Online interactive Risk Assessment - more safety, less paper
Pilz, Alexander
This is a case study of a large scale software that has been in operation for over 10 years and is still expanding. The latest addition is coming from a big automotive OEM and completes the chain from risk identification to staff training. This project demonstrates that Plone projects are very well maintainable over time and can adapt to new challenges. As a result there is now a framework to assess thinks - not necessarily risks - and act upon them. Maintainability, flexibility and modern technology don't necessarily exclude each other.
 you you you you so it's an extremely important need and if we look at how much time we spend working, like a third of our day usually, if you leave sleeping out as a pretty safe spot, hopefully, then it's half of our time that we spend at work and then the question is how safe are we at work actually. I have spent the past ten years working on safety solutions or software to support safety at work and I will use this today to make a case why Plone is an excellent solution for large and long running products, projects. First some facts. We have lost in 2008 43 billion euros in productivity by work incapacitation. That means people could not work because something happened at work. They were injured. They were in recovery. In relation that is 49 billion dollars or 5.5 trillion yen. Another statistic is that every 15 seconds some employee worldwide dies due to work related accidents. Still this is a number from last year. In Germany we only have 638 deaths per year. If you compare that with traffic accidents statistics traffic accidents don't really matter. And we only I say only 638 because we have already 200 years of work in the traditional workplace safety which is not a common thing. So the core message is safety at work matters. It's a big thing and if you can optimize something here you are actually saving lives you are saving health. You can do a lot. So the question is where does it come from? Already in 1839 a guy called Friedrich Wilhelm III von Preusen visited it. And he is really the pictures in his uniform are being a soldier actually. So why should a soldier be interested in workplace health? Any ideas? Because where do you get your soldiers from? That's the young people right? And if you have child labor there are no good soldiers anymore because they are already used up. So that was a very selfish thing he wanted an army so he needed to make sure that the kids that will make his recruits are properly functioning. So he makes the first law against child labor. In 1884 another nice soldier guy we have in Germany Bismarck whom you also would not associate it with workers concerns does a similar thing out of the similar reasons and he found these workers compensation boards which are very strong in Germany at least. And in 1974 Germany gets the law that we currently have on workplace safety which is quite strict and also in great ways has inspired the European workspace safety rules. Why is that a thing? Why are doing people stuff like that? Actually it's cheaper for the employer because the cost that you suffer from when your people are not working is much higher than the money you actually have to invest in creating workplace safety. Then of course the reason is we have to. Most of the companies do it because it's legislation but studies have shown also that the whole company benefits because people participate and think about their workplace and they are not only creating better workplaces but also more efficient workplaces in the same and same approach. And then of course contracts may depend on it because your customers might require you to have workplace safety rules in place. So who has to comply? In Europe at least it's European law which applies to everybody there but there are similar legislation in Japan and the US. Every company that produces something that potentially has machinery running with more than 10 people. Service providers who mainly have workplaces from 30 people and all the big companies do it. Not even close to all medium companies do it and nearly no SMEs do it. This is actually punishable if you have several times not adhered to the resolution resolutions and people get injured or even die. This is not just punishable by money but you can actually go to jail for that. Interesting here is that this is not just a regulation that Europe has imposed on the companies but they found also that they cannot really require small companies to do risk assessments all the time because it's really, it can be really expensive especially for the small ones. So they started supporting them. So how do you create safety at work? Basically by identifying whether you have a problem, evaluating it and handling it. It's a very simple approach. For example here you could identify that it can happen that you have water on the floor and if you have water on the floor people can slip. And then you plan an action. For example if somebody is cleaning the floor then you have to put up some protection fences or these nice yellow stands that you often see. A bit more extreme example is here we have a problem that is secured robot production plant and somebody is doing maintenance and somebody else outside does know that there is somebody doing maintenance and he just turns it on. Why is it off? I turn it on and boom you have a dead. If you're really into this you can Google for workplace accidents in YouTube and you see movies that keep you from sleeping. Machines that just suck in people and they have filmed that. It's really not a nice thing to say. But you can quite easily do something. You can just put a lock on that. If you do maintenance first thing lock on the toggle and then you can do your maintenance and people are informed that something is going on. So doing a risk assessment means you identify, you solve the problem, you train your people, you repeat an update. The problem here is that it creates a lot of paper. Massive amounts of paper. You record problems, you write it down. You document that you did it. You write it down. You plan measures. You write that down. You plan remedies. And of course because it's a legal requirement you have to document that you have done it. So if the authorities come and want to see whether you did your risk assessment they expect such a piece of paper. And of course nobody is reading that but they are putting it because you have done it. So it's archived file for the case that something is happening. And if something happened they will pull that out and will see whether you have taken measures or not. The first argument that companies come with is, oh, that will cost me even more time. That will keep me from my actual work. It's not up to date anyway. I do it once and then I have to renew it in two years. So from next month it's not up to date anymore. And I can't read all of this anyway. And it's just more bureaucracy. But then it's so simple. You could identify the whole thing mobile, elaborate at your desktop, do an online planning of actions. Then immediately you have a digitally so you could also make your training out of that. You can generate your reports if somebody still wants that paper. And export your training material if you have to do some training of sight. Another thing, another good thing for keeping it online is transparency. If you have that stack of paper that is placed in one place in the company, probably locked away in an archive. If you have it online everybody can have access to that. Even the work council or the company physician, the doctor could check if he gets a lot of back injuries in where are you working and what is in the risk assessment. Is there something we can improve? So you are helping people to self-organize even. Heads of divisions release assessments when they have found it to be okay and you can do your online trainings. And even updating is much easier because system could send out just simple notifications to the heads and say your risk assessment needs updating, take a look. And you're of course update based on the former version. You're not writing the whole thing again but you are taking your old version and checking whether it's still valid. Much less work, much less bureaucracy, much easier. And that's what that actually looks like. That's the welcome page that does some explanation. You have, you can log in. In the EU version you can register with any account. There is no validation. It's not even checking whether the email is true because nobody wants to audit you. It's a tool for the companies to help