Onboarding an Outsourced QHSE Manager: The First 90 Days

What needs to be ready before day one?

The scoping decisions and a document kit. The decisions (scope, internal contact person, decisions reserved to management, escalation rule) are written into the engagement letter; our part-time QHSE manager guide details what it should contain. The kit prevents the first days being spent hunting for documents.

Gather the following, or flag them as missing:

• current certificates, their scopes, the latest certification and customer audit reports, with open findings and their deadlines;
• the latest management review and the year’s objectives;
• the process map and the list of process owners;
• the occupational risk assessment, the register of accidents and near misses, the latest investigation reports;
• the minutes of the safety and hygiene committee (comité de sécurité et d’hygiène, or CSH, the joint employer and employee body that the Moroccan Labour Code requires from 50 employees) and its latest annual report, if your headcount requires one;
• the legal requirements register, the site’s permits, waste records;
• the current action plan and the year’s audit calendar;
• the organisation chart and headcount by workshop and by shift.

A missing document is not a preparation delay: it is a gap analysis finding. Say so from the start.

What happens in the first 30 days?

Seeing, listening and securing the nearest deadlines. Not rewriting procedures. An outsourced manager who starts with the documentation misses what actually brings an audit down: the shop floor.

The shop floor and the interviews

They visit every workshop and every team, including night shifts. They meet management, process owners, members of the safety and hygiene committee, the occupational physician, and a few operators and team leaders. They compare what they see with what the documents in the kit say.

Deadlines that cannot wait

They list everything due in the next three months and have management validate the list:

• audit findings whose response deadline is still running;
• the safety and hygiene committee meeting, held at least once a quarter (Article 339 of the Labour Code);
• the committee’s annual report on the evolution of occupational risks, which the employer sends to the labour inspector and to the labour inspection physician within 90 days of the year concerned (Article 342): an engagement that starts in the first quarter must make it a priority;
• the investigation report after a work accident or occupational disease, sent by the employer to the same recipients within fifteen days (Articles 340 and 341);
• customer audits, surveillance audits, permit renewals.

The official text of the Labour Code is published in Arabic by the ministry in charge of employment, and the Ministry of Justice publishes a consolidated French version on the Adala portal: the obligations above follow its Articles 339 to 342.

They also test the escalation rule: whom to call, and how fast, after a serious accident on a day when they are not on site. A rule that has never been tested does not work on the day it is needed.

Deliverables at day 30: a fresh-eyes report, the list of urgent items with an owner and a date for each, and a provisional calendar of the year’s deadlines.

What should days 31 to 60 produce?

A plan that management approves. The gap analysis is completed: gaps against the standards in scope, the state of regulatory compliance, overdue actions, the maturity of each process. It leads to three documents:

1. a priority plan, which ranks the gaps by risk and deadline;
2. an annual presence calendar, aligned with your peak periods: committees, internal and external audits, management review, production seasons;
3. an internal audit programme, built on risk following the ISO 19011 guidelines, with another auditor for the activities the outsourced manager runs personally.

During this period, the deputy is introduced to the team and visits the site. The first monthly report is posted in the client space; it is still incomplete, and that is normal. The legal requirements register is taken over or started.

How are routines installed between days 61 and 90?

By running each routine once, in full, and measuring it. The first internal audit is carried out, the first actions are closed and their effectiveness checked, the QHSE dashboard settles, and the second monthly report arrives on the planned date. The internal contact person and the process owners know what is expected of them between two visits.

The period ends with an engagement review with management: presence delivered, deliverables issued, indicators, adjustments to scope and calendar.

Which indicators show whether the engagement works?

Two families, not to be mixed: system indicators, which say how the site is doing, and engagement indicators, which say whether the service is delivering what was agreed. A rising number of reported near misses can be good news for the system; a monthly report that arrives late is always bad news for the engagement.

Targets are set at the engagement review, from your real starting point. An objective set before the gap analysis is a guess.

Which mistakes make onboarding fail?

Almost all of them come from the company, not the provider. In our engagements, we see the same ones:

• No internal contact person. The outsourced manager spends their days on site looking for information.
• An office-based start. Three weeks of rewritten procedures, no night-shift visit.
• A forgotten introduction. Teams and staff representatives discover the provider at the first committee meeting.
• Having the provider sign everything. Policy, objectives and trade-offs remain management decisions.
• A first report after three months. Management loses track and judges on impressions.
• A ghost deputy. Discovered on the day of the first absence.
• No engagement review. Presence freezes while the need changes.

Your checklist at day 90:

• Engagement letter signed, scope and reserved decisions written down.
  
• Internal contact person named, with time set aside.
  
• Every workshop and every team visited, including at night.
  
• Fresh-eyes report delivered, urgent items handled or scheduled.
  
• Escalation rule tested on a real case.
  
• Gap analysis and priority plan approved by management.
  
• Annual presence calendar approved and aligned with your deadlines.
  
• Deputy introduced to the team, with access to the client space.
  
• Two monthly reports issued on time.
  
• Safety and hygiene committee held on schedule, if your headcount requires one.
  
• Legal requirements register up to date, compliance evaluation scheduled.
  
• Internal audit programme approved, first audits carried out.
  
• Engagement indicators defined and engagement review held.
  

This plan assumes an existing system. If the site is preparing its first certification, the route is the one in our guide to ISO 9001 certification in Morocco; if the question is first about budget, see in-house vs outsourced QHSE manager cost.