C11-1 CASE STUDY 11 CLOUD COMPUTING (IN)SECURITY Cloud computing is reshaping enterprise network architectures and infrastructures. It refers to applications delivered as services over the Internet as well as the hardware and systems software in data centers that provide those services. The services themselves have long been referred to as Software as a Service (SaaS) which had its roots in Software-Oriented Architecture (SOA) concepts that began shaping enterprise network roadmaps in the early 2000s. IaaS (Infrastructure as a Service) and PaaS (Platform as a Service) are other types of cloud computing services that are available to business customers. Cloud computing fosters the notion of computing as a utility that can be consumed by businesses on demand in a manner that is similar to other services (e.g. electricity, municipal water) from traditional utilities. It has the potential to reshape much of the IT industry by giving businesses the option of running business software applications fully on-premises, fully in “the cloud” or some combination of these two extremes. These are choices that businesses have not had until recently and many companies are still coming to grips with this new computing landscape. Security is important to any computing infrastructure. Companies go to great lengths to secure on-premises computing systems, so it is not surprising that security looms as a major consideration when augmenting or replacing on-premises systems with cloud services. Allaying security C11-2 concerns is frequently a prerequisite for further discussions about migrating part or all of an organization’s computing architecture to the cloud. Availability is another major concern: “How will we operate if we can’t access the Internet? What if our customers can’t access the cloud to place orders?” are common questions [AMBR10]. Generally speaking, such questions only arise when businesses contemplating moving core transaction processing, such as ERP systems, and other mission critical applications to the cloud. Companies have traditionally demonstrated less concern about migrating high maintenance applications such as e-mail and payroll to cloud service providers even though such applications hold sensitive information. Security Issues and Concerns Auditability is a concern for many organizations, especially those who must comply with Sarbanes-Oxley and/or Health and Human Services Health Insurance Portability and Accountability Act (HIPAA) regulations [IBM11]. The auditability of their data must be ensured whether it is stored on- premises or moved to the cloud. Before moving critical infrastructure to the cloud, businesses should do diligence on security threats both from outside and inside the cloud [BADG11]. Many of the security issues associated with protecting clouds from outside threats are similar to those that have traditionally faced ...

1. C11-1
CASE STUDY 11
CLOUD COMPUTING (IN)SECURITY
Cloud computing is reshaping enterprise network architectures
and
infrastructures. It refers to applications delivered as services
over the
Internet as well as the hardware and systems software in data
centers that
provide those services. The services themselves have long been
referred to
as Software as a Service (SaaS) which had its roots in Software-
Oriented
Architecture (SOA) concepts that began shaping enterprise
network
roadmaps in the early 2000s. IaaS (Infrastructure as a Service)
and PaaS
(Platform as a Service) are other types of cloud computing
services that are

2. available to business customers.
Cloud computing fosters the notion of computing as a utility
that can be
consumed by businesses on demand in a manner that is similar
to other
services (e.g. electricity, municipal water) from traditional
utilities. It has the
potential to reshape much of the IT industry by giving
businesses the option
of running business software applications fully on-premises,
fully in “the
cloud” or some combination of these two extremes. These are
choices that
businesses have not had until recently and many companies are
still coming
to grips with this new computing landscape.
Security is important to any computing infrastructure.
Companies go to
great lengths to secure on-premises computing systems, so it is
not
surprising that security looms as a major consideration when
augmenting or
replacing on-premises systems with cloud services. Allaying
security

3. C11-2
concerns is frequently a prerequisite for further discussions
about migrating
part or all of an organization’s computing architecture to the
cloud.
Availability is another major concern: “How will we operate if
we can’t access
the Internet? What if our customers can’t access the cloud to
place orders?”
are common questions [AMBR10].
Generally speaking, such questions only arise when businesses
contemplating moving core transaction processing, such as ERP
systems,
and other mission critical applications to the cloud. Companies
have
traditionally demonstrated less concern about migrating high
maintenance
applications such as e-mail and payroll to cloud service
providers even
though such applications hold sensitive information.

