ISO 45001:2023 – Occupational Health and Safety Management Systems

Organizational Context
ISO 45001:2023 places strong emphasis on the organizational context. It requires the organization to consider the expectations of interested parties regarding occupational health and safety management.

The organization must identify which interested parties are relevant to its OHSMS and determine the applicable requirements of these parties.

The objective of ISO 45001:2023 is to provide the organization with a high level of understanding of the critical issues that may positively or negatively impact it, as well as an understanding of how it manages its occupational health and safety responsibilities toward its workers.

Relevant issues are those that affect the organization’s ability to achieve its intended outcomes. These include the objectives set by the organization for its OHSMS, such as fulfilling commitments related to occupational health and safety.

Leadership in Occupational Health and Safety
Top management must demonstrate interest and commitment to the OHSMS through direct involvement, taking into account occupational health and safety results in strategic planning.

Top management contributes to the effectiveness of the OHSMS by actively guiding, supporting, and communicating with workers, as well as promoting and leading the organization’s OHS culture.

The new standard clearly defines the responsibilities and accountability of top management regarding occupational health and safety management. It emphasizes that ultimate responsibility cannot be delegated to health and safety managers or other managers within the organization.

Participation and Consultation
The standard requires top management to encourage consultation and participation of workers and their representatives, as they are key contributors to effective occupational health and safety management.

Consultation implies two-way communication – dialogue and exchange – and includes timely provision of information requested by workers and their representatives before the organization makes decisions. Worker participation enables employees to contribute to decisions regarding OHS performance and to provide feedback on proposed changes. Organizations should encourage workers at all levels to report hazards so that preventive and corrective actions can be taken. Workers must also be able to report and suggest areas for improvement without fear of dismissal, disciplinary action, or retaliation.

Risk-Based Approach to OHSMS
Closely related to the focus on organizational context is the requirement to adopt a risk-based approach in developing and implementing the OHSMS. Organizations must identify risks and opportunities that need to be addressed to ensure the OHSMS can achieve its planned objectives. These risks and opportunities include those arising from the organizational context.

The organization must plan actions to address these risks and opportunities, implement them in OHSMS processes, and evaluate the effectiveness of these actions.

Outsourcing / External Contractors and Service Providers
The standard requires the organization to ensure that processes assigned to external contractors that affect its OHSMS are defined and controlled. When products and/or services are provided through outsourcing, the risks associated with the supplier or contractor must be effectively managed.

Documented Information
The term “documented information” replaces the “documents and records” terminology used in OHSAS 18001. Evidence from processed information not stored in a formal documentation system, such as electronic information on smartphones and tablets, is now accepted.