themselves. Nobody is really checking whether a company is doing it properly. They can get some checks if they want to but it's not done by the EU. So then you get a listing of your assessments that you have performed and there are templates. So the sectoral organizations of the different countries can provide the checklists and then the companies of these sectors can just take the checklists and fill them out. And of course the sectoral organizations know quite good what are the risks in my sector. In my development company I don't have machines. I don't need checklists that ask for machines. But if I have a cleaning agency I have water on the floor all the time. And then you have questions like this. And it's quite easy. You get some, you have a problem up here and you can say yes I have a problem or I don't have it. Or in this case I have it under control. Yes I will. Or it's not applicable. And I can read more information below if I don't understand the problem immediately. And there is even space for legal paragraphs where you can explain why you need to check for that. If you have a problem and problem is always no, no is the negative thing then you can say what is the priority of the risk. Or there are different evaluation mechanism where you can say how probable is it that this problem occurs and how lethal is it. Like if something is highly probable that it occurs but the only thing that you get is a blue mark, yeah, you can re-prioritize it down. But if it happens seldomly but you can die from it then it's kind of automatically high priority. So there's a calculation mechanism in it that helps you to prioritize. Here's the example what is a chance of the risk occurring, small, medium, large and how often are people exposed to that risk. Here is an example for legal and policy references. Why do you have to do this or why do you have to check for that? You can even write your own comments in. And that's identification phase, identification and evaluation. So you go through your checklist and after that you know all the problems that you're having. Once you have all your problems and so if I identify them you can do your action plan. So you can write down what you're going to do about it. And that mainly means you describe the measures that you're going to take. If there's water on the floor I'm going to buy these little yellow stamps and I'm going to train my staff to set it up when they start to clean and to remove it when it's drying. So simple thing, description, specify actions, level of expertise needed and who is responsible. And then you have actually fulfilled the legal requirements. It's about awareness raising. You have checked it and you have decided what to do about it. And then you have an action plan and of course you can print the action plan. And you can export report. And that is the paper that you need that is actually enough to be secure against prosecution. You have done your risk assessment. Of course nobody can sue you for making a mistake in there. You cannot really prevent that. But at least you have taken the step to analyze your situation. And by now 15 countries in the EU are accepting such an online assessment as a valid replacement for the classical auditor that comes to your company. It makes the assessment for you which would cost you 20,000 euros at least. Here's an example for training material. When you have identified your risks you actually have already all the information to make a training. Because you have a description of your risk, of your problem. You know you have it. You have some good practice information added. What can I do to resolve the problem? You have put in your own measures. So you can also export slides, PowerPoint slides from that. Or make an online presentation. And there is a little space where you can actually put a little bit of text on your own if you want to personalize your slide. And the risks have also good imagery usually attached. And none of that you have to do yourself because it comes from a sectorial organization. So here you can see the slides and there is a button somewhere. You can press a button and then it will do an online presentation right away. Or you export it of course. The whole thing works mobile. It's responsive. It has been designed mobile first. And the idea is that you are actually going to your plant, to your factory. And you're going through and do I have that problem? Yes, no. Do I see it somewhere? So you can make the assessment in situ, in place. So, and the whole thing is called Euronline Interactive Risk Assessment. And now I come that there was a long introduction. Now I come to the point what has that to do with Plone. What is my point with that talk? Euron runs on Plone 5.1. It has not always done that. It started with Plone 2. It uses dexterity. It was one of the first projects adopting dexterity and tiles back then. Seco Alchemy on Postgres. It has a Plone CMS to create these templates. They're questionnaires basically. And perhaps somebody still remembers Nuplone. That was a Plone 2 skin back then. That's what we still use for the editor interface. And it uses Plone and Seco Alchemy for the front end to provide high performance for many users in parallel. So filling out the form is done in an optimized way. More or less we have skins that write and directly into the relational database. That's the Nuplone interface. That old is it. But it works fine. So that's where you basically create your tree of modules and questions. It's a questionnaire designer if you want. It supports versions and you can work on your questionnaires and then publish them once done. And what's so special about this? I want to make a point against the people who say Plone is dead and doesn't evolve so much because I like it as a very stable platform. That has actually 11-year anniversary now. I made that presentation last year when we celebrated 10 years. It was started in the Netherlands as a tool for exactly that purpose but very quickly was adopted by the European Union, by the EU, the occupation of safety and health agency who said this is something we have to provide to our SMEs because we cannot just put legislation there and expect them to fulfill it. We also have to support them doing this. It was rewarded in the Steuwer Report to reduce bureaucracy. And since then got an upgrade to Plone 4 and the new UI in 2015 finally. In 2018 we have extended that for Daimler also to be used in the enterprise market because they also noticed that it's not that different to our custom solution that we're using internally. Big corporations have to do it also all the time. They have all the same problems and it's insanely expensive for them to do. And if we just can attach that to their Active Directory, user management, single sign-on, whatever they have and represent department hero keys to assign tools, then they can use it right away. So it was really only enterprise functionality and now they are launching it in a few weeks. And they are now going to present it to the workers' compensation boards that I mentioned in the beginning and which were very opposed to the EU approach many years ago because the EU is only giving us new bureaucracy. The setup survived in a highly political environment. Workplace safety is usually negotiated between tripartite structure. There are governments making rules. There are these trade unions protecting the workers and there are employer organizations protecting companies. And they are all fighting on this topic. The governments are making rules that they think everybody has just to apply to, to comply to. The trade unions want to protect workers' rights. They don't want to be surveyed. They don't want to be controlled too much. And their employers always have a cost in mind. Like, what will that cost me? And just more bureaucracy will just mean more money expenses. Then, of course, these conflicts between national and Europe. If Europe introduced rules then many countries say, oh, more rules from Europe. We don't want that. And different member states, of course, don't do it in the same way. So there are subtle differences between the needs. One wants a more complex evaluation. The other one, a less complex evaluation. One wants to put legal references more before that. And that has been very, very easy with blown by having a core system and then just adaption policy acts. We have a pluggable integration of different evaluation algorithms, for example, per country or even per sector. And it's very easy to report on the detailed usage thanks to the relational database where we are storing what people are actually