Occupational health and safety (OHS) is one of the legal obligations most poorly managed in Moroccan SMEs. Business owners are aware of the Labour Code requirements and their obligations towards the CNSS, but the practical management — risk inventories, training planning, accident declarations, qualification tracking — typically remains scattered across Excel files, paper registers and informal reminders. The consequences of poorly managed OHS are significant: work accidents not declared within legal deadlines exposing the company to penalties, forgotten mandatory training creating civil and criminal liability for management, labour inspections revealing repeated failings, and above all the human and financial cost of accidents translating into prolonged sick leave and a deteriorating workplace atmosphere. Integrated into an ERP such as Crystal ERP (erp.crystalit.ma), an OHS module covers risk management, regulatory declarations, training tracking and QHSE reporting in the same environment as HR, payroll and accounting. This guide explains what a Moroccan SME must manage in terms of OHS, and how an integrated tool transforms this legal obligation into an operational advantage.
OHS Obligations in the Moroccan Labour Code: What Every Employer Must Comply With
The Moroccan Labour Code (Dahir No. 1-03-194 of 11 September 2003) dedicates its Book II to working conditions, hygiene and safety. It places a general obligation on every employer to protect the health and safety of their employees, which translates into concrete requirements depending on the size of the business. Beyond a certain workforce threshold, the company must establish a Health and Safety Committee (HSC), designate an occupational physician and draw up internal regulations that include applicable prevention measures. In the event of an accident, it is the employer who must prove they took all necessary precautions — an obligation of result that requires rigorous documentation and traceability, which is very difficult to maintain without a dedicated tool.
The occupational accident and disease regime is managed by the CNSS (Caisse Nationale de Sécurité Sociale — National Social Security Fund). In the event of an accident, the employer is obliged to declare it to the CNSS within the legal deadlines, providing precise information on the circumstances, the injured employee and any witnesses. An accident not declared within the deadline deprives the company of CNSS coverage and exposes the business owner to administrative sanctions. The manual management of these obligations — accident register, CNSS forms, sick leave tracking — is time-consuming and generates omissions in SMEs without formalised processes.
- Health and Safety Committee (HSC): mandatory beyond a certain workforce threshold, with periodic meetings to document and archive in accordance with the Labour Code.
- Occupational physician: obligation of periodic medical monitoring for employees, with traceability of pre-employment, periodic and return-to-work examinations.
- Work accident register: kept up to date at all times, available to labour inspectors or the CNSS during any inspection or control.
- OHS training: obligation to train employees on the specific risks of their position and to retain training certificates as proof of compliance.
- Personal protective equipment (PPE): mandatory provision to employees exposed to identified risks, with a register of deliveries and replacements.
Professional Risk Assessment: From Diagnosis to Preventive Action Plan
Professional risk assessment is the foundation of any serious OHS approach. It involves systematically identifying hazards present in the company — mechanical, chemical, electrical, ergonomic and psychosocial risks —, assessing the probability and severity of each risk, and defining appropriate prevention measures. This assessment must be updated regularly, at each significant change in working conditions (new position, new machine, facility restructuring), and forms the basis of the annual prevention plan. Without a structured tool, it often amounts to an Excel spreadsheet that is never updated and whose latest version nobody can identify with certainty.
A risk management module in Crystal ERP (erp.crystalit.ma) allows this approach to be structured: creating a map of work units, associating hazards with each unit, scoring risks according to a configurable grid (probability × severity = criticality), identifying measures in place and measures to be implemented, and tracking the progress of corrective actions. This register is linked to job positions and exposed employees through the HR module (HR Management Software in Morocco: the Complete Guide for SMEs), allowing identified risks to be connected to the OHS training required for each employee in the relevant position. Each corrective action becomes a task assigned to a responsible person with a deadline, trackable through to closure.
- Work unit risk map: each position or workshop is associated with its specific risks according to standard OHS frameworks, with simplified updating.
- Automatic criticality scoring: probability × severity → risk level displayed (acceptable / to monitor / unacceptable) to prioritise prevention actions.
- Action plan linked to risk register: each unacceptable risk automatically generates a corrective action assigned to a responsible person with a deadline and regular follow-up.
- Version history maintained: every register update is dated and archived — essential for proving regular updating during an audit or inspection.
- Residual risk dashboard: a comprehensive view of the overall risk level and actions in progress, available for the HSC and management at any time.
Work Accidents and Incidents: CNSS Declaration, Investigation and Accident Rate Indicators
Managing work accidents begins as soon as an event is reported. Even a minor accident must be recorded and analysed: accidents without sick leave are often the precursors to serious accidents, and neglecting them deprives the company of improvement opportunities. In Crystal ERP (erp.crystalit.ma), each report triggers a structured workflow: the sector manager records the circumstances, injury type, employee involved and witnesses; CNSS declaration forms are pre-filled automatically from employee and event data; and an investigation checklist is launched to identify root causes. The legal declaration deadline to the CNSS is tracked with automatic alerts to avoid any delay.
