OSH Act Art. 36 risk assessment amended
The employer's duty to implement improvement measures and the duty to involve and inform workers were strengthened.
Ministry of Employment and Labor, Cheongju (KR) ↗For each statutory obligation, this table shows what COREON Safety AX Agent records as evidence in the current production product, what it supports only in part, and what the business must perform itself. Unsupported items are listed as well.
The Enforcement Decree of the Serious Accidents Punishment Act (SAPA) requires a review "at least once every half-year" for most obligations, including hazard improvement, hearing workers' opinions and contractor management. What COREON records is the basis for that review: event-level evidence that an improvement was actually carried out and confirmed by an authorized person.
The current production product creates event-level execution records and evidence for the obligation.
Part of the action and evidence record is provided. The remaining procedure is performed by the business or another system.
Not a current product capability. The business performs it directly; some items are managed as roadmap candidates.
Rating principle. Providing a form or checklist alone is not rated “Supported”. An item is rated “Supported” only when owner assignment, before/after evidence and an authorized approval record are actually created. This table is updated when the law or the product changes.
The regulatory focus is shifting from "was an assessment done?" to "was the improvement implemented and verified?"
The employer's duty to implement improvement measures and the duty to involve and inform workers were strengthened.
Ministry of Employment and Labor, Cheongju (KR) ↗Applies from 2027-01-01 to workplaces with 50 or more regular workers (construction: projects of KRW 5 billion or more), and from 2028-01-01 to smaller ones; up to KRW 10 million per the official notice.
MOEL Goyang (KR) ↗ · MOEL Incheon North (KR) ↗A surcharge of up to 5% of operating profit for companies with three or more work-related deaths in a year, plus an expanded right to stop work. The effective date must be confirmed after promulgation.
Maeil Business Newspaper (KR) ↗Obligation summaries are unofficial English paraphrases for orientation. The Korean statutory text governs.
| Provision | Obligation | COREON scope | Records and evidence | Status |
|---|---|---|---|---|
| Act Art. 4(1)1 · Decree Art. 4(1) | Set safety and health goals and management policy | Register the policy statement and annual safety and health objectives on 14 KPIs (hazard closure rate, overdue items, open high-priority hazards, risk assessments, TBM, training completion, action owners without training, budget execution, manager evaluations, drills, contractor overdue items, unacknowledged stop-work requests and more), computed from records. A different executive approves; a missed target opens a corrective action automatically and someone other than the completer must verify it before the objective can close. Plan items are tracked with progress and evidence, and management review records decisions on objectives, budget and people. The policy text and target levels are set by the business. | Objective and approval (target hash) · KPI evaluation (basis and hash) · corrective action completion and verification · plan progress and evidence · management review report (SHA-256, trusted timestamp) | Supported |
| Decree Art. 4(2) | Establish a dedicated organization for safety and health | Establishing the dedicated organisation is done by the business. COREON records its members, positions, required headcount and basis in a half-yearly safety staffing register, and blocks executive confirmation while a shortfall has no hiring action (owner, due date). The semiannual review counts it as a staffing item. | Staffing register · shortfall and hiring actions · executive confirmation · semiannual item | Partial |
| Decree Art. 4(3) | Procedure to identify and improve hazards, reviewed at least every half-year (may be satisfied by OSH Act Art. 36 risk assessment) | Hazard and near-miss reports, risk assessments, TBM and equipment signals become one Safety Event linked to owner, deadline, corrective action, before/after evidence, residual-risk reassessment and authorized approval. The half-year review screen tallies open, overdue and evidence-gap items; gaps receive improvement instructions and the responsible executive confirms the review. | Risk assessment record · before/after evidence · residual-risk reassessment · approval and closure history · half-year review confirmation · Evidence Pack | Supported |
| Decree Art. 4(4) | Allocate a safety and health budget and spend it as intended | Safety and health budget lines (personnel, equipment, training, inspection, contractors, emergency and more) are planned, approved, recorded as spent and closed. The half-year review flags gaps between plan and spend. Whether the amount is adequate is the employer's judgement. | Budget plan and approval · spend records · half-year review confirmation | Supported |
| Decree Art. 4(5) | Give authority and budget to responsible managers and supervisors; evaluate them at least every half-year | Evaluation criteria for responsible managers and supervisors (five default items, adjustable weights), half-year evaluation results, improvement instructions and confirmation are recorded, alongside role-based action, deadline and approval history. Granting authority and budget remains the employer's decision. | Evaluation criteria · half-year results · improvement instruction and confirmation · role-based action and approval history | Supported |
| Decree Art. 4(6) | Assign safety and health professionals | Appointing safety and health managers and filing the appointment are done by the business. COREON records appointment and release history, qualifications, dedicated assignment and filing dates, and tracks shortfalls against the required headcount. The business enters the statutory headcount; COREON does not calculate it. | Appointment history · qualifications · fill-rate KPI · hiring due dates | Partial |
| Decree Art. 4(7) | Procedure to hear workers' opinions; review implementation of improvements at least every half-year | Safety Room receives field reports, worker opinions and safety suggestions as distinct input types. Items confirmed as hazards by an authorized person are tracked through corrective action, evidence and approval. The half-year review counts unanswered opinions and those open for more than 14 days. Committee and council minutes are managed separately. | Report and opinion intake · improvement execution history · half-year review confirmation | Supported |
| Decree Art. 4(8) | Emergency manual for work stoppage, evacuation, rescue and preventing further harm; reviewed at least every half-year | After an accident COREON records emergency response (work-stop scope) → reports (executive, labor office, investigation report, receipt numbers) → site control and scene preservation → resume decision approved by another person → follow-ups → root cause and verified prevention → executive closure. Closure is refused while steps are missing. Drill records and drill remediations are counted in the semiannual review. Writing the manual and first-aid or medical decisions remain with the business. | Incident timeline · report records · site control · resume approval · closure hash and RFC 3161 · drill records | Supported |
| Decree Art. 4(9) | Criteria and procedures for contracting, service and outsourcing; reviewed at least every half-year | Contractor findings are tracked through owner, deadline, evidence and approval, with a per-contractor view of open, overdue and evidence-gap items and a half-year review item. Contractor capability evaluation criteria and cost or schedule criteria are not provided and are on the roadmap. | Contractor finding action and evidence history · per-contractor overview · half-year review confirmation | Partial |
| Act Art. 4(1)2 | Establish and implement measures to prevent recurrence after an accident | Incident records hold the root cause (5-Why etc.) and prevention measure; a different person must verify the measure before work resumes or the incident closes. Follow-ups need evidence and independent verification, and a Safety Event cannot close before prevention is verified. Repeated risk from the same signal source reopens a closed event. | Root cause · prevention measure · independent verification · follow-up evidence · reopen history | Supported |
| Act Art. 4(1)3 | Implement improvement or corrective orders from government authorities | Orders can be registered as Safety Events and managed through owner, deadline, action, evidence and approved closure. The order content is entered by the responsible person. | Before/after evidence · approval and closure history | Supported |
| Act Art. 4(1)4 · Decree Art. 5(2)1–2 | Review compliance with safety and health laws at least every half-year; act on gaps with people or budget | The half-year checklist tallies each item of Decree Art. 4 and Art. 5 plus stop-work request handling. Gaps receive improvement instructions (owner, deadline); when the responsible executive confirms, the review is locked with a tamper-evident hash. Which obligations apply and whether they are met is the employer's judgement. | Half-year checklist · improvement instruction and execution · executive confirmation (tamper-evident hash) | Supported |
| Decree Art. 5(2)3–4 | Review at least every half-year that mandatory training for hazardous work was delivered | The training register records the plan, delivery, per-attendee hours and understanding check; non-completers are routed to a make-up action that a separate reviewer closes. The half-year review tallies missing training, non-completers, action owners without training, newcomers without training and recurring hazards without planned training, and turns them into instructions. Delivering the training and judging its content remain with the business; TBM records do not replace statutory training. | Training register · completion, non-completion and understanding tallies · make-up action and closure · half-year training item | Supported |
| Provision | Obligation | COREON scope | Records and evidence | Status |
|---|---|---|---|---|
| Art. 36 Risk assessment (amended, effective 2026-06-01) | Identify and assess hazards, implement improvement measures, involve and inform workers | Records and checks the procedure of amended Enforcement Rule Art. 37 to 37-4 per assessment round: initial, regular or ad-hoc type, schedule shared before the assessment, worker participation centred on site walks, worker representative participation on request, risk determination and implementation of improvement measures, and results shared afterwards. Missing steps are shown with the legal basis. The completion record keeps a tamper-check hash and a 3-year retention date. Regular-assessment due reminders, ad-hoc review alerts after incident or change records, and a TBM briefing indicator for serious hazards are provided. The business conducts and decides the assessment; COREON does not determine legal compliance. | Statutory risk assessment record · schedule and result sharing record · worker and representative participation record · corrective-action evidence · TBM briefing record | Supported |
| Art. 16 Supervisors | Safety and health checks, guidance and advice for the work supervised | Field verification, action deadlines and reassessment tasks are assigned to the supervisor role with execution history. The full statutory supervisor duties are not managed. | Role-based task and verification history | Partial |
| Arts. 38–39 Safety and health measures | Measures for hazardous machinery, work and locations | Execution of required measures is recorded through corrective action, before/after evidence and approval. Which measures the law requires is determined by the business. | Before/after evidence · approval history | Partial |
| Arts. 63–64 Principal contractor duties | Safety measures for subcontractor workers, safety council, site patrols | Contractor findings and actions are tracked in the same event. Council operation and patrol scheduling are not provided. | Contractor finding action and evidence history | Partial |
| Art. 57 Recording and reporting accidents | Record and retain industrial accidents; report to the labor office | Incident records show the investigation report submission (receipt number, date) and the reference due date for accidents with 3+ lost days (one month after occurrence). Preparing and filing the report is done by the business. | Incident record · report submission record · reference due date | Partial |
| Art. 29 Worker safety and health training | Regular, onboarding and special training | Training records, certificates and make-up training are managed. When a Safety Event requests work authorization, each worker's training history is checked and the authorization is denied and recorded if anyone is untrained. Make-up training is planned from the denial; work stop cannot be lifted and the event cannot close until authorization is granted after training. Delivering training and instructor qualifications remain with the business (matched by name). | Training register · work authorization granted/denied · make-up training link | Partial |
| Arts. 51, 52, 54 Work stoppage and serious-accident response | Stop work and evacuate in imminent danger; respond to and report serious accidents | Worker work-stop requests (optionally anonymous) are recorded from receipt → decision → resume conditions and approval → retaliation check (Art. 52). Incident records keep the time, recipient and receipt number of the employer's work stop and evacuation (Art. 51) and the serious-accident report (Art. 54); the report itself is made by the business. The amendment expanding the right to stop work, passed on 1 October 2026, will be reviewed after promulgation and the effective date are confirmed. | Work-stop requests · decision and resume records · retaliation check · incident report records | Partial |
| Art. 24 OSH Committee | Committee composition, deliberation and resolution | Committee operation and minutes are managed by the business. | Not applicable | Customer-performed / Roadmap |
| ISO 45001 | KOSHA-MS | Requirement | COREON function / record | Status |
|---|---|---|---|---|
| 4.1 | 4.1 | Context, climate change relevance (Amd 1:2024) | Checked through the internal audit checklist | Customer-performed |
| 4.2 | 4.2 | Workers and interested parties | Worker representative consultation, contractor overview | Partial |
| 4.3 | 4.3 | Scope | Workspace sites and Safety Rooms | Partial |
| 4.4 | 4.4 | OH&S management system | Procedures kept by the business | Customer-performed |
| 5.1 | 5.1 | Leadership and commitment | Executive confirmation of the half-year review, hash and trusted timestamp | Supported |
| 5.2 | 5.2 | OH&S policy | Evidence under the goals and policy duty (policy text written by the business) | Partial |
| 5.3 | 5.3 | Roles and authorities | Team roles, manager evaluation | Supported |
| 5.4 | 5.4 | Consultation and participation | Worker representative consultation, worker opinions, stop-work requests | Supported |
| 6.1.2 | 6.1 | Risk assessment (incl. social factors) | Statutory risk assessment, psychosocial category and check pack | Supported |
| 6.1.3 | 6.2 | Legal and other requirements | Law mapping, half-year statutory check | Partial |
| 6.1.4 | 6.1 | Planning action | Owner, deadline, action and evidence per hazard | Supported |
| 6.2 | 6.3·6.4 | Objectives and planning | Objectives with computed KPIs, approval, plan items, corrective action on shortfall, management review decisions | Supported |
| 7.1~7.3 | 7.1~7.3 | Resources, competence, awareness | Budget, training register and certificates, TBM and briefing records | Supported |
| 7.4~7.5 | 7.4~7.7 | Communication, documented information | Safety Room messages, audit log, data export with hashes | Supported |
| 8.1 | 8.1 | Operational control, change, contractors | Action, evidence, reassessment, approval; change review; contractor actions (hierarchy of controls not enforced) | Partial |
| 8.2 | 8.2 | Emergency preparedness | Emergency drill records, incident response lifecycle (response, reports, site control, resume approval, closure), SOS | Supported |
| 9.1 | 9.1 | Monitoring, evaluation of compliance | Half-year duty review, disclosure pack | Supported |
| 9.2 | 9.2 | Internal audit | Plan, independence statement, per-clause results with evidence, nonconformities, corrective action, verification by another person, closure, report hash | Supported |
| 9.3 | 9.3 | Management review | Dedicated management review record (objectives, KPIs, half-year items, training, contractors; decisions; executive confirmation locked with SHA-256 and trusted timestamp) | Supported |
| 10.2 | 10.2 | Incident, nonconformity, corrective action | Event closure and reassessment, audit corrective action and reopening | Supported |
| 10.3 | 10.3 | Continual improvement | Follow-up tracking, daily deadline digest | Partial |
The ISO 45001 and KOSHA-MS mapping is a COREON self-assessment, not a certification or conformity decision; using COREON does not certify an organisation. Psychosocial hazards (workload, working hours, harassment, customer abuse) are classified and checked against the social factors in ISO 45001 6.1.2.1 and Article 41 of the Korean OSH Act. When the revised ISO 45001 is published (expected 2027), the internal audit checklist will follow the new edition and existing audit records keep the edition they were written against. Mappings to other national regulations are not provided.
This mapping reflects the production scope as of 2026-10-04. It will be updated when the product scope or the law changes.