hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
Clause 3ISO 45001:2018 · Requirements guide

ISO 45001 clause 3: understand the terms behind safety decisions

ISO 45001:2018 clause 3 defines the terms used throughout the OH&S management system. Precise meaning matters because a discussion about a hazard, an incident or worker participation can lead to different actions. Definitions explain the requirements; they do not independently require a separate procedure for each term.

Part ofISO 45001:2018 requirements guide|Reading time 6 min

How to use the terms in clause 3

Clause 3 gives the meanings that apply wherever the standard uses a term. It does not itself require a procedure for each term, but the definitions decide what a requirement actually requires, so they bind the reading of the other clauses. Several are easy to misread: a worker covers anyone doing work under the organisation's control, not only employees; consultation and participation are different things; and an incident includes an event that did not cause harm.

Read each term in context. The notes to entry carry real weight, for instance on how far workplace responsibility extends with the degree of control, and on how an incident can exist without any nonconformity. The terms are also arranged by concept rather than alphabetically, with an index at the end, so look at neighbouring definitions before deciding what one word means.

Understand people, work and responsibility

An organisation is the entity with functions, responsibilities and relationships directed towards objectives. Top management directs and controls it at the highest relevant level and retains ultimate responsibility for the OH&S management system. An interested party can affect, be affected by or perceive itself to be affected by decisions or activities.

A worker is someone performing work or work-related activities under organisational control. The concept extends beyond permanent employees and can include people working through other arrangements, depending on control. Managers are workers too, although the standard gives particular attention to non-managerial worker involvement.

A workplace is a place under organisational control where a person needs to be for work. Responsibility depends on the degree of control. A contractor is an external organisation providing services under agreed arrangements. Outsourcing is an arrangement in which another organisation performs part of a function or process; the provider is external, but the outsourced function or process remains relevant to the system’s scope.

ISO 45001 consulting & certification support

Get clause 3 right the first time — with a global leader in ISO 45001 implementation

A Sterling consultant works the requirement through with your team, links it to the rest of the system and carries it to certification readiness. Expert and experienced consultants, 8,100+ client engagements in 60+ countries.

Keep consultation and participation distinct

Consultation involves seeking views before a decision. Participation involves involvement in making the decision. Sending workers a completed policy is communication, but does not by itself demonstrate either meaningful consultation or participation. Representatives and committees can contribute where they exist, without the definition imposing one universal committee structure.

The distinction affects timing and authority. A team asked to comment after a control is purchased may have little influence. A team involved in evaluating workable options can contribute practical knowledge before the choice is fixed.

Distinguish hazards, risks and opportunities

A hazard is a source or situation with potential to cause injury or ill health. Injury and ill health include adverse physical, mental or cognitive effects. OH&S risk combines the likelihood of a work-related hazardous event or exposure with the severity of the resulting harm. The general concept of risk concerns uncertainty, while the standard also addresses other risks to the management system.

An OH&S opportunity is a circumstance that can improve OH&S performance. Opportunities can involve adapting work to workers, eliminating hazards or improving the management system. An opportunity is not simply the positive wording of a hazard, and a low recorded incident count does not establish that risks are adequately controlled.

Why shared terms matter to safety decisions

A word that two managers read differently produces two different actions. If one team treats a near miss as noise and another treats it as an incident, learning is inconsistent. If agency workers are not seen as workers, they miss briefings and consultation. If participation is read as sending out a finished decision, workers lose confidence and stop reporting. These misreadings rarely announce themselves; they appear as gaps found during an audit or after an event. A common vocabulary costs little to agree and makes training, investigation and management review much clearer, because everyone is discussing the same thing.

How to put the terms to work

Clause 3 needs no record of its own. The aim is shared understanding, and one way Sterling teams build it is as follows. Keep the glossary modest and practical, because a long list that nobody opens helps no one.

