ISO 45001:2018 Clause 6.1 Actions to address risks and opportunities

6.1.1 General

When planning for the OH&S management system, the organization shall consider the issues referred to in 4.1 (context), the requirements referred to in 4.2 (interested parties) and 4.3 (the scope of its OH&S management system) and determine the risks and opportunities that need to be addressed to:
a) give assurance that the OH&S management system can achieve its intended outcome(s);
b) prevent, or reduce, undesired effects;
c) achieve continual improvement.
When determining the risks and opportunities for the OH&S management system and its intended outcomes that need to be addressed, the organization shall take into account:

• hazards (see 6.1.2.1);
• OH&S risks and other risks (see 6.1.2.2);
• OH&S opportunities and other opportunities (see 6.1.2.3);
• legal requirements and other requirements (see 6.1.3).

The organization, in its planning process(es), shall determine and assess the risks and opportunities that are relevant to the intended outcomes of the OH&S management system associated with changes in the organization, its processes or the OH&S management system. In the case of planned changes, permanent or temporary, this assessment shall be undertaken before the change is implemented (see 8.1.3).

The organization shall maintain documented information on:

• risks and opportunities;
• the process(es) and actions needed to determine and address its risks and opportunities (see 6.1.2 to 6.1.4) to the extent necessary to have confidence that they are carried out as planned.

As per Annex A (Guidance on the use of ISO 45001:2018 standard) of ISO 45001:2018 standard it further explains:

Planning is not a single event, but an ongoing process, anticipating changing circumstances and continually determining risks and opportunities, both for the workers and for the OH&S management system. Undesired effects can include work-related injury and ill health, noncompliance with legal requirements and other requirements, or damage to reputation.
Planning considers the relationships and interactions between the activities and requirements for the management system as a whole. OH&S opportunities address the identification of hazards, how they are communicated, and the analysis and mitigation of known hazards. Other opportunities address system improvement strategies.
Examples of opportunities to improve OH&S performance:
a) inspection and auditing functions;
b) job hazard analysis (job safety analysis) and task-related assessments;
c) improving OH&S performance by alleviating monotonous work or work at a potentially hazardous pre-determined work rate;
d) permit to work and other recognition and control methods;
e) incident or nonconformity investigations and corrective actions;
f) ergonomic and other injury prevention-related assessments.
Examples of other opportunities to improve OH&S performance:

• integrating occupational health and safety requirements at the earliest stage in the life cycle of facilities, equipment or process planning for facilities relocation, process re-design or replacement of machinery and plant;
• integrating occupational health and safety requirements at the earliest stage of planning for facilities relocation, process re-design or replacement of machinery and plant;
• using new technologies to improve OH&S performance;
• improving the occupational health and safety culture, such as by extending competence related to occupational health and safety beyond requirements or encouraging workers to report incidents in a timely manner;
• improving the visibility of top management’s support for the OH&S management system;
• enhancing the incident investigation process(es);
• improving the process(es) for worker consultation and participation;
• benchmarking, including consideration of both the organization’s own past performance and that of other organizations;
• collaborating in forums that focus on topics dealing with occupational health and safety.

1) When planning for the OH&S management system, the organization shall consider the issues referred to in 4.1 (context), the requirements referred to in 4.2 (interested parties) and 4.3 (the scope of its OH&S management system)

When planning for an Occupational Health and Safety (OH&S) management system in accordance with ISO 45001, the organization needs to consider several key aspects:

1. Internal and External Issues (Clause 4.1): In this step, the organization should identify and evaluate the internal and external factors that can impact its OH&S management system. Internal factors can include the organization’s culture, resources, and processes, while external factors can involve legal, technological, social, economic, and environmental aspects. Understanding these issues helps the organization determine its context and assess potential risks and opportunities related to OH&S.
2. Needs and Expectations of Interested Parties (Clause 4.2): Identify and assess the needs and expectations of all interested parties relevant to OH&S. This includes employees, customers, suppliers, regulatory authorities, and other stakeholders. Understanding these needs and expectations is crucial in setting OH&S objectives and ensuring compliance with legal requirements.
3. Legal Requirements (Clause 4.2): Determine all applicable legal and regulatory requirements related to occupational health and safety. This involves identifying relevant laws, regulations, and standards that the organization must adhere to in its specific industry and location.
4. Scope of OH&S Management System (Clause 4.3): Define the scope of your OH&S management system. This should outline the boundaries and applicability of the system within the organization. It specifies what parts of the organization are covered, what activities are included, and what locations are involved.

By considering these elements, the organization can establish a strong foundation for its OH&S management system. This information is crucial for developing policies, objectives, and processes that effectively address occupational health and safety risks and meet the needs of both the organization and its interested parties. It also ensures compliance with relevant legal requirements, ultimately leading to a safer and healthier workplace.planning for the OH&S management system. Here are the key steps and considerations for planning an OH&S management system:

• Gain commitment and support from top management for implementing the OH&S management system.
• Define roles and responsibilities for OH&S within the organization to ensure accountability.
• Develop an OH&S policy that outlines the organization’s commitment to safety and health, along with its overall objectives.
• Conduct a thorough hazard identification and risk assessment to identify potential OH&S risks within the workplace.
• Ensure a comprehensive understanding of all relevant laws, regulations, and standards pertaining to OH&S in your industry and location.
• Establish measurable OH&S objectives and targets that align with the organization’s policy and address identified risks.
• Allocate resources (human, financial, and technological) necessary to implement the OH&S management system effectively.
• Identify the skills and competencies required for employees to fulfill their OH&S roles, and provide appropriate training.
• Establish a communication plan to ensure effective internal and external communication related to OH&S matters.
• Develop and maintain documented information, including policies, procedures, and records, as required by the OH&S management system.
• Develop procedures and plans to address potential emergencies and respond to incidents.
• Implement a system for monitoring, measuring, and evaluating OH&S performance, including regular inspections and audits.
• Establish processes for identifying areas of improvement and taking corrective and preventive actions.
• Involve workers in OH&S decision-making and provide mechanisms for them to report safety concerns.
• If applicable, develop procedures for managing contractors and ensuring their compliance with OH&S requirements.
• Conduct regular management reviews to assess the performance of the OH&S management system and make necessary improvements.
• Maintain comprehensive documentation and records to demonstrate compliance and track OH&S performance.
• Conduct internal audits to assess the effectiveness of the OH&S management system and compliance with standards.
• Continuously seek feedback from employees and stakeholders, and use this input to drive improvements in the OH&S management system.

