ISO 19443: Why Nuclear Safety Culture Cannot Be Audited Like a Quality Management System ?

An organisation may have an ISO 9001-compliant management system that is perfectly documented and effectively managed. Yet this does not necessarily mean that it is ready to meet the requirements of ISO 19443.

This is a misconception we still encounter regularly.

ISO 19443 is not simply an adaptation of ISO 9001 for the nuclear sector. While it retains the fundamentals of quality management, it adds an essential dimension: nuclear safety.

This fundamentally changes the way a management system is designed… and therefore the way it is audited.

Beyond Documented Compliance

Under ISO 9001, the auditor verifies that processes are defined, controlled, implemented and improved.

Under ISO 19443, this approach remains essential, but it is no longer sufficient.

The key question becomes:

How does the organisation ensure that each of its decisions contributes to maintaining nuclear safety?

A procedure may be perfectly written. However, the organisation must also demonstrate that it is understood and applied, and that it leads employees to adopt the appropriate behaviours, including when faced with an unexpected situation or operational pressure.

It is precisely in these situations that nuclear safety culture takes on its full meaning.

A Culture That Is Not Simply Written Down… but Demonstrated

Nuclear safety culture cannot be reduced to a policy displayed on the premises, annual awareness training or a few monitoring indicators.

It is reflected in observable day-to-day behaviours.

For example:

These behaviours are not always described in a procedure. Yet they are often among the best indicators of an organisation’s maturity.

What an ISO 19443 Auditor Is Really Looking For

During an audit, evidence is not limited to documentation.

The auditor also examines:

• the teams’ understanding of nuclear safety issues;
• how decisions are made;
• how ITNS activities are taken into account;
• employees’ ability to identify and report risks;
• how deviations are addressed and, above all, what lessons are learned from them;
• management’s involvement in promoting nuclear safety culture.

In other words, the audit seeks to verify that the requirements of the standard are genuinely embedded in and applied throughout the organisation’s day-to-day operations.

Two Organisations Can Be Compliant… Without Having the Same Level of Maturity

Two companies may have the same procedures and records and meet the same documented requirements.

Yet during interviews, one organisation may spontaneously explain why a requirement is essential to nuclear safety, while the other simply describes what the procedure requires.

This difference may appear subtle. However, it is often highly revealing of the extent to which the requirements have genuinely been understood and embraced by the teams.

A mature organisation does not simply apply a rule. It understands why the rule matters.

The Most Significant Findings Are Not Always Where You Might Expect Them

Across the audits conducted by QUALIANOR, one observation arises regularly.

The most significant findings are not generally related to the absence of procedures.

They more often concern:

• how well procedures and requirements are understood and embraced by teams;
• the understanding of nuclear safety issues at every level of the organisation;
• consistency between the decisions made and nuclear safety principles;
• the organisation’s ability to ensure that nuclear safety requirements take precedence when faced with cost, schedule or production constraints.

Conversely, the most mature organisations are not necessarily those with the most extensive documentation systems.

They are those in which every employee understands that nuclear safety is both an individual and a collective responsibility.

A Standard Built Around Three Pillars

ISO 19443 is not based solely on nuclear safety culture.

It combines three inseparable dimensions:

It is the balance between these three dimensions that makes ISO 19443 distinctive.

A Certification That Goes Far Beyond Quality

While ISO 9001 demonstrates that an organisation has control over its processes, ISO 19443 goes further.

It verifies that this control serves nuclear safety, that decisions are made with due consideration of their potential impact on activities and items important to nuclear safety, and that these requirements are understood, shared and upheld at every level of the organisation.

Ultimately, what distinguishes the most mature organisations is not the quality of their procedures.

It is their ability to bring the principles of nuclear safety to life, every day.