doing. Because in the end, in that environment, it's always what you report that gives you the money to evolve. Then, of course, multilingual. Big, big issue. Yes, we can do all the languages. It's not a problem. What it's not a problem. What will it cost you? You have to translate a PO file text a day. It is running in 15 languages at the moment. And there are rudimentary translations for the other nine of the EU, which are gradually being adapted to Germany currently. So we soon have 60. And it has survived probably because it's not cutting edge software. But we have concentrated on a sensible set of functionality that does the job. And we have continually put focus on keeping it very easy and simple to use. So the front end is very quick. And easy. There's not a lot of stuff to configure. It is very easy to reuse existing surveys that you have filled in. We could always upgrade security was an important issue. The established upgrade, parts of blown were fantastic, where other companies just have to redo their PHP systems again and again because the adoptions didn't work. We did not have any problems. The robust hotfix and versioning policy make it very planable because on an EU context, I cannot go and say, there's a hotfix. I need a new contract. We need to plan for the six months ahead. That was powerful. And that shapes a lot of trust in the software. And we did not have any stability issues in 11 years. No memory leaks, no crashes, no unmotivated restarts. A few of the really big institutes are using that. TNO is the biggest research institute in Europe, actually. And I think there's even a ministerial del volto. So the Italians are doing a big deal and they are adding more features even this year. I think Italy is planning to roll it out for all sectors and all of Italy next year. Yes, no, there's a lot of interest at the moment. And of course it's free. It's called euphory. The original tool in the Netherlands was called Rie. And it's, when we did it for the EU, it was the EU4Rie system. So euphory is the core system. There are adoption, eggs, osha.eure. That's the EU edition, if you want. TNO.euphory is the Dutch edition with subtle changes. And there is a documentation package for that in English. And you can get it. And the interesting thing is it is actually agnostic to the content. So we have another private company who is using it to go to kindergarten. And they have to audit kindergartens. So they make their dedicated checklists. Different kindergarten types have different requirements. So they go there with a mobile phone and check whether there are these protection thingies in the doors so that you cannot put your fingers in, stuff like that. And then they come back and produce a report. It's no need to make. Yes, this also kind of workplace safety. But you could also do that to check whatever you want. Safety is a very general thing. And that's EURON, online interactive risk assessment. 11 years. And there is no end to see. I guess we are operating that for another 10 years at least. We just want another contract for 5 years to support it. I don't think that the EU is stopping that project. Any questions? Yes, on OERAProject.eu. That is the official site of the project. The agency for safety and health at work. And where they give you all the surrounding information on that project. And that is the presentation for the EU edition. And the EU edition is hosted by the EU. And any member country can use it if they want. They get an account. They can account for the country. The country can then create accounts for the sectors that are interested. Which then get an account. And then they can go there and create their surveys. Yes? Is it running on one service or does every country has it on instance? We are actually serving it on one instance for the whole of Europe. With a shitload of amount of surveys. I think we have 67,000 surveys on there. And it's one virtual machine. Good question. I don't have direct access to the statistics. But we have, I think, a few hundred active editors who are editing once in a while. But as a classic installation that is not the main traffic. And we have at times thousands of users filling in these checklists. But the overhead is minimal because more or less they click next. And a few bytes are saved directly to the relational database. So we can do a lot of concurrency. And it's all technology. And it is, by the way, now on clone 5.1. So upgrades. Whenever a problem. Thank you. So now we go to the end.
 you  you  you  you  so it's an extremely important need and if we look at how much time we spend  working, like a third of our day usually, if you leave sleeping out as a pretty safe  spot, hopefully, then it's half of our time that we spend at work and then the  question is how safe are we at work actually. I have spent the past ten  years working on safety solutions or software to support safety at work and I will use this  today to make a case why Plone is an excellent solution for large and long running products,  projects. First some facts. We have lost in 2008 43 billion euros in productivity by  work incapacitation. That means people could not work because something happened at work.  They were injured. They were in recovery. In relation that is 49 billion dollars or 5.5  trillion yen. Another statistic is that every 15 seconds some employee worldwide dies due  to work related accidents. Still this is a number from last year. In Germany we only  have 638 deaths per year. If you compare that with traffic accidents statistics traffic  accidents don't really matter. And we only I say only 638 because we have already 200  years of work in the traditional workplace safety which is not a common thing. So the  core message is safety at work matters. It's a big thing and if you can optimize something  here you are actually saving lives you are saving health. You can do a lot. So the question  is where does it come from? Already in 1839 a guy called Friedrich Wilhelm III von Preusen  visited it. And he is really the pictures in his uniform are being a soldier actually.  So why should a soldier be interested in workplace health? Any ideas? Because where do you get  your soldiers from? That's the young people right? And if you have child labor there are  no good soldiers anymore because they are already used up. So that was a very selfish  thing he wanted an army so he needed to make sure that the kids that will make his recruits  are properly functioning. So he makes the first law against child labor. In 1884 another  nice soldier guy we have in Germany Bismarck whom you also would not associate it with  workers concerns does a similar thing out of the similar reasons and he found these  workers compensation boards which are very strong in Germany at least. And in 1974 Germany  gets the law that we currently have on workplace safety which is quite strict and also in great  ways has inspired the European workspace safety rules. Why is that a thing? Why are doing  people stuff like that? Actually it's cheaper for the employer because the cost that you  suffer from when your people are not working is much higher than the money you actually  have to invest in creating workplace safety. Then of course the reason is we have to. Most  of the companies do it because it's legislation but studies have shown also that the whole  company benefits because people participate and think about their workplace and they are  not only creating better workplaces but also more efficient workplaces in the same and  same approach. And then of course contracts may depend on it because your customers might  require you to have workplace safety rules in place. So who has to comply? In Europe  at least it's European law which applies to everybody there but there are similar legislation  in Japan and the US. Every company that produces something that potentially has machinery running  with more than 10 people. Service providers who mainly have workplaces from 30 people  and all the big companies do it. Not even close to all medium companies do it and nearly  no SMEs do it. This is actually punishable if you have several times not adhered to the  resolution resolutions and people get injured or even die. This is not just punishable by  money but you can actually go to jail for that. Interesting here is that this is not  just a regulation that Europe has imposed on the companies but they found also that they  cannot really require small companies to do risk assessments all the time because it's  really, it can be really expensive especially for the small ones. So they started supporting  them. So how do you create safety at work? Basically by identifying whether you have  a problem, evaluating it and handling it. It's a very simple approach. For example here  you could identify that it can happen that you have water on the floor and if you have  water on the floor people can slip. And then you plan an action. For example if somebody  is cleaning the floor then you have to put up some protection fences or these nice yellow  stands that you often see. A bit more extreme example is here we have a problem that is  secured robot production plant and somebody is doing maintenance and somebody else outside  does know that there is somebody doing maintenance and he just turns it on. Why is it off? I  turn it on and boom you have a dead. If you're really into this you can Google for workplace  accidents in YouTube and you see movies that keep you from sleeping. Machines that just  suck in people and they have filmed that. It's really not a nice thing to say. But you  can quite easily do something. You can just put a lock on that. If you do maintenance  first thing lock on the toggle and then you can do your maintenance and people are informed  that something is going on. So doing a risk assessment means you identify, you solve the  problem, you train your people, you repeat an update. The problem here is that it creates  a lot of paper. Massive amounts of paper. You record problems, you write it down. You document  that you did it. You write it down. You plan measures. You write that down. You plan remedies.  And of course because it's a legal requirement you have to document that you have done it.  So if the authorities come and want to see whether you did your risk assessment they  expect such a piece of paper. And of course nobody is reading that but they are putting  it because you have done it. So it's archived file for the case that something is happening.  And if something happened they will pull that out and will see whether you have taken measures  or not. The first argument that companies come with  is, oh, that will cost me even more time. That will keep me from my actual work. It's  not up to date anyway. I do it once and then I have to renew it in two years. So from next  month it's not up to date anymore. And I can't read all of this anyway. And it's just more  bureaucracy. But then it's so simple. You could identify the whole thing mobile, elaborate  at your desktop, do an online planning of actions. Then immediately you have a digitally  so you could also make your training out of that. You can generate your reports if somebody  still wants that paper. And export your training material if you have to do some training of  sight. Another thing, another good thing for keeping  it online is transparency. If you have that stack of paper that is placed in one place  in the company, probably locked away in an archive. If you have it online everybody can  have access to that. Even the work council or the company physician,  the doctor could check if he gets a lot of back injuries in where are you working and  what is in the risk assessment. Is there something we can improve? So you are helping people  to self-organize even. Heads of divisions release assessments when they have found it  to be okay and you can do your online trainings. And even updating is much easier because system  could send out just simple notifications to the heads and say your risk assessment needs  updating, take a look. And you're of course update based on the former version. You're  not writing the whole thing again but you are taking your old version and checking whether  it's still valid. Much less work, much less bureaucracy, much easier. And that's what  that actually looks like. That's the welcome page that does some explanation. You have,  you can log in. In the EU version you can register with any account. There is no validation.  It's not even checking whether the email is true because nobody wants to audit you. It's  a tool for the companies to help themselves. Nobody is really checking whether a company  is doing it properly. They can get some checks if they want to but it's not done by the EU.  So then you get a listing of your assessments that you have performed and there are templates.  So the sectoral organizations of the different countries can provide the checklists and then  the companies of these sectors can just take the checklists and fill them out. And of course  the sectoral organizations know quite good what are the risks in my sector. In my development  company I don't have machines. I don't need checklists that ask for machines. But if I  have a cleaning agency I have water on the floor all the time. And then you have questions  like this. And it's quite easy. You get some, you have a problem up here and you can say  yes I have a problem or I don't have it. Or in this case I have it under control. Yes  I will. Or it's not applicable. And I can read more information below if I don't understand  the problem immediately. And there is even space for legal paragraphs where you can explain  why you need to check for that. If you have a problem and problem is always no, no is  the negative thing then you can say what is the priority of the risk. Or there are different  evaluation mechanism where you can say how probable is it that this problem occurs and  how lethal is it. Like if something is highly probable that it occurs but the only thing  that you get is a blue mark, yeah, you can re-prioritize it down. But if it happens seldomly  but you can die from it then it's kind of automatically high priority. So there's a  calculation mechanism in it that helps you to prioritize. Here's the example what is  a chance of the risk occurring, small, medium, large and how often are people exposed to  that risk. Here is an example for legal and policy references. Why do you have to do this  or why do you have to check for that? You can even write your own comments in. And that's  identification phase, identification and evaluation. So you go through your checklist and after  that you know all the problems that you're having. Once you have all your problems and  so if I identify them you can do your action plan. So you can write down what you're going  to do about it. And that mainly means you describe the measures that you're going to  take. If there's water on the floor I'm going to buy these little yellow stamps and I'm  going to train my staff to set it up when they start to clean and to remove it when  it's drying. So simple thing, description, specify actions, level of expertise needed  and who is responsible. And then you have actually fulfilled the legal requirements.  It's about awareness raising. You have checked it and you have decided what to do about it.  And then you have an action plan and of course you can print the action plan. And you can  export report. And that is the paper that you need that is actually enough to be secure  against prosecution. You have done your risk assessment. Of course nobody can sue you for  making a mistake in there. You cannot really prevent that. But at least you have taken  the step to analyze your situation. And by now 15 countries in the EU are accepting such  an online assessment as a valid replacement for the classical auditor that comes to your  company. It makes the assessment for you which would cost you 20,000 euros at least. Here's  an example for training material. When you have identified your risks you actually have  already all the information to make a training. Because you have a description of your risk,  of your problem. You know you have it. You have some good practice information added.  What can I do to resolve the problem? You have put in your own measures. So you can also  export slides, PowerPoint slides from that. Or make an online presentation. And there  is a little space where you can actually put a little bit of text on your own if you want  to personalize your slide. And the risks have also good imagery usually attached. And none  of that you have to do yourself because it comes from a sectorial organization. So here  you can see the slides and there is a button somewhere. You can press a button and then  it will do an online presentation right away. Or you export it of course. The whole thing  works mobile. It's responsive. It has been designed mobile first. And the idea is that  you are actually going to your plant, to your factory. And you're going through and do I  have that problem? Yes, no. Do I see it somewhere? So you can make the assessment in situ, in  place. So, and the whole thing is called Euronline Interactive Risk Assessment. And now I come  that there was a long introduction. Now I come to the point what has that to do with  Plone. What is my point with that talk? Euron runs on Plone 5.1. It has not always done that.  