop managers authority to immediately halt contractor work, impose contractual penalties, and revoke site access if contractor personnel work at height without tying off, bypass machine guards, block fire lanes, or show signs of intoxication.

Alongside contractor oversight, Clause 8 of DSTU ISO 45001:2019 requires two additional engineering filters that traditional paper systems overlook: Procurement Controls (Clause 8.1.4.1) and Management of Change (MoC, Clause 8.1.3). Procurement control ensures that no chemical reagent enters the warehouse without a Ukrainian-language Safety Data Sheet (SDS), no production machine is commissioned without CE/UA conformity declarations and interlocked guarding, and PPE is purchased strictly against technical specifications approved by the safety service. Management of Change (MoC) ensures that whenever the enterprise introduces new machinery, alters chemical recipes, reroutes forklift traffic, or reorganizes shift staffing, a formal risk assessment is completed before the change goes live.

How does a plant director know whether the occupational health and safety management system is genuinely controlling risk (Clause 9 "Performance evaluation" and Clause 10 "Improvement" of DSTU ISO 45001:2019)? If the only metric presented at the annual board meeting is "zero Form H-1 accidents recorded this year", management is driving while looking exclusively in the rear-view mirror. Zero severe injuries over the past quarter can be pure luck while dozens of unguarded hazards and near-misses accumulate on the shop floor every week.

An engineering SUOP tracks a balanced dashboard combining two types of Key Performance Indicators (KPIs): lagging (reactive) indicators, which measure injury frequency and severity after incidents happen, and leading (proactive) indicators, which measure the health of preventive barriers across the safety pyramid (where every fatal or lost-time injury sits atop dozens of minor first-aid cases and hundreds of Near-Miss events).

For international tender questionnaires, investor ESG reporting, and multinational customer audits, the SUOP calculates standardized incident frequency rates normalized against actual person-hours worked:

$$\text{LTIFR} = \frac{N_{\text{LTI}} \times 1,000,000}{T_{\text{hours}}}$$

where $N_{\text{LTI}}$ is the number of Lost Time Injuries (work-related injuries resulting in at least one full shift of lost work time, investigated in Ukraine under CMU Resolution No. 337 using Form H-1/P), and $T_{\text{hours}}$ is the total number of person-hours actually worked by all personnel during the reporting period (normalized per $1,000,000$ hours under ILO and European practice, or per $200,000$ hours under the OSHA formula for TRIR, which also counts medical treatment cases beyond first aid and restricted work transfers).

Building your SUOP around DSTU ISO 45001:2019 unlocks a major architectural advantage: direct integration with quality management under ISO 9001 and environmental management under ISO 14001. Because all three standards share the identical Annex SL High-Level Structure (Clauses 4 through 10), your company can operate a single Integrated Management System (IMS). In an IMS, you maintain one unified document control procedure (Clause 7.5), one integrated risk and environmental aspect assessment matrix (Clause 6.1), one combined internal audit schedule under ISO 19011 (Clause 9.2), one executive Management Review (Clause 9.3), and one consolidated emergency preparedness plan (Clause 8.2, where an ammonia leak or fuel spill is managed simultaneously as a worker life-safety threat under ISO 45001 and an environmental containment event under ISO 14001).

Building a functioning occupational health and safety management system from scratch, or upgrading a paper compliance folder into a certified DSTU ISO 45001:2019 system, is nearly impossible for a single in-house safety engineer to handle alone. Daily operational tasks (introductory briefings, PPE issuance, medical exam scheduling, regulatory correspondence) consume the entire workday, leaving zero bandwidth to map processes, develop equipment-specific LOTO cards, or train line supervisors. That is why manufacturing plants, construction general contractors, agricultural holdings, and energy companies partner with the engineering consultants at Ekontrol.

We don't sell generic template binders. Our engineering team executes a four-stage implementation and audit roadmap tailored to your actual production equipment and statutory industry requirements:

1. Diagnostic Workplace Safety Audit (Gap Analysis): Ekontrol specialists visit your industrial sites, walk the production halls, warehouses, boiler rooms, electrical substations, and maintenance workshops, and audit your existing records against Law No. 2694-XII, applicable NPAOPs, CMU Resolutions No. 1107 and No. 442, and Clauses 4 through 10 of DSTU ISO 45001:2019. You receive a prioritized engineering report ranking every gap by risk level (immediate injury hazards, Derzhpratsi work-stoppage triggers, and ISO 45001 certification blockers) along with a budgeted project schedule.
2. SUOP and ISO 45001 Design and Implementation: working alongside your Chief Engineer, shop managers, and safety officer, we conduct on-site hazard identification and compile a process-specific Risk Register. We draft a custom Enterprise OH&S Manual (Polozhennia pro SUOP) matched to your org chart, executive responsibility orders, safety service regulations under NPAOP 0.00-4.21-04, training matrices under NPAOP 0.00-4.12-05, job safety instructions under NPAOP 0.00-4.15-98, Permit-to-Work procedures (height, confined spaces, hot work, grain silos, electrical installations), LOTO energy isolation standards, and contractor safety controls. Once documented, we train your line supervisors and internal auditors to run these controls on the floor.
3. ISO 45001 Certification Audit and Inspection Support: we run a full pre-certification internal audit and facilitate your executive Management Review meeting, help you select a recognized certification body (accredited by NAAU or European EA/IAF signatory bodies), support your team through Stage 1 (documentation review) and Stage 2 (on-site operational audit), and resolve any technical auditor findings until your DSTU ISO 45001:2019 (ISO 45001:2018) certificate is issued.
4. Annual Maintenance and Surveillance Support: after launch and certification, we help your team keep the system alive through periodic internal audits, legal register updates, Management of Change risk assessments for new production lines, and preparation for annual surveillance audits.

Whether you need to establish engineering order in workplace safety, pass a multinational customer audit, prepare for a Derzhpratsi inspection, or earn an internationally recognized ISO 45001 certificate for upcoming tenders, reach out to our engineering team via the Ekontrol contact page.