  1. Pick the dozen or so terms that most often cause confusion in your organisation, such as worker, incident, hazard, risk and participation.
  2. Write each in plain language, taking the meaning from the standard rather than from habit or from another standard's use of the word.
  3. Test the wording with a real case, such as an unexpected movement of equipment that hurt nobody, and ask whether people classify it the same way.
  4. Check that contractors, agency staff and visiting workers are recognised as workers where the organisation shares control of their work.
  5. Align forms, investigation templates and training slides with the agreed meanings.
  6. Revisit the wording when audit findings or incident reviews reveal misunderstanding.

Connect direction with capability and evidence

What counts as evidence

A requirement is a stated, implied or obligatory need or expectation. Legal and other requirements include relevant duties and commitments the organisation has to or chooses to fulfil, including applicable collective arrangements. A management system connects policy, objectives and processes. The OH&S management system directs those elements towards prevention and safe, healthy workplaces.

A policy expresses formal direction; the OH&S policy concerns prevention and workplace conditions. An objective is a result to achieve, and an OH&S objective expresses a specific result consistent with that policy. A process transforms inputs into outputs through related activities, while a procedure specifies how an activity or process is carried out and need not always be a standalone document.

Competence is the ability to apply knowledge and skills to achieve results. Documented information includes controlled information and its medium, whether instructions or evidence. Monitoring establishes status; measurement determines a value. Performance is a measurable result, including suitable qualitative evaluation, and OH&S performance concerns the effectiveness of prevention and provision of safe, healthy workplaces.

Interpret evaluation and learning correctly

Effectiveness concerns planned activities and intended results. An audit is a systematic, independent and documented evaluation of evidence against criteria. Conformity means fulfilment of a requirement; nonconformity means it is not fulfilled. An incident is a work-related occurrence that could or does result in injury or ill health, so a near miss can be an incident even without harm.

An incident can occur without an identified nonconformity. Corrective action addresses causes of a nonconformity or incident to prevent recurrence. Continual improvement is recurring activity that enhances performance; it does not require improvement in every measure every day.

Common nonconformities from misreading terms

Findings are raised against the requirements that depend on the terms, for example:

  • Near misses not reported or investigated because only events with injury were treated as incidents.
  • Workers told about a decision after it was made and the activity recorded as consultation.
  • Contractor and agency workers left out of participation and information arrangements.
  • Risk treated as the same thing as hazard, so assessments list sources without considering likelihood and severity.
  • Every incident automatically recorded as a nonconformity, or the reverse, without checking the facts.

Two illustrative terminology decisions

Illustrative example 1

A construction team reports that a suspended load moved unexpectedly near workers without causing injury. The event is still relevant as an incident. The team distinguishes the hazardous situation, potential consequences, existing controls and any unmet requirement. Worker participation helps the investigation consider the actual work arrangement rather than assuming that no injury means no action is needed.

Illustrative example 2

A software support team reports excessive workload during repeated release periods. Management distinguishes the work-related conditions to investigate from assumptions about individual health. It consults workers before selecting changes and involves them in evaluating options. The effectiveness check examines the revised work arrangement and appropriate evidence, without treating attendance at an awareness session as proof that the issue is resolved.

Automate™ on Effivity · included in every Sterling engagement

Keep clause 3 alive in Effivity

Record what you decided under clause 3, link it to the records and controls it affects, and let the review date trigger the next look. Effivity is the ISO & GRC software used in 50+ countries — and part of every Sterling ISO 45001 programme.

Frequently asked questions

Are consultation and participation the same?

No. Consultation seeks views before a decision; participation involves people in making decisions.

Can an incident occur without injury?

Yes. A work-related event with potential for injury or ill health can be an incident even when harm did not occur.

Does every incident prove a nonconformity?

No. Investigate the facts and applicable requirements. An incident can occur without an identified failure to fulfil a requirement.

Give the team a shared vocabulary

Discuss a practical OH&S terminology workshop with Sterling using your own work examples. The ISO 45001 Awareness course provides a foundation, while role-specific competence remains separate. Effivity ISO & GRC automation software can be considered for agreed system needs. Explore worker involvement and the complete guide.

Source basis and reading note. This is original practical guidance for ISO 45001:2018. Use an authorised copy for definitive requirements. Illustrative examples describe hypothetical situations, not client results. Implementation methods are distinguished from requirements; independent bodies decide management-system certification outcomes. Issuer standