You are on page 1of 52

INTERNATIONAL ISO

STANDARD 45001
First edition
2018-03

Occupational health and


safety management systems —
Requirements with guidance for use
Systèmes de management de la santé et de la sécurité au travail —
Exigences et lignes directrices pour leur utilisation

Reference number
ISO 45001:2018(E)

© ISO 2018
ISO 45001:2018(E)

COPYRIGHT PROTECTED DOCUMENT


© ISO 2018
All rights reserved. Unless otherwise specified, or required in the context o f its implementation, no part o f this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country o f the requester.
ISO copyright o ffice
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Fax: +41 22 749 09 47
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland

ii © ISO 2018 – All rights reserved


ISO 45001:2018(E)

Contents Page

Foreword .......................................................................................................................................................................................................................................... v
Introduction ................................................................................................................................................................................................................................ vi
1 Scope ................................................................................................................................................................................................................................. 1
2 Normative references ...................................................................................................................................................................................... 1
3 Terms and definitions ..................................................................................................................................................................................... 1
4 Context of the organization ....................................................................................................................................................................... 8
4.1 Understanding the organization and its context ....................................................................................................... 8
4.2 Understanding the needs and expectations o f workers and other interested parties .............. 8
4.3 Determining the scope o f the OH&S management system ............................................................................... 8
4.4 OH&S management system .......................................................................................................................................................... 8
5 Leadership and worker participation ............................................................................................................................................ 9
5.1 Leadership and commitment ..................................................................................................................................................... 9
5.2 OH&S policy ............................................................................................................................................................................................... 9
5.3 Organizational roles, responsibilities and authorities ....................................................................................... 10
5.4 Consultation and participation o f workers ................................................................................................................. 10
6 Planning...................................................................................................................................................................................................................... 11
6.1 Actions to address risks and opportunities ................................................................................................................ 11
6.1.1 General................................................................................................................................................................................... 11
6.1.2 Hazard identification and assessment o f risks and opportunities .................................... 12
6.1.3 Determination o f legal requirements and other requirements ............................................ 13
6.1.4 Planning action ............................................................................................................................................................... 13
6.2 OH&S objectives and planning to achieve them ...................................................................................................... 14
6.2.1 OH&S objectives ............................................................................................................................................................ 14
6.2.2 Planning to achieve OH&S objectives .......................................................................................................... 14
7 Support ........................................................................................................................................................................................................................ 15
7.1 Resources .................................................................................................................................................................................................. 15
7.2 Competence ............................................................................................................................................................................................ 15
7.3 Awareness ................................................................................................................................................................................................ 15
7.4 Communication ................................................................................................................................................................................... 15
7.4.1 General................................................................................................................................................................................... 15
7.4.2 Internal communication ......................................................................................................................................... 16
7.4.3 External communication ........................................................................................................................................ 16
7.5 Documented information ............................................................................................................................................................ 16
7.5.1 General................................................................................................................................................................................... 16
7.5.2 Creating and updating .............................................................................................................................................. 17
7.5.3 Control o f documented information ............................................................................................................ 17
8 Operation .................................................................................................................................................................................................................. 17
8.1 Operational planning and control ....................................................................................................................................... 17
8.1.1 General................................................................................................................................................................................... 17
8.1.2 Eliminating hazards and reducing OH&S risks ................................................................................... 18
8.1.3 Management o f change............................................................................................................................................ 18
8.1.4 Procurement ..................................................................................................................................................................... 18
8.2 Emergency preparedness and response ........................................................................................................................ 19
9 Performance evaluation ............................................................................................................................................................................ 19
9.1 Monitoring, measurement, analysis and performance evaluation .......................................................... 19
9.1.1 General................................................................................................................................................................................... 19
9.1.2 Evaluation o f compliance ...................................................................................................................................... 20
9.2 Internal audit......................................................................................................................................................................................... 20
9.2.1 General................................................................................................................................................................................... 20
9.2.2 Internal audit programme .................................................................................................................................... 21
9.3 Management review ........................................................................................................................................................................ 21
© ISO 2018 – All rights reserved iii
ISO 45001:2018(E)

10 Improvement ......................................................................................................................................................................................................... 22
1 0.1 ........................................................................................................................................................................................................ 22
General

1 0.2 f
I ncident, no nco n o rmity and co rrective actio n ....................................................................................................... 22
1 0.3 C o ntinual imp rovement ............................................................................................................................................................... 23
Annex A f (in o rmative) Guidance on the use of this document ............................................................................................... 24
Bibliography ............................................................................................................................................................................................................................. 40

iv © ISO 2018 – All rights reserved


ISO 45001:2018(E)

Foreword
ISO (the International Organization for Standardization) is a worldwide federation o f national standards
bodies (ISO member bodies). The work o f preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters o f
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the di fferent approval criteria needed for the
di fferent types o f ISO documents should be noted. This document was dra fted in accordance with the
editorial rules o f the ISO/IEC Directives, Part 2 (see www.iso .org/directives).
Attention is drawn to the possibility that some o f the elements o f this document may be the subject o f
patent rights. ISO shall not be held responsible for identi fying any or all such patent rights. Details o f
any patent rights identified during the development o f the document will be in the Introduction and/or
on the ISO list o f patent declarations received (see www.iso .org/patents).
Any trade name used in this document is in formation given for the convenience o f users and does not
constitute an endorsement.
For an explanation on the voluntary nature o f standards, the meaning o f ISO specific terms and
expressions related to con formity assessment, as well as in formation about ISO’s adherence to the
World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT) see the following
URL: www.iso .org/iso/foreword .html.
This document was prepared by Project Committee ISO/PC 283, Occupational health and safety
management systems .

© ISO 2018 – All rights reserved v


ISO 45001:2018(E)

Introduction
0.1 Background
An organization is responsible for the occupational health and sa fety o f workers and others who can
be a ffected by its activities. This responsibility includes promoting and protecting their physical and
mental health.
The adoption o f an OH&S management system is intended to enable an organization to provide sa fe
and healthy workplaces, prevent work-related injury and ill health, and continually improve its OH&S
per formance.
0.2 Aim of an OH&S management system
The purpose o f an OH&S management system is to provide a framework for managing OH&S risks and
opportunities. The aim and intended outcomes o f the OH&S management system are to prevent work-
related injury and ill health to workers and to provide sa fe and healthy workplaces; consequently, it
is critically important for the organization to eliminate hazards and minimize OH&S risks by taking
e ffective preventive and protective measures.
When these measures are applied by the organization through its OH&S management system, they
improve its OH&S per formance. An OH&S management system can be more e ffective and e fficient when
taking early action to address opportunities for improvement o f OH&S per formance.
Implementing an OH&S management system con forming to this document enables an organization to
manage its OH&S risks and improve its OH&S per formance. An OH&S management system can assist an
organization to fulfil its legal requirements and other requirements.
0.3 Success factors
The implementation o f an OH&S management system is a strategic and operational decision for an
organization. The success o f the OH&S management system depends on leadership, commitment and
participation from all levels and functions o f the organization.
The implementation and maintenance o f an OH&S management system, its e ffectiveness and its ability
to achieve its intended outcomes are dependent on a number o f key factors, which can include:
a) top management leadership, commitment, responsibilities and accountability;
b) top management developing, leading and promoting a culture in the organization that supports the
intended outcomes o f the OH&S management system;
c) communication;
d) consultation and participation o f workers, and, where they exist, workers’ representatives;
e) allocation o f the necessary resources to maintain it;
f ) OH&S policies, which are compatible with the overall strategic objectives and direction o f the
organization;
g) e ffective process(es) for identi fying hazards, controlling OH&S risks and taking advantage o f OH&S
opportunities;
h) continual per formance evaluation and monitoring o f the OH&S management system to improve
OH&S per formance;
i) integration o f the OH&S management system into the organization’s business processes;
j) OH&S objectives that align with the OH&S policy and take into account the organization’s hazards,
OH&S risks and OH&S opportunities;

vi © ISO 2018 – All rights reserved


ISO 45001:2018(E)

k) compliance with its legal requirements and other requirements.


Demonstration o f success ful implementation o f this document can be used by an organization to give
assurance to workers and other interested parties that an e ffective OH&S management system is in
place. Adoption o f this document, however, will not in itsel f guarantee prevention o f work-related injury
and ill health to workers, provision o f sa fe and healthy workplaces and improved OH&S per formance.
The level o f detail, the complexity, the extent o f documented in formation and the resources needed to
ensure the success o f an organization’s OH&S management system will depend on a number o f factors,
such as:
— the organization’s context (e.g. number o f workers, size, geography, culture, legal requirements and
other requirements);
— the scope o f the organization’s OH&S management system;
— the nature o f the organization’s activities and the related OH&S risks.
0.4 Plan-Do-Check-Act cycle
The OH&S management system approach applied in this document is founded on the concept o f Plan-
Do-Check-Act (PDCA).
The PDCA concept is an iterative process used by organizations to achieve continual improvement. It
can be applied to a management system and to each o f its individual elements, as follows:
a) Plan: determine and assess OH&S risks, OH&S opportunities and other risks and other
opportunities, establish OH&S objectives and processes necessary to deliver results in accordance
with the organization’s OH&S policy;
b) Do: implement the processes as planned;
c) Check: monitor and measure activities and processes with regard to the OH&S policy and OH&S
objectives, and report the results;
d) Act: take actions to continually improve the OH&S per formance to achieve the intended outcomes.
This document incorporates the PDCA concept into a new framework, as shown in Figure 1.

© ISO 2018 – All rights reserved vii


ISO 45001:2018(E)

NOTE The numbers given in brackets re fer to the clause numbers in this document.

Figure 1 — Relationship between PDCA and the framework in this document

0.5 Contents of this document


This document con forms to ISO’s requirements for management system standards. These requirements
include a high level structure, identical core text and common terms with core definitions, designed to
benefit users implementing multiple ISO management system standards.
This document does not include requirements specific to other subjects, such as those for quality, social
responsibility, environmental, security or financial management, though its elements can be aligned or
integrated with those o f other management systems.
This document contains requirements that can be used by an organization to implement an OH&S
management system and to assess con formity. An organization that wishes to demonstrate con formity
to this document can do so by:
— making a sel f-determination and sel f-declaration, or
— seeking confirmation o f its con formity by parties having an interest in the organization, such as
customers, or
— seeking confirmation o f its sel f-declaration by a party external to the organization, or
— seeking certification/registration o f its OH&S management system by an external organization.
Clauses 1 to 3 in this document set out the scope, normative re ferences and terms and definitions which
apply to the use o f this document, while Clauses 4 to 10 contain the requirements to be used to assess
con formity to this document. Annex A provides in formative explanations to these requirements. The
terms and definitions in Clause 3 are arranged in conceptual order, with an alphabetical index provided
at the end o f this document.

viii © ISO 2018 – All rights reserved


ISO 45001:2018(E)

I n th i s do c u ment, the fol lowi ng verb a l form s are u s e d:

a) “s ha l l” i nd ic ate s a re qu i rement;

b) “s hou ld” i nd ic ate s a re com mendation;

c) “may” i nd ic ate s a p erm i s s ion;

d) “c an” i nd ic ate s a p o s s ibi l ity or a c ap abi l ity.

I n formation marke d as “NO T E ” is for gu ida nce in u nders tand i ng or cla ri fyi ng the as s o c iate d

re qu i rement. “No te s to entr y” u s e d i n C l au s e 3 provide add itiona l i n formation that s upp lements the

term i nolo gic a l data and c an contai n provi s ion s relati ng to the u s e o f a term .

© ISO 2018 – All rights reserved ix


INTERNATIONAL STANDARD ISO 45001:2018(E)

Occupational health and safety management systems —


Requirements with guidance for use
1 Scope
This do c u ment s p e c i fie s re qu i rements for an o cc up ationa l he a lth a nd s a fe ty (OH&S ) ma nagement

s ys tem, and give s guidance for its u s e, to enable organ i z ation s to provide s a fe a nd he a lthy workp lace s

by preventi ng work-relate d i nj u r y and ill he a lth, as wel l as by pro ac tively i mprovi ng its OH&S

p er forma nce .

T h i s do c ument i s appl ic able to any organ i z ation that wi s he s to e s tabl i sh , i mplement and ma i ntai n an

OH&S ma nagement s ys tem to i mprove o cc up ationa l he a lth a nd s a fe ty, el i m i nate ha z a rd s and m i ni m i z e

OH&S ri sks (i nclud i ng s ys tem deficiencie s) , ta ke advantage o f OH&S opp or tun itie s , and add re s s OH&S

management s ys tem noncon form itie s a s s o ci ate d with its ac tivitie s .

T h i s do c u ment help s a n organ i z ation to ach ieve the i ntende d outcome s o f its OH &S ma nagement s ys tem .

C on s i s tent with the organ i z ation’s O H&S p ol ic y, the i ntende d outcome s o f a n OH&S management s ys tem

include:
a) conti nua l i mprovement o f O H&S p er formance;

b) fu l fi l ment o f lega l re qu i rements and o ther re qu i rements;

c) ach ievement o f OH &S obj e c tive s .

T h i s do c u ment i s appl ic able to any orga n i z ation re gard le s s o f its s i ze, typ e a nd ac tivitie s . I t i s appl ic able

to the O H&S ri s ks under the organ i z ation’s control, ta ki ng i nto accou nt fac tors s uch a s the contex t i n

wh ich the orga n i z ation op erate s and the ne e d s a nd e xp e c tation s o f its workers and o ther i ntere s te d

p a r tie s .

T h i s do c u ment do e s no t s tate s p e c i fic c riteria for OH&S p er forma nce, nor i s it pre s crip tive ab out the

de s ign o f an O H&S ma nagement s ys tem .

T h i s do c u ment enable s an organ i z ation, th rough its O H&S management s ys tem, to i ntegrate o ther

as p e c ts o f he a lth and s a fe ty, s uch as worker wel l ne s s/wel lb ei ng.

T h i s do c ument do e s no t add re s s i s s ue s s uch as pro duc t s a fe ty, prop er ty da mage or envi ron menta l

i mp ac ts , b eyond the ri sks to workers a nd o ther relevant i ntere s te d p a r tie s .

T h i s do c ument c an b e u s e d i n whole or i n p ar t to s ys tematic a l ly i mprove o cc up ationa l he a lth a nd

s a fe ty ma nagement. H owever, cla i m s o f con form ity to th i s do c u ment are no t accep table u n le s s a l l its

re qu i rements are i ncor p orate d i nto an organ i z ation’s OH &S ma nagement s ys tem and fu l fi l le d without

exclu s ion .

2 Normative references
T here a re no normative re ference s i n th i s do c ument.

3 Terms and definitions


For the pu r p o s e s o f th i s do c u ment, the fol lowi ng term s and defi n ition s apply.

I S O and I E C mai nta i n term i nolo gic a l datab a s e s for u s e i n s tanda rd i z ation at the fol lowi ng add re s s e s:

— I S O O n l i ne brows i ng pl at form: avai l able at https://www.iso .org/obp


© ISO 2018 – All rights reserved 1
ISO 45001:2018(E)

— IEC Electropedia: available at http://www.electropedia .org/


3.1
organization
person or group o f people that has its own functions with responsibilities, authorities and relationships
to achieve its objectives (3.16)
Note 1 to entry: The concept o f organization includes, but is not limited to sole-trader, company, corporation, firm,
enterprise, authority, partnership, charity or institution, or part or combination thereo f, whether incorporated
or not, public or private.
Note 2 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.2
interested party (preferred term)
stakeholder (admitted term)
person or organization (3.1) that can a ffect, be a ffected by, or perceive itsel f to be a ffected by a decision
or activity
Note 1 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.3
worker
person per forming work or work-related activities that are under the control o f the organization (3.1)
Note 1 to entry: Persons per form work or work-related activities under various arrangements, paid or unpaid,
such as regularly or temporarily, intermittently or seasonally, casually or on a part-time basis.
Note 2 to entry: Workers include top management (3.12 ), managerial and non-managerial persons.
Note 3 to entry: The work or work-related activities per formed under the control o f the organization may be
per formed by workers employed by the organization, workers o f external providers, contractors, individuals,
agency workers, and by other persons to the extent the organization shares control over their work or work-
related activities, according to the context o f the organization.
3.4
participation
involvement in decision-making
Note 1 to entry: Participation includes engaging health and sa fety committees and workers’ representatives,
where they exist.
3.5
consultation
seeking views be fore making a decision
Note 1 to entry: Consultation includes engaging health and sa fety committees and workers’ representatives,
where they exist.
3.6
workplace
place under the control o f the organization (3.1) where a person needs to be or to go for work purposes
Note 1 to entry: The organization’s responsibilities under the OH&S management system (3.11) for the workplace
depend on the degree o f control over the workplace.

2 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

3.7
contractor
external organization (3.1) providing services to the organization in accordance with agreed
specifications, terms and conditions
Note 1 to entry: Services may include construction activities, among others.
3.8
requirement
need or expectation that is stated, generally implied or obligatory
Note 1 to entry: “Generally implied” means that it is custom or common practice for the organization (3.1) and
interested parties (3.2 )
that the need or expectation under consideration is implied.
Note 2 to entry: A specified requirement is one that is stated, for example in documented information (3.24).
Note 3 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.9
legal requirements and other requirements
legal requirements that an organization (3.1) has to comply with and other requirements (3.8 ) that an
organization has to or chooses to comply with
Note 1 to entry: For the purposes o f this document, legal requirements and other requirements are those relevant
to the OH&S management system (3.11).
Note 2 to entry: “Legal requirements and other requirements” include the provisions in collective agreements.
Note 3 to entry: Legal requirements and other requirements include those that determine the persons who are
workers’ (3.3 ) representatives in accordance with laws, regulations, collective agreements and practices.

3.10
management system
set o f interrelated or interacting elements o f an organization (3.1) to establish policies (3.14) and
objectives (3.16 ) and processes (3.25 ) to achieve those objectives
Note 1 to entry: A management system can address a single discipline or several disciplines.
Note 2 to entry: The system elements include the organization’s structure, roles and responsibilities, planning,
operation, per formance evaluation and improvement.
Note 3 to entry: The scope o f a management system may include the whole o f the organization, specific and
identified functions o f the organization, specific and identified sections o f the organization, or one or more
functions across a group o f organizations.

Note 4 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1. Note 2 to entry
has been modified to clari fy some o f the wider elements o f a management system.
3.11
occupational health and safety management system
OH&S management system
management system (3.10 ) or part o f a management system used to achieve the OH&S policy (3.15)
Note 1 to entry: The intended outcomes o f the OH&S management system are to prevent injury and ill health
(3.18) to workers (3.3 ) and to provide sa fe and healthy workplaces (3.6).
Note 2 to entry: The terms “occupational health and sa fety” (OH&S) and “occupational sa fety and health” (OSH)
have the same meaning.

© ISO 2018 – All rights reserved 3


ISO 45001:2018(E)

3.12
top management
person or group o f people who directs and controls an organization (3.1) at the highest level
Note 1 to entry: Top management has the power to delegate authority and provide resources within the
organization , provided ultimate responsibility for the OH&S management system (3.11) is retained.
Note 2 to entry: I f the scope o f the management system (3.10 ) covers only part o f an organization, then top
management re fers to those who direct and control that part o f the organization.
Note 3 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1. Note 1 to entry
has been modified to clari fy the responsibility o f top management in relation to an OH&S management system.
3.13
effectiveness
extent to which planned activities are realized and planned results achieved
Note 1 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.14
policy
intentions and direction o f an organization (3.1), as formally expressed by its top management (3.12)
Note 1 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.15
occupational health and safety policy
OH&S policy
policy (3.14) to prevent work-related injury and ill health (3.18) to workers (3.3 ) and to provide sa fe and
healthy workplaces (3.6)
3.16
objective
result to be achieved
Note 1 to entry: An objective can be strategic, tactical, or operational.
Note 2 to entry: Objectives can relate to di fferent disciplines (such as financial, health and sa fety, and
environmental goals) and can apply at di fferent levels (such as strategic, organization-wide, project, product and
process (3.25)).

Note 3 to entry: An objective can be expressed in other ways, e.g. as an intended outcome, a purpose, an
operational criterion, as an OH&S objective (3.17), or by the use o f other words with similar meaning (e.g. aim,
goal, or target).
Note 4 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1. The original
Note 4 to entry has been deleted as the term “OH&S objective” has been defined separately in 3.17.
3.17
occupational health and safety objective
OH&S objective
objective (3.16 ) set by the organization (3.1 ) to achieve specific results consistent with the OH&S
policy (3.15)
3.18
injury and ill health
adverse e ffect on the physical, mental or cognitive condition o f a person
Note 1 to entry: These adverse e ffects include occupational disease, illness and death.

4 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

Note 2 to entry: The term “injury and ill health” implies the presence o f injury or ill health, either on their own or
in combination.
3.19
hazard
source with a potential to cause injury and ill health (3.18)
Note 1 to entry: Hazards can include sources with the potential to cause harm or hazardous situations, or
circumstances with the potential for exposure leading to injury and ill health.
3.20
risk
e ffect o f uncertainty
Note 1 to entry: An e ffect is a deviation from the expected — positive or negative.
Note 2 to entry: Uncertainty is the state, even partial, o f deficiency o f in formation related to, understanding or
knowledge o f, an event, its consequence, or likelihood.
Note 3 to entry: Risk is o ften characterized by re ference to potential “events” (as defined in ISO Guide 73:2009,
3.5.1.3) and “consequences” (as defined in ISO Guide 73:2009, 3.6.1.3), or a combination o f these.
Note 4 to entry: Risk is o ften expressed in terms o f a combination o f the consequences o f an event (including
changes in circumstances) and the associated “likelihood” (as defined in ISO Guide 73:2009, 3.6.1.1) o f occurrence.
Note 5 to entry: In this document, where the term “risks and opportunities” is used this means OH&S risks (3.21),
OH&S opportunities (3.22 ) and other risks and other opportunities for the management system.

Note 6 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1. Note 5 to entry
has been added to clari fy the term “risks and opportunities” for its use within this document.
3.21
occupational health and safety risk
OH&S risk
combination o f the likelihood o f occurrence o f a work-related hazardous event(s) or exposure(s) and
the severity o f injury and ill health (3.18 ) that can be caused by the event(s) or exposure(s)
3.22
occupational health and safety opportunity
OH&S opportunity
circumstance or set o f circumstances that can lead to improvement o f OH&S performance (3.28)
3.23
competence
ability to apply knowledge and skills to achieve intended results
Note 1 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.24
documented information
in formation required to be controlled and maintained by an organization (3.1) and the medium on
which it is contained
Note 1 to entry: Documented in formation can be in any format and media, and from any source.
Note 2 to entry: Documented in formation can re fer to:
a) the management system (3.10 ), including related processes (3.25 );
b) in formation created in order for the organization to operate (documentation);
c) evidence o f results achieved (records).

© ISO 2018 – All rights reserved 5


ISO 45001:2018(E)

Note 3 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.25
process
set o f interrelated or interacting activities which trans forms inputs into outputs
Note 1 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.26
procedure
specified way to carry out an activity or a process (3.25)
Note 1 to entry: Procedures may be documented or not.
[SOURCE: ISO 9000:2015, 3.4.5, modified — Note 1 to entry has been modified.]
3.27
performance
measurable result
Note 1 to entry: Per formance can relate either to quantitative or qualitative findings. Results can be determined
and evaluated by qualitative or quantitative methods.
Note 2 to entry: Per formance can relate to the management o f activities, processes (3.25 ), products (including
services), systems or organizations (3.1).
Note 3 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1. Note 1 to entry
has been modified to clari fy the types o f methods that may be used for determining and evaluating results.
3.28
occupational health and safety performance
OH&S performance
performance (3.27) related to the effectiveness (3.13) of the prevention of injury and ill health (3.18) to
workers (3.3 ) and the provision o f sa fe and healthy workplaces (3.6)

3.29
outsource, verb
make an arrangement where an external organization (3.1) per forms part o f an organization’s function
or process (3.25)
Note 1 to entry: An external organization is outside the scope o f the management system (3.10), although the
outsourced function or process is within the scope.
Note 2 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.30
monitoring
determining the status o f a system, a process (3.25 ) or an activity
Note 1 to entry: To determine the status, there may be a need to check, supervise or critically observe.
Note 2 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.

6 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

3.31
measurement
process (3.25 ) to determine a value
Note 1 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.32
audit
systematic, independent and documented process (3.25 ) for obtaining audit evidence and evaluating it
objectively to determine the extent to which the audit criteria are fulfilled
Note 1 to entry: An audit can be an internal audit (first party) or an external audit (second party or third party),
and it can be a combined audit (combining two or more disciplines).
Note 2 to entry: An internal audit is conducted by the organization (3.1) itsel f, or by an external party on its behal f.
Note 3 to entry: “Audit evidence” and “audit criteria” are defined in ISO 19011.
Note 4 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.33
conformity
fulfilment o f a requirement (3.8)

Note 1 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1.
3.34
nonconformity
non- fulfilment o f a requirement (3.8)
Note 1 to entry: Noncon formity relates to requirements in this document and additional OH&S management
system (3.11) requirements that an organization (3.1) establishes for itsel f.

Note 2 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1. Note 1 to entry
has been added to clari fy the relationship o f noncon formities to the requirements o f this document and to the
organization’s own requirements for its OH&S management system.
3.35
incident
occurrence arising out o f, or in the course o f, work that could or does result in injury and ill health (3.18)
Note 1 to entry: An incident where injury and ill health occurs is sometimes re ferred to as an “accident”.
Note 2 to entry: An incident where no injury and ill health occurs, but has the potential to do so, may be re ferred
to as a “near-miss”, “near-hit” or “close call”.
Note 3 to entry: Although there can be one or more nonconformities (3.34) related to an incident, an incident can
also occur where there is no noncon formity.
3.36
corrective action
action to eliminate the cause(s) o f a nonconformity (3.34) or an incident (3.35 ) and to prevent recurrence
Note 1 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1. The definition
has been modified to include re ference to “incident”, as incidents are a key factor in occupational health and
sa fety, yet the activities needed for resolving them are the same as for noncon formities, through corrective
action.

© ISO 2018 – All rights reserved 7


ISO 45001:2018(E)

3.37
continual improvement
recurring activity to enhance performance (3.27 )
Note 1 to entry: Enhancing per formance relates to the use o f the OH&S management system (3.11) in order to
achieve improvement in overall OH&S performance (3.28) consistent with the OH&S policy (3.15 ) and OH&S
objectives (3.17 ).

Note 2 to entry: Continual does not mean continuous, so the activity does not need to take place in all areas
simultaneously.
Note 3 to entry: This constitutes one o f the common terms and core definitions for ISO management system
standards given in Annex SL o f the Consolidated ISO Supplement to the ISO/IEC Directives, Part 1. Note 1 to entry
has been added to clari fy the meaning o f “per formance” in the context o f an OH&S management system; Note 2 to
entry has been added to clari fy the meaning o f “continual”.

4 Context of the organization


4.1 Understanding the organization and its context
The organization shall determine external and internal issues that are relevant to its purpose and that
a ffect its ability to achieve the intended outcome(s) o f its OH&S management system.

4.2 Understanding the needs and expectations of workers and other interested parties
The organization shall determine:
a) the other interested parties, in addition to workers, that are relevant to the OH&S management
system;
b) the relevant needs and expectations (i.e. requirements) o f workers and other interested parties;
c) which o f these needs and expectations are, or could become, legal requirements and other
requirements.

4.3 Determining the scope of the OH&S management system


The organization shall determine the boundaries and applicability o f the OH&S management system to
establish its scope.
When determining this scope, the organization shall:
a) consider the external and internal issues re ferred to in 4.1 ;
b) take into account the requirements re ferred to in 4.2 ;
c) take into account the planned or per formed work-related activities.
The OH&S management system shall include the activities, products and services within the
organization’s control or influence that can impact the organization’s OH&S per formance.
The scope shall be available as documented in formation.

4.4 OH&S management system


The organization shall establish, implement, maintain and continually improve an OH&S management
system, including the processes needed and their interactions, in accordance with the requirements o f
this document.