It started with Plone 2. It uses dexterity. It was one of the first projects adopting  dexterity and tiles back then. Seco Alchemy on Postgres. It has a Plone CMS to create  these templates. They're questionnaires basically. And perhaps somebody still remembers Nuplone.  That was a Plone 2 skin back then. That's what we still use for the editor interface.  And it uses Plone and Seco Alchemy for the front end to provide high performance for  many users in parallel. So filling out the form is done in an optimized way. More or less  we have skins that write and directly into the relational database. That's the Nuplone  interface. That old is it. But it works fine. So that's where you basically create your  tree of modules and questions. It's a questionnaire designer if you want. It supports versions  and you can work on your questionnaires and then publish them once done. And what's so  special about this? I want to make a point against the people who say Plone is dead and  doesn't evolve so much because I like it as a very stable platform. That has actually  11-year anniversary now. I made that presentation last year when we celebrated 10 years. It  was started in the Netherlands as a tool for exactly that purpose but very quickly was  adopted by the European Union, by the EU, the occupation of safety and health agency  who said this is something we have to provide to our SMEs because we cannot just put legislation  there and expect them to fulfill it. We also have to support them doing this. It was rewarded  in the Steuwer Report to reduce bureaucracy. And since then got an upgrade to Plone 4 and  the new UI in 2015 finally. In 2018 we have extended that for Daimler also to be used  in the enterprise market because they also noticed that it's not that different to our  custom solution that we're using internally. Big corporations have to do it also all the  time. They have all the same problems and it's insanely expensive for them to do. And  if we just can attach that to their Active Directory, user management, single sign-on,  whatever they have and represent department hero keys to assign tools, then they can use  it right away. So it was really only enterprise functionality and now they are launching it  in a few weeks. And they are now going to present it to the workers' compensation boards  that I mentioned in the beginning and which were very opposed to the EU approach many  years ago because the EU is only giving us new bureaucracy. The setup survived in a  highly political environment. Workplace safety is usually negotiated between tripartite structure.  There are governments making rules. There are these trade unions protecting the workers  and there are employer organizations protecting companies. And they are all fighting on this  topic. The governments are making rules that they think everybody has just to apply to,  to comply to. The trade unions want to protect workers' rights. They don't want to be surveyed.  They don't want to be controlled too much. And their employers always have a cost in  mind. Like, what will that cost me? And just more bureaucracy will just mean more money  expenses. Then, of course, these conflicts between national and Europe. If Europe introduced  rules then many countries say, oh, more rules from Europe. We don't want that. And different  member states, of course, don't do it in the same way. So there are subtle differences  between the needs. One wants a more complex evaluation. The other one, a less complex  evaluation. One wants to put legal references more before that. And that has been very,  very easy with blown by having a core system and then just adaption policy acts. We have  a pluggable integration of different evaluation algorithms, for example, per country or even  per sector. And it's very easy to report on the detailed usage thanks to the relational  database where we are storing what people are actually doing. Because in the end, in  that environment, it's always what you report that gives you the money to evolve. Then,  of course, multilingual. Big, big issue. Yes, we can do all the languages. It's not  a problem. What it's not a problem. What will it cost you? You have to translate a PO file  text a day. It is running in 15 languages at the moment. And there are rudimentary translations  for the other nine of the EU, which are gradually being adapted to Germany currently. So we  soon have 60. And it has survived probably because it's not cutting edge software. But  we have concentrated on a sensible set of functionality that does the job. And we have  continually put focus on keeping it very easy and simple to use. So the front end is very  quick. And easy. There's not a lot of stuff to configure. It is very easy to reuse existing  surveys that you have filled in. We could always upgrade security was an important issue.  The established upgrade, parts of blown were fantastic, where other companies just have  to redo their PHP systems again and again because the adoptions didn't work. We did  not have any problems. The robust hotfix and versioning policy make it very planable because  on an EU context, I cannot go and say, there's a hotfix. I need a new contract. We need to  plan for the six months ahead. That was powerful. And that shapes a lot of trust in the software.  And we did not have any stability issues in 11 years. No memory leaks, no crashes, no  unmotivated restarts. A few of the really big institutes are using that. TNO is the  biggest research institute in Europe, actually. And I think there's even a ministerial del  volto. So the Italians are doing a big deal and they are adding more features even this  year. I think Italy is planning to roll it out for all sectors and all of Italy next  year. Yes, no, there's a lot of interest at the moment. And of course it's free. It's  called euphory. The original tool in the Netherlands was called Rie. And it's, when we did it  for the EU, it was the EU4Rie system. So euphory is the core system. There are adoption, eggs,  osha.eure. That's the EU edition, if you want. TNO.euphory is the Dutch edition with subtle  changes. And there is a documentation package for that in English. And you can get it. And  the interesting thing is it is actually agnostic to the content. So we have another private  company who is using it to go to kindergarten. And they have to audit kindergartens. So they  make their dedicated checklists. Different kindergarten types have different requirements.  So they go there with a mobile phone and check whether there are these protection thingies  in the doors so that you cannot put your fingers in, stuff like that. And then they come back  and produce a report. It's no need to make. Yes, this also kind of workplace safety. But  you could also do that to check whatever you want. Safety is a very general thing. And  that's EURON, online interactive risk assessment. 11 years. And there is no end to see. I guess  we are operating that for another 10 years at least. We just want another contract for  5 years to support it. I don't think that the EU is stopping that project. Any questions?  Yes, on OERAProject.eu. That is the official site of the project.  The agency for safety and health at work. And where they give you all the surrounding  information on that project. And that is the presentation for the EU edition. And the EU  edition is hosted by the EU. And any member country can use it if they want. They get  an account. They can account for the country. The country can then create accounts for the  sectors that are interested. Which then get an account. And then they can go there and  create their surveys. Yes?  Is it running on one service or does every country has it on instance?  We are actually serving it on one instance for the whole of Europe. With a shitload of  amount of surveys. I think we have 67,000 surveys on there. And it's one virtual machine.  Good question. I don't have direct access to the statistics. But we have, I think, a  few hundred active editors who are editing once in a while. But as a classic installation  that is not the main traffic. And we have at times thousands of users filling in these  checklists. But the overhead is minimal because more or less they click next. And a few bytes  are saved directly to the relational database. So we can do a lot of concurrency. And it's  all technology. And it is, by the way, now on clone 5.1. So upgrades. Whenever a problem.  Thank you. So now we go to the end.
