company code

A company code of conduct and corporate safety governance framework should clearly assign responsibilities, require compliance with applicable laws and standards, and ensure that work is planned and performed so hazards are identified, controlled, and reported. At a minimum, internal safety policies should require site-specific orientation before first entry to a work site, covering site hazards, required work procedures, hazard controls, PPE, emergency response, hazard reporting, and processes for addressing undue hazards and work refusals. They should also require written safety programs for higher-risk work, periodic review and updating of those programs, and clear designation of competent persons or responsible supervisors. [10] [11] [11]

• Adopt a written code of conduct that requires employees, supervisors, contractors, and temporary workers to follow safety rules, report hazards, stop unsafe work, and cooperate with investigations and corrective actions.
• Define roles and accountability: senior leadership sets policy and resources; managers implement controls; supervisors enforce procedures; workers follow training, use PPE, report hazards, and do not bypass safeguards.
• Provide site-specific orientation and task-specific training before work begins, with refresher training when conditions, hazards, equipment, or procedures change.
• Maintain written procedures for hazard assessment, incident reporting, emergency response, first aid, PPE, hazardous materials communication, lockout/tagout, work at height, mobile equipment, and contractor management.
• Ensure safety documentation is available at the work site where required, including compliance programs, training records, exposure assessments, inspection records, and emergency information.
• Review safety programs on a scheduled basis and after incidents, regulatory changes, or significant process changes, then communicate revisions to affected personnel.
• Apply the same safety expectations to host employers, contractors, staffing agencies, and other employers at shared worksites, with clear coordination of responsibilities.

[10] [9] [11] Employee compliance requirements should be explicit and enforceable. Workers should be required to attend orientation and training, follow written procedures, use required PPE, participate in exposure control measures, promptly report hazards, incidents, injuries, and near misses, and never tamper with safeguards. Employers should verify competency where specialized work is involved and maintain records showing training, monitoring, inspections, and corrective actions. For hazardous exposures, compliance programs should include exposure assessment, engineering and work practice controls first, and respiratory protection where residual exposure remains. [1] [2] [11]

• Comply with all posted warnings, barricades, and safeguard requirements.
• Use ladders, scaffolds, aerial devices, and fall protection only as trained and in accordance with safe-use rules.
• Keep first aid supplies and emergency equipment accessible and report any deficiencies immediately.
• Follow hygiene and decontamination rules where toxic substances may be present, including washing before eating and removing contaminated PPE appropriately.
• Do not enter or work in hazardous areas unless authorized, trained, and equipped for the task.
• Participate in medical evaluations, exposure monitoring, and retraining when required by the hazard or regulation.

[3] [5] [7] Workplace health and safety rules should be hazard-based and aligned with regulatory obligations. Common core rules include hazard communication and access to safety data sheets, provision of approved first aid training and equipment, use of PPE that meets recognized standards, safe access equipment, fall protection, machinery safeguarding, hazardous energy control, and emergency preparedness. Internal procedures should also require that equipment and specialized platforms meet applicable consensus standards and that workers are protected from overhead wires, falling objects, harmful substances, and other foreseeable hazards. [1] [5] [4] [8]

• Regulatory compliance: identify all laws, regulations, permits, and consensus standards that apply to the company’s operations and locations, then translate them into internal procedures and inspections.
• Documentation control: maintain current versions of policies, procedures, training records, inspections, exposure assessments, medical or surveillance records where required, and incident investigations.
• Contractor and multi-employer coordination: define who creates, controls, exposes, corrects, and verifies hazards at shared worksites; communicate hazards to all affected employers and workers.
• Change management: review safety impacts before introducing new equipment, chemicals, processes, or contractors.
• Enforcement and discipline: apply fair, documented corrective action for noncompliance, while also correcting system failures such as inadequate training, supervision, staffing, or equipment.
• Continuous improvement: audit the safety management system, track corrective actions to closure, and update procedures based on incidents, inspections, and legal changes.

[9] [11] [13] In practice, strong internal governance documentation usually includes: a code of conduct; a corporate EHS policy signed by leadership; roles and responsibilities; hazard identification and risk assessment procedures; safe work procedures; contractor management rules; training and competency requirements; incident reporting and investigation procedures; emergency response plans; inspection and audit protocols; document control rules; and a process for legal compliance review. The key safety principle is that documentation must not be merely administrative: it must be implemented at the work site, communicated to workers, and supported by supervision, resources, and verification. [11] [6] [12]