8 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

5 Leadership and worker participation


5.1 Leadership and commitment
Top management s ha l l demon s trate le adersh ip a nd com m itment with re s p e c t to the O H&S ma nagement

s ys tem by:

a) ta ki ng overa l l re s p on s ibi l ity a nd accou ntabi l ity for the prevention o f work-relate d i nj u r y a nd i l l

he a lth, as wel l a s the provi s ion o f s a fe a nd he a lthy workplace s and ac tivitie s;

b) en s u ri ng that the OH&S p ol ic y a nd relate d OH &S obj e c tive s are e s tabl i s he d a nd are comp atible

with the s trategic d i re c tion o f the organ i z ation;

c) en s u ri ng the i ntegration o f the O H&S management s ys tem re qu i rements i nto the organ i z ation’s

bu s i ne s s pro ce s s e s;

d) en s u ri ng that the re s ou rce s ne e de d to e s tabl i sh , i mplement, ma i nta i n and i mprove the OH&S

ma nagement s ys tem a re avai lab le;

e) com mun ic ati ng the i mp or tance o f e ffe c tive OH&S ma nagement a nd o f con form i ng to the OH&S

ma nagement s ys tem re qui rements;

f) en s u ri ng that the OH &S management s ys tem ach ieve s its i ntende d outcome(s) ;

g) direc ting and s upp orting p ersons to contribute to the e ffec tivenes s o f the OH&S management s ys tem;

h) en s u ri ng and promo ti ng conti nua l i mprovement;

i) s upp or ti ng o ther relevant management role s to demon s trate thei r le aders h ip a s it appl ie s to thei r

a re a s o f re s p on s ibi l ity;

j) developi ng , le ad i ng and promo ti ng a c u lture in the organ i z ation th at s upp or ts the i ntende d

outcome s o f the OH&S management s ys tem;

k) pro te c ti ng workers from repri s a l s when rep or ti ng i nc idents , ha z ard s , ri s ks and opp or tu n itie s;

l) en s u ri ng the organ i z ation e s tabl i she s a nd i mplements a pro ce s s (e s) for con s u ltation a nd

p ar tic ip ation o f workers (s e e 5.4 );

m) s upp or ti ng the e s tabl i s h ment a nd fu nc tion i ng o f he a lth a nd s a fe ty com m itte e s , [s e e 5.4 e) 1) ] .

NO TE Re ference to “ b u s i ne s s ” i n th i s do c u ment c a n b e i nter p re te d b ro ad l y to me a n tho s e ac ti vitie s th at a re

co re to the pu r p o s e s o f the orga n i z ation’s e xi s tence .

5.2 OH&S policy


Top ma nagement s ha l l e s tab l i sh , i mplement a nd ma i ntai n an OH&S p ol ic y that:

a) i nclude s a com m itment to provide s a fe and he a lthy worki ng cond ition s for the prevention o f work-

relate d i nj u r y and i l l he a lth a nd i s appropriate to the pu rp o s e, s i z e a nd conte xt o f the organ i z ation

a nd to the s p e ci fic natu re o f its OH&S ri s ks and O H&S opp or tu n itie s;

b) provide s a framework for s e tti ng the OH&S obj e c tive s;

c) i nclude s a com m itment to fu l fi l lega l re qu i rements and o ther re qu i rements;

d) i nclude s a com m itment to el i m i nate ha z ard s a nd re duce OH&S ri s ks (s e e 8.1.2 );

e) i nclude s a com m itment to conti nua l i mprovement o f the OH&S management s ys tem;

f) i nclude s a com m itment to con s u ltation and p ar ticip ation o f workers , and , where they e xi s t,

workers ’ repre s entati ve s .

© ISO 2018 – All rights reserved 9


ISO 45001:2018(E)

T he OH &S p ol ic y s ha l l:

— b e ava i l able as do c u mente d i n formation;

— b e com mu n ic ate d with i n the orga ni z ation;

— b e ava i l able to i ntere s te d p ar tie s , as appropriate;

— b e relevant and appropri ate .

5.3 Organizational roles, responsibilities and authorities


Top management s ha l l en s u re that the re s p on s ibi l itie s and authoritie s for relevant role s with i n

the OH&S management s ys tem are a s s igne d and com mu n ic ate d at a l l level s with i n the organ i z ation

and mai nta i ne d a s do c u mente d i n formation . Workers at e ach level o f the organ i z ation s ha l l a s s ume

re s p on s ibi l ity for tho s e as p e c ts o f the OH&S management s ys tem over wh ich they have control .

NO TE W h i le re s p o n s ibi l ity a nd author ity c a n b e a s s igne d , u lti m atel y top m a n agement i s s ti l l accou ntab le

for the fu nc tio n i ng o f the O H &S m a n agement s ys tem .

Top management s ha l l a s s ign the re s p on s ibi l ity and authority for:

a) en s u ri ng that the OH&S ma nagement s ys tem con form s to the re qui rements o f th i s do c u ment;

b) rep or ti ng on the p er formance o f the OH &S management s ys tem to top management.

5.4 Consultation and participation of workers


T he orga n i z ation sh a l l e s tabl i s h, i mplement and mai nta i n a pro ce s s(e s) for con s u ltation and

p ar tic ip ation of workers at all appl ic able level s and fu nc tion s , and, where they e xi s t, workers ’

repre s entative s , i n the development, pla nn i ng , i mplementation, p er forma nce eva luation a nd ac tion s for
i mprovement o f the O H&S management s ys tem .

T he organ i z ation s ha l l:

a) provide me ch an i s m s , ti me, trai n i ng a nd re s ou rce s ne ce s s ar y for con s u ltation and p ar tic ip ation;

NO TE 1 Worker rep re s entatio n c a n b e a me ch a n i s m for co n s u ltatio n a nd p a r tic ip ation .

b) provide ti mely acce s s to cle ar, u nders ta ndab le and relevant i n formation ab out the OH&S

management s ys tem;

c) de term i ne a nd remove ob s tacle s or b arriers to p ar tic ip ation and m i n i m i z e tho s e that c a n no t b e

remove d;

NO TE 2 O b s tacle s a nd b a r r iers c a n i nclude fa i lu re to re s p o nd to worker i np uts or s ugge s tio n s , l a n gu age

or l iterac y b a r r iers , rep r i s a l s or th re ats o f rep ri s a l s a nd p ol ic ie s o r p rac tice s th at d i s cou rage o r p en a l i z e

worker p a r tic ip atio n .

d) empha s i z e the con s u ltation o f non-manageria l workers on the fol lowi ng:

1) de term i n i ng the ne e d s and e xp e c tation s o f i ntere s te d p a r tie s (s e e 4.2 );

2) e s tabl i sh i ng the OH&S p ol ic y (s e e 5.2 );

3) a s s ign i ng orga ni z ationa l role s , re s p on s ibi l itie s a nd authoritie s , as appl ic able (s e e 5.3 );

4) de term i n i ng how to fu l fi l lega l re qu i rements and o ther re qu i rements (s e e 6.1.3 );

5) e s tabl i sh i ng O H&S obj e c tive s a nd plan n i ng to ach ieve them (s e e 6.2 );

6) de term i n i ng appl ic able control s for outs ourci ng , pro c u rement a nd contrac tors (s e e 8.1.4 );

10 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

7) de term i n i ng wh at ne e d s to b e mon itore d , me a s u re d and eva luate d (s e e 9.1) ;

8) pl an n i ng , e s tabl i sh i ng , i mplementi ng and mai ntai n i ng an aud it pro gram me(s) (s e e 9. 2 . 2 ) ;

9) en s u ri ng conti nua l i mprovement (s e e 10.3 );

e) emph as i z e the p ar tic ip ation o f non-ma nageri a l workers i n the fol lowi ng:

1) de term i n i ng the me cha ni s m s for thei r con s u ltation and p ar tic ip ation;

2) identi fyi ng ha z a rd s and a s s e s s i ng ri s ks and opp or tu n itie s (s e e 6.1.1 and 6.1.2 );

3) de term i n i ng ac tion s to el i m i nate ha z ard s a nd re duce OH&S ri s ks (s e e 6.1.4 );

4) de te r m i n i n g co mp e te nc e re qu i reme nts , tra i n i n g ne e d s , tr a i n i n g a nd e va lu ati n g tra i n i n g

(see 7. 2 ) ;

5) de term i n i ng wh at ne e d s to b e com mu n ic ate d and how th i s wi l l b e done (s e e 7.4) ;

6) determining control meas ures and their e ffective implementation and use (see 8.1 8.1.3 8.2
, and );

7) i nve s tigati ng i nc idents a nd noncon form itie s a nd de term i n i ng corre c tive ac tion s (s e e 10.2).
NO TE 3 E mp h a s i z i n g the con s u ltatio n a nd p a r tic ip ation o f no n-m a n ager i a l workers i s i ntende d to ap p l y to

p ers on s c a rr yi ng o ut the wo rk ac tivitie s , b ut i s no t i ntende d to e xclude , for e xa mp le , m a n agers who a re i mp ac te d

b y wo rk ac tivitie s o r o ther fac tors i n the orga n i z ation .

NO TE 4 I t i s re co gn i z e d th at the p rovi s ion o f tra i n i n g at no co s t to workers a nd the pro vi s ion o f tra i n i ng

du r i ng wo rki ng ho u rs , where p o s s ib le , c a n remo ve s ign i fic a nt b a r riers to worker p a r tic ip atio n .

6 Planning
6.1 Actions to address risks and opportunities
6.1.1 General
When plan n i ng for the OH&S management s ys tem, the orga ni z ation sh a l l con s ider the i s s ue s re ferre d

to in 4.1 (conte xt) , the re qui rements re ferre d to i n 4.2 (i ntere s te d p ar tie s) and 4.3 (the scope of its
OH&S management s ys tem) and de term i ne the ri sks a nd opp or tun itie s that ne e d to b e add re s s e d to:

a) give as s u ra nce that the OH &S management s ys tem c an ach ieve its i ntende d outcome(s) ;

b) prevent, or re duce, u nde s i re d e ffe c ts;

c) ach ieve conti nua l i mprovement.

When de term i n i ng the ri s ks and opp or tun itie s for the OH&S management s ys tem a nd its i ntende d

outcome s that ne e d to b e add re s s e d, the organ i z ation sh a l l ta ke i nto accou nt:

— h a z ard s (s e e 6.1.2.1 );

— O H&S ri s ks and o ther ri s ks (s e e 6.1.2.2 );

— O H&S opp or tu n itie s and o ther opp or tu n itie s (s e e 6.1.2.3 );

— lega l re qu i rements a nd o ther re qu i rements (s e e 6.1.3).


T he organi z ation, i n its planni ng pro ces s(es) , shal l determi ne and as s es s the ri sks and opp or tunities that

are relevant to the i ntende d outcomes o f the OH&S management s ys tem as s o ciated with changes i n the

organi z ation, its pro ces s es or the OH&S management s ys tem . I n the cas e o f planned changes , p ermanent

or temp orar y, thi s as s es s ment shal l b e under ta ken b e fore the change i s i mplemente d (s ee 8.1.3).

© ISO 2018 – All rights reserved 11


ISO 45001:2018(E)

T he organ i z ation s ha l l mai nta i n do c umente d i n formation on:

— ri s ks and opp or tu nitie s;

— the pro ce s s (e s) and ac tion s ne e de d to de term i ne a nd add re s s its ri s ks and opp or tun itie s (s e e 6.1.2
to 6.1.4 ) to the e xtent ne ce s s ar y to have con fidence that they are c a rrie d out a s plan ne d .

6 . 1 . 2 H a z a r d i d e n ti fi c a ti o n a n d a s s e s s m e n t o f
r i s ks a n d o p p o r tu n i ti e s

6 . 1 . 2 . 1 H a z a rd i d e n ti fi c a ti o n

T he organ i z ation sha l l e s tabl i s h, i mplement and mai nta i n a pro ce s s (e s) for ha z a rd identi fic ation that i s

ongoi ng and pro ac tive . T he pro ce s s(e s) s ha l l ta ke i nto account, but no t b e l i m ite d to:

a) how work i s organ i ze d, s o ci a l fac tors (i nclud i ng worklo ad, work hou rs , vic ti m i z ation, h ara s s ment

and bu l lyi ng) , le adersh ip and the c u ltu re i n the orga n i z ation;

b) routi ne a nd non-routi ne ac tivitie s a nd s ituation s , i nclud i ng h a z ard s a ri s i ng from:

1) i n fra s truc ture, e qu ipment, materia l s , s ub s tance s a nd the phys ic a l cond ition s o f the workplace;

2) pro duc t and s er vice de s ign, re s e arch, development, te s ti ng , pro duc tion, as s embly, con s truc tion,

s er vice del iver y, mai ntena nce and d i s p o s a l;

3) hu man fac tors;

4) how the work i s p er forme d;

c) p a s t re le va nt i nc ide nts , i nte r n a l o r e x ter n a l to the o rga n i z atio n , i nclud i n g e me rge nc ie s , a nd

the i r c au s e s ;

d) p o tenti a l emergenc y s ituation s;

e) p e ople, i nclud i ng con s ideration o f:

1) tho s e with acce s s to the workplace a nd thei r ac tivitie s , i nclud i ng workers , contrac tors , vi s itors

and o ther p ers on s;

2) tho s e i n the vic i nity o f the workpl ace who c an b e a ffe c te d b y the ac tivitie s o f the orga ni z ation;

3) workers at a lo c ation no t u nder the d i re c t control o f the organ i z ation;

f) o ther i s s ue s , i nclud i ng con s ideration o f:

1) the de s ign o f work a re a s , pro ce s s e s , i n s ta l l ation s , mach i ner y/e qu ipment, op erati ng pro ce dure s

and work orga ni z ation, i nclud i ng thei r adap tation to the ne e d s and cap abi l itie s o f the workers

i nvolve d;

2) s ituation s o cc u rri ng i n the vici n ity o f the workplace c au s e d b y work-relate d ac tivitie s u nder

the control o f the organ i z ation;

3) s ituation s no t control le d by the organ i z ation and o cc urri ng i n the vici n ity o f the workplace

that c an c au s e i nj ur y and i l l he a lth to p ers on s i n the workplace;

g) ac tua l or prop o s e d cha nge s in organ i z ation, op eration s , pro ce s s e s , ac tivitie s and the OH&S

management s ys tem (s e e 8.1.3 );

h) ch ange s i n knowle dge o f, and i n formation ab out, h a z a rd s .

12 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

6.1.2.2 Assessment of OH&S risks and other risks to the OH&S management system
T he organ i z ation sh a l l e s tabl i s h, i mplement a nd mai ntai n a pro ce s s(e s) to:

a) assess OH &S ri s ks from the identi fie d ha z ard s , wh i le ta ki ng i nto accou nt the e ffe c ti vene s s of

e xi s ti ng control s;

b) de term i ne a nd a s s e s s the o ther ri s ks relate d to the e s tabl i sh ment, i mplementation, op eration a nd

ma i ntenance o f the OH &S management s ys tem .

T he organ i z ation’s me tho dolo g y(ie s) a nd criteri a for the a s s e s s ment o f OH &S ri sks sh a l l b e defi ne d

with re s p e c t to thei r s cop e, natu re a nd ti m i ng to en s u re they are pro ac tive rather tha n re ac tive

and are u s e d i n a s ys tematic way. D o c u mente d i n formation sh a l l b e ma i nta i ne d and re ta i ne d on the

me tho dolo g y(ie s) and c riteri a .

