ISO 45001 Clause 8: Operation
Clause 8 addresses the operational controls needed to manage OH&S risks, including the hierarchy of controls, change management, procurement, contractor oversight, and emergency preparedness and response.
Hierarchy of Controls
Clause 8.1.2 requires the organisation to establish processes for eliminating hazards and reducing OH&S risks using the hierarchy of controls. This hierarchy prioritises controls in the following order: elimination of the hazard, substitution with less hazardous processes or materials, engineering controls such as isolation or guarding, administrative controls including training and procedures, and personal protective equipment as a last resort.
The hierarchy is not optional. Organisations must demonstrate they have considered higher-order controls before relying on administrative measures or PPE. Auditors will look for evidence that the hierarchy has been systematically applied to significant hazards.
Management of Change
Clause 8.1.3 requires the organisation to establish processes for managing planned temporary and permanent changes that can impact OH&S performance. This includes changes to products, services, processes, work organisation, working conditions, equipment, and the workforce. Before implementing changes, the organisation must assess potential OH&S consequences and take action to mitigate any adverse effects.
Procurement
Clause 8.1.4 addresses procurement controls. The organisation must establish processes to ensure that procurement of products and services, including contracted activities, conforms to OH&S management system requirements. This means evaluating suppliers and products for their safety implications before they enter the workplace.
Contractors
Clause 8.1.4.2 specifically addresses contractor management. The organisation must coordinate procurement processes with its contractors to identify hazards and assess and control OH&S risks arising from contractor activities that affect the organisation's workers, contractor worker activities that affect other people in the workplace, and contractor activities that affect the organisation's other stakeholders.
Emergency Preparedness and Response
Clause 8.2 requires the organisation to establish, implement, and maintain processes for preparing for and responding to potential emergency situations. This includes planning for foreseeable emergencies, establishing response procedures, conducting periodic drills, evaluating performance after emergencies or drills, communicating to all workers about their duties, and providing training for planned response activities.
Key Audit Questions
- Can you demonstrate how the hierarchy of controls has been applied to significant hazards, with evidence that higher-order controls were considered first?
- What process exists for managing changes that could impact OH&S performance, and how are risks assessed before changes are implemented?
- How does the organisation ensure procurement of products, services, and contracted activities conforms to OH&S requirements?
- What contractor management processes are in place to identify and control hazards arising from contractor activities?
- How does the organisation prepare for emergencies, and how frequently are emergency drills conducted and evaluated?
Get the Full Audit Checklist
Our comprehensive ISO 45001 checklist covers every requirement across all clauses, including detailed questions for Clause 8 and beyond.