The post-accident investigation is the step most often neglected in SMEs. Its purpose is to identify immediate causes (unsafe act, equipment failure), root causes (training gap, absence of PPE, inadequate procedure) and corrective actions to prevent recurrence. Without a dedicated tool, this investigation amounts to a PDF report stored in a folder that nobody consults, and the same accidents repeat. An OHS software integrated with the ERP links investigation conclusions to the risk register (updating the risk score if necessary) and to training plans, and feeds accident rate indicators — frequency rate, severity rate — that make up the OHS dashboard for the QHSE manager and management.
- Pre-filled CNSS declaration form: employee, accident and circumstance data extracted automatically from the HR file — time savings and improved reliability.
- Alert on legal deadlines: automatic reminder of the CNSS declaration deadline as soon as the accident is recorded in the system.
- Guided post-accident investigation: configurable cause tree to identify immediate, root and organisational causes and generate the corresponding action plan.
- Automatic accident rate indicators: frequency rate (FR) and severity rate (SR) calculated without intermediate spreadsheets and updated with each new event.
- AT/MP sick leave tracking: duration, return to work, relapses and case closure integrated into the absence management module (Leave and Absence Management Software in Morocco).
OHS Training and Qualifications: Certificate Traceability and Position Compliance
OHS training is both a legal obligation and an effective prevention lever. Employees trained in the risks of their position adopt safer behaviours, use PPE correctly and respond professionally in emergencies. The difficulty for SMEs lies not in the training itself, but in maintaining an up-to-date list of mandatory training by position, tracking certificate expiry dates, anticipating renewals and proving, during an inspection or accident investigation, that training had actually taken place with the required supporting documents. Without a dedicated tool, this inventory rests on the HR manager's memory — an obvious source of failure.
In Crystal ERP (erp.crystalit.ma), the OHS training plan is linked to the position and risk map: for each position exposed to an identified risk, the system lists the required training with its frequency. For each employee in that position, it compares completed training against required training and automatically generates the annual OHS training plan. Training certificates are archived in the employee's digital file, expiry dates are tracked with advance alerts, and the qualifications dashboard shows in real time which certifications need renewal. For a comprehensive view of employee training management, see our guide (Training Management Software in Morocco).
- Position × required training matrix: mandatory OHS training is defined once per position and automatically verified for each employee holding it.
- Qualification expiry alerts: automatic notification sent before a certificate expires, to the employee and the training manager.
- Automatically generated OHS training plan: renewal needs and needs identified from accident investigations consolidated into an annual plan without re-entry.
- Digital archiving of certificates: training documents in the employee file, instantly accessible during a labour inspection or accident investigation.
- PPE delivery register: traceability of equipment delivery (date, model, condition) and renewals for each concerned employee.
Managing OHS with an ERP: QHSE Indicators, Reporting and Audit Readiness
OHS management relies on measurable indicators that enable management and the QHSE manager to visualise the evolution of prevention performance, compare periods and justify prevention investments. In Crystal ERP (erp.crystalit.ma), the OHS/QHSE dashboard centralises key indicators: number of accidents with and without sick leave, frequency and severity rates, number of corrective actions in progress and their completion rate, position compliance rate (training up to date vs. expired qualifications) and OHS training hours delivered during the year. These indicators are calculated automatically from data entered in the OHS, HR and payroll modules — without any export or intermediate spreadsheet.
Integrating OHS into the ERP provides concrete value during compliance audits — labour inspections, customer audits, certification processes: all OHS documentation is centralised, versioned and traceable from a single tool. The QHSE manager can generate with a few clicks the annual OHS report, training status, accident register for the past years and the corrective action table. Combined with HR management (HR Management Software in Morocco: the Complete Guide for SMEs), payroll (Payroll management in Morocco: CNSS, IR and pay slips for SMEs) and the management dashboard (Business dashboard in Morocco: managing your company in real time), Crystal ERP's OHS module gives Moroccan SMEs a level of prevention rigour comparable to large organisations, without the complexity of a standalone specialist solution disconnected from the rest of the information system.
- Real-time QHSE dashboard: accidents, training, corrective actions and accident rate indicators in a consolidated view, without manual export.
- Automatic annual OHS report: summary of accidents, training delivered and compliance indicators in a few clicks, ready for the HSC or a labour inspection.
- Complete OHS documentation traceability: registers, certificates, CNSS forms, prevention plans and investigation reports centralised and versioned in the ERP.
- Facilitated audit readiness: structured, accessible documentation base in the ERP for labour inspection visits and certification audits.
- Connection to HR and payroll modules: AT/MP sick leave automatically feeds absence management and payroll records, with no re-entry or manual synchronisation between modules.
Occupational health and safety management is no longer an isolated regulatory constraint to be handled in paper registers or Excel spreadsheets: it is a cross-functional process that touches HR, payroll, training, accounting and the strategic management of the business. Managed in an integrated way within an ERP, it becomes a real operational advantage — fewer accidents, less sick leave, reduced legal risks and a better image with customers and partners. Crystal ERP (erp.crystalit.ma), developed by CRYSTAL IT in Rabat with over 20 years of experience serving Moroccan businesses, includes a comprehensive OHS/QHSE module covering risk assessment, accident management, training tracking and indicator monitoring, in the same environment as HR, payroll, accounting and commercial management. Contact the CRYSTAL IT team for a Crystal ERP demonstration tailored to your OHS obligations and the size of your business.
Have a project or a question? Let's talk with a CRYSTAL IT expert.
Request a demo