hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
Clause 1ISO 45001:2018 · Requirements guide

ISO 45001 clause 1: understand the standard’s scope and limits

ISO 45001:2018 clause 1 establishes the standard’s purpose: an occupational health and safety management system that helps prevent work-related injury and ill health and provide safe and healthy workplaces. It applies to organisations of different sizes, types and activities. The published requirements include the separate 2024 climate amendment; a draft revision does not replace them.

Part ofISO 45001:2018 requirements guide|Reading time 5 min

What clause 1 requires in practice

Clause 1 is a statement of purpose and limits, so its practical meaning is about how an organisation describes and uses the standard. It sets out that the standard gives requirements for an occupational health and safety management system, together with guidance, so that an organisation can prevent work-related injury and ill health and keep improving how it manages them. It applies whatever the size, sector or activity, and it concerns the risks the organisation actually controls.

Three limits follow from the wording. The standard sets no performance thresholds and does not dictate how a system must be designed. It leaves product safety, property damage and environmental effects aside, except where workers or other relevant parties are put at risk. And it allows partial use for improvement, while a claim of conformity needs every requirement incorporated and fulfilled, with nothing excluded. The clause also names the intended outcomes: better performance, fulfilment of legal and other requirements, and achievement of objectives.

Understand what the system addresses

The intended outcomes include improved OH&S performance, fulfilment of legal and other requirements and achievement of OH&S objectives. The system addresses relevant risks under organisational control, considering context and workers’ and other interested parties’ needs. It does not prescribe one technical safety design or performance threshold for every workplace.

Product safety, property damage and environmental impacts are outside its focus except where they create risks to workers or other relevant parties. Wider wellbeing can be integrated, but it should not displace the prevention of work-related injury and ill health. The standard’s scope is distinct from the organisation’s own documented system boundary under clause 4.3.

ISO 45001 consulting & certification support

Get clause 1 right the first time — with a global leader in ISO 45001 implementation

A Sterling consultant works the requirement through with your team, links it to the rest of the system and carries it to certification readiness. Expert and experienced consultants, 8,100+ client engagements in 60+ countries.

Why understanding the scope matters to the business

Most disputes about an OH&S system start with a mismatch of expectations. Customers, insurers and tender evaluators often read a reference to the standard as proof of safe work, while the standard itself says adoption does not by itself guarantee prevention of harm. Knowing the limits lets leaders make accurate statements in bids, annual reports and contracts, and avoids a claim that later looks overstated after an incident. It also protects spending: an organisation that expects the standard to set technical safety limits will be disappointed, whereas one that treats it as a management framework can direct technical effort to the right specialists. Clear understanding at the start shortens later debate about what to include and what auditors will look at.

How to apply clause 1 when starting out

Clause 1 asks for no procedure, so the work here is a sound reading of the standard before design begins. One way Sterling teams approach it is as follows. Keep the output short and agreed in writing in whichever form suits the organisation, because the aim is a common reading rather than another document.

  1. Ask top management to read the purpose statement and agree what the organisation wants the system to achieve, using the three intended outcomes as a starting prompt.
  2. List the places where people work, including customer sites and remote arrangements, so the discussion is about real activity rather than an organisation chart.
  3. Separate what the standard covers from matters that need other disciplines, such as product safety or environmental management, and note who handles each.
  4. Decide whether the organisation intends full conformity or selective improvement, and agree how each will be described to outsiders.
  5. Brief the people who write tenders and marketing copy on what may and may not be said about the standard.
  6. Agree a simple route for taking the discussion into the scope decision under clause 4.3.

Evidence an auditor expects for clause 1

What counts as evidence

Clause 1 creates no stand-alone record, so an auditor does not look for a document titled scope or applicability. The expectation is that the later requirements are applied consistently with this one. Typical observations include interviews with top management about what the system is meant to achieve, and a check that public statements, bids and certificates mentioned in sales material match the actual system boundary. An auditor may also ask how the organisation treats topics outside the standard, such as product safety, to see that workers are still protected where work creates risk. Where selective use of the standard is described, expect questions about whether anything is presented as conformity when it is not.

Common nonconformities linked to clause 1

Clause 1 is not audited as a separate requirement, but misreading it produces findings elsewhere.

  • Public claims of conformity made while some requirements have been left out of the system.
  • A system boundary drawn so narrowly that hazardous activity the organisation controls sits outside it.
  • Leaders expecting the standard to supply technical limits, so no competent specialist input is arranged.
  • Wellbeing or other initiatives added in a way that displaces the core aim of preventing injury and ill health.
  • Marketing wording that presents the system as a guarantee against harm.

Two illustrative applications

Illustrative example 1

A construction contractor considers work it controls, contractor interfaces and people affected by its activities. Its management system needs to connect planning, worker participation and competent control decisions. A generic certificate does not authorise a particular hazardous activity or replace the site-specific assessment and applicable duties.

Illustrative example 2

A software company considers work-related conditions such as workstation arrangements, workload and work organisation. An office setting does not eliminate occupational health concerns. The company’s controls should reflect its actual work and worker input rather than copy a construction checklist.

Automate™ on Effivity · included in every Sterling engagement

Keep clause 1 alive in Effivity

Record what you decided under clause 1, link it to the records and controls it affects, and let the review date trigger the next look. Effivity is the ISO & GRC software used in 50+ countries — and part of every Sterling ISO 45001 programme.

Use the standard and describe progress accurately

An organisation can use selected parts to improve its management arrangements. A claim of conformity, however, requires all the standard’s requirements to be incorporated and fulfilled without exclusion. Certification is an independent assessment of a defined management-system scope; it is not a guarantee that no injury will occur or that every legal duty has always been fulfilled.

Clause 1 does not require a separate applicability record. Later clauses establish the documented scope and other evidence needs. A short explanation of how the standard fits the organisation can be useful, but it is an optional aid.

Frequently asked questions

Can an office business use ISO 45001?

Yes. Its hazards and controls differ from industrial work, but the management-system requirements still apply.

Does certification guarantee an injury-free workplace?

No. The system supports prevention and improvement; certification does not guarantee future outcomes.

Can we claim conformity after adopting only selected clauses?

No. Partial use can support improvement, but a conformity claim requires all requirements to be incorporated and fulfilled.

Define a credible starting point

Discuss your OH&S system boundary with Sterling and scope implementation, documentation and audit preparation. The ISO 45001 Awareness course provides a foundation; it is not job-specific safety authorisation. Effivity ISO & GRC automation software can be considered within agreed needs. See the complete requirements guide.

Source basis and reading note. This is original practical guidance for ISO 45001:2018. Use an authorised copy for definitive requirements. Illustrative examples describe hypothetical situations, not client results. Implementation methods are distinguished from requirements; independent bodies decide management-system certification outcomes. Issuer standard record: iso.org.
Disclaimer. This guide is provided for general information only. It is not the text of the standard, not legal or professional advice, and not a representation of how any certification body will assess your organisation. Sterling International Consulting accepts no liability for any loss arising from reliance on it. Requirements are applied to each organisation's own context through an engagement; contact us to implement ISO 45001 in your organisation.