By following these steps and principles, an organization can effectively plan and implement its OH&S management system, leading to a safer and healthier workplace while complying with relevant regulations. Regular review and improvement are essential to ensure that the system remains effective and responsive to changing circumstances.

2) Determine the risks and opportunities that need to be addressed

Occupational Health and Safety (OH&S) risks and opportunities can vary widely depending on the industry, location, and specific activities of an organization. However, here are some common OH&S risks and opportunities that many organizations may encounter:

Risks:

1. Physical Hazards: These include risks associated with machinery, equipment, chemicals, and other physical factors in the workplace. Examples include slips, trips, falls, electrical hazards, and exposure to hazardous substances.
2. Ergonomic Hazards: Poor workplace ergonomics can lead to musculoskeletal disorders (MSDs), including back pain, repetitive strain injuries (RSIs), and carpal tunnel syndrome.
3. Psychosocial Risks: Workplace stress, bullying, harassment, and excessive workloads can negatively impact employees’ mental health and well-being.
4. Biological Hazards: These include exposure to biological agents such as viruses, bacteria, and fungi, which can lead to infections or other health issues, especially in healthcare and laboratory settings.
5. Fire and Explosion Risks: Poorly maintained electrical systems, improper storage of flammable materials, and inadequate fire safety measures can lead to fire and explosion hazards.
6. Workplace Violence: Violence or threats of violence from colleagues, clients, or visitors can pose serious risks to employees’ safety.
7. Inadequate Training: Insufficient training on safety procedures and equipment operation can result in accidents and injuries.
8. Poor Emergency Response: A lack of preparedness for emergencies, such as fires, natural disasters, or chemical spills, can increase the severity of incidents.
9. Compliance Risks: Failure to comply with OH&S regulations and standards can result in legal penalties and reputational damage.

Opportunities:

1. Improved Training: Implementing comprehensive training programs can enhance employee knowledge and skills related to safety procedures and equipment use.
2. Technology Adoption: Utilizing advanced technology like sensors, automation, and wearable devices can enhance safety monitoring and reduce exposure to hazards.
3. Ergonomic Design: Redesigning workspaces and equipment to improve ergonomics can reduce the risk of musculoskeletal injuries.
4. Wellness Programs: Promoting employee wellness through programs that address physical fitness, mental health, and stress management can reduce psychosocial risks.
5. Safety Culture: Fostering a culture of safety where employees actively participate in identifying and mitigating risks can lead to continuous improvement in OH&S.
6. Incident Reporting Systems: Implementing effective incident reporting systems encourages employees to report near misses and incidents, helping identify areas for improvement.
7. Health Surveillance: Implementing regular health check-ups and monitoring can detect early signs of occupational health issues.
8. Supplier and Contractor Management: Ensuring that suppliers and contractors follow safety protocols can reduce risks associated with outsourced work.
9. Regulatory Compliance: Staying informed about and complying with evolving OH&S regulations can help organizations avoid legal risks.

Determining risks and opportunities associated with Occupational Health and Safety (OH&S) is a critical step in planning and implementing an effective OH&S management system. Here’s a systematic approach to identifying and assessing these risks and opportunities:

• Understand the internal and external factors that can influence OH&S within your organization (as per Clause 4.1 of ISO 45001). This includes the organization’s objectives, culture, operations, location, industry, and any relevant industry-specific risks.
• Identify and consider the needs and expectations of all relevant stakeholders, including employees, contractors, regulatory authorities, customers, and the community (as per Clause 4.2 of ISO 45001).
• Identify and stay up-to-date with all applicable OH&S laws, regulations, and standards. Determine how these requirements apply to your organization.
• Conduct a thorough assessment of workplace hazards. This involves identifying potential sources of harm to employees, such as physical, chemical, biological, ergonomic, and psychosocial hazards.
• Use a risk assessment process to evaluate the severity and likelihood of each identified hazard. This involves assigning a risk score or level to each hazard. Consider factors like the frequency of exposure, the potential consequences, and the effectiveness of existing controls.
• Opportunities for improvement in OH&S can also be identified during the risk assessment process. These opportunities may include technological advancements, changes in processes, or innovative approaches to enhance safety and reduce risks.
• Prioritize the identified risks based on their significance. Consider the potential harm to employees, the likelihood of occurrence, and the organization’s tolerance for risk.
• Develop and implement control measures to reduce or eliminate identified risks. This may involve engineering controls, administrative controls, personal protective equipment (PPE), and other risk mitigation strategies.
• Continuously monitor and review the effectiveness of the implemented controls. Adjust measures as necessary based on feedback and evolving circumstances.
• Implement actions to seize identified opportunities for improving OH&S. This may involve process improvements, training, technology upgrades, or changes in policies and procedures.
• Document all risk assessments, control measures, and actions taken to address risks and opportunities. Proper documentation is crucial for compliance and continuous improvement.
• Periodically review and update the risk and opportunity assessments to account for changes in the organization’s context, objectives, or external factors.
• Involve employees in the risk assessment process. They often have valuable insights and firsthand knowledge of workplace hazards and opportunities for improvement.
• Present the results of risk and opportunity assessments during management review meetings to ensure that top management is aware of and supports the OH&S initiatives.

