Implementation of an OH&S MS based on ISO 45001
Domain 4 - Implementation of an OH&S MS based on ISO 45001
This domain tests support and operation: resources, competence, awareness, communication, documented information and operational control, including contractors, change and emergencies.
Core rules
- Resources (7.1) must be provided for the system.
- Competence (7.2) applies to workers whose work affects OH&S performance; determine needs, provide training or other action, evaluate effectiveness and retain evidence.
- Awareness (7.3) covers the policy, hazards and risks, workers' contribution, and the consequences of not conforming.
- Communication (7.4) requires internal and external communication on what, when, with whom and how.
- Documented information (7.5) must be created, updated and controlled for availability, protection and retention.
- Operational control (8.1) requires criteria, implementation of controls, management of change, and control of procurement, contractors and outsourced processes.
- Hierarchy of controls (8.1.2) must be applied in order; management of change (8.1.3) covers new equipment, materials, processes and organizational changes.
- Emergency preparedness (8.2) requires identified scenarios, response plans, training, testing, review and communication with workers, contractors, visitors and emergency services.
Worked example
A contractor will replace roof lights. The organization checks contractor competence, defines permit-to-work and fall-protection criteria, coordinates with the contractor's risk assessment, briefs both workforces, controls access, plans rescue, and monitors the work. The reasoning: procurement and contractor control under 8.1.4 are not satisfied by a signed contract; the organization must verify controls in practice.
Traps
A toolbox talk as the only competence evidence; uncontrolled documents on shared drives; treating temporary changes as exempt from management of change; leaving contractors to self-manage; and an emergency plan that is never exercised.