4. Security Issues and Concerns
Auditability is a concern for many organizations, especially
those who must
comply with Sarbanes-Oxley and/or Health and Human Services
Health
Insurance Portability and Accountability Act (HIPAA)
regulations [IBM11].
The auditability of their data must be ensured whether it is
stored on-
premises or moved to the cloud.
Before moving critical infrastructure to the cloud, businesses
should do
diligence on security threats both from outside and inside the
cloud
[BADG11]. Many of the security issues associated with
protecting clouds
from outside threats are similar to those that have traditionally
faced
centralized data centers. In the cloud, however, responsibility
for assuring
adequate security is frequently shared among users, vendors,
and any third-
party firms that users rely on for security-sensitive software or
configurations. Cloud users are responsible for application-level

5. security.
Cloud vendors are responsible for physical security and some
software
security such as enforcing external firewall policies. Security
for intermediate
layers of the software stack is shared between users and
vendors.
C11-3
A security risk that can be overlooked by companies
considering a
migration to the cloud is that posed by sharing vendor resources
with other
cloud users. Cloud providers must guard against theft or denial-
of-service
attacks by their users and users need to be protected from one
another.
Virtualization can be a powerful mechanism for addressing
these potential
risks because it protects against most attempts by users to attack
one
another or the provider’s infrastructure. However, not all
resources are

6. virtualized and not all virtualization environments are bug-free.
Incorrect
virtualization may allow user code to access to sensitive
portions of the
provider’s infrastructure or the resources of other users. Once
again, these
security issues are not unique to the cloud and are similar to
those involved
in managing non-cloud data centers, where different
applications need to be
protected from one another.
Another security concern that businesses should consider is the
extent
to which subscribers are protected against the provider,
especially in the
area of inadvertent data loss. For example, in the event of
provider
infrastructure improvements, what happens to hardware that is
retired or
replaced? It is easy to imagine a hard disk being disposed of
without being
properly wiped clean of subscriber data. It is also easy to
imagine
permissions bugs or errors that make subscriber data visible to

7. unauthorized
users. User-level encryption may be an important self-help
mechanism for
subscribers, but businesses should ensure that other protections
are in place
to avoid inadvertent data loss.
Addressing Cloud Computer Security Concerns
Numerous documents have been developed to guide business
thinking
about the security issues associated with cloud computing. Even
NIST has
weighed in on these issues [BADG11]. NIST’s
recommendations
systematically consider each of the major types of cloud
services consumed
C11-4
by businesses including Software as a Service (SaaS),
Infrastructure as a
Service (IaaS), and Platform as a Service (PaaS). While security
issues vary
somewhat depending on the type of cloud service, there are
multiple NIST

8. recommendations that are independent of service type. Several
of these are
summarized in Table C11.1. Not surprisingly, NIST
recommends selecting
cloud providers that support strong encryption, have appropriate
redundancy
mechanisms in place, employ authentication mechanisms, and
offer
subscribers sufficient visibility about mechanisms used to
protect subscribers
from other subscribers and the provider.
As more businesses incorporate cloud services into their
enterprise
network infrastructures, cloud computing security will persist as
an
important issue. Examples of cloud computing security failures
have to
potential to have a chilling effect on business interest in cloud
services and
this is inspiring service providers to be serious about
incorporating security
mechanisms that will allay concerns of potential subscribers.
Some service

9. providers have moved their operations to Tier 4 data centers to
address user
concerns about availability and redundancy. Because so many
businesses
remain reluctant to embrace cloud computing in a big way,
cloud service
providers will have to continue to work hard to convince
potential customers
that computing support for core business processes and mission
critical
applications can be moved safely and securely to the cloud
[HEAV11].
Discussion Points
1. Do some Internet research to identify businesses who have
suffered
because of cloud security weaknesses or failures. What can
companies
who are contemplating cloud computing services learn from the
negative experiences of these businesses?
2. Do some Internet research on security mechanisms associated
with
virtualization. How can virtualization be used by cloud service
providers to protect subscriber data?