By following these steps, your organization can systematically identify, assess, and address OH&S risks and opportunities, leading to a safer work environment and improved OH&S performance. This approach aligns with the requirements of ISO 45001 and other OH&S management system standards. Some examples of Occupational Health and Safety (OH&S) risks and opportunities that organizations might encounter:

OH&S Risks:

1. Physical Hazards:
   • Risk of slips, trips, and falls due to wet floors or cluttered walkways.
   • Exposure to machinery and equipment with moving parts that can cause injury.
   • Chemical exposure leading to respiratory problems or skin irritation.
2. Ergonomic Risks:
   • Poorly designed workstations leading to musculoskeletal disorders.
   • Repetitive tasks causing repetitive strain injuries (RSIs).
   • Inadequate seating arrangements resulting in back pain.
3. Psychosocial Risks:
   • Work-related stress due to excessive workload or tight deadlines.
   • Bullying and harassment among employees affecting mental well-being.
   • Lack of work-life balance leading to burnout.
4. Biological Hazards:
   • Exposure to infectious agents in healthcare settings, increasing the risk of disease transmission.
   • Handling biological materials without proper precautions.
5. Fire and Explosion Risks:
   • Electrical hazards, such as faulty wiring or overloaded circuits.
   • Improper storage of flammable materials or chemicals.
   • Lack of fire safety measures and evacuation plans.
6. Workplace Violence:
   • Threats or acts of violence from customers, clients, or colleagues.
   • Insufficient security measures to prevent workplace violence.
7. Inadequate Training:
   • Employees not adequately trained in using safety equipment or following safety procedures.
   • Lack of emergency response training leading to confusion during incidents.
8. Compliance Risks:
   • Failure to comply with OH&S regulations and standards, resulting in legal consequences.
   • Non-compliance with local building codes and safety regulations.

OH&S Opportunities:

1. Improved Training:
   • Implementation of comprehensive training programs on safe work practices.
   • Providing ongoing safety training to employees to enhance their skills and awareness.
2. Technology Adoption:
   • Implementing safety technologies like sensors and wearable devices to monitor and alert employees to potential hazards.
   • Using automation to reduce the need for employees to perform high-risk tasks.
3. Ergonomic Design:
   • Redesigning workstations and equipment to promote ergonomic principles and reduce the risk of musculoskeletal disorders.
4. Wellness Programs:
   • Offering wellness programs that address physical fitness, mental health, and stress management to improve overall well-being.
5. Safety Culture:
   • Promoting a culture of safety where employees actively participate in identifying and mitigating risks and hazards.
   • Encouraging reporting of near misses and potential safety issues.
6. Incident Reporting Systems:
   • Implementing effective incident reporting systems to facilitate the reporting of accidents, near misses, and unsafe conditions.
7. Supplier and Contractor Management:
   • Ensuring that suppliers and contractors adhere to safety protocols and practices.
   • Implementing stringent safety requirements in contracts with external parties.
8. Regulatory Compliance:
   • Staying informed about and complying with evolving OH&S regulations to mitigate legal risks and reputational damage.

3) The organization must address risk and opportunity to give assurance that the OH&S management system can achieve its intended outcome

Addressing risk and opportunity is a fundamental aspect of ensuring that an Occupational Health and Safety (OH&S) management system can achieve its intended outcome effectively. Here’s why addressing risk and opportunity is crucial in this context:

• Identifying and addressing OH&S risks is essential to prevent workplace accidents, injuries, illnesses, and fatalities. By proactively mitigating risks, an organization can create a safer work environment for its employees, contractors, and other stakeholders.
• Understanding and addressing legal and regulatory requirements related to OH&S is critical to ensure compliance. Non-compliance can result in legal penalties, fines, and reputational damage. Therefore, addressing regulatory risks is essential for the organization’s sustainability.
• Recognizing and seizing opportunities for improvement in OH&S can lead to enhanced safety performance. This includes adopting new technologies, improving processes, and fostering a culture of safety that promotes employee engagement and proactive hazard reporting.
• Assessing risks and opportunities allows the organization to allocate resources effectively. By prioritizing the most significant risks and opportunities, the organization can focus its efforts and resources where they will have the most impact.
• The ISO 45001 standard emphasizes the importance of addressing risks and opportunities as a key component of an effective OH&S management system. It ensures that the system remains dynamic and responsive to changing circumstances, leading to the achievement of its intended outcomes.
• Addressing risks and opportunities provides assurance to stakeholders, including employees, customers, regulatory authorities, and the community, that the organization is committed to maintaining a safe and healthy work environment. It also demonstrates accountability in managing OH&S issues.

In summary, addressing risk and opportunity in the context of an OH&S management system is not only a requirement of ISO 45001 but also a fundamental strategy for achieving the system’s intended outcomes, which are to protect the health and safety of workers and other relevant interested parties. It helps organizations proactively manage risks, ensure compliance, drive continuous improvement, and provide confidence to stakeholders that OH&S is a top priority. Here are steps to effectively address risk and opportunity and provide this assurance:

• Conduct a comprehensive risk assessment to identify and evaluate OH&S risks and opportunities within your organization. This includes physical hazards, regulatory compliance risks, ergonomic issues, psychosocial factors, and any other factors that could impact employee health and safety.
• Prioritize identified risks based on their significance. Consider factors like the severity of potential harm, the likelihood of occurrence, and the organization’s tolerance for risk. Focus on addressing high-priority risks first.
• Develop and implement control measures to mitigate or eliminate identified risks. This may involve engineering controls, administrative controls, and personal protective equipment (PPE). Ensure that these measures are effective and well-documented.
• Identify opportunities for improvement in OH&S. These can include adopting new technologies, optimizing work processes, enhancing training programs, and promoting a safety culture within the organization.
• Develop action plans to capitalize on identified opportunities. Implement changes, improvements, and innovations that enhance the effectiveness of the OH&S management system.
• Establish key performance indicators (KPIs) and monitoring processes to regularly assess the effectiveness of risk mitigation measures and the progress of opportunity implementation.
• Ensure that top management is actively involved in reviewing the risk and opportunity assessments, progress reports, and performance data. This demonstrates leadership commitment to OH&S.
• Engage employees at all levels in the risk and opportunity assessment processes. Encourage them to report hazards and contribute to improvement initiatives, fostering a culture of safety and collaboration.
• Maintain thorough records of risk assessments, control measures, and actions taken to address risks and opportunities. Proper documentation provides evidence of compliance and effectiveness.
• Effectively communicate risk and opportunity assessments, actions taken, and progress to employees, contractors, and other stakeholders. Transparent communication builds trust and confidence.
• Continuously review and update risk and opportunity assessments to adapt to changing conditions. Encourage a culture of continuous improvement, where lessons learned are integrated into the OH&S management system.
• Consider engaging third-party auditors to assess your OH&S management system against recognized standards such as ISO 45001. Certification can provide external assurance of your system’s effectiveness.

By following these steps, your organization can systematically address risks and opportunities within its OH&S management system. This approach not only helps ensure compliance with regulations but also enhances the organization’s ability to protect employee health and safety, improve overall performance, and achieve the intended outcomes of the OH&S management system.

4) The organization must address risk and opportunity to prevent, or reduce, undesired effects

addressing Occupational Health and Safety (OH&S) risks and opportunities should primarily focus on preventing or reducing undesired effects within the workplace. Here’s how organizations can achieve this goal:

Preventing Undesired Effects:

1. Risk Mitigation: For identified OH&S risks, organizations should implement appropriate control measures to prevent or minimize undesired effects. These measures may include engineering controls, administrative controls, and personal protective equipment (PPE).
2. Training and Awareness: Ensuring that employees are well-trained and aware of the risks and safety procedures can prevent accidents and incidents. Training helps employees understand potential hazards and how to avoid them.
3. Compliance: Strict adherence to OH&S regulations and standards is crucial for preventing undesired effects. Staying in compliance helps organizations avoid legal issues and penalties.
4. Effective Emergency Response: Adequate planning and preparation for emergencies can prevent or mitigate the undesired effects of accidents, fires, chemical spills, or natural disasters.
5. Regular Maintenance: Proper maintenance of equipment and machinery reduces the risk of unexpected breakdowns or failures that could lead to undesired effects.

Reducing Undesired Effects:

1. Continuous Improvement: Continuously monitoring and reviewing OH&S processes and performance can lead to the reduction of undesired effects over time. Lessons learned from incidents and near misses can inform improvements.
2. Safety Culture: Fostering a culture of safety, where employees are encouraged to report unsafe conditions and behaviors, can lead to early identification and reduction of potential hazards.
3. Technology Adoption: Implementing safety technologies such as monitoring systems and automation can reduce human error and the associated undesired effects.
4. Wellness Programs: Employee wellness initiatives can reduce the undesired effects of stress, burnout, and mental health issues by promoting overall well-being.
5. Supplier and Contractor Management: Ensuring that suppliers and contractors follow safety protocols and standards can prevent undesired effects resulting from outsourced work.
6. Regulatory Compliance: Complying with OH&S regulations and standards reduces the risk of undesired effects associated with non-compliance.
7. Documentation and Reporting: Proper documentation and reporting of incidents and safety-related data enable organizations to analyze trends and take corrective actions to reduce undesired effects.

By focusing on prevention and reduction of undesired effects, organizations not only protect the health and safety of their employees but also enhance their overall OH&S performance. This proactive approach contributes to a safer work environment and minimizes the potential for accidents, injuries, and occupational health issues.

5) The organization must address risk and opportunity to achieve continual improvement

Achieving continual improvement is a fundamental objective when addressing Occupational Health and Safety (OH&S) risks and opportunities. Continual improvement is one of the core principles of OH&S management systems, and it’s emphasized in standards like ISO 45001. Here’s how organizations can integrate this principle into their OH&S practices:

• Continually monitor and assess the effectiveness of OH&S controls, processes, and procedures. This includes conducting regular inspections, audits, and performance evaluations.
• Analyze incident reports, near misses, and other relevant data to identify trends, patterns, and areas for improvement. Data-driven decision-making is crucial for continual improvement.
• Engage employees at all levels in identifying hazards and suggesting improvements. Employees often have valuable insights and firsthand knowledge of workplace conditions.
• When incidents occur, conduct thorough root cause analyses to understand the underlying causes. Addressing root causes rather than just symptoms helps prevent future occurrences.
• Establish specific OH&S objectives and targets that are measurable and aligned with the organization’s goals. Regularly review and update these objectives to reflect changing circumstances.
• Periodically review and update risk and opportunity assessments to stay proactive in addressing emerging risks and capitalizing on opportunities for improvement.
• Invest in continuous employee training and development to enhance their OH&S knowledge and competence. Regular training ensures that employees remain updated on best practices.
• Hold regular management reviews to assess the performance of the OH&S management system. Management commitment and support are crucial for driving continual improvement.
• Establish feedback mechanisms for employees and other stakeholders to report safety concerns, provide suggestions, and share insights that can lead to improvement.
• Implement corrective actions to address non-conformities and preventive actions to proactively eliminate potential hazards and vulnerabilities.
• Maintain records of incidents, risk assessments, and actions taken to address risks and opportunities. This documentation provides a historical record of improvements.
• Compare your OH&S performance and practices to industry benchmarks and best practices to identify areas where improvements can be made.
• Communicate OH&S performance, goals, and improvement initiatives effectively within the organization. Ensure that all employees are aware of their roles in achieving continual improvement.

The concept of continual improvement is not only about responding to problems but also about seeking opportunities to enhance OH&S performance. It involves an ongoing cycle of planning, doing, checking, and acting (PDCA cycle) to drive progress. By consistently striving for improvement, organizations can reduce risks, prevent accidents, enhance employee well-being, and maintain a proactive and effective OH&S management system.

