Guide · Occupational health and safety · Mexico

NOM-030-STPS-2009: diagnosis, risk matrix and program

Every workplace in Mexico needs a health and safety officer, a diagnosis of its risks and a program that comes out of that diagnosis. Here is what each section of the standard requires, how to prioritize with a matrix and what it looks like solved in a plant.

Informational guide, not legal advice. Check the current text in Mexico's Official Gazette (DOF) and consult your occupational health and safety officer.

Headcount

What applies to you changes at one hundred workers

How many people work at the workplace?

Officer
The employer appoints an internal or external officer (4.1).
Diagnosis
Whole-site or by area, covering all four items of 6.1.
Document
An occupational health and safety program, updated at least once a year (4.4).
Content
All five items of 7.1, including the owner of each action.

The standard applies nationwide and to every workplace. Headcount decides who does the work, how complete the diagnosis must be and whether the document is a program or a list of actions. It is in force according to the Ministry of Economy standards catalog.

Employer obligations

The nine sections of chapter 4 and how they are checked

The right-hand column comes from the conformity assessment procedure (chapter 9): it is what a verification unit or the labor authority asks to see.

4.1

What it requires

Appoint an internal or external occupational health and safety officer.

Evidence

Appointment letter or contract.

4.2

What it requires

Give that person access to the areas, information on processes and jobs, and the means to set up the measures.

Evidence

Stated in the appointment document.

4.3

What it requires

Have a whole-site or by-area diagnosis.

Evidence

The diagnosis covering the four items of 6.1.

4.4

What it requires

Have a program based on the diagnosis, updated at least once a year.

Evidence

The program or the list of actions.

4.5

What it requires

Share the diagnosis and the program with the safety and health commission and the workers.

Evidence

Leaflets, posters or videos; or interviews: 90% of the staff interviewed know them.

4.6

What it requires

Keep the follow-up reports on the program's progress.

Evidence

The follow-up records.

4.7

What it requires

Train the staff who are part of the preventive services.

Evidence

Diplomas, certificates or training programs.

4.8

What it requires

Keep the documentation for at least two years.

Evidence

On paper or electronic media (9.4).

4.9

What it requires

Show the documents and records when the labor authority asks for them.

Evidence

—

The diagnosis

The four items of the diagnosis, in a jam plant

Tap a point on the layout. Each letter is an item of section 6.1; the diagnosis can cover the whole workplace or go area by area (4.3).

streamReceivingCookingLine 2WashingMaintenanceWarehouseaabbbcd

Item a) · Dangerous or unsafe physical conditions

Line 2 · motor M-204

Unguarded belt drive: hand entrapment. NOM-004-STPS-1999.

In facilities, processes, machinery, equipment, tools, transport, materials and energy.

The risk matrix

Risk = hazard times exposure

That is how the standard defines risk (3.12), and it asks for actions to be prioritized by that risk (5.2). It does not set a scale: this is a four-level proposal, using the outcomes of article 477 of the Federal Labor Law.

E1E2E3E4P4P3P2P1

P = hazard severity · E = exposure. Tap a cell.

Risk = 4 × 3

12 · Critical

Priority 1

Deal with it first. If it is also serious and imminent, immediate response (5.3).

Hazard severity 4
Permanent total disability or death
Exposure 3
Frequent

Unguarded motor M-204

What can happen

Entrapment

P

4

E

3

Risk

12 · Critical

Steam kettles

What can happen

Burn

P

3

E

4

Risk

12 · Critical

Filler noise

What can happen

Hearing loss

P

3

E

4

Risk

12 · Critical

Forklift and pedestrians

What can happen

Struck-by

P

4

E

3

Risk

12 · Critical

Caustic soda

What can happen

Chemical burn

P

3

E

3

Risk

9 · High

Panel without lockout

What can happen

Electrical contact

P

4

E

2

Risk

8 · High

25 kg sacks by hand

What can happen

Back injury

P

2

E

3

Risk

6 · Medium

Adjacent stream

What can happen

Flooding

P

3

E

1

Risk

3 · Low

For noise, heat, lighting or chemical substances, each agent's own standard (NOM-011, NOM-015, NOM-025, NOM-010) has its own recognition and assessment method. The matrix sets the priority; it does not replace that measurement.