10. C11-5
3. Choose one of the following cloud services categories: SaaS,
IaaS,
PaaS. Do some Internet research that focuses the security issues
associated with the selected cloud service category. Summarize
the
major security risks associated with the cloud service category
and
identify mechanisms that can be used to address these risks.
Sources
[ARMB10] Armbrust, M., Fox, A., Griffith, R, Joseph, A.D.,
Katz, R.,
Konwinski, A., Lee, G., Patterson, D., Rabkin, A., Stoica, I.,
and Zaharia, M.
“A View of Cloud Computing.” Communications of the ACM,
Vol. 53, No. 4,
April 2010, pp. 50-58.
[BADG11] Badger, L., Grance, T., Patt-Comer, R., and Voas, J.
Draft Cloud
Computing Synopsis and Recommendations: Recommendations
of the
National Institute of Standards and Technology, Special
Publication 800-146,
May 2011.
[HEAV11] Heavey, J. “Cloud Computing: Secure or Security
Risk?”
Technorati.com, November 28, 2011. Retrieved online from:

11. http://technorati.com/technology/cloud-computing/article/cloud-
computing-
secure-or-a-security1/.
[IBM11] IBM Global Technology Services. Security and
Availability in Cloud
Computing Environments, Technical White Paper, June 2011.
http://technorati.com/technology/cloud-computing/article/cloud-
computing-secure-or-a-security1/
http://technorati.com/technology/cloud-computing/article/cloud-
computing-secure-or-a-security1/
C11-6
CASE STUDY 11Security Issues and ConcernsAddressing
Cloud Computer Security ConcernsDiscussion PointsSources
Safety Work Procedures
1) Ladder
a) Inspection of Ladders:
We can inspect ladders by:
- Take each end of the ladder in turn and try to push the stiles
apart and then together.
Any movement would indicate that there are insecure rungs or
loose tie rods.

12. - Lay the ladder flat, raise one end and attempt to push one stile
while pulling the other.
If the stiles move relative to each other, it shows that the rungs
are loose.
- Ladders should be inspected routinely to ensure that they are
in good condition.
b) Usage of Ladders:
Things to take note of when using the ladder:
- Work a few steps below the top rung (Figure 2)
- Maximum recommended time: 10 - 15 minutes
- Ensure anti-slip flat shoes are worn before using the ladder
- Do not overreach – ensure that body stays within the stiles
and keep both feet on the same rung throughout the task
- Ensure that both spreaders are locked firmly when using the
ladder (open position)
Figure 1: Ensure both spreaders are locked firmly
(Source: Vancouver’s Best Painters)
(Source: WSH Council 2013)

13. 2) Lifting Postures
(Source: WSH Council 2014)
Step 1: Feet should be shoulder width apart.
Place one foot on one side of the object, and the other foot
behind the object.
Step 2: Grasp the object firmly and hold the object as close to
the body as possible.
Step 3: Lift the object by pushing up on your legs.
*Do not bend forward, avoid turning/twisting of body and
ensure that legs are straightened.
Step 4: Make sure you have a firm grip on the object before
moving off.
Risk Assessment Form
Company / Department: Family Supermarket Pte Ltd RA
Leader: Gerald Cheong Jia Yue Approved by
Reference
No.

14. Process: Restock of goods RA Member 1: Tescelyn Tan
Process/Activity Location: 14 ABC Road #01-123 RA Member
2: Yoen Shaw Yin Signature:
Original Assessment date: 23 February 2017 RA Member 3:
Mar Xin En Name:
Last review date: N.A. RA Member 4: Jacquelyn Woo Chu
Ting Designation:
Next review date: 23 February 2018 RA Member 5:
Valencia Poh Si Xuan Date:
HAZARD IDENTIFICATION
RISK EVALUATION
RISK
CONTROL
Ref
Work
Activity
Hazard
Possible
injury/ill-health
Existing risk controls S L RPN Additional Controls S L RPN
Implementation

15. Person
Due Date Remarks
1
Restock
of
Goods
#1: Ergonomic -
Improper manual
handling of heavy
goods
(For a prolonged
period of time)
- Musculoskeletal
Disorder
- Cuts from sharp
objects
- Fractures from
heavy drop loads
1. Brief employees on Safety Work
Procedures (SWP) ONCE during orientation
3
3 9
(Medium)
1. Engineering: Place heavy goods in
the middle section of the shelves (easily
accessible & obtainable, hence

16. minimizing bending and stretching
forward when retrieving or placing of
goods)
3 1 3
(Low)
Safety
Supervisor
2 March
2017
2 2. Paste up Safety Work Process (SWP)
signs inside the storeroom to remind
employees
2. Administrative: Team Lifting (Use
more than 1 employees to help lift and
move heavy goods)
3 3. Send employees for Occupational Health
& Safety training course, after which they
will obtain a safety certificate upon
completion of assessment
3. Personal Protective Equipment (PPE):
Provide rubber dot gloves to handle
heavy objects (prevents abrasion and
cuts and improves grip on heavy objects)

17. 4
5 #2: Physical -
Work at Height
- Strain, sprains,
fractures
1. Buddy System – another employee
helps to hold the ladder
3
3 9
(Medium)
1. Engineering: Mobile step platform
ladder (Move around easily, has a safety
guardrail & anti-slip platform, and is more
stable due to its heavy base)
3 1 3
(Low)
Safety
Supervisor
2 March
2017

18. 6 2. Brief employees on safety issues ONCE
during orientation
2. Administrative: Weekly inspection and
maintenance of ladders
7 3. Send employees for Work Safety
trainings
3. PPE: Provide non-slip flat shoes to
employees
8
Notes: Page__
of __
Page(s)
Valencia Poh
Managing Director
24 February 2017
OHS: Risk Management
Gerald Cheong (Leader)
Tescelyn Tan
Mar Xin En
Yoen Shaw Yin

19. Valencia Poh
Jacquelyn Woo
Work Activity: Restock of Goods
Workers job responsibility: replenish empty shelves in the store
when it’s half gone and during stock arrival day.
Workers had to make multiple trips to storeroom, manually
carrying the load
(15kg each, Replenishment of stocks can go up to 30 carton per
shifts )
Source: Dreamstime
Source: Alamy
Source: Enabling Village
Dreamstime, Worker Lifting Tool Package in Hardware Shop,
viewed 22 February 2017, <https://www.dreamstime.com/stock-
photo-worker-lifting-heavy-tool-package-hardware-shop-side-
view-mature-image45150542>
Alamy, A shelf stacker replenishes stock in her TESCO Here to
help t shirt, viewed 22 February 2017
<http://www.alamy.com/stock-photo-a-shelf-stacker-
replenishes-stock-in-her-tesco-here-to-help-t-shirt-
19056336.html>
Enabling Village, The people make the workplace 2016, viewed

20. 22 February 2017 <https://enablingvillage.sg/2016/08/02/the-
people-make-the-workplace-two-bffs-in-a-lengkok-bahru-
supermarket/>
Hazards Caused
Improper handling of heavy goods manually
Work at height (Moving goods to higher shelves)
Dreamstime, Worker Lifting Tool Package in Hardware Shop,
viewed 22 February 2017, <https://www.dreamstime.com/stock-
photo-worker-lifting-heavy-tool-package-hardware-shop-side-
view-mature-image45150542>
Dreamstime, Manager carrying cases observation on worker,
viewed 22 February 2017 <https://es.dreamstime.com/foto-de-
archivo-cajas-que-llevan-de-observacin-del-trabajador-del-
encargado-image49290111>
Building Design & Construction, Work-related illness within
the building industry 2015, viewed 22 February 2017
<http://www.bdcmagazine.com/safety-sustainability-
column/work-related-illness-within-the-building-industry-2263>

21. Smart Fortwo, Vocational training in the service sector 2012,
viewed 22 February 2017,
<http://www.savonanews.it/2012/03/29/leggi-
notizia/argomenti/news-dal-sindacato/articolo/fisascat-
apprendistato-nel-terziario-accordo-anche-con-
confesercenti.html>
Getty images, Delhaize staff restock the cold fridge display at a
supermarket 2010, viewed 22 February 2017
<http://www.gettyimages.com/event/delhaize-store-ahead-of-fy-
earnings-97130460#delhaize-staff-restock-the-cold-fridge-
display-at-a-supermarket-owned-picture-id97579778>
Safety care, Slips, Trips and Falls 2010, viewed 22 February
2017
<http://www.safetycareblog.com/2010_06_01_archive.html>
Hazard 1: Ergonomic
Improper Manual Handling of Heavy Goods
Source: Neckerman
Source: Risk Management 365

22. Risk Management 365, Ergonomics for Manual Material
Handling 2012, viewed 22 February 2017
<http://www.riskmanagement365.com/tag/work-comp-
2/page/14/>
Neckerman, Manual Handling in the Workplace 2015, viewed
22 February 2017 <https://neckerman.com/manual-handling-in-
the-workplace/>
Possible injuries
Suffer cuts from sharp objects
Fractures from heavy drop load
Gradual and cumulative wear and tear of muscles and tissues
will damage the musculoskeletal system, causing
musculoskeletal disorder.
Source: Google, Cuts on Fingers
Source: Papamoa Pines
Source: Musculoskeletal disorder
Google, Cuts on fingers, viewed 22 February 2017
<https://www.google.com/search?sa=G&hl=en&q=cuts+on+fing
ers&tbm=isch&tbs=simg:CAQSlQEJP-
6znWWOYX8aiQELEKjU2AQaAggCDAsQsIynCBpiCmAIAxIo
1Q-SD9YPog-
PD5APgAXRD5EPow_1uJa0gqiCTJKwg_1yyGNZsxiCOrIBowR
VkXqIlbd2D8w812STfNXZOUw32nm4txA17ApQGf4FuUvxT7r
vJMmikRupyqKkC-
IAQMCxCOrv4IGgoKCAgBEgTXlYPpDA&ved=0ahUKEwih3tv
RtbfSAhUDzbwKHfDOCwEQwg4IGCgA&biw=1366&bih=667#
imgrc=PzpAKLwext8E0M:>

23. Papamoa Pines, Fracture Clinic, viewed 22 February 2017
<http://papamoapines.co.nz/our-services/service-five/>
Slideshare, Musculoskeletal Disorder 2012, Slide 5, viewed 22
February 2017
<https://www.slideshare.net/mohdnurikhwan/musculoskeletal-
disorder>
Existing Risk Controls
Brief employees on Safety Work Procedures (SWP) ONCE
during orientation
Paste up SWP signs inside the storeroom
Send employees for Occupational Health & Safety training
course to obtain a safety certificate.
Source: Slideshare
Source: Synergo
Synergo, Training Courses, viewed 22 February 2017
<http://www.synergo.com.sg/>
Slideshare, Certificate of Singapore Workforce Skills
Qualifications, viewed 22 February 2017
<https://www.slideshare.net/MarcusLee18/certificate-bizsafe-
level-2develop-a-risk-management-implementation-
planmfcom402e1150000000199158>
Risk Rating (before)

24. Severity: 3
Likelihood: 3
RPN: 9 (Medium)
Musculoskeletal disorder have serious consequences to workers
May restrict their ability to undertake wide range of jobs in the
future
Employees often engage with carrying of cartons, thus poor
technique handling and repetitive movement may cause back
strains and other injuries
The cartons can have substantial weight
Employees may choose to ignore safety procedures due to their
negligence
Additional Risk Controls
1. Engineering: Place heavy goods in the middle section of the
shelves
(easily accessible and obtainable)
2. Administrative: Team Lifting
(using more than 1 employee to help move heavy goods)
3. PPE: Rubber Dot Gloves (Provide a better grip to handle
heavy objects)
The recommended actions will be implemented by the safety
supervisor
Source: National Institute for Occupational Safety and Health
(NIOSH)

25. The National Institute for Occupational Safety and Health 2015,
Hierarchy of Controls, Centres for Disease Control and
Prevention, viewed 22 February 2017,
<http://www.cdc.gov/niosh/topics/hierarchy/>
Engineering: Placement of goods
Place heavy goods in the middle section of the shelves
Aim: To make the goods easily
accessible and obtainable rather than
having goods at the very top
(minimise bending and stretching forward)
Source: Google, Restock Shelves
Google, Restock Shelves, viewed 22 February 2017
<https://www.google.com/search?sa=G&hl=en&q=restock+shel
ves&tbm=isch&tbs=simg:CAQSlQEJ2T38xHH4tMwaiQELEKjU
2AQaAghCDAsQsIynCBpiCmAIAxIosB6hGNoesR6iGKkexRfC
F7weoBDZP_10-kiizOc8q2j-
mOdQ1qDmFNxowOxCeCri5NGhaRabSfD-BVGp0u8U7w-
k5FX94m2t0-
DTlMlAxGZAAl8p72zpXLeKbIAQMCxCOrv4IGgoKCAgBEgS
ADfJJDA&ved=0ahUKEwjIiebKuLfSAhWJS7wKHZJwBscQwg
4IGCgA&biw=1366&bih=667#imgrc=lWwVGFHY_BYsuM>
Administrative: Team lifting
Use more than 1 employee to help lift & move heavy goods
Aim: Reason is to balance and lessen

26. the weight with two person carrying
the goods thus to prevent injuries
Source: Kantola, Proper Lifting Techniques
Kantola, Proper Lifting Techniques, viewed 22 February 2017
<https://www.kantola.com/Proper-Lifting-Techniques-PDPD-
333-K.aspx>
PPE: Gloves
Rubber Dot Gloves (better grip to handle heavy objects)
Source: Stock Unlimited
Source: Alibaba
Stock Unlimited, Warehouse worker wearing gloves carrying
boxes near loading dock doors, viewed 22 February 2017
<http://www.stockunlimited.com/image/warehouse-worker-
wearing-gloves-carrying-boxes-near-loading-dock-
doors_1891337.html>
Alibaba, Protective double sided dotted gloves for hand safety,
viewed 22 February 2017 <https://www.alibaba.com/product-
detail/protective-double-sided-dotted-gloves-
for_60170286494.html>

27. Risk Rating (after)
Severity: 3 (Moderate)
- Consequences of injury remain the same
Likelihood: Reduce from 3 to 1
- Employees are provided with safer equipment to work with
(i.e. rubber dot gloves)
- Team lifting system and better placement of heavy goods
Risk Rating (before)Risk Rating
(after)Severity33Likelihood31RPN9 (Medium)3 (Low)
Hazard 2: Physical - Work at Height
Source: Safety Care
Source: Google, Work at Height in Supermarket
Safety care, Slips, Trips and Falls 2010, viewed 22 February
2017
<http://www.safetycareblog.com/2010_06_01_archive.html>

28. Google, Work at Height in Supermarket, viewed 22 February
2017
<https://www.google.com.sg/search?q=work+at+height&espv=2
&biw=1366&bih=667&source=lnms&tbm=isch&sa=X&ved=0ah
UKEwjmmsHOvbfSAhXGbbwKHaL_AD8Q_AUIBigB#tbm=isc
h&q=work+at+height+accident+in+supermarket&*&imgrc=lvpv
qg6UZhiQ3M>
Possible injuries
Workers suffer from back strain and sprains when they move
goods to higher shelves
Fall from height may result in multiple fractures
Source: calcanealfracture
Source Chiropractic Family Health Center:
Chiropractic Family Health Center, Back Strain, viewed 22
February 2017
<http://www.backpainmanhattan.com/back_pain.cfm>
Calcanealfracture, Fracture, viewed 22 February 2017
<https://videos.files.wordpress.com/6ZpSnXTw/bc3b6hler-
angle_dvd.original.jpg?w=648&h=414>
Existing Risk Controls
Brief employees on safety issues ONCE during orientation
Send employees for Work Safety training
Buddy system (Another employee help
to hold the ladder to keep it stable)
Source: Emaze
Source: Arbill

29. Arbill, Work Safety Training, Viewed 27 February 2017
<https://www.emaze.com/@AQOIZOL/BIPOLAR>
Emaze, Buddy System, Viewed 27 February 2017
<http://www.arbill.com/arbill-safety-blog/bid/183744/Why-
Ongoing-Safety-Training-Is-Imperative-To-Workplace-Safety>
Risk Rating (before)
Severity: 3
Likelihood: 3
RPN: 9 (Medium)
Falling from height leads to serious injuries such as strain,
sprain, fracture leading to disability
Factors contributing to fall from height include faulty
equipment such as ladders or human factors like negligence
Fast work pace can be a factor especially employee working in
supermarket, as they might feel rushed and work at a faster than
normal work pace, thus risk getting injured
Additional Risk Controls
Engineering: Mobile platform step ladder
(safety guardrail & anti-slip platform)
Administrative: Weekly inspection and maintenance of ladders
PPE: Non-slip footwear
The recommended actions will be implemented by the safety