6) When determining the risks and opportunities for the OH&S management system and its intended outcomes that need to be addressed, the organization shall take into account hazards ;OH&S risks and other risks ; OH&S opportunities and other opportunities; legal requirements and other requirements .

To effectively take into account hazards, OH&S risks, other risks, OH&S opportunities, other opportunities, legal requirements, and other requirements when determining the risks and opportunities for the Occupational Health and Safety (OH&S) management system and its intended outcomes, the organization can follow a systematic approach:

1. Establish a Risk and Opportunity Assessment Team: Designate a team or individual responsible for conducting the assessment. Ensure that this team has the necessary expertise and knowledge of OH&S, regulations, and relevant business operations.
2. Identify Hazards: Begin by identifying all OH&S hazards within the organization. This includes physical, chemical, biological, ergonomic, and psychosocial hazards. Employee input, incident reports, and workplace inspections can help identify hazards.
3. Assess OH&S Risks: Evaluate the OH&S risks associated with each identified hazard. Assess the likelihood of incidents and the severity of potential harm. This assessment can be quantitative or qualitative, depending on the organization’s resources and complexity.
4. Identify Other Risks: Extend the risk assessment beyond OH&S to identify other risks that could affect the OH&S management system and its intended outcomes. Consider financial, operational, strategic, reputational, and compliance risks.
5. Explore OH&S Opportunities: Investigate opportunities to improve OH&S performance. This may involve optimizing safety procedures, investing in better equipment, enhancing training programs, or promoting a stronger safety culture.
6. Identify Other Opportunities: Similarly, explore opportunities beyond OH&S that could benefit the organization as a whole. These opportunities might include cost-saving measures, process improvements, innovation initiatives, or market expansion strategies.
7. Analyze Legal Requirements: Thoroughly review all relevant OH&S legal requirements, including local, national, and international regulations. Identify the specific legal obligations that apply to your organization.
8. Consider Other Requirements: Recognize and address additional requirements stemming from contracts, industry standards, best practices, stakeholder expectations, and internal policies. These requirements may impact OH&S and broader organizational operations.
9. Prioritize Risks and Opportunities: Prioritize the identified risks and opportunities based on their significance, taking into account factors like potential impact, likelihood, and the organization’s risk tolerance.
10. Develop Action Plans: Create action plans for addressing high-priority risks and opportunities. Specify responsibilities, timelines, and resources required for implementation.
11. Monitor and Review: Continuously monitor and review the progress of actions taken to address risks and opportunities. Adjust strategies as needed based on changing circumstances and performance feedback.
12. Document and Communicate: Document the risk and opportunity assessment process, actions, and outcomes. Communicate the findings and action plans to relevant stakeholders, including employees, management, and external parties as necessary.
13. Integrate into the OH&S Management System: Integrate the results of the risk and opportunity assessment into the organization’s OH&S management system, including policies, procedures, training programs, and performance monitoring.

By following these steps, organizations can systematically consider and address hazards, OH&S risks, other risks, OH&S opportunities, other opportunities, legal requirements, and other requirements when determining the risks and opportunities for their OH&S management system. This approach ensures a comprehensive and proactive approach to managing OH&S and associated factors.

7) The organization, in its planning process(es), shall determine and assess the risks and opportunities that are relevant to the intended outcomes of the OH&S management system associated with changes in the organization, its processes or the OH&S management system

Conducting risk and opportunity assessments associated with changes in the organization, its processes, or the Occupational Health and Safety (OH&S) management system is a critical aspect of effective OH&S management. This process helps identify potential risks and opportunities related to changes and ensures that necessary measures are taken to address them. Here’s how to approach this assessment:

• Identify and document the nature and scope of the change, whether it involves organizational structure, processes, technology, equipment, or the OH&S management system itself.
• Engage relevant stakeholders, including employees, contractors, and relevant departments, in the assessment process. They can provide valuable insights into potential risks and opportunities associated with the proposed changes.
• Assess the OH&S risks associated with the proposed changes. Consider factors such as the introduction of new hazards, changes in work processes, potential disruptions, and any safety implications.
• Identify opportunities for improvement in OH&S performance resulting from the changes. This could include streamlining processes, enhancing safety measures, or adopting new technologies to improve safety.
• Review and verify whether the changes will impact compliance with OH&S laws, regulations, and standards. Ensure that the changes align with legal requirements.
• Document the results of the risk and opportunity assessment, including identified risks, opportunities, and any recommended actions. This documentation should be kept as part of the OH&S management system records.
• Develop action plans to address identified risks and seize opportunities. Specify responsibilities, timelines, and necessary resources for implementing these actions.
• Integrate the outcomes of the risk and opportunity assessment into the OH&S management system. Update relevant policies, procedures, training materials, and other documentation as needed.
• Continuously monitor the progress of actions taken to address risks and opportunities associated with the changes. Regularly review the effectiveness of these measures and make adjustments as necessary.
• Communicate the findings of the risk and opportunity assessment and the associated action plans to employees and relevant stakeholders. Ensure that everyone is aware of the changes and their implications for OH&S.
• Establish feedback mechanisms for employees to report any concerns or issues related to the changes. Encourage open communication to address emerging risks promptly.
• Include the results of the risk and opportunity assessment in the management review process. This ensures that top management is informed about the OH&S implications of the changes.

By conducting a thorough risk and opportunity assessment when implementing changes, organizations can proactively manage OH&S risks, seize opportunities for improvement, and ensure that the OH&S management system remains effective in the face of organizational changes. This approach aligns with the principles of continual improvement and risk-based thinking in OH&S management.