2018_Day3_Online_interactive_Risk_Assessment_0_107.png 2018_Day3_Online_interactive_Risk_Assessment_108_7475.png 2018_Day3_Online_interactive_Risk_Assessment_7476_14231.png 2018_Day3_Online_interactive_Risk_Assessment_14232_14471.png 2018_Day3_Online_interactive_Risk_Assessment_14472_14891.png 2018_Day3_Online_interactive_Risk_Assessment_14892_14975.png 2018_Day3_Online_interactive_Risk_Assessment_14976_15251.png 2018_Day3_Online_interactive_Risk_Assessment_15252_15299.png 2018_Day3_Online_interactive_Risk_Assessment_15300_16031.png 2018_Day3_Online_interactive_Risk_Assessment_16032_16847.png 2018_Day3_Online_interactive_Risk_Assessment_16848_17627.png 2018_Day3_Online_interactive_Risk_Assessment_17628_18491.png 2018_Day3_Online_interactive_Risk_Assessment_18492_18887.png 2018_Day3_Online_interactive_Risk_Assessment_18888_20171.png 2018_Day3_Online_interactive_Risk_Assessment_20172_20867.png 2018_Day3_Online_interactive_Risk_Assessment_20868_21323.png 2018_Day3_Online_interactive_Risk_Assessment_21324_22595.png 2018_Day3_Online_interactive_Risk_Assessment_22596_24515.png 2018_Day3_Online_interactive_Risk_Assessment_24516_24659.png 2018_Day3_Online_interactive_Risk_Assessment_24660_24743.png 2018_Day3_Online_interactive_Risk_Assessment_24744_26831.png 2018_Day3_Online_interactive_Risk_Assessment_26832_26999.png 2018_Day3_Online_interactive_Risk_Assessment_27000_28559.png 2018_Day3_Online_interactive_Risk_Assessment_28560_29123.png 2018_Day3_Online_interactive_Risk_Assessment_29124_29267.png 2018_Day3_Online_interactive_Risk_Assessment_29268_29807.png 2018_Day3_Online_interactive_Risk_Assessment_29808_30215.png 2018_Day3_Online_interactive_Risk_Assessment_30216_30455.png 2018_Day3_Online_interactive_Risk_Assessment_30456_30707.png 2018_Day3_Online_interactive_Risk_Assessment_30708_31571.png 2018_Day3_Online_interactive_Risk_Assessment_31572_32459.png 2018_Day3_Online_interactive_Risk_Assessment_32460_34667.png 2018_Day3_Online_interactive_Risk_Assessment_34668_38939.png 2018_Day3_Online_interactive_Risk_Assessment_38940_39707.png 2018_Day3_Online_interactive_Risk_Assessment_39708_40151.png 2018_Day3_Online_interactive_Risk_Assessment_40152_41135.png 2018_Day3_Online_interactive_Risk_Assessment_41136_41399.png 2018_Day3_Online_interactive_Risk_Assessment_41400_41663.png 2018_Day3_Online_interactive_Risk_Assessment_41664_41843.png 2018_Day3_Online_interactive_Risk_Assessment_41844_41999.png 2018_Day3_Online_interactive_Risk_Assessment_42000_42143.png 2018_Day3_Online_interactive_Risk_Assessment_42144_50855.png 2018_Day3_Online_interactive_Risk_Assessment_50856_55055.png 2018_Day3_Online_interactive_Risk_Assessment_55056_55103.png 2018_Day3_Online_interactive_Risk_Assessment_55104_55151.png 2018_Day3_Online_interactive_Risk_Assessment_55152_55295.png 2018_Day3_Online_interactive_Risk_Assessment_55296_55631.png 2018_Day3_Online_interactive_Risk_Assessment_55632_55679.png 2018_Day3_Online_interactive_Risk_Assessment_55680_55991.png 2018_Day3_Online_interactive_Risk_Assessment_55992_56039.png 2018_Day3_Online_interactive_Risk_Assessment_56040_56591.png 2018_Day3_Online_interactive_Risk_Assessment_56592_58079.png 2018_Day3_Online_interactive_Risk_Assessment_58080_58151.png 2018_Day3_Online_interactive_Risk_Assessment_58152_58235.png 2018_Day3_Online_interactive_Risk_Assessment_58236_58331.png 2018_Day3_Online_interactive_Risk_Assessment_58332_61332.png
you you you you so it's an extremely important need and if we look at how much time we spend working, like a third of our day usually, if you leave sleeping out as a pretty safe spot, hopefully, then it's half of our time that we spend at work and then the question is how safe are we at work actually. I have spent the past ten years working on safety solutions or software to support safety at work and I will use this today to make a case why Plone is an excellent solution for large and long running products, projects. First some facts. We have lost in 2008 43 billion euros in productivity by work incapacitation. That means people could not work because something happened at work. They were injured. They were in recovery. In relation that is 49 billion dollars or 5.5 trillion yen. Another statistic is that every 15 seconds some employee worldwide dies due to work related accidents. Still this is a number from last year. In Germany we only have 638 deaths per year. If you compare that with traffic accidents statistics traffic accidents don't really matter. And we only I say only 638 because we have already 200 years of work in the traditional workplace safety which is not a common thing. So the core message is safety at work matters. It's a big thing and if you can optimize something here you are actually saving lives you are saving health. You can do a lot. So the question is where does it come from? Already in 1839 a guy called Friedrich Wilhelm III von Preusen visited it. And he is really the pictures in his uniform are being a soldier actually. So why should a soldier be interested in workplace health? Any ideas? Because where do you get your soldiers from? That's the young people right? And if you have child labor there are no good soldiers anymore because they are already used up. So that was a very selfish thing he wanted an army so he needed to make sure that the kids that will make his recruits are properly functioning. So he makes the first law against child labor. In 1884 another nice soldier guy we have in Germany Bismarck whom you also would not associate it with workers concerns does a similar thing out of the similar reasons and he found these workers compensation boards which are very strong in Germany at least. And in 1974 Germany gets the law that we currently have on workplace safety which is quite strict and also in great ways has inspired the European workspace safety rules. Why is that a thing? Why are doing people stuff like that? Actually it's cheaper for the employer because the cost that you suffer from when your people are not working is much higher than the money you actually have to invest in creating workplace safety. Then of course the reason is we have to. Most of the companies do it because it's legislation but studies have shown also that the whole company benefits because people participate and think about their workplace and they are not only creating better workplaces but also more efficient workplaces in the same and same approach. And then of course contracts may depend on it because your customers might require you to have workplace safety rules in place. So who has to comply? In Europe at least it's European law which applies to everybody there but there are similar legislation in Japan and the US. Every company that produces something that potentially has machinery running with more than 10 people. Service providers who mainly have workplaces from 30 people and all the big companies do it. Not even close to all medium companies do it and nearly no SMEs do it. This is actually punishable if you have several times not adhered to the resolution resolutions and people get injured or even die. This is not just punishable by money but you can actually go to jail for that. Interesting here is that this is not just a regulation that Europe has imposed on the companies but they found also that they cannot really require small companies to do risk assessments all the time because it's really, it can be really expensive especially for the small ones. So they started supporting them. So how do you create safety at work? Basically by identifying whether you have a problem, evaluating it and handling it. It's a very simple approach. For example here you could identify that it can happen that you have water on the floor and if you have water on the floor people can slip. And then you plan an action. For example if somebody is cleaning the floor then you have to put up some protection fences or these nice yellow stands that you often see. A bit more extreme example is here we have a problem that is secured robot production plant and somebody is doing maintenance and somebody else outside does know that there is somebody doing maintenance and he just turns it on. Why is it off? I turn it on and boom you have a dead. If you're really into this you can Google for workplace accidents in YouTube and you see movies that keep you from sleeping. Machines that just suck in people and they have filmed that. It's really not a nice thing to say. But you can quite easily do something. You can just put a lock on that. If you do maintenance first thing lock on the toggle and then you can do your maintenance and people are informed that something is going on. So doing a risk assessment means you identify, you solve the problem, you train your people, you repeat an update. The problem here is that it creates a lot of paper. Massive amounts of paper. You record problems, you write it down. You document that you did it. You write it down. You plan measures. You write that down. You plan remedies. And of course because it's a legal requirement you have to document that you have done it. So if the authorities come and want to see whether you did your risk assessment they expect such a piece of paper. And of course nobody is reading that but they are putting it because you have done it. So it's archived file for the case that something is happening. And if something happened they will pull that out and will see whether you have taken measures or not. The first argument that companies come with is, oh, that will cost me even more time. That will keep me from my actual work. It's not up to date anyway. I do it once and then I have to renew it in two years. So from next month it's not up to date anymore. And I can't read all of this anyway. And it's just more bureaucracy. But then it's so simple. You could identify the whole thing mobile, elaborate at your desktop, do an online planning of actions. Then immediately you have a digitally so you could also make your training out of that. You can generate your reports if somebody still wants that paper. And export your training material if you have to do some training of sight. Another thing, another good thing for keeping it online is transparency. If you have that stack of paper that is placed in one place in the company, probably locked away in an archive. If you have it online everybody can have access to that. Even the work council or the company physician, the doctor could check if he gets a lot of back injuries in where are you working and what is in the risk assessment. Is there something we can improve? So you are helping people to self-organize even. Heads of divisions release assessments when they have found it to be okay and you can do your online trainings. And even updating is much easier because system could send out just simple notifications to the heads and say your risk assessment needs updating, take a look. And you're of course update based on the former version. You're not writing the whole thing again but you are taking your old version and checking whether it's still valid. Much less work, much less bureaucracy, much easier. And that's what that actually looks like. That's the welcome page that does some explanation. You have, you can log in. In the EU version you can register with any account. There is no validation. It's not even checking whether the email is true because nobody wants to audit you. It's a tool for the companies to help themselves. Nobody is really checking whether a company is doing it properly. They can get some checks if they want to but it's not done by the EU. So then you get a listing of your assessments that you have performed and there are templates. So the sectoral organizations of the different countries can provide the checklists and then the companies of these sectors can just take the checklists and fill them out. And of course the sectoral organizations know quite good what are the risks in my sector. In my development company I don't have machines. I don't need checklists that ask for machines. But if I have a cleaning agency I have water on the floor all the time. And then you have questions like this. And it's quite easy. You get some, you have a problem up here and you can say yes I have a problem or I don't have it. Or in this case I have it under control. Yes I will. Or it's not applicable. And I can read more information below if I don't understand the problem immediately. And there is even space for legal paragraphs where you can explain why you need to check for that. If you have a problem and problem is always no, no is the negative thing then you can say what is the priority of the risk. Or there are different evaluation mechanism where you can say how probable is it that this problem occurs and how lethal is it. Like if something is highly probable that it occurs but the only thing that you get is a blue mark, yeah, you can re-prioritize it down. But if it happens seldomly but you can die from it then it's kind of automatically high priority. So there's a calculation mechanism in it that helps you to prioritize. Here's the example what is a chance of the risk occurring, small, medium, large and how often are people exposed to that risk. Here is an example for legal and policy references. Why do you have to do this or why do you have to check for that? You can even write your own comments in. And that's identification phase, identification and evaluation. So you go through your checklist and after that you know all the problems that you're having. Once you have all your problems and so if I identify them you can do your action plan. So you can write down what you're going to do about it. And that mainly means you describe the measures that you're going to take. If there's water on the floor I'm going to buy these little yellow stamps and I'm going to train my staff to set it up when they start to clean and to remove it when it's drying. So simple thing, description, specify actions, level of expertise needed and who is responsible. And then you have actually fulfilled the legal requirements. It's about awareness raising. You have checked it and you have decided what to do about it. And then you have an action plan and of course you can print the action plan. And you can export report. And that is the paper that you need that is actually enough to be secure against prosecution. You have done your risk assessment. Of course nobody can sue you for making a mistake in there. You cannot really prevent that. But at least you have taken the step to analyze your situation. And by now 15 countries in the EU are accepting such an online assessment as a valid replacement for the classical auditor that comes to your company. It makes the assessment for you which would cost you 20,000 euros at least. Here's an example for training material. When you have identified your risks you actually have already all the information to make a training. Because you have a description of your risk, of your problem. You know you have it. You have some good practice information added. What can I do to resolve the problem? You have put in your own measures. So you can also export slides, PowerPoint slides from that. Or make an online presentation. And there is a little space where you can actually put a little bit of text on your own if you want to personalize your slide. And the risks have also good imagery usually attached. And none of that you have to do yourself because it comes from a sectorial organization. So here you can see the slides and there is a button somewhere. You can press a button and then it will do an online presentation right away. Or you export it of course. The whole thing works mobile. It's responsive. It has been designed mobile first. And the idea is that you are actually going to your plant, to your factory. And you're going through and do I have that problem? Yes, no. Do I see it somewhere? So you can make the assessment in situ, in place. So, and the whole thing is called Euronline Interactive Risk Assessment. And now I come that there was a long introduction. Now I come to the point what has that to do with Plone. What is my point with that talk? Euron runs on Plone 5.1. It has not always done that. It started with Plone 2. It uses dexterity. It was one of the first projects adopting dexterity and tiles back then. Seco Alchemy on Postgres. It has a Plone CMS to create these templates. They're questionnaires basically. And perhaps somebody still remembers Nuplone. That was a Plone 2 skin back then. That's what we still use for the editor interface. And it uses Plone and Seco Alchemy for the front end to provide high performance for many users in parallel. So filling out the form is done in an optimized way. More or less we