The program

Program or list of actions: what each one includes

Item

a)

The preventive or corrective action for each finding

Program (7.1)

Yes

List (7.2)

Yes

Item

b)

Health promotion and comprehensive addiction prevention

Program (7.1)

Yes

List (7.2)

Yes

Item

c)

Emergency and health-contingency response

Program (7.1)

Yes

List (7.2)

Yes

Item

d)

Planned start and end dates

Program (7.1)

Yes

List (7.2)

Yes

Item

e)

The person responsible for each action

Program (7.1)

Yes

List (7.2)

Not required
  • One action for each finding in the diagnosis: a finding with no action is the first thing that stands out.
  • Health, addiction and emergency actions are included even if they do not come from a finding.
  • The officer sets up immediate-response mechanisms for serious and imminent risk (5.3).
  • If follow-up shows something is not working, the diagnosis, the program or both are adjusted (5.9).

Through the year

Follow-up, report to the employer and update

At leastonce a yearDiagnosis6.1Program7.1Share4.5Follow-up5.7–5.8Report to employeryearlyUpdateyearly

The officer tracks the program's progress, records the results (5.8) and reports them to the employer in writing at least once a year (5.7). The program is updated with the same minimum frequency, and everything is kept at least two years to show it if the labor authority asks.

The diagnosis also serves the safety and health commission: the employer hands it over and the commission uses it in its inspections (NOM-019-STPS-2011).

Free template

NOM-030 template: diagnosis, risk matrix and program

In Mexico you must have an occupational health and safety diagnosis and the program that comes out of it, and today they live in loose documents nobody updates.

  • · A diagnosis in the four parts of section 6.1, with the NOM that applies to each finding
  • · A hazard-by-exposure matrix with level and priority calculated for you
  • · A program or list of actions depending on headcount, with dates, owner and progress
  • · A check of the minimum content of section 7.1 and of the yearly update and report-to-employer deadlines

Spanish-language file: these records are shown to the Mexican labor authority. The risk scale is a proposal; NOM-030 does not set one.

In the app

The program in the app

Findings and program actions live in iGromi's free app: they are logged during the walkthrough, tracked until closed and the period exports to PDF with its signatures.

Get early accessFree app, in early access.

Frequently asked questions

NOM-030 FAQ

What is NOM-030-STPS-2009?
The Mexican Official Standard of the Ministry of Labor and Social Welfare (STPS) that sets the duties and activities of occupational health and safety preventive services. It was published in the Official Gazette (DOF) on December 22, 2009 and applies to every workplace in the country.
What must the occupational health and safety diagnosis include?
Under section 6.1, at least the identification of dangerous or unsafe physical conditions; the physical, chemical and biological agents that can harm health and their sources; the hazards surrounding the workplace, where possible; and the regulatory requirements that apply. With fewer than one hundred workers it may cover the whole site and include at least the latter (6.2).
What must the occupational health and safety program contain?
Section 7.1 requires the preventive or corrective action for each finding, health promotion and comprehensive addiction prevention actions, emergency and health-contingency response actions, start and end dates, and the owner of each action. With fewer than one hundred workers a list of actions is used instead, and it does not require the owner (7.2).
How often is the program updated?
At least once a year, as is the list of actions (4.4 and 4.4.1). The health and safety officer also reports the program's progress to the employer in writing at least once a year (5.7).
Who can be the occupational health and safety officer?
The employer or the person it appoints, through internal, external or mixed services (3.11 and 3.15). At workplaces with fewer than one hundred workers the employer may take on those duties itself (4.1.1). The appointment letter or contract serves as evidence.
Does NOM-030 require a risk matrix?
It does not set a method. It asks for actions to be prioritized based on the risk involved (5.2) and defines risk as the hazard times the worker's exposure (3.12). A hazard-by-exposure matrix is one way to do it; each workplace decides the scale.
How long are the documents kept?
At least two years (4.8 and 9.3). They can be shown on paper or electronic media (9.4) when the labor authority asks.
How do you show the diagnosis and program were shared?
With documents such as leaflets, videos or posters, or through interviews: the chapter 9 assessment procedure accepts it when 90% of the staff interviewed know the diagnosis and the program.

Sources: NOM-030-STPS-2009 in the DOF · Ministry of Economy, standards catalog · Federal Labor Law, art. 477. Reviewed on November 5, 2026.

Every shift without a record is data you lose. Start free.

  1. 1Request early access, free
  2. 2Pick your trade: maintenance, production or safety
  3. 3Your team starts with the chat and its trade helper

No credit card. Your data stays yours.

PLANT · SHIFT A
Tasks
Luis · maintenance
OVERDUE
Sugar silo 1
No signal since 05:40
Sensor · supply
TODAY
M-204 vibration
4.1 mm/s, above normal
Detected by the sensor
PROPOSED
Check the capper
14 badly seated lids since 08:30
AcceptDismiss
HomeTasksChatMore