8) In the case of planned changes, permanent or temporary, this assessment shall be undertaken before the change is implemented

In the case of planned changes, whether they are permanent or temporary, it’s crucial to conduct a risk and opportunity assessment before the change is implemented. This proactive approach ensures that potential risks are identified, understood, and mitigated while opportunities for improvement are recognized and capitalized upon before they have a chance to impact the organization negatively. Here’s how to conduct such assessments:

• Clearly define the planned change, including its scope, purpose, and expected outcomes. This might involve changes in processes, equipment, technologies, organizational structure, or any other relevant aspect.
• Involve relevant stakeholders, including employees, contractors, and relevant departments, in the assessment process. Seek their input and feedback on the proposed change and its potential impacts.
• Identify and assess the OH&S risks associated with the planned change. Consider factors such as new hazards, altered work processes, potential disruptions, and any safety implications.
• Identify opportunities for improvement in OH&S performance that may arise from the planned change. These opportunities could involve enhancing safety measures, streamlining processes, or adopting new technologies to improve safety.
• Review and verify whether the planned change will impact compliance with OH&S laws, regulations, and standards. Ensure that the change aligns with legal requirements.
• Document the results of the risk and opportunity assessment, including identified risks, opportunities, and any recommended actions. This documentation should be maintained as part of the OH&S management system records.
• Develop action plans to address identified risks and seize opportunities associated with the planned change. Specify responsibilities, timelines, and necessary resources for implementing these actions.
• Integrate the outcomes of the risk and opportunity assessment into the OH&S management system. Update relevant policies, procedures, training materials, and other documentation as needed to reflect the planned change.
• Continuously monitor the progress of actions taken to address risks and opportunities associated with the planned change. Regularly review the effectiveness of these measures and make adjustments as necessary.
• Communicate the findings of the risk and opportunity assessment and the associated action plans to employees and relevant stakeholders. Ensure that everyone is aware of the planned change and its implications for OH&S.
• Establish feedback mechanisms for employees to report any concerns or issues related to the planned change. Encourage open communication to address emerging risks promptly.
• Include the results of the risk and opportunity assessment in the management review process. This ensures that top management is informed about the OH&S implications of the planned change.

By conducting a thorough risk and opportunity assessment before implementing planned changes, organizations can minimize potential negative impacts on OH&S, proactively manage risks, and capitalize on opportunities for improvement. This approach aligns with the principles of risk-based thinking and continual improvement in OH&S management.

9) The organization shall maintain documented information on OH&S risks and opportunities

Organizations are required to maintain documented information on OH&S risks and opportunities. Documented information is the collective term used to refer to the documents and records an organization needs to establish, implement, maintain, and continually improve its OH&S management system. Here’s how organizations can maintain documented information on OH&S risks and opportunities:

1. Risk and Opportunity Assessment Records: Organizations should maintain records of the assessments conducted to identify OH&S risks and opportunities. These records should include details of the identified risks and opportunities, their assessment criteria, the methodology used, and the results of the assessment.
2. Risk and Opportunity Action Plans: Document the action plans developed to address identified risks and opportunities. These plans should outline the specific actions to be taken, responsibilities, timelines, and the allocation of necessary resources.
3. Monitoring and Review Records: Maintain records of the monitoring and review activities related to OH&S risks and opportunities. This includes records of performance indicators, incident reports, corrective actions taken, and the outcomes of management reviews.
4. Communications: Document communications related to OH&S risks and opportunities. This includes records of discussions, meetings, and notifications to employees and stakeholders regarding changes or developments in risk and opportunity management.
5. Management Reviews: Include information on OH&S risks and opportunities in the documentation of management review meetings. This ensures that top management has access to relevant information when assessing the effectiveness of the OH&S management system.
6. Training and Competence Records: Keep records of training and competence development related to OH&S risks and opportunities for employees involved in risk assessment, mitigation, and opportunity realization.
7. Documented Policies and Procedures: Ensure that documented policies and procedures related to OH&S management address the identification, assessment, and management of risks and opportunities. These documents should be available for reference.
8. Record Retention: Establish a record retention schedule to ensure that documented information on OH&S risks and opportunities is retained for the appropriate period as per organizational policies and legal requirements.
9. Accessibility: Ensure that documented information on OH&S risks and opportunities is easily accessible to relevant personnel and stakeholders who need it for decision-making and performance improvement.
10. Security and Confidentiality: Implement measures to secure and protect the confidentiality of documented information, especially when it contains sensitive or confidential data related to OH&S risks and opportunities.

Maintaining documented information on OH&S risks and opportunities is essential not only for compliance with ISO 45001 but also for effective OH&S risk management and continual improvement. It provides a basis for informed decision-making, monitoring performance, and demonstrating commitment to protecting the health and safety of employees and other stakeholders.

10) The organization shall maintain documented information on the process(es) and actions needed to determine and address its risks and opportunities (see 6.1.2 to 6.1.4) to the extent necessary to have confidence that they are carried out as planned.

Organizations are required to maintain documented information on the process(es) and actions needed to determine and address their Occupational Health and Safety (OH&S) risks and opportunities. This documentation is a key element of an effective OH&S management system, and it helps ensure that risk and opportunity management processes are well-defined and consistently implemented. Here’s how organizations can maintain this documentation:

1. Documented Procedure: Develop a documented procedure that outlines the step-by-step process for determining and addressing OH&S risks and opportunities. This procedure should be clear, comprehensive, and tailored to the organization’s specific needs.
2. Risk and Opportunity Assessment Criteria: Specify the criteria and parameters used to assess OH&S risks and opportunities. This may include definitions of risk levels, assessment scales, and guidelines for determining significance.
3. Risk Assessment Methodology: Describe the methodology or approach used to assess OH&S risks. This should include details on data collection, analysis techniques, and the frequency of assessments.
4. Opportunity Identification Process: Outline the process for identifying OH&S opportunities, including how and where opportunities are identified, who is responsible for identifying them, and the criteria for recognizing them.
5. Action Planning and Implementation: Document the process for developing action plans to address identified risks and seize opportunities. Include information on how actions are prioritized, assigned to responsible parties, and tracked for completion.
6. Responsibilities and Authorities: Specify the roles and responsibilities of individuals and teams involved in the risk and opportunity management process. Clearly define who is accountable for various aspects of risk and opportunity assessment and mitigation.
7. Monitoring and Review: Describe how the organization monitors and reviews the effectiveness of its risk and opportunity management process. Include details on key performance indicators (KPIs), reporting mechanisms, and the frequency of reviews.
8. Integration with OH&S Management System: Ensure that the documented process for addressing risks and opportunities is integrated into the broader OH&S management system. It should align with other processes, such as incident reporting, corrective actions, and management reviews.
9. Training and Competence: Document training and competence requirements for employees involved in risk and opportunity assessment and management. Ensure that those responsible for these tasks are adequately trained and knowledgeable.
10. Record-Keeping: Establish procedures for maintaining records related to risk and opportunity assessments, action plans, and their implementation. Define the retention period for these records.
11. Document Control: Implement a document control system to manage and maintain the accuracy and integrity of documented information related to risk and opportunity management.
12. Communication: Clearly communicate the documented process to all relevant employees and stakeholders. Ensure that employees understand their roles in the process and how to access the documentation.
13. Continuous Improvement: Establish mechanisms for continually reviewing and improving the documented process based on lessons learned, changing circumstances, and feedback from stakeholders.

Example of OH&S risk and opportunity Register

Risk/Opportunity ID	Description	Type	Source	Impact	Likelihood	Risk Level	Action Plan	Responsible Person	Timeline	Status
R/O-001	Slip Hazard in Warehouse	Risk	Workplace Inspection	Moderate	Likely	High	Install Anti-Slip Mats	John Smith	30 days	In Progress
R/O-002	Inadequate Emergency Response Training	Risk	Incident Investigation	High	Unlikely	Medium	Develop Training Program	Emily Johnson	45 days	Planned
R/O-003	Opportunity to Reduce Energy Consumption	Opportunity	Energy Audit	High	Likely	High	Implement Energy-Efficient Lighting	James Brown	60 days	Completed
R/O-004	Chemical Exposure Risk	Risk	Hazardous Material Use	Very High	Likely	Very High	Upgrade Ventilation System	Maria Rodriguez	90 days	In Progress
R/O-005	Enhanced Employee Health Promotion	Opportunity	Employee Survey	Medium	Likely	Medium	Launch Wellness Program	Sarah Wilson	30 days	Completed

Explanation of Columns:

• Risk/Opportunity ID: A unique identifier for each risk or opportunity.
• Description: A brief description of the risk or opportunity.
• Type: Indicates whether it’s a risk or an opportunity.
• Source: Where the risk or opportunity was identified or sourced from (e.g., workplace inspection, incident investigation, audit).
• Impact: The potential impact if the risk were to materialize or the potential benefits of the opportunity.
• Likelihood: The likelihood of the risk occurring or the likelihood of realizing the opportunity.
• Risk Level: Calculated based on the assessment of impact and likelihood.
• Action Plan: Describes the actions that will be taken to address the risk or seize the opportunity.
• Responsible Person: The individual or team responsible for implementing the action plan.
• Timeline: The timeframe within which the action plan will be executed.
• Status: Indicates the current status of the action plan (e.g., completed, in progress, planned).

Example of procedure for OH&S risk and opportunity assessment

1. Purpose: The purpose of this procedure is to establish a systematic process for identifying, assessing, and managing OH&S risks and opportunities to ensure a safe and healthy working environment and continual improvement of the OH&S management system.

2. Scope: This procedure applies to all employees, contractors, and stakeholders involved in the organization’s OH&S risk and opportunity assessment process.

1. Purpose: The purpose of this procedure is to establish a systematic process for identifying, assessing, and managing OH&S risks and opportunities to ensure a safe and healthy working environment and continual improvement of the OH&S management system.

2. Scope: This procedure applies to all employees, contractors, and stakeholders involved in the organization’s OH&S risk and opportunity assessment process.

3. Definitions:

• OH&S Risks: Potential events or conditions that can lead to harm, injury, illness, or damage.
• OH&S Opportunities: Possibilities for improvement in OH&S performance, including enhanced safety measures or better work practices.

4. Responsibilities:

• Top Management: Responsible for overall oversight and commitment to the OH&S risk and opportunity assessment process.
• OH&S Manager: Responsible for coordinating and facilitating risk and opportunity assessments.
• Department Heads/Supervisors: Responsible for identifying and reporting OH&S risks and opportunities within their respective areas.
• Employees: Obligated to report potential risks and opportunities as they become aware of them.

5. Procedure:

5.1. Identification of OH&S Risks and Opportunities:

a. Employees and contractors are encouraged to report any potential OH&S risks or opportunities they identify during their work.

b. Department heads/supervisors shall conduct regular inspections and assessments to identify OH&S risks within their areas.

c. Incident reports, near-miss reports, and OH&S audits may also serve as sources for identifying risks and opportunities.

5.2. OH&S Risk Assessment:

a. OH&S risks shall be assessed using the following criteria: – Severity: The potential impact or consequences of the risk. – Likelihood: The probability of the risk occurring.

b. The Risk Assessment Team (comprising OH&S Manager, department heads, and other relevant personnel) shall determine the overall risk level based on the assessment criteria.

c. Risks shall be prioritized based on their risk levels.

5.3. OH&S Opportunity Assessment:

a. OH&S opportunities shall be assessed based on their potential impact on OH&S performance.

b. The Opportunity Assessment Team (comprising OH&S Manager and relevant stakeholders) shall evaluate the feasibility and potential benefits of each opportunity.

c. Opportunities shall be prioritized based on their potential impact and feasibility.

5.4. Action Planning:

a. Action plans shall be developed for addressing high-priority OH&S risks and seizing identified opportunities.

b. Action plans shall include: – Description of actions to be taken. – Responsible persons or teams. – Timelines for completion. – Resource requirements.

5.5. Monitoring and Review:

a. Key performance indicators (KPIs) shall be established to monitor the effectiveness of actions taken to address risks and opportunities.

b. Regular reviews shall be conducted to assess the progress and effectiveness of risk and opportunity management actions.

