Internkontrollforskriften

Internkontrollforskriften, formally Forskrift om systematisk helse-, miljø- og sikkerhetsarbeid i virksomheter, is a Norwegian regulation that implements the concept of internal control in the workplace. It places duties on undertakings to establish, implement, and maintain an internal control system to ensure compliance with applicable laws and regulations related to health, environment, safety, and, where relevant, product safety.

The regulation applies to all businesses and activities in Norway and requires the internal control system to be appropriate to the size, nature, and risk profile of the operation. The system should cover a range of elements, including clear goals and responsibilities, risk assessment and control measures, documented routines and procedures, training and information for employees, and resources necessary to maintain safety and compliance. It also requires procedures for handling deviations, incidents, defects, and non-conformities, as well as mechanisms for corrective actions and continuous improvement.

Documentation and accessibility are key aspects. The internal control system must be documented and kept up to date, with records of risk assessments, training, inspections, maintenance, and audits. Regular management review and periodic re-evaluation of risks are expected to ensure ongoing effectiveness.

Enforcement and oversight are the responsibility of the Norwegian Labour Inspection Authority (Arbeidstilsynet), which may inspect, issue orders, or impose penalties for non-compliance. Internkontrollforskriften serves as a framework to promote systematic HSE work and accountability within Norwegian workplaces.