have skins that write and directly into the relational database. That's the Nuplone interface. That old is it. But it works fine. So that's where you basically create your tree of modules and questions. It's a questionnaire designer if you want. It supports versions and you can work on your questionnaires and then publish them once done. And what's so special about this? I want to make a point against the people who say Plone is dead and doesn't evolve so much because I like it as a very stable platform. That has actually 11-year anniversary now. I made that presentation last year when we celebrated 10 years. It was started in the Netherlands as a tool for exactly that purpose but very quickly was adopted by the European Union, by the EU, the occupation of safety and health agency who said this is something we have to provide to our SMEs because we cannot just put legislation there and expect them to fulfill it. We also have to support them doing this. It was rewarded in the Steuwer Report to reduce bureaucracy. And since then got an upgrade to Plone 4 and the new UI in 2015 finally. In 2018 we have extended that for Daimler also to be used in the enterprise market because they also noticed that it's not that different to our custom solution that we're using internally. Big corporations have to do it also all the time. They have all the same problems and it's insanely expensive for them to do. And if we just can attach that to their Active Directory, user management, single sign-on, whatever they have and represent department hero keys to assign tools, then they can use it right away. So it was really only enterprise functionality and now they are launching it in a few weeks. And they are now going to present it to the workers' compensation boards that I mentioned in the beginning and which were very opposed to the EU approach many years ago because the EU is only giving us new bureaucracy. The setup survived in a highly political environment. Workplace safety is usually negotiated between tripartite structure. There are governments making rules. There are these trade unions protecting the workers and there are employer organizations protecting companies. And they are all fighting on this topic. The governments are making rules that they think everybody has just to apply to, to comply to. The trade unions want to protect workers' rights. They don't want to be surveyed. They don't want to be controlled too much. And their employers always have a cost in mind. Like, what will that cost me? And just more bureaucracy will just mean more money expenses. Then, of course, these conflicts between national and Europe. If Europe introduced rules then many countries say, oh, more rules from Europe. We don't want that. And different member states, of course, don't do it in the same way. So there are subtle differences between the needs. One wants a more complex evaluation. The other one, a less complex evaluation. One wants to put legal references more before that. And that has been very, very easy with blown by having a core system and then just adaption policy acts. We have a pluggable integration of different evaluation algorithms, for example, per country or even per sector. And it's very easy to report on the detailed usage thanks to the relational database where we are storing what people are actually doing. Because in the end, in that environment, it's always what you report that gives you the money to evolve. Then, of course, multilingual. Big, big issue. Yes, we can do all the languages. It's not a problem. What it's not a problem. What will it cost you? You have to translate a PO file text a day. It is running in 15 languages at the moment. And there are rudimentary translations for the other nine of the EU, which are gradually being adapted to Germany currently. So we soon have 60. And it has survived probably because it's not cutting edge software. But we have concentrated on a sensible set of functionality that does the job. And we have continually put focus on keeping it very easy and simple to use. So the front end is very quick. And easy. There's not a lot of stuff to configure. It is very easy to reuse existing surveys that you have filled in. We could always upgrade security was an important issue. The established upgrade, parts of blown were fantastic, where other companies just have to redo their PHP systems again and again because the adoptions didn't work. We did not have any problems. The robust hotfix and versioning policy make it very planable because on an EU context, I cannot go and say, there's a hotfix. I need a new contract. We need to plan for the six months ahead. That was powerful. And that shapes a lot of trust in the software. And we did not have any stability issues in 11 years. No memory leaks, no crashes, no unmotivated restarts. A few of the really big institutes are using that. TNO is the biggest research institute in Europe, actually. And I think there's even a ministerial del volto. So the Italians are doing a big deal and they are adding more features even this year. I think Italy is planning to roll it out for all sectors and all of Italy next year. Yes, no, there's a lot of interest at the moment. And of course it's free. It's called euphory. The original tool in the Netherlands was called Rie. And it's, when we did it for the EU, it was the EU4Rie system. So euphory is the core system. There are adoption, eggs, osha.eure. That's the EU edition, if you want. TNO.euphory is the Dutch edition with subtle changes. And there is a documentation package for that in English. And you can get it. And the interesting thing is it is actually agnostic to the content. So we have another private company who is using it to go to kindergarten. And they have to audit kindergartens. So they make their dedicated checklists. Different kindergarten types have different requirements. So they go there with a mobile phone and check whether there are these protection thingies in the doors so that you cannot put your fingers in, stuff like that. And then they come back and produce a report. It's no need to make. Yes, this also kind of workplace safety. But you could also do that to check whatever you want. Safety is a very general thing. And that's EURON, online interactive risk assessment. 11 years. And there is no end to see. I guess we are operating that for another 10 years at least. We just want another contract for 5 years to support it. I don't think that the EU is stopping that project. Any questions? Yes, on OERAProject.eu. That is the official site of the project. The agency for safety and health at work. And where they give you all the surrounding information on that project. And that is the presentation for the EU edition. And the EU edition is hosted by the EU. And any member country can use it if they want. They get an account. They can account for the country. The country can then create accounts for the sectors that are interested. Which then get an account. And then they can go there and create their surveys. Yes? Is it running on one service or does every country has it on instance? We are actually serving it on one instance for the whole of Europe. With a shitload of amount of surveys. I think we have 67,000 surveys on there. And it's one virtual machine. Good question. I don't have direct access to the statistics. But we have, I think, a few hundred active editors who are editing once in a while. But as a classic installation that is not the main traffic. And we have at times thousands of users filling in these checklists. But the overhead is minimal because more or less they click next. And a few bytes are saved directly to the relational database. So we can do a lot of concurrency. And it's all technology. And it is, by the way, now on clone 5.1. So upgrades. Whenever a problem. Thank you. So now we go to the end.
today to make a case why Plone is an excellent a big thing and if you can optimize something compensation boards which are very strong in even die. This is not just punishable by money of the risk occurring, small, medium, large and yourself because it comes from a sectorial there is a button somewhere. You can press a last year when we celebrated 10 years. It was more before that. And that has been very, very project. The agency for safety and health at technology. And it is, by the way, now on clone