6.1.2.3 Assessment of OH&S opportunities and other opportunities for the OH&S
management system
T he organ i z ation sh a l l e s tabl i s h, i mplement a nd mai ntai n a pro ce s s(e s) to as s e s s:

a) O H&S opp or tu n itie s to en h ance OH &S p er formance, wh i le ta ki ng i nto accou nt plan ne d ch ange s to

the orga n i z ation, its p ol ic ie s , its pro ce s s e s or its ac tivitie s and:

1) opp or tu n itie s to adap t work, work organ i z ation and work envi ron ment to workers;

2) opp or tu n itie s to el i m i nate h a z a rd s and re duce O H&S ri s ks;

b) o ther opp or tu n itie s for i mprovi ng the OH&S management s ys tem .

NO TE O H &S r i s ks a nd O H &S op p or tu n itie s can re s u lt in o ther r i s ks a nd o ther op p or tu n itie s for the

orga n i z ation .

6.1.3 Determination of legal requirements and other requirements


T he organ i z ation sh a l l e s tabl i s h, i mplement a nd mai ntai n a pro ce s s(e s) to:

a) de term i ne a nd h ave acce s s to up -to - date lega l re qu i rements a nd o ther re qu i rements th at are

appl ic able to its h a z a rd s , OH &S ri sks a nd OH&S ma nagement s ys tem;

b) de term i ne how the s e le ga l re qu i rements and o ther re qu i rements apply to the organ i z ation a nd

wh at ne e d s to b e com mun icate d;

c) ta ke the s e le ga l re qui rements a nd o ther re qu i rements i nto accou nt when e s tab l i sh i ng ,

i mplementi ng , ma i ntai n i ng a nd conti nua l ly i mprovi ng its OH &S management s ys tem .

T he orga n i z ation sh a l l mai nta i n a nd re ta i n do c u mente d i n formation on its le ga l re qu i rements a nd

o ther re qu i rements a nd s ha l l en s u re that it i s up date d to refle c t a ny ch ange s .

NO TE L e ga l re qu i rements a nd o ther re qu i rements c a n re s u lt i n r i s ks a nd o pp o r tu n itie s fo r the orga n i z ation .

6.1.4 Planning action


T he organ i z ation sh a l l p lan:

a) ac tion s to:

1) add re s s the s e ri s ks and opp or tu n itie s (s e e 6.1.2.2 a nd 6.1.2.3 );

2) add re s s lega l re qu i rements and o ther re qui rements (s e e 6.1.3 );

© ISO 2018 – All rights reserved 13


ISO 45001:2018(E)

3) prep are for and re s p ond to emergenc y s ituation s (s e e 8.2 );

b) how to:
1) i nte grate and i mplement the ac tion s i nto its OH &S management s ys tem pro ce s s e s or o ther

bu s i ne s s pro ce s s e s;

2) eva luate the e ffe c ti vene s s o f the s e ac tion s .

T he organ i z ation s ha l l ta ke i nto accou nt the h iera rchy o f control s (s e e 8.1.2 ) and outputs from the

OH&S ma nagement s ys tem when pla nn i ng to ta ke ac tion .

When plan n i ng its ac tion s , the organ i z ation s ha l l con s ider b e s t prac tice s , te ch nolo gic a l op tion s and

fi nanci a l, op erationa l and bu s i ne s s re qu i rements .

6.2 OH&S objectives and planning to achieve them


6.2.1 OH&S objectives
T he orga ni z ation sh a l l e s tabl i sh OH&S obj e c tive s at releva nt fu nc tion s a nd level s i n order to mai ntai n

and conti nua l ly i mprove the OH &S management s ys tem and OH &S p er forma nce (s e e 10.3).
T he OH &S obj e c tive s s ha l l:

a) b e con s i s tent with the OH&S p ol ic y;

b) b e me a s urable (i f prac tic able) or c ap able o f p er formance eva luation;

c) ta ke i nto account:

1) appl ic able re qui rements;

2) the re s u lts o f the as s e s s ment o f ri s ks and opp or tu nitie s (s e e 6.1.2.2 and 6.1.2.3 );

3) the re s u lts of con s u ltation with workers (s e e 5.4 ) a nd , where they exi s t, workers ’

repre s entative s;

d) b e mon itore d;

e) b e com mu n ic ate d;

f) b e up date d a s appropriate .

6.2.2 Planning to achieve OH&S objectives


When p lan n i ng how to ach ieve its OH&S obj e c tive s , the organ i z ation sh a l l de term i ne:

a) what wi l l b e done;

b) what re s ou rce s wi l l b e re qu i re d;

c) who wi l l b e re s p on s ible;

d) when it wi l l b e comple te d;

e) how the re s u lts wi l l b e eva luate d , i nclud i ng i nd ic ators for mon itori ng;

f) how the ac tion s to ach ieve OH&S obj e c tive s wi l l b e i ntegrate d i nto the organ i z ation’s bu s i ne s s

processes.
T he orga n i z ation sh a l l ma i ntai n and re tai n do c u mente d i n formation on the OH &S obj e c tive s and plan s

to ach ieve them .

14 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

7 Support
7.1 Resources
The organization shall determine and provide the resources needed for the establishment,
implementation, maintenance and continual improvement o f the OH&S management system.

7.2 Competence
The organization shall:
a) determine the necessary competence o f workers that a ffects or can a ffect its OH&S per formance;
b) ensure that workers are competent (including the ability to identi fy hazards) on the basis o f
appropriate education, training or experience;
c) where applicable, take actions to acquire and maintain the necessary competence, and evaluate the
e ffectiveness o f the actions taken;
d) retain appropriate documented in formation as evidence o f competence.
NOTE Applicable actions can include, for example, the provision o f training to, the mentoring o f, or the re-
assignment o f currently employed persons, or the hiring or contracting o f competent persons.

7.3 Awareness
Workers shall be made aware o f:
a) the OH&S policy and OH&S objectives;
b) their contribution to the e ffectiveness o f the OH&S management system, including the benefits o f
improved OH&S per formance;
c) the implications and potential consequences o f not con forming to the OH&S management system
requirements;
d) incidents and the outcomes o f investigations that are relevant to them;
e) hazards, OH&S risks and actions determined that are relevant to them;
f ) the ability to remove themselves from work situations that they consider present an imminent and
serious danger to their li fe or health, as well as the arrangements for protecting them from undue
consequences for doing so.

7.4 Communication
7.4.1 General
The organization shall establish, implement and maintain the process(es) needed for the internal and
external communications relevant to the OH&S management system, including determining:
a) on what it will communicate;
b) when to communicate;
c) with whom to communicate:
1) internally among the various levels and functions o f the organization;
2) among contractors and visitors to the workplace;

© ISO 2018 – All rights reserved 15


ISO 45001:2018(E)

3) among o ther i ntere s te d p ar tie s;

d) how to com mun ic ate .

T he organ i z ation sh a l l ta ke i nto account d i vers ity a s p e c ts (e . g. gender, la nguage, c u ltu re, l iterac y,

d i s abi l ity) when con s ideri ng its com mu n ic ation ne e d s .

T he organ i z ation sh a l l en s ure th at the views of e xterna l i ntere s te d p ar tie s are con s idere d in

e s tabl i s h i ng its com mu n ic ation pro ce s s (e s) .

When e s tabl i s h i ng its com mu n ic ation pro ce s s (e s) , the orga ni z ation sh a l l:

— ta ke i nto account its le ga l re qui rements a nd o ther re qu i rements;

— en s u re that OH&S i n formation to b e com mu n ic ate d i s con s i s tent with i n formation generate d with i n

the OH&S ma nagement s ys tem, a nd i s rel i able .

T he organ i z ation s ha l l re s p ond to releva nt com mu n ic ation s on its OH&S m anagement s ys tem .

T he organ i z ation s ha l l re tai n do c u mente d i n formation as evidence of its com mu n ic ation s , as

appropriate .

7.4.2 Internal communication


T he organ i z ation s ha l l :
a) i nterna l ly com mu n ic ate i n formation releva nt to the OH &S ma nagement s ys tem among the variou s

level s and fu nc tion s o f the organ i z ation, i nclud i ng ch ange s to the OH &S management s ys tem, as

appropri ate;

b) en s u re its com mu nic ation pro ce s s (e s) enable s workers to contribute to conti nua l i mprovement.

7.4.3 External communication


T he orga n i z ation s ha l l ex terna l ly com mu n ic ate i n formation relevant to the OH&S ma nagement s ys tem,

as es tabl i s he d by the organ i z ation’s com mu n ic ation pro ce s s (e s) a nd ta ki ng i nto accou nt its lega l

re qui rements and o ther re qui rements .

7.5 Documented information


7.5.1 General
T he organ i z ation’s OH&S ma nagement s ys tem s ha l l i nclude:

a) do c u mente d i n formation re qu i re d b y th i s do c u ment;

b) do c u mente d i n formation de term i ne d by the organ i z ation as b ei ng ne ce s s ar y for the e ffe c tivene s s

o f the OH&S management s ys tem .

NO TE T he e x tent o f do c u mente d i n for m ation for an O H &S m a n agement s ys tem can d i ffer from one

orga n i z atio n to a no ther due to:

— the s i z e o f orga n i z ation a nd its typ e o f ac tivitie s , pro ce s s e s , p ro duc ts a nd s er vice s;

— the ne e d to demo n s trate fu l fi l ment o f le ga l re qu i rements a nd o ther re qu i rements;

— the comp le xity o f p ro ce s s e s a nd thei r i nterac tion s;

— the comp e tence o f workers .

16 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

7.5.2 Creating and updating


When creating and updating documented in formation, the organization shall ensure appropriate:
a) identification and description (e.g. a title, date, author or re ference number);
b) format (e.g. language, so ftware version, graphics) and media (e.g. paper, electronic);
c) review and approval for suitability and adequacy.
7.5.3 Control of documented information
Documented in formation required by the OH&S management system and by this document shall be
controlled to ensure:
a) it is available and suitable for use, where and when it is needed;
b) it is adequately protected (e.g. from loss o f confidentiality, improper use or loss o f integrity).
For the control o f documented in formation, the organization shall address the following activities, as
applicable:
— distribution, access, retrieval and use;
— storage and preservation, including preservation o f legibility;
— control o f changes (e.g. version control);
— retention and disposition.
Documented in formation o f external origin determined by the organization to be necessary for the
planning and operation o f the OH&S management system shall be identified, as appropriate, and
controlled.
NOTE 1 Access can imply a decision regarding the permission to view the documented in formation only, or
the permission and authority to view and change the documented in formation.
NOTE 2 Access to relevant documented in formation includes access by workers, and, where they exist,
workers’ representatives.

8 Operation
8.1 Operational planning and control
8.1.1 General
The organization shall plan, implement, control and maintain the processes needed to meet requirements
o f the OH&S management system, and to implement the actions determined in Clause 6, by:
a) establishing criteria for the processes;
b) implementing control o f the processes in accordance with the criteria;
c) maintaining and retaining documented in formation to the extent necessary to have confidence
that the processes have been carried out as planned;
d) adapting work to workers.
At multi-employer workplaces, the organization shall coordinate the relevant parts o f the OH&S
management system with the other organizations.

© ISO 2018 – All rights reserved 17


ISO 45001:2018(E)

8.1.2 Eliminating hazards and reducing OH&S risks


T he orga n i z ation s ha l l e s tabl i s h, i mplement a nd ma i ntai n a pro ce s s (e s) for the el i m i nation o f ha z ard s

and re duc tion o f OH&S ri sks u s i ng the fol lowi ng h iera rchy o f control s:

a) el i m i nate the ha z a rd;

b) s ub s titute with le s s ha z ardou s pro ce s s e s , op eration s , materia l s or e qu ipment;

c) u s e engi ne eri ng control s and re organ i z ation o f work;

d) u s e ad m i n i s trative control s , i nclud i ng tra i ni ng;

e) u s e ade quate p ers ona l pro te c tive e qu ipment.

NO TE I n m a ny cou ntr ie s , le ga l re qu i rements a nd o ther re qu i rements i nclude the re qu i rement th at p ers on a l

pro te c ti ve e qu ip ment ( PPE ) i s p rovide d at no co s t to wo rkers .

8.1.3 Management of change


T he organ i z ation sh a l l e s tabl i s h a pro ce s s(e s) for the i mplementation and control o f pl an ne d temp ora r y

and p erma nent ch ange s that i mp ac t OH&S p er forma nce, i nclud i ng:

a) new pro duc ts , s er vice s and pro ce s s e s , or change s to e xi s ti ng pro duc ts , s er vice s a nd pro ce s s e s ,

including:
— workplace lo c ation s a nd s u rround i ngs;

— work orga n i z ation;

— worki ng cond ition s;

— e quipment;

— work force;

b) ch ange s to lega l re qu i rements and o ther re qu i rements;

c) ch ange s i n knowle dge or i n formation ab out ha z ard s a nd OH&S ri s ks;

d) developments i n knowle dge and te ch nolo g y.

T he organ i z ation s ha l l review the con s e quence s o f u n i ntende d ch ange s , ta ki ng ac tion to m itigate any

advers e e ffe c ts , as ne ce s s a r y.

NO TE C h a nge s c a n re s u l t i n r i s ks a nd opp or tu n itie s .

8.1.4 Procurement
8.1.4.1 General
T he organ i z ation sha l l e s tabl i s h, i mplement and mai ntai n a pro ce s s (e s) to control the pro c u rement o f

pro duc ts and s er vice s i n order to en s u re thei r con form ity to its OH &S management s ys tem .

8.1.4.2 Contractors
T he organ i z ation sha l l co ord i nate its pro c u rement pro ce s s (e s) with its contrac tors , i n order to identi fy

ha z ard s a nd to a s s e s s and control the OH&S ri s ks ari s i ng from:

a) the contrac tors ’ ac tivitie s and op eration s that i mp ac t the organ i z ation;

b) the organ i z ation’s ac tivitie s and op eration s that i mp ac t the contrac tors ’ workers;

18 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

c) the contrac tors ’ ac tivitie s and op eration s th at i mp ac t o ther i ntere s te d p ar tie s i n the workpl ace .

T he orga ni z ation s ha l l en s u re that the re qu i rements o f its OH &S ma nagement s ys tem are me t b y

contrac tors and thei r workers . T he orga ni z ation’s pro c urement pro ce s s (e s) s ha l l defi ne a nd apply

o cc up ationa l he a lth and s a fe ty c riteria for the s ele c tion o f contrac tors .

NO TE I t c a n b e help fu l to i nclude the o cc up atio n a l he a lth a nd s a fe ty c r iter i a fo r the s ele c tio n o f contrac tors

i n the contrac tu a l do c u ments .

8.1.4.3 Outsourcing
T he organ i z ation sh a l l en s ure that outs ou rce d fu nc tion s and pro ce s s e s are control le d . T he organ i z ation

sh a l l en s u re that its outs ou rci ng a rrangements are con s i s tent with lega l re qu i rements and o ther

re qu i rements a nd with ach ievi ng the i ntende d outcome s o f the O H&S management s ys tem . T he typ e

and de gre e o f control to b e appl ie d to the s e func tion s and pro ce s s e s sh a l l b e defi ne d with i n the OH&S

management s ys tem .

NO TE C o ord i n atio n with e x ter n a l providers can as sis t an o rga n i z ation to add re s s a ny i mp ac t th at

outs o u rc i ng h a s o n its O H &S p er for m a nce .

8.2 Emergency preparedness and response


T he organ i z ation s ha l l e s tabl i s h, i mplement a nd ma i nta i n a pro ce s s (e s) ne e de d to prep are for a nd

re s p ond to p o tentia l emergenc y s ituation s , a s identi fie d i n 6.1.2.1 , i nclud i ng:

a) e s tabl i s h i ng a plan ne d re s p on s e to emergenc y s ituation s , i nclud i ng the provi s ion o f fi rs t aid;

b) provid i ng tra i n i ng for the pl an ne d re s p on s e;

c) p erio d ic a l ly te s ti ng and e xerc i s i ng the pl an ne d re s p on s e c ap abi l ity;

d) eva luati ng p er formance and , as ne ce s s ar y, revi s i ng the plan ne d re s p on s e, i nclud i ng a fter te s ti ng

a nd, i n p ar tic u lar, a fter the o cc urrence o f emergenc y s ituation s;

e) com mun ic ati ng and provid i ng relevant i n formation to all workers on thei r dutie s a nd

re s p on s ibi l itie s;

f) com mun ic ati ng relevant i n formation to contrac tors , vi s itors , emergenc y re s p on s e s er vice s ,

govern ment authoritie s and, a s appropri ate, the lo c a l com mu n ity;

g) ta ki ng i nto accou nt the ne e d s a nd c ap abi l itie s o f a l l releva nt i ntere s te d p ar tie s and en s u ri ng thei r

i nvolvement, as appropriate, i n the development o f the pla nne d re s p on s e .

T he orga ni z ation s ha l l mai ntai n and re tai n do c u mente d i n formation on the pro ce s s(e s) and on the

plan s for re s p ond i ng to p o tentia l emergenc y s ituation s .

9 Performance evaluation
9.1 Monitoring, measurement, analysis and performance evaluation
9.1.1 General
T he organ i z ation s ha l l e s tabl i s h, i mplement and mai ntai n a pro ce s s (e s) for mon itori ng , me as u rement,

ana lys i s and p er formance eva luation .

T he organ i z ation sh a l l de term i ne:

a) wh at ne e d s to b e monitore d and me a s u re d , i nclud i ng:

1) the ex tent to wh ich le ga l re qui rements a nd o ther re qu i rements are fu l fi l le d;

© ISO 2018 – All rights reserved 19


ISO 45001:2018(E)

2) its ac tivitie s and op eration s relate d to identi fie d ha z ard s , ri s ks and opp or tu n itie s;

3) pro gre s s toward s ach ievement o f the organ i z ation’s OH&S obj e c tive s;

4) e ffe c tivene s s o f op erationa l and o ther control s;

b) the me tho d s for mon itori ng , me a s urement, ana lys i s and p er formance eva luation, a s appl ic able, to

en s u re va l id re s u lts;

c) the criteri a agai n s t wh ich the orga ni z ation wi l l eva luate its OH &S p er forma nce;

d) when the monitori ng and me as u ri ng sha l l b e p er forme d;

e) when the re s u lts from monitori ng and me as u rement sh a l l be ana lys e d , eva luate d and

com mu n ic ate d .

T he organ i z ation sh a l l eva luate the O H&S p er formance and de term i ne the e ffe c tivene s s o f the O H&S

ma nagement s ys tem .

T he organ i z ation sh a l l en s ure th at mon itori ng and me a s u ri ng e quipment i s ca l ibrate d or veri fie d as

appl ic able, and i s u s e d a nd ma i ntai ne d as appropriate .

NO TE T here c a n b e le ga l re qu i rements or o ther re qu i rements (e . g. n atio n a l or i ntern ation a l s ta nd a rd s)

concer n i ng the c a l ib ration or ver i fic atio n o f mo n itor i ng a nd me a s u r i ng e qu ipment.

T he organ i z ation s ha l l re tai n appropri ate do c u mente d i n formation:

— a s evidence o f the re s u lts o f mon itori ng , me a s u rement, ana lys i s a nd p er forma nce eva luation;

— on the mai ntena nce, c a l ibration or veri fic ation o f me as u ri ng e qu ipment.

9.1.2 Evaluation of compliance


T he organ i z ation s ha l l e s tabl i s h, i mplement a nd mai nta i n a pro ce s s (e s) for eva luati ng compl ia nce with

lega l re qu i rements and o ther re qu i rements (s e e 6.1.3).


T he organ i z ation s ha l l:

a) de term i ne the fre quenc y and me tho d(s) for the eva luation o f compl ia nce;

b) eva luate compl ia nce and ta ke ac tion i f ne e de d (s e e 10.2 );

c) mai nta i n knowle dge and u nders tand i ng o f its compl i ance s tatu s with le ga l re qui rements a nd o ther

re qui rements;

d) re tai n do c u mente d i n formation o f the compl ia nce eva luation re s u lt(s) .

9.2 Internal audit


9.2.1 General
T he orga n i z ation s ha l l conduc t i nterna l aud its at pla nne d i nter va l s to provide i n formation on whe ther

the OH &S management s ys tem:

a) con form s to:

1) the orga ni z ation’s own re qu i rements for its OH&S management s ys tem, i nclud i ng the OH&S

p ol ic y and OH &S obj e c tive s;

2) the re qu i rements o f th i s do c ument;

b) i s e ffe c tively i mplemente d and mai nta i ne d .

20 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

9.2.2 Internal audit programme


T he organ i z ation sh a l l:

a) pl an, e s tabl i sh , i mplement and ma i nta i n an aud it pro gram me(s) i nclud i ng the fre quenc y, me tho d s ,

re s p on s ibi l itie s , con s u ltation, plan n i ng re qu i rements a nd rep or ti ng , wh ich sh a l l ta ke i nto

con s ideration the i mp or tance o f the pro ce s s e s concerne d a nd the re s u lts o f previou s aud its;

b) defi ne the aud it c riteri a and s cop e for e ach aud it;

c) s ele c t aud itors and conduc t aud its to en s u re obj e c tivity and the i mp a r ti a l ity o f the aud it pro ce s s;

d) en s u re that the re s u lts o f the aud its are rep or te d to relevant ma nagers; en s u re th at releva nt aud it

re s u lts are rep or te d to workers , and, where they e xi s t, workers ’ repre s entative s , and o ther relevant

i ntere s te d p ar tie s;

e) ta ke ac tion to add re s s noncon form itie s a nd conti nua l ly i mprove its O H&S p er formance (s e e

C lau s e 10) ;

f) re tai n do c umente d i n formation as evidence o f the i mplementation o f the aud it pro gram me a nd the

aud it re s u lts .

NO TE Fo r mo re i n for m atio n o n aud iti n g a nd the co mp e tence o f aud ito rs , s e e I S O 19 01 1 .

9.3 Management review


Top management sh a l l review the organ i z ation’s OH &S management s ys tem, at plan ne d i nter va l s , to

en s ure its conti nu i ng s u itabi l ity, ade quac y a nd e ffe c tivene s s .

T he ma nagement review s ha l l i nclude con s ideration o f:

a) the s tatu s o f ac tion s from previou s ma nagement reviews;

b) change s in e xterna l a nd i nterna l i s s ue s th at are relevant to the O H&S management s ys tem,

including:
1) the ne e d s a nd exp e c tation s o f i ntere s te d p ar tie s;

2) le ga l re qui rements a nd o ther re qu i rements;

3) ri s ks and opp or tu n itie s;

c) the e xtent to wh ich the OH&S p ol ic y and the OH&S obj e c tive s have b e en me t;

d) i n formation on the OH&S p er formance, i nclud i ng trend s i n:

1) i ncidents , noncon form itie s , corre c tive ac tion s and conti nua l i mprovement;

2) mon itori ng a nd me as u rement re s u lts;

3) re s u lts o f eva luation o f compl ia nce with lega l re qu i rements and o ther re qui rements;

4) aud it re s u lts;

5) con s u ltation a nd p a r ticip ation o f workers;

6) ri s ks and opp or tu n itie s;

e) ade quac y o f re s ou rce s for mai ntai n i ng an e ffe c tive OH&S ma nagement s ys tem;

f) relevant com mu nic ation(s) with i ntere s te d p ar tie s;

g) opp or tu n itie s for conti nua l i mprovement.

© ISO 2018 – All rights reserved 21


ISO 45001:2018(E)

T he outputs o f the ma nagement review s ha l l i nclude de ci s ion s relate d to:

— the conti nui ng s u itabi l ity, ade quac y a nd e ffe c tivene s s o f the OH&S ma nagement s ys tem i n ach ievi ng

its i ntende d outcome s;

— conti nua l i mprovement opp or tu n itie s;

— any ne e d for cha nge s to the OH&S management s ys tem;

— re s ou rce s ne e de d;

— ac tion s , i f ne e de d;

— opp or tu n itie s to i mprove i ntegration o f the OH&S management s ys tem with o ther bu s i ne s s

pro ce s s e s;

— any i mp l ic ation s for the s trate gic d i re c tion o f the orga n i z ation .

Top management sha l l com mu n ic ate the releva nt outputs o f management reviews to workers , and ,

where they exi s t, workers ’ repre s entative s (s e e 7. 4 ).


T he organ i z ation sh a l l re ta i n do c u mente d i n formation as evidence o f the re s u lts o f management

reviews.
10 Improvement
10.1 General
T he organ i z ation s ha l l de term i ne opp or tu n itie s for i mprovement (s e e C lau s e 9) and i mplement

ne ce s s ar y ac tion s to ach ieve the i ntende d outcome s o f its OH&S ma nagement s ys tem .

10.2 Incident, nonconformity and corrective action


T he organ i z ation s ha l l e s tab l i s h, i mplement and mai ntai n a pro ce s s(e s) , i nclud i ng rep or ti ng ,

i nve s tigati ng and ta ki ng ac tion, to de term i ne a nd manage i nc idents a nd noncon form itie s .

When a n i ncident o r a noncon form ity o cc u rs , the organ i z ation sh a l l:

a) re ac t i n a ti mely ma n ner to the i nc ident or noncon form ity a nd, a s appl ic able:

1) ta ke ac tion to control a nd corre c t it;

2) de a l with the con s e quence s;

b) eva luate, with the p ar tic ip ation o f workers (s e e 5.4 ) and the i nvolvement o f o ther releva nt

i ntere s te d p ar tie s , the ne e d for corre c ti ve ac tion to el i m i nate the ro o t c au s e(s) o f the i nc ident or

noncon form ity, i n order th at it do e s no t re c ur or o cc u r el s ewhere, b y:

1) i nve s tigati ng the i nc ident or reviewi ng the noncon form ity;

2) de term i n i ng the c au s e(s) o f the i ncident or noncon form ity;

3) de term i n i ng i f s i m i la r i ncidents have o cc urre d , i f noncon form itie s e xi s t, or i f they cou ld

p o tenti a l ly o cc ur;

c) review exi s ti ng a s s e s s ments o f OH &S ri s ks and o ther ri sks , as appropriate (s e e 6.1 );

d) de term i ne and i mplement any ac tion ne e de d , i nclud i ng corre c tive ac tion, i n accorda nce with the

h iera rchy o f control s (s e e 8.1.2 ) a nd the ma nagement o f change (s e e 8.1.3 );

e) a s s e s s O H&S ri s ks that relate to new or change d ha z ard s , prior to ta ki ng ac tion;

22 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

f) review the e ffe c tivene s s o f any ac tion ta ken, i nclud i ng corre c tive ac tion;

g) ma ke ch ange s to the OH &S management s ys tem, i f ne ce s s a r y.

C orre c tive ac tion s s ha l l be appropri ate to the e ffe c ts or p o tenti a l e ffe c ts of the i nc idents or

nonconformities encountered.
T he organ i z ation sh a l l re tai n do c u mente d i n formation a s evidence o f:

— the natu re o f the i ncidents or noncon form itie s a nd any s ub s e quent ac tion s ta ken;

— the re s u lts o f a ny ac tion a nd corre c tive ac tion, i nclud i ng thei r e ffe c tivene s s .

T he orga n i z ation sh a l l com mu n ic ate th i s do c u mente d i n formation to relevant workers , a nd, where

they exi s t, workers ’ repre s entative s , a nd o ther releva nt i ntere s te d p ar tie s .

NO TE T he rep o r ti n g a nd i nve s tigation o f i nc idents witho ut u ndue del ay c a n en ab le h a z a rd s to b e el i m i n ate d

a nd a s s o c i ate d O H &S r i s ks to b e m i n i m i z e d a s s o on a s p o s s ib le .

10.3 Continual improvement


T he organ i z ation sha l l conti nua l ly i mprove the s u itabi l ity, ade quac y a nd e ffe c tivene s s o f the OH&S

management s ys tem, by:

a) en h anci ng OH&S p er forma nce;

b) promo ti ng a c u ltu re that s upp or ts an O H&S ma nagement s ys tem;

c) promo ti ng the p ar ticip ation o f workers i n i mp lementi ng ac tion s for the conti nua l i mprovement o f

the OH&S management s ys tem;

d) com mun ic ati ng the relevant re s u lts o f conti nua l i mprovement to workers , and, where they e xi s t,

workers ’ repre s entati ve s;

e) ma i ntai n i ng a nd re tai n i ng do c u mente d i n formation a s evidence o f conti nua l i mprovement.

© ISO 2018 – All rights reserved 23


ISO 45001:2018(E)

Annex A
(informative)
Guidance on the use of this document

A.1 General
The explanatory in formation given in this annex is intended to prevent misinterpretation o f the
requirements contained in this document. While this in formation addresses and is consistent with
these requirements, it is not intended to add to, subtract from, or in any way modi fy them.
The requirements in this document need to be viewed from a systems perspective and should not be
taken in isolation, i.e. there can be an interrelationship between the requirements in one clause with
the requirements in other clauses.

A.2 Normative references


There are no normative re ferences in this document. Users can re fer to the documents listed in the
Bibliography for further in formation on OH&S guidelines and other ISO management system standards.

A.3 Terms and definitions


In addition to the terms and definitions given in Clause 3, and in order to avoid misunderstanding,
clarifications o f selected concepts are provided below.
a) “Continual” indicates duration that occurs over a period o f time, but with intervals o f interruption
(unlike “continuous”, which indicates duration without interruption). “Continual” is there fore the
appropriate word to use in the context o f improvement.
b) The word “consider” means it is necessary to think about but can be excluded, whereas “take into
account” means it is necessary to think about but cannot be excluded.
c) The words “appropriate” and “applicable” are not interchangeable. “Appropriate” means suitable
(for, to) and implies some degree o f freedom, while “applicable” means relevant or possible to apply
and implies that i f it can be done, it shall be done.
d) This document uses the term “interested party”; the term “stakeholder” is a synonym as it
represents the same concept.
e) The word “ensure” means the responsibility can be delegated, but not the accountability to make
sure that an action is per formed.
f ) “Documented in formation” is used to include both documents and records. This document uses the
phrase “retain documented in formation as evidence o f…” to mean records, and “shall be maintained
as documented in formation” to mean documents, including procedures. The phrase “to retain
documented in formation as evidence o f…” is not intended to require that the in formation retained
will meet legal evidentiary requirements. Instead, it is intended to define the type o f records that
need to be retained.
g) Activities that are “under the shared control o f the organization” are activities for which
the organization shares control over the means or methods, or shares direction o f the work
per formed with respect to its OH&S per formance, consistent with its legal requirements and other
requirements.

24 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

Organizations can be subject to requirements related to the OH&S management system that mandate
the use o f specific terms and their meaning. I f these other terms are used, con formity to this document
is still required.

A.4 Context of the organization


A.4.1 Understanding the organization and its context
An understanding o f the context o f an organization is used to establish, implement, maintain and
continually improve its OH&S management system. Internal and external issues can be positive or
negative and include conditions, characteristics or changing circumstances that can a ffect the OH&S
management system, for example:
a) external issues, such as:
1) the cultural, social, political, legal, financial, technological, economic and natural surroundings
and market competition, whether international, national, regional or local;
2) introduction o f new competitors, contractors, subcontractors, suppliers, partners and
providers, new technologies, new laws and the emergence o f new occupations;
3) new knowledge on products and their e ffect on health and sa fety;
4) key drivers and trends relevant to the industry or sector having impact on the organization;
5) relationships with, as well as perceptions and values o f, its external interested parties;
6) changes in relation to any o f the above;
b) internal issues, such as:
1) governance, organizational structure, roles and accountabilities;
2) policies, objectives and the strategies that are in place to achieve them;
3) the capabilities, understood in terms o f resources, knowledge and competence (e.g. capital,
time, human resources, processes, systems and technologies);
4) in formation systems, in formation flows and decision-making processes (both formal and
in formal);
5) introduction o f new products, materials, services, tools, so ftware, premises and equipment;
6) relationships with, as well as perceptions and values o f, workers;
7) the culture in the organization;
8) standards, guidelines and models adopted by the organization;
9) the form and extent o f contractual relationships, including, for example, outsourced activities;
10) working time arrangements;
11) working conditions;
12) changes in relation to any o f the above.
A.4.2 Understanding the needs and expectations of workers and other interested parties
Interested parties, in addition to workers, can include:
a) legal and regulatory authorities (local, regional, state/provincial, national or international);

© ISO 2018 – All rights reserved 25


ISO 45001:2018(E)

b) parent organizations;
c) suppliers, contractors and subcontractors;
d) workers’ representatives;
e) workers’ organizations (trade unions) and employers’ organizations;
f ) owners, shareholders, clients, visitors, local community and neighbours o f the organization and the
general public;
g) customers, medical and other community services, media, academia, business associations and
non-governmental organizations (NGOs);
h) occupational health and sa fety organizations, occupational sa fety and health-care pro fessionals.
Some needs and expectations are mandatory; for example, because they have been incorporated into
laws and regulations. The organization may also decide to voluntarily agree to, or adopt, other needs
and expectations (e.g. subscribing to a voluntary initiative). Once the organization adopts them, they
are addressed when planning and establishing the OH&S management system.
A.4.3 Determining the scope of the OH&S management system
An organization has the freedom and flexibility to define the boundaries and applicability o f the OH&S
management system. The boundaries and applicability may include the whole organization, or a specific
part(s) o f the organization, provided that the top management o f that part o f the organization has its
own functions, responsibilities and authorities for establishing an OH&S management system.
The credibility o f the organization’s OH&S management system will depend upon the choice o f the
boundaries. The scope should not be used to exclude activities, products and services that have or can
impact the organization’s OH&S per formance, or to evade its legal requirements and other requirements.
The scope is a factual and representative statement o f the organization’s operations included within its
OH&S management system boundaries that should not mislead interested parties.
A.4.4 OH&S management system
The organization retains the authority, accountability and autonomy to decide how it will fulfil the
requirements o f this document, including the level o f detail and extent to which it:
a) establishes one or more processes to have confidence that they are controlled, carried out as
planned and achieve the intended outcomes o f the OH&S management system;
b) integrates requirements o f the OH&S management system into its various business processes (e.g.
design and development, procurement, human resources, sales and marketing).
I f this document is implemented for a specific part(s) o f an organization, the policies and processes
developed by other parts o f the organization can be used to meet the requirements o f this document,
provided that they are applicable to the specific part(s) that will be subject to them and that they
con form to the requirements o f this document. Examples include corporate OH&S policies, education,
training and competency programmes, and procurement controls.

A.5 Leadership and worker participation


A.5.1 Leadership and commitment
Leadership and commitment from the organization’s top management, including awareness,
responsiveness, active support and feedback, are critical for the success o f the OH&S management system
and achievement o f its intended outcomes; there fore, top management has specific responsibilities for
which they need to be personally involved or which they need to direct.

26 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

A culture that supports an organization’s OH&S management system is largely determined by top
management and is the product o f individual and group values, attitudes, managerial practices,
perceptions, competencies and patterns o f activities that determine the commitment to, and the style
and proficiency o f, its OH&S management system. It is characterized by, but not limited to, active
participation o f workers, cooperation and communications founded on mutual trust, shared perceptions
o f the importance o f the OH&S management system by active involvement in detection o f OH&S
opportunities and confidence in the e ffectiveness o f preventive and protective measures. An important
way top management demonstrates leadership is by encouraging workers to report incidents, hazards,
risks and opportunities and by protecting workers against reprisals, such as the threat o f dismissal or
disciplinary action, when they do so.
A.5.2 OH&S policy
The OH&S policy is a set o f principles stated as commitments in which top management outlines the
long-term direction o f the organization to support and continually improve its OH&S per formance. The
OH&S policy provides an overall sense o f direction, as well as a framework for the organization to set
its objectives and take actions to achieve the intended outcomes o f the OH&S management system.
These commitments are then reflected in the processes an organization establishes to ensure a robust,
credible and reliable OH&S management system (including addressing the specific requirements in this
document).
The term “minimize” is used in relation to OH&S risks to set out the organization’s aspirations for its
OH&S management system. The term “reduce” is used to describe the process to achieve this.
In developing its OH&S policy, an organization should consider its consistency and coordination with
other policies.
A.5.3 Organizational roles, responsibilities and authorities
Those involved in the organization’s OH&S management system should have a clear understanding
o f their role, responsibility(ies) and authority(ies) for achieving the intended outcomes o f the OH&S
management system.
While top management has overall responsibility and authority for the OH&S management system,
every person in the workplace needs to take account not only o f their own health and sa fety, but also
the health and sa fety o f others.
Top management being accountable means being answerable for decisions and activities to the
organization’s governing bodies, legal authorities and, more broadly, its interested parties. It means
having ultimate responsibility and relates to the person who is held to account i f something is not done,
is not done properly, does not work or fails to achieve its objective.
Workers should be enabled to report about hazardous situations so that action can be taken. They
should be able to report concerns to responsible authorities as required, without the threat o f dismissal,
disciplinary action or other such reprisals.
The specific roles and responsibilities identified in 5.3 may be assigned to an individual, shared by
several individuals, or assigned to a member o f top management.
A.5.4 Consultation and participation of workers
The consultation and participation o f workers, and, where they exist, workers’ representatives, can
be key factors o f success for an OH&S management system and should be encouraged through the
processes established by the organization.
Consultation implies a two-way communication involving dialogue and exchanges. Consultation
involves the timely provision o f the in formation necessary for workers, and, where they exist, workers’
representatives, to give in formed feedback to be considered by the organization be fore making a
decision.
© ISO 2018 – All rights reserved 27
ISO 45001:2018(E)

Pa r ticip ation enable s workers to contribute to de c i s ion-ma ki ng pro ce s s e s on OH&S p er formance

me a s ure s a nd prop o s e d change s .

Fe e db ack on the OH&S management s ys tem i s dep endent up on worker p ar ticip ation . T he orga n i z ation

shou ld en s u re workers at a l l level s a re encou rage d to rep or t h a z ardou s s ituation s , s o that preventive

me a s ure s c a n b e put i n place and corre c tive ac tion ta ken .

T he re cep tion o f s ugge s tion s wi l l b e more e ffe c tive i f workers do no t fe a r the th re at o f d i s m i s s a l ,

d i s cipl i na r y ac tion or o ther s uch repri s a l s when ma ki ng them .

A.6 Planning
A.6.1 Actions to address risks and opportunities
A.6.1.1 General
Planning is not a s ingle event, but an ongoing pro ces s , anticip ating changing circums tances and continually

determining risks and opp ortunities , both for the workers and for the OH&S management s ys tem.

Unde s i re d e ffe c ts c an i nclude work-relate d i nj u r y and i l l he a lth , noncompl ia nce with le ga l re qui rements

and o ther re qui rements , or damage to reputation .

Plan n i ng con s iders the relation sh ip s a nd i nterac tion s b e twe en the ac tivitie s and re qu i rements for the

ma nagement s ys tem a s a whole .

OH&S opp or tu n itie s add re s s the identi fic ation o f ha z ard s , how they are com mu n ic ate d, and the ana lys i s

and m itigation o f known ha z ard s . O ther opp or tu nitie s add re s s s ys tem i mprovement s trate gie s .

E xample s o f opp or tu n itie s to i mprove OH&S p er forma nce:

a) i n s p e c tion a nd aud iti ng fu nc tion s;

b) j ob h a z a rd ana lys i s ( j ob s a fe ty a na lys i s) and ta s k-relate d as s e s s ments;

c) i mprovi ng OH&S p er formance b y a l levi ati ng mono tonou s work or work at a p o tentia l ly ha z a rdou s

pre - de term i ne d work rate;

d) p erm it to work and o ther re co gn ition and control me tho d s;

e) i ncident or noncon form ity i nve s tigation s and corre c tive ac tion s;

f) ergonom ic a nd o ther i nj ur y prevention-relate d a s s e s s ments .

E xample s o f o ther opp or tun itie s to i mprove OH&S p er forma nce:

— i ntegrati ng o cc up ationa l he a lth and s a fe ty re qu i rements at the e arl ie s t s tage i n the l i fe c ycle o f

faci l itie s , e qu ipment or pro ce s s p lan n i ng for faci l itie s relo c ation, pro ce s s re - de s ign or repl acement

o f mach i ner y and plant;

— i ntegrati ng o cc up ationa l he a lth a nd s a fe ty re qu i rements at the e a rl ie s t s tage o f plan n i ng for


faci l itie s relo c ation, pro ce s s re - de s ign or rep lacement o f mach i ner y and pl ant;

— u s i ng new te ch nolo gie s to i mprove OH &S p er formance;

— i mprovi ng the o cc up ationa l he a lth a nd s a fe ty c u ltu re , s uch a s b y ex tend i ng comp e tence relate d to

o cc up ationa l he a lth a nd s a fe ty b eyond re qu i rements or encou ragi ng workers to rep or t i nc idents i n

a ti mely man ner;

— i mprovi ng the vi s ibi l ity o f top management’s s upp or t for the O H&S management s ys tem;

— en ha nc i ng the i ncident i nve s tigation pro ce s s (e s) ;

28 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

— i mprovi ng the pro ce s s (e s) for worker con s u ltation a nd p a r ticip ation;

— b ench marki ng , i nclud i ng con s ideration o f b o th the orga n i z ation’s own p as t p er forma nce and that o f

o ther organ i z ation s;

— col lab orati ng i n foru m s that fo c u s on topics de a l i ng with o cc up ationa l he a lth a nd s a fe ty.

A . 6 . 1 . 2 H a z a rd i d e n ti fi c a ti o n a n d a s s e s s m e n t o f
r i s ks a n d o p p o r tu n i ti e s

A . 6 . 1 . 2 . 1 H a z a rd i d e n ti fi c a ti o n

T he ongoi ng pro ac tive identi fic ation o f ha z ard b e gi n s at the concep tua l de s ign s tage o f any new

workplace, fac i l ity, pro duc t or orga ni z ation . I t shou ld conti nue as the de s ign i s de ta i le d a nd then come s

i nto op eration, a s wel l a s b ei ng ongoi ng du ri ng its fu l l l i fe c ycle to refle c t c u rrent, ch angi ng a nd futu re
ac tivitie s .

Wh i le th i s do c u ment do e s no t add re s s pro duc t s a fe ty (i . e . s a fe ty to end-u s ers o f pro duc ts) , ha z ard s

to workers o cc u rri ng du ri ng ma nu fac tu re, con s tr uc tion, a s s embly or te s ti ng o f pro duc ts s hou ld b e

considered.
H a z ard identi fic ation help s the organ i z ation re co gn i z e a nd unders ta nd the ha z ard s i n the workplace

and to workers , i n order to a s s e s s , prioriti z e and el i m i nate h a z a rd s or re duce OH&S ri s ks .

H a z ard s c an be phys ic a l, chem ic a l, biolo gic a l, p s ycho s o ci a l , me ch an ic a l, ele c tric a l or b as e d on

movement and energ y.

The list given in 6.1.2.1 i s no t e xhau s tive .