30. supervisor
Source: National Institute for Occupational Safety and Health
(NIOSH)
The National Institute for Occupational Safety and Health 2015,
Hierarchy of Controls, Centres for Disease Control and
Prevention, viewed 22 February 2017,
<http://www.cdc.gov/niosh/topics/hierarchy/>.
Engineering: Mobile Platform Step Ladder
Instead of using a regular ladder, we can use a mobile platform
step ladder instead, as it can be moved around easily while
having a guard rail and anti-slip platform for protection.
Furthermore, it is more stable due to its heavy base.
Aim: The guardrail and anti-slip platform prevents user from
falling off the ladder.
Guardrail
Anti-slip Platform
Wheels
Source: Ladders2GO
Ladders2GO 2017, Mobile Platform Step Ladder, Ladders2GO,
viewed on 1 March 2017,
<https://ladders2go.com.au/industrial-order-picker-ladders/54-

31. trade-persons-platform-step.html>
Administrative: Weekly inspection and maintenance of ladders
Inspect ladders weekly and send for maintenance if required.
Aim: Ensure equipment are safe to use to ensure employees are
working in a conducive environment.
Source: Ladderstore
Ladderstore 2017, Ladderstore Ladder Inspection Service,
Ladderstore, viewed on 1 March 2017,
<http://www.ladderstore.com/ladderstore-ladder-inspection-
service.html>
PPE: Non-slip footwear
Provide slip resistant footwear for employees
Aim: The slip resistant material on the sole will reduce the
likelihood employees falling off the ladder if it’s slippery
Source: Protective Insurance Company
Protective Insurance Company 2016, Slip Resistant Shoe
Program, Protective Insurance Company, viewed 22 February
2017, <https://www.protectiveinsurance.com/loss-
prevention/services-programs/slip-resistant-shoe-program>
Risk Rating (after)
Severity: 3 (Moderate)
- Consequences of injury remain the same

32. Likelihood: Reduce from 3 to 1
- Employees are provided with safer equipment to work in
(i.e. Step-platform ladder and anti-slip footwear)
- Increase building a safer environment
Risk Rating (before)Risk Rating
(after)Severity33Likelihood31RPN9 (Medium)3 (Low)
References
Alamy, A shelf stacker replenishes stock in her TESCO Here to
help t shirt, viewed 22 February 2017
<http://www.alamy.com/stock-photo-a-shelf-stacker-
replenishes-stock-in-her-tesco-here-to-help-t-shirt-
19056336.html>
Alibaba, Protective double sided dotted gloves for hand safety,
viewed 22 February 2017 <https://www.alibaba.com/product-
detail/protective-double-sided-dotted-gloves-
for_60170286494.html>
Arbill, Work Safety Training, Viewed 27 February 2017
<https://www.emaze.com/@AQOIZOL/BIPOLAR>

33. Building Design & Construction, Work-related illness within
the building industry 2015, viewed 22 February 2017
<http://www.bdcmagazine.com/safety-sustainability-
column/work-related-illness-within-the-building-industry-2263>
Chiropractic Family Health Center, Back Strain, viewed 22
February 2017
<http://www.backpainmanhattan.com/back_pain.cfm>
Calcanealfracture, Fracture, viewed 22 February 2017
<https://videos.files.wordpress.com/6ZpSnXTw/bc3b6hler-
angle_dvd.original.jpg?w=648&h=414>
Dreamstime, Worker Lifting Tool Package in Hardware Shop,
viewed 22 February 2017, <https://www.dreamstime.com/stock-
photo-worker-lifting-heavy-tool-package-hardware-shop-side-
view-mature-image45150542>
Dreamstime, Worker Lifting Tool Package in Hardware Shop,
viewed 22 February 2017, <https://www.dreamstime.com/stock-
photo-worker-lifting-heavy-tool-package-hardware-shop-side-
view-mature-image45150542>

34. Dreamstime, Manager carrying cases observation on worker,
viewed 22 February 2017 <https://es.dreamstime.com/foto-de-
archivo-cajas-que-llevan-de-observacin-del-trabajador-del-
encargado-image49290111>
Emaze, Buddy System, Viewed 27 February 2017
<http://www.arbill.com/arbill-safety-blog/bid/183744/Why-
Ongoing-Safety-Training-Is-Imperative-To-Workplace-Safety>
Getty images, Delhaize staff restock the cold fridge display at a
supermarket 2010, viewed 22 February 2017
<http://www.gettyimages.com/event/delhaize-store-ahead-of-fy-
earnings-97130460#delhaize-staff-restock-the-cold-fridge-
display-at-a-supermarket-owned-picture-id97579778>
Google, Restock Shelves, viewed 22 February 2017
<https://www.google.com/search?sa=G&hl=en&q=restock+shel
ves&tbm=isch&tbs=simg:CAQSlQEJ2T38xHH4tMwaiQELEKjU
2AQaAghCDAsQsIynCBpiCmAIAxIosB6hGNoesR6iGKkexRfC
F7weoBDZP_10-kiizOc8q2j-
mOdQ1qDmFNxowOxCeCri5NGhaRabSfD-BVGp0u8U7w-
k5FX94m2t0-
DTlMlAxGZAAl8p72zpXLeKbIAQMCxCOrv4IGgoKCAgBEgS
ADfJJDA&ved=0ahUKEwjIiebKuLfSAhWJS7wKHZJwBscQwg
4IGCgA&biw=1366&bih=667#imgrc=lWwVGFHY_BYsuM>
Google, Work at Height in Supermarket, viewed 22 February
2017
<https://www.google.com.sg/search?q=work+at+height&espv=2
&biw=1366&bih=667&source=lnms&tbm=isch&sa=X&ved=0ah
UKEwjmmsHOvbfSAhXGbbwKHaL_AD8Q_AUIBigB#tbm=isc
h&q=work+at+height+accident+in+supermarket&*&imgrc=lvpv
qg6UZhiQ3M>

35. Kantola, Proper Lifting Techniques, viewed 22 February 2017
<https://www.kantola.com/Proper-Lifting-Techniques-PDPD-
333-K.aspx>
Ladders2GO 2017, Mobile Platform Step Ladder, Ladders2GO,
viewed on 1 March 2017,
<https://ladders2go.com.au/industrial-order-picker-ladders/54-
trade-persons-platform-step.html>
Ladderstore 2017, Ladderstore Ladder Inspection Service,
Ladderstore, viewed on 1 March 2017,
<http://www.ladderstore.com/ladderstore-ladder-inspection-
service.html>
Neckerman, Manual Handling in the Workplace 2015, viewed
22 February 2017 <https://neckerman.com/manual-handling-in-
the-workplace/>
Pinterest, Back Strain, viewed 22 February 2017
<https://www.pinterest.com/pin/282389839110433750/>
Protective Insurance Company 2016, Slip Resistant Shoe
Program, Protective Insurance Company, viewed 22 February
2017, <https://www.protectiveinsurance.com/loss-
prevention/services-programs/slip-resistant-shoe-program>
Risk Management 365, Ergonomics for Manual Material
Handling 2012, viewed 22 February 2017
<http://www.riskmanagement365.com/tag/work-comp-
2/page/14/>
Safety care, Slips, Trips and Falls 2010, viewed 22 February

36. 2017
<http://www.safetycareblog.com/2010_06_01_archive.html>
Slideshare, Certificate of Singapore Workforce Skills
Qualifications, viewed 22 February 2017
<https://www.slideshare.net/MarcusLee18/certificate-bizsafe-
level-2develop-a-risk-management-implementation-
planmfcom402e1150000000199158>
Smart Fortwo, Vocational training in the service sector 2012,
viewed 22 February 2017,
<http://www.savonanews.it/2012/03/29/leggi-
notizia/argomenti/news-dal-sindacato/articolo/fisascat-
apprendistato-nel-terziario-accordo-anche-con-
confesercenti.html>
Stock Unlimited, Warehouse worker wearing gloves carrying
boxes near loading dock doors, viewed 22 February 2017
<http://www.stockunlimited.com/image/warehouse-worker-
wearing-gloves-carrying-boxes-near-loading-dock-
doors_1891337.html>
Synergo, Training Courses, viewed 22 February 2017
<http://www.synergo.com.sg/>
The National Institute for Occupational Safety and Health 2015,
Hierarchy of Controls, Centres for Disease Control and
Prevention, viewed 22 February 2017,
<http://www.cdc.gov/niosh/topics/hierarchy/>