5.6. Integration with OH&S Management System:

a. The outcomes of risk and opportunity assessments shall be integrated into the OH&S management system, including policies, procedures, and training programs.

6. Record Keeping:

a. Records of OH&S risk and opportunity assessments, action plans, and monitoring activities shall be maintained and stored as per the organization’s document control procedures.

7. Training:

a. Employees involved in the OH&S risk and opportunity assessment process shall receive appropriate training and guidance.

8. Communication:

a. Communication mechanisms shall be established to ensure that relevant stakeholders are informed about identified risks, opportunities, and actions taken.

9. Continuous Improvement:

a. The OH&S risk and opportunity assessment process shall be periodically reviewed and improved based on lessons learned and feedback from stakeholders.

3. Definitions:

• OH&S Risks: Potential events or conditions that can lead to harm, injury, illness, or damage.
• OH&S Opportunities: Possibilities for improvement in OH&S performance, including enhanced safety measures or better work practices.

4. Responsibilities:

• Top Management: Responsible for overall oversight and commitment to the OH&S risk and opportunity assessment process.
• OH&S Manager: Responsible for coordinating and facilitating risk and opportunity assessments.
• Department Heads/Supervisors: Responsible for identifying and reporting OH&S risks and opportunities within their respective areas.
• Employees: Obligated to report potential risks and opportunities as they become aware of them.

5. Procedure:

5.1. Identification of OH&S Risks and Opportunities:

• Employees and contractors are encouraged to report any potential OH&S risks or opportunities they identify during their work.
• Department heads/supervisors shall conduct regular inspections and assessments to identify OH&S risks within their areas.
• Incident reports, near-miss reports, and OH&S audits may also serve as sources for identifying risks and opportunities.

5.2. OH&S Risk Assessment:

• OH&S risks shall be assessed using the following criteria: – Severity: The potential impact or consequences of the risk. – Likelihood: The probability of the risk occurring.
• The Risk Assessment Team (comprising OH&S Manager, department heads, and other relevant personnel) shall determine the overall risk level based on the assessment criteria.
• Risks shall be prioritized based on their risk levels.

5.3. OH&S Opportunity Assessment:

• OH&S opportunities shall be assessed based on their potential impact on OH&S performance.
• The Opportunity Assessment Team (comprising OH&S Manager and relevant stakeholders) shall evaluate the feasibility and potential benefits of each opportunity.
• Opportunities shall be prioritized based on their potential impact and feasibility.

5.4. Action Planning:

• Action plans shall be developed for addressing high-priority OH&S risks and seizing identified opportunities.
  • Action plans shall include:
  • Description of actions to be taken.
  • Responsible persons or teams.
  • Timelines for completion.
  • Resource requirements.

5.5. Monitoring and Review:

• Key performance indicators (KPIs) shall be established to monitor the effectiveness of actions taken to address risks and opportunities.
• Regular reviews shall be conducted to assess the progress and effectiveness of risk and opportunity management actions.

5.6. Integration with OH&S Management System: The outcomes of risk and opportunity assessments shall be integrated into the OH&S management system, including policies, procedures, and training programs.

6. Record Keeping: Records of OH&S risk and opportunity assessments, action plans, and monitoring activities shall be maintained and stored as per the organization’s document control procedures.

7. Training: Employees involved in the OH&S risk and opportunity assessment process shall receive appropriate training and guidance.

8. Communication: Communication mechanisms shall be established to ensure that relevant stakeholders are informed about identified risks, opportunities, and actions taken.

9. Continuous Improvement: The OH&S risk and opportunity assessment process shall be periodically reviewed and improved based on lessons learned and feedback from stakeholders.

Example of OH&S Risk mitigation plan

1. Risk Identification:

Risk ID	Risk Description	Risk Level	Likelihood	Severity
R-001	Slippery floors in warehouse	High	Likely	Moderate
R-002	Chemical exposure in laboratory	Very High	Likely	Very High
R-003	Inadequate emergency response training	Medium	Unlikely	High

2. Risk Mitigation Actions:

2.1. R-001: Slippery Floors in Warehouse

• Action: Installation of anti-slip mats in high-risk areas.
• Responsibility: Maintenance Team.
• Timeline: Within 30 days.
• Resources: Anti-slip mats, labor.

2.2. R-002: Chemical Exposure in Laboratory

• Action: Upgrade ventilation system and provide appropriate personal protective equipment (PPE).
• Responsibility: Laboratory Supervisor.
• Timeline: Within 90 days.
• Resources: Ventilation system upgrades, PPE, training.

2.3. R-003: Inadequate Emergency Response Training

• Action: Develop and implement an emergency response training program.
• Responsibility: OH&S Manager.
• Timeline: Within 45 days.
• Resources: Training materials, trainers.

3. Risk Monitoring and Review:

• Key performance indicators (KPIs) shall be established to monitor the effectiveness of the risk mitigation actions.
• Regular reviews shall be conducted to assess the progress and effectiveness of risk mitigation measures.
• Feedback from employees and incident reports will be used to continuously improve the risk mitigation process.

4. Integration with OH&S Management System: The outcomes of the risk mitigation plan shall be integrated into the OH&S management system, including updated procedures, training, and communication materials.

5. Communication: The OH&S Manager shall communicate the risk mitigation plan and its progress to all employees and relevant stakeholders. Employees shall be informed about the actions taken and their role in maintaining a safe working environment.

6. Record Keeping: Records of risk assessments, mitigation actions, and monitoring activities shall be maintained as per the organization’s document control procedures.

7. Training and Competence: Employees involved in risk mitigation activities shall receive appropriate training and guidance to ensure the safe and effective execution of their responsibilities.

8. Continuous Improvement: The OH&S Risk Mitigation Plan shall be periodically reviewed and improved based on lessons learned, feedback from employees, and changing circumstances.