NO TE T he nu mb eri n g o f the fo l lowi ng l i s t item s a) to f) do e s no t cor re s p o nd e xac tl y to the nu mb eri n g o f the

list items given in 6.1.2.1.


T he organ i z ation’s ha z ard identi fic ation pro ce s s(e s) s hou ld con s ider:

a) routi ne a nd non-routi ne ac tivitie s and s ituation s:

1) routi ne ac tivitie s and s ituation s c re ate ha z a rd s th rough day-to - day op eration s and norma l

work ac tivitie s;

2) non-routi ne ac tivitie s and s ituation s are o cc a s iona l o r u npl an ne d;

3) s hor t-term or long-term ac tivitie s ca n c re ate d i fferent h a z ard s;

b) hu man fac tors:

1) relate to huma n c ap abi l itie s , l i m itation s and o ther charac teri s tics;

2) i n formation shou ld b e appl ie d to to ol s , mach i ne s , s ys tem s , ac tivitie s and envi ron ment for s a fe,

com for table hu man u s e;

3) s hou ld add re s s th re e a s p e c ts: the ac tivity, the worker and the organ i z ation, a nd how the s e

i nterac t with and i mp ac t on o cc up ationa l he a lth and s a fe ty;

c) new or cha nge d h a z ard s:

1) c a n ari s e when work pro ce s s e s are de teriorate d, mo d i fie d, adap te d or evolve d a s a re s u lt o f

fa m i l i arity or cha ngi ng c i rc u m s ta nce s;

© ISO 2018 – All rights reserved 29


ISO 45001:2018(E)

2) understanding how work is actually per formed (e.g. observing and discussing hazards with
workers) can identi fy i f OH&S risks are increased or reduced;
d) potential emergency situations:
1) unplanned or unscheduled situations that require an immediate response (e.g. a machine
catching fire in the workplace, or a natural disaster in the vicinity o f the workplace or at
another location where workers are per forming work-related activities);
2) include situations such as civil unrest at a location at which workers are per forming work-
related activities which requires their urgent evacuation;
e) people:
1) those in the vicinity o f the workplace who could be a ffected by the activities o f the organization
(e.g. passers-by, contractors or immediate neighbours);
2) workers at a location not under the direct control o f the organization, such as mobile workers or
workers who travel to per form work-related activities at another location (e.g. postal workers,
bus drivers, service personnel travelling to and working at a customer’s site);
3) home-based workers, or those who work alone;
f ) changes in knowledge o f, and in formation about, hazards:
1) sources o f knowledge, in formation and new understanding about hazards can include published
literature, research and development, feedback from workers, and review o f the organization’s
own operational experience;
2) these sources can provide new in formation about the hazards and OH&S risks.

A.6.1.2.2 Assessment of OH&S risks and other risks to the OH&S management system
An organization can use di fferent methods to assess OH&S risks as part o f its overall strategy for
addressing di fferent hazards or activities. The method and complexity o f assessment does not depend
on the size o f the organization, but on the hazards associated with the activities o f the organization.
Other risks to the OH&S management system should also be assessed using appropriate methods.
Processes for the assessment o f risk to the OH&S management system should consider day-to-
day operations and decisions (e.g. peaks in work flow, restructuring) as well as external issues (e.g.
economic change). Methodologies can include ongoing consultation o f workers a ffected by day-to-day
activities (e.g. changes in work load), monitoring and communication o f new legal requirements and
other requirements (e.g. regulatory re form, revisions to collective agreements regarding occupational
health and sa fety), and ensuring resources meet existing and changing needs (e.g. training on, or
procurement o f, new improved equipment or supplies).
A.6.1.2.3 Assessment of OH&S opportunities and other opportunities for the OH&S
management system
The process for assessment should consider the OH&S opportunities and other opportunities
determined, their benefits and potential to improve OH&S per formance.
A.6.1.3 Determination of legal requirements and other requirements
a) Legal requirements can include:
1) legislation (national, regional or international), including statutes and regulations;
2) decrees and directives;

30 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

3) orders issued by regulators;


4) permits, licences or other forms o f authorization;
5) judgments o f courts or administrative tribunals;
6) treaties, conventions, protocols;
7) collective bargaining agreements.
b) Other requirements can include:
1) the organization’s requirements;
2) contractual conditions;
3) employment agreements;
4) agreements with interested parties;
5) agreements with health authorities;
6) non-regulatory standards, consensus standards and guidelines;
7) voluntary principles, codes o f practice, technical specifications, charters;
8) public commitments o f the organization or its parent organization.
A.6.1.4 Planning action
The actions planned should primarily be managed through the OH&S management system and should
involve integration with other business processes, such as those established for the management o f the
environment, quality, business continuity, risk, financial or human resources. The implementation o f
the actions taken is expected to achieve the intended outcomes o f the OH&S management system.
When the assessment o f OH&S risks and other risks has identified the need for controls, the planning
activity determines how these are implemented in operation (see Clause 8); for example, determining
whether to incorporate these controls into work instructions or into actions to improve competence.
Other controls can take the form o f measuring or monitoring (see Clause 9 ).
Actions to address risks and opportunities should also be considered under the management o f change
(see 8.1.3 ) to ensure there are no resulting unintended consequences.
A.6.2 OH&S objectives and planning to achieve them
A.6.2.1 OH&S objectives
Objectives are established to maintain and improve OH&S per formance. The objectives should be
linked to risks and opportunities and per formance criteria which the organization has identified as
being necessary for the achievement o f the intended outcomes o f the OH&S management system.
OH&S objectives can be integrated with other business objectives and should be set at relevant
functions and levels. Objectives can be strategic, tactical or operational:
a) strategic objectives can be set to improve the overall per formance o f the OH&S management system
(e.g. to eliminate noise exposure);
b) tactical objectives can be set at facility, project or process level (e.g. to reduce noise at source);
c) operational objectives can be set at the activity level (e.g. the enclosure o f individual machines to
reduce noise).

© ISO 2018 – All rights reserved 31


ISO 45001:2018(E)

T he me a s u rement o f OH &S obj e c tive s c a n b e qua l itative or qua ntitative . Qua l itative me as u re s ca n b e

approxi mation s , s uch as tho s e ob tai ne d from s ur veys , i nter views a nd ob s er vation s . T he organ i z ation i s

no t re qui re d to e s tabl i s h OH&S obj e c tive s for ever y ri sk a nd opp or tu n ity it de term i ne s .

A.6.2.2 Planning to achieve OH&S objectives


T he organ i z ation c an plan to ach ieve obj e c tive s i nd ividua l ly or col le c tively. Plan s c an b e develop e d for
mu ltiple obj e c tive s where ne ce s s a r y.

T he orga n i z ation s hou ld e xam i ne the re s ource s re qu i re d (e . g. fi na nci a l, huma n, e qu ipment,

i n fras tr uc tu re) to ach ieve its obj e c tive s .

When prac tic able, e ach obj e c tive s hou ld b e a s s o ci ate d with an i nd ic ator wh ich c a n b e s trate gic, tac tic a l

or op erationa l .

A.7 Support
A.7.1 Resources
E xample s o f re s ou rce s i nclude huma n, natu ra l, i n fra s truc tu re, te ch nolo g y and fi nanc ia l .

E xample s o f i n fra s truc ture i nclude the organ i z ation’s bu i ld i ngs , p lant, e qu ipment, uti l itie s , i n formation

te ch nolo g y and com mu n ic ation s s ys tem s , a nd emergenc y contai n ment s ys tem s .

A.7.2 Competence
T he comp e tence o f workers s hou ld i nclude the knowle dge and s ki l l s ne e de d to appropri ately identi fy

the ha z a rd s and de a l with the OH &S ri sks as s o c iate d with thei r work a nd workplace .

I n de term i n i ng the comp e tence for e ach role, the orga n i z ation s hou ld ta ke i nto account th i ngs s uch as:

a) the e ducation, trai n i ng , qua l i fic ation and e xp erience ne ce s s a r y to u nder ta ke the role and the re -

trai n i ng ne ce s s a r y to ma i nta i n comp e tence;

b) the work envi ron ment;

c) the preventive and control me as u re s re s u lti ng from the ri s k a s s e s s ment pro ce s s(e s) ;

d) the re qu i rements appl ic able to the OH &S management s ys tem;

e) le ga l re qu i rements and o ther re qu i rements;

f) the OH&S p ol ic y;

g) the p o tentia l con s e quence s o f compl i ance and noncompl i ance, i nclud i ng the i mp ac t on the worker ’s

he a lth a nd s a fe ty;

h) the va lue o f p a r ticip ation o f workers i n the O H&S ma nagement s ys tem b as e d on thei r knowle dge

and s ki l l;

i) the dutie s a nd re s p on s ibi l itie s a s s o ci ate d with the role s;

j) i nd ividua l c ap abi l itie s , i nclud i ng e xp erience, la nguage s ki l l s , l iterac y and d ivers ity;

k) the relevant up dati ng o f the comp e tence made ne ce s s ar y b y conte xt or work change s .

Workers c an a s s i s t the organ i z ation i n de term i n i ng the comp e tence ne e de d for role s .

Workers shou ld have the ne ce s s ar y comp e tence to remove them s elve s from s ituation s o f i m m i nent and

s eriou s danger. For th i s pu r p o s e, it i s i mp or tant that workers are provide d with s u ffic ient trai n i ng on

ha z ard s a nd ri s ks a s s o ci ate d with thei r work.

32 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

As appropriate, workers should receive the training required to enable them to carry out their
representative functions for occupational health and sa fety e ffectively.
In many countries, it is a legal requirement to provide training at no cost to workers.
A.7.3 Awareness
In addition to workers (especially temporary workers), contractors, visitors and any other parties
should be aware o f the OH&S risks to which they are exposed.
A.7.4 Communication
The communication process(es) established by the organization should provide for the gathering,
updating and dissemination o f in formation. It should ensure that relevant in formation is provided, is
received and is understandable to all relevant workers and interested parties.
A.7.5 Documented information
It is important to keep the complexity o f the documented in formation at the minimum level possible to
ensure e ffectiveness, e fficiency and simplicity at the same time.
This should include documented in formation regarding planning to address legal requirements and
other requirements and on evaluations o f the e ffectiveness o f these actions.
The actions described in 7.5.3 are particularly aimed at preventing unintended use o f obsolete
documented in formation.
Examples o f confidential in formation include personal and medical in formation.

A.8 Operation
A.8.1 Operational planning and control
A.8.1.1 General
Operational planning and control o f the processes need to be established and implemented as necessary
to enhance occupational health and sa fety, by eliminating hazards or, i f not practicable, by reducing the
OH&S risks to levels as low as reasonably practicable for operational areas and activities.
Examples o f operational control o f the processes include:
a) the use o f procedures and systems o f work;
b) ensuring the competence o f workers;
c) establishing preventive or predictive maintenance and inspection programmes;
d) specifications for the procurement o f goods and services;
e) application o f legal requirements and other requirements, or manu facturers’ instructions for
equipment;
f ) engineering and administrative controls;
g) adapting work to workers; for example, by:
1) defining, or redefining, how the work is organized;
2) the induction o f new workers;
3) defining, or redefining, processes and working environments;

© ISO 2018 – All rights reserved 33


ISO 45001:2018(E)

4) using ergonomic approaches when designing new, or modi fying, workplaces, equipment, etc.

A.8.1.2 Eliminating hazards and reducing OH&S risks


The hierarchy o f controls is intended to provide a systematic approach to enhance occupational health
and sa fety, eliminate hazards, and reduce or control OH&S risks. Each control is considered less
e ffective than the one be fore it. It is usual to combine several controls in order to succeed in reducing
the OH&S risks to a level that is as low as reasonably practicable.
The following examples are given to illustrate measures that can be implemented at each level.
a) Elimination: removing the hazard; stopping using hazardous chemicals; applying ergonomics
approaches when planning new workplaces; eliminating monotonous work or work that causes
negative stress; removing fork-li ft trucks from an area.
b) Substitution: replacing the hazardous with less hazardous; changing to answering customer
complaints with online guidance; combating OH&S risks at source; adapting to technical progress
(e.g. replacing solvent-based paint by water-based paint; changing slippery floor material; lowering
voltage requirements for equipment).
c) Engineering controls, reorganization o f work, or both: isolating people from hazard; implementing
collective protective measures (e.g. isolation, machine guarding, ventilation systems); addressing
mechanical handling; reducing noise; protecting against falls from height by using guard rails;
reorganizing work to avoid people working alone, unhealthy work hours and workload, or to
prevent victimization.
d) Administrative controls including training: conducting periodic sa fety equipment inspections;
conducting training to prevent bullying and harassment; managing health and sa fety coordination
with subcontractors’ activities; conducting induction training; administrating forkli ft driving
licences; providing instructions on how to report incidents, noncon formities and victimization
without fear o f retribution; changing the work patterns (e.g. shi fts) o f workers; managing a health
or medical surveillance programme for workers who have been identified as at risk (e.g. related to
hearing, hand-arm vibration, respiratory disorders, skin disorders or exposure); giving appropriate
instructions to workers (e.g. entry control processes).
e) Personal protective equipment (PPE): providing adequate PPE, including clothing and instructions
for PPE utilization and maintenance (e.g. sa fety shoes, sa fety glasses, hearing protection, gloves).

A.8.1.3 Management of change


The objective o f a management o f change process is to enhance occupational health and sa fety at work,
by minimizing the introduction o f new hazards and OH&S risks into the work environment as changes
occur (e.g. with technology, equipment, facilities, work practices and procedures, design specifications,
raw materials, sta ffing, standards or regulations). Depending on the nature o f an expected change, the
organization can use an appropriate methodology(ies) (e.g. design review) for assessing the OH&S risks
and the OH&S opportunities o f the change. The need to manage change can be an outcome o f planning
(see 6.1.4).
A.8.1.4 Procurement
A.8.1.4.1 General
The procurement process(es) should be used to determine, assess and eliminate hazards, and to reduce
OH&S risks associated with, for example, products, hazardous materials or substances, raw materials,
equipment, or services be fore their introduction into the workplace.
The organization’s procurement process(es) should address requirements including, for example,
supplies, equipment, raw materials, and other goods and related services purchased by the organization

34 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

to con form to the organization’s OH&S management system. The process should also address any needs
for consultation (see 5.4) and communication (see 7.4).

The organization should veri fy that equipment, installations and materials are sa fe for use by workers
by ensuring:
a) equipment is delivered according to specification and is tested to ensure it works as intended;
b) installations are commissioned to ensure they function as designed;
c) materials are delivered according to their specifications;
d) any usage requirements, precautions or other protective measures are communicated and made
available.
A.8.1.4.2 Contractors
The need for coordination recognizes that some contractors (i.e. external providers) possess specialized
knowledge, skills, methods and means.
Examples o f contractor activities and operations include maintenance, construction, operations,
security, cleaning and a number o f other functions. Contractors can also include consultants or
specialists in administrative, accounting and other functions. Assignment o f activities to contractors
does not eliminate the organization’s responsibility for the occupational health and sa fety o f workers.
An organization can achieve coordination o f its contractors’ activities through the use o f contracts that
clearly define the responsibilities o f the parties involved. An organization can use a variety o f tools for
ensuring contractors’ OH&S per formance in the workplace (e.g. contract award mechanisms or pre-
qualification criteria which consider past health and sa fety per formance, sa fety training, or health and
sa fety capabilities, as well as direct contract requirements).
When coordinating with contractors, the organization should give consideration to the reporting
o f hazards between itsel f and its contractors, controlling worker access to hazardous areas, and
procedures to follow in emergencies. The organization should speci fy how the contractor will coordinate
its activities with the organization’s own OH&S management system processes (e.g. those used for
controlling entry, for confined space entry, exposure assessment and process sa fety management) and
for the reporting of incidents.
The organization should veri fy that contractors are capable o f per forming their tasks be fore being
allowed to proceed with their work; for example, by veri fying that:
a) OH&S per formance records are satis factory;
b) qualification, experience and competence criteria for workers are specified and have been met
(e.g. through training);
c) resources, equipment and work preparations are adequate and ready for the work to proceed.
A.8.1.4.3 Outsourcing
When outsourcing, the organization needs to have control o f the outsourced functions and process(es)
to achieve the intended outcome(s) o f the OH&S management system. In the outsourced functions and
process(es), the responsibility for con forming to the requirements o f this document is retained by the
organization.
The organization should establish the extent o f control over outsourced function(s) or process(es)
based upon factors such as:
— the ability o f the external organization to meet the organization’s OH&S management system
requirements;

© ISO 2018 – All rights reserved 35


ISO 45001:2018(E)

— the te ch n ic a l comp e tence o f the organ i z ation to defi ne appropriate control s or a s s e s s the ade quac y

o f control s;

— the p o tenti a l e ffe c t the outs ou rce d pro ce s s or fu nc tion wi l l have on the organ i z ation’s abi l ity to

ach ieve the i ntende d outcome o f its O H&S management s ys tem;

— the ex tent to wh ich the outs ou rce d pro ce s s or fu nc tion i s sh are d;

— the c ap abi l ity o f the organ i z ation to ach ieve the ne ce s s ar y control th rough the appl ic ation o f its

pro c u rement pro ce s s;

— opportunities for improvement.


I n s ome countrie s , le ga l re qui rements add re s s outs ou rce d fu nc tion s or pro ce s s e s .

A.8.2 Emergency preparedness and response


E mergenc y prep are d ne s s pla n s c an i nclude natu ra l , te ch n ic a l a nd ma n-made events that o cc u r i n s ide

and outs ide norma l worki ng hou rs .

A.9 Performance evaluation


A.9.1 Monitoring, measurement, analysis and performance evaluation
A.9.1.1 General
I n order to ach ieve the i ntende d outcome s o f the OH &S management s ys tem, the pro ce s s e s shou ld b e

monitore d , me a s u re d and a na lys e d .

a) E xa mple s o f what cou ld b e monitore d and me a s u re d c an i nclude, but are no t l i m ite d to:

1) o cc up ationa l he a lth complai nts , he a lth of workers (th rough s u r vei l la nce) and work

envi ron ment;

2) work-relate d i ncidents , i nj u rie s a nd i l l he a lth , a nd compla i nts , i nclud i ng trend s;

3) the e ffe c tivene s s o f op erationa l control s a nd emergenc y exerci s e s , or the ne e d to mo d i fy or

i ntro duce new control s;

4) competence.
b) E xa mple s o f what cou ld b e monitore d a nd me as u re d to eva luate the fu l fi l ment o f le ga l re qu i rements
c an i nclude, but are no t l i m ite d to:

1) identi fie d lega l re qui rements (e . g. whe ther a l l lega l re qui rements have b e en de term i ne d , and

whe ther the organ i z ation’s do c u mente d i n formation o f them i s kep t up -to - date) ;

2) col le c tive agre ements (when lega l ly bi nd i ng) ;

3) the s tatu s o f identi fie d gap s i n compl ia nce .

c) E xa mple s o f what cou ld b e mon itore d a nd me a s ure d to eva luate the fu l fi l ment o f o ther re qu i rements
c an i nclude, but are no t l i m ite d to:

1) col le c tive agre ements (when no t lega l ly bi nd i ng) ;

2) s tandard s a nd co de s;

3) cor p orate a nd o ther p ol icie s , ru le s and regu lation s;

36 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

4) insurance requirements.
d) Criteria are what the organization can use to compare its per formance against.
1) Examples are benchmarks against:
i) other organizations;
ii) standards and codes;
iii) the organization’s own codes and objectives;
iv) OH&S statistics.
2) To measure criteria, indicators are typically used; for example:
i) i f the criterion is a comparison o f incidents, the organization may choose to look at
f requency, type, severity or number o f incidents; then the indicator could be the determined
rate within each one o f these criteria;
ii) i f the criterion is a comparison o f completions o f corrective actions, then the indicator
could be the percentage completed on time.
Monitoring can involve continual checking, supervising, critically observing or determining the status
in order to identi fy change from the per formance level required or expected. Monitoring can be applied
to the OH&S management system, to processes or to controls. Examples include the use o f interviews,
reviews o f documented in formation and observations o f work being per formed.
Measurement generally involves the assignment o f numbers to objects or events. It is the basis for
quantitative data and is generally associated with the per formance evaluation o f sa fety programmes
and health surveillance. Examples include the use o f calibrated or verified equipment to measure
exposure to a hazardous substance or the calculation o f the sa fe distance from a hazard.
Analysis is the process o f examining data to reveal relationships, patterns and trends. This can mean
the use o f statistical operations, including in formation from other similar organizations, to help draw
conclusions from the data. This process is most o ften associated with measurement activities.
Per formance evaluation is an activity undertaken to determine the suitability, adequacy and e ffectiveness
o f the subject matter to achieve the established objectives o f the OH&S management system.
A.9.1.2 Evaluation of compliance
The frequency and timing o f compliance evaluations can vary depending on the importance o f the
requirement, variations in operating conditions, changes in legal requirements and other requirements
and the organization’s past per formance. An organization can use a variety o f methods to maintain its
knowledge and understanding o f its compliance status.
A.9.2 Internal audit
The extent o f the audit programme should be based on the complexity and level o f maturity o f the OH&S
management system.
An organization can establish objectivity and impartiality o f the internal audit by creating a process(es)
that separates auditors’ roles as internal auditors from their normal assigned duties, or the organization
can also use external people for this function.
A.9.3 Management review
The terms used in relation to management review should be understood as follows:
a) “suitability” re fers to how the OH&S management system fits the organization, its operation, its
culture and business systems;
© ISO 2018 – All rights reserved 37
ISO 45001:2018(E)

b) “ade quac y” re fers to whe ther the OH&S management s ys tem i s i mplemente d appropriately;

c) “e ffe c tivene s s ” re fers to whe ther the OH &S management s ys tem i s ach ievi ng the i ntende d outcome .

T he management review topics l i s te d i n 9. 3 a) to g) ne e d no t b e add re s s e d a l l at once; the orga n i z ation

shou ld de term i ne when a nd how the management review topics are add re s s e d .

A.10 Improvement
A.10.1 General
T he organ i z ation s hou ld con s ider the re s u lts from ana lys i s and eva luation o f O H&S p er formance,

eva luation o f compl i ance, i nterna l aud its and ma nagement review when ta ki ng ac tion to i mprove .

E xample s o f i mprovement i nclude corre c tive ac tion, conti nua l i mprovement, bre a kth rough ch ange,

i n novation a nd re - organ i z ation .

A.10.2 Incident, nonconformity and corrective action


S ep a rate pro ce s s e s may e xi s t for i ncident i nve s tigation s a nd noncon form itie s reviews , or the s e may b e

combi ne d a s a s i ngle pro ce s s , dep end i ng on the organ i z ation’s re qu i rements .

E xample s o f i nc idents , noncon form itie s a nd corre c tive ac tion s c a n i nclude, but a re no t l i m ite d to:

a) i ncidents: s ame level fa l l with or without i nj ur y; broken le g; a sb e s to s i s; he ari ng lo s s; damage to

bui ld i ngs or veh icle s where they c an le ad to OH &S ri sks;

b) noncon form itie s: pro te c tive e qu ipment no t fu nc tioni ng prop erly; fai lure to fu l fi l lega l re qu i rements

and o ther re qu i rements; pre s crib e d pro ce du re s no t b ei ng fol lowe d;

c) corre c tive ac tion s (a s i nd ic ate d b y the h ierarchy o f control s; see 8.1.2 ): el i m i nati ng ha z ard s;

s ub s tituti ng with le s s ha z ardou s materi a l s; re de s ign i ng or mo d i fyi ng e qu ipment or to ol s;

developi ng pro ce dure s; i mprovi ng the comp e tence o f a ffe c te d workers; cha ngi ng the fre quenc y of

u s e; u s i ng p ers ona l pro te c tive e qu ipment.

Ro o t c au s e ana lys i s re fers to the prac tice o f explori ng a l l the p o s s ible fac tors a s s o ci ate d with an i nc ident

or noncon form ity by a ski ng what happ ene d, how it happ ene d and why it happ ene d, to provide the i nput

for what c an b e done to prevent it from h app en i ng aga i n .

When de term i n i ng the ro o t c au s e o f an i nc ident or noncon form ity, the organ i z ation s hou ld use

me tho d s appropri ate to the natu re o f the i ncident or noncon form ity b ei ng ana lys e d . T he fo c u s o f ro o t

cau s e ana lys i s i s prevention . T h i s ana lys i s c an identi fy mu ltiple contributor y fai lu re s , i nclud i ng fac tors
relate d to com mu n ic ation, comp e tence, fatigue, e quipment or pro ce dure s .

Reviewi ng the e ffe c tivene s s o f corre c tive ac tion s [s e e 10.2 f) ] re fers to the ex tent to wh ich the

i mplemente d corre c tive ac tion s ade quately control the ro o t c au s e(s) .

A.10.3 Continual improvement


E xample s o f conti nua l i mprovement i s s ue s i nclude, but a re no t l i m ite d to:

a) new te ch nolo g y;

b) go o d prac tice s , b o th i nterna l a nd ex terna l to the orga n i z ation;

c) s ugge s tion s and re com mendation s from i ntere s te d p ar tie s;

d) new knowle dge and u nders tand i ng o f o cc up ationa l he a lth a nd s a fe ty-relate d i s s ue s;

e) new or i mprove d materia l s;

38 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

f) change s i n worker cap abi l itie s or comp e tence;

g) ach ievi ng i mprove d p er formance with fewer re s ou rce s (i . e . s i mpl i fic ation, s tre am l i n i ng , e tc .) .

© ISO 2018 – All rights reserved 39


ISO 45001:2018(E)

Bibliography

[1] ISO 9000:2015, Quality management systems — Fundamentals and vocabulary


[2] ISO 9001, Quality management systems — Requirements
[3] ISO 14001, Environmental management systems — Requirements with guidance for use
[4] ISO 19011, Guidelines for auditing management systems
[5] ISO 20400, Sustainable procurement — Guidance
[6] ISO 26000, Guidance on social responsibility
[7] ISO 31000, Risk management — Guidelines
[8] ISO 37500, Guidance on outsourcing
[9] ISO 39001, Road traffic safety (RTS) management systems — Requirements with guidance for use
[10] ISO Guide 73:2009, Risk management — Vocabulary
[11] IEC 31010, Risk management — Risk assessment techniques
[12] ILO. Guidelines on occupational sa fety and health management systems, ILO-OSH 2001.
2nd ed. International Labour O ffice, Geneva, 2009. Available at: http://www.ilo .org/sa fework/
info/standards -and-instruments/ WCMS _107727/ lang--en/index.htm
[13] ILO. International Labour Standards (including those on occupational sa fety and health).
International Labour O ffice, Geneva. Available at: http://www.ilo .org/normlex (click on
“instruments”, then “Conventions and Recommendations by subject”)
[14] OHSAS 18001. Occupational health and sa fety management systems — Requirements. 2nd ed.
OHSAS Project Group, London, July 2007, ISBN 978 0 580 50802 8
[15] OHSAS 18002. Occupational health and sa fety management systems — Guidelines for the
implementation o f OHSAS 18001:2007. 2nd ed. OHSAS Project Group, London, Nov 2008,
ISBN 978 0 580 61674 7

40 © ISO 2018 – All rights reserved


ISO 45001:2018(E)

Alphabetical index of terms


3.32
aud it organ i z ation 3.1
competence 3.23 outs ou rce, verb 3 . 2 9

f 3.33
con orm ity p ar tic ip ation 3.4
3.5
con s u ltation p er formance 3 . 2 7

conti nua l i mprovement 3 . 3 7 3.14


p ol ic y

contrac tor 3 .7 procedure 3.26


corre c tive ac tion 3.36 process 3.25
do c u mente d i n formation 3.24 3.8
re qu i rement

effectiveness 3.13 3.20


ri s k

ha z ard 3 .19 top management 3.12


incident 3.35 worker 3.3
i nj ur y and i l l he a lth 3.18 workplace 3.6
i ntere s te d p a r ty 3.2
lega l re qu i rements and o ther re qu i rements 3 .9

management s ys tem 3.10


me as u rement 3.31
monitoring 3.30
f
noncon orm ity 3.34
objective 3.16
o cc up ationa l he a lth and s a fe ty ma nagement s ys tem 3.11
OH&S management s ys tem

o cc up ationa l he a lth and s a fe ty obj e c tive 3 .17

OH&S objective
o cc up ationa l he a lth and s a fe ty opp or tu n ity 3.22
OH&S opp or tun ity

o cc up ationa l he a lth and s a fe ty p er formance 3.28


OH&S p er forma nce

o cc up ationa l he a lth and s a fe ty p ol ic y 3.15


OH&S p ol ic y

o cc up ationa l he a lth and s a fe ty ri s k 3.21


OH&S ri s k

© ISO 2018 – All rights reserved 41


ISO 45001:2018(E)

ICS  13.100
Price based on 41 pages

© ISO 2018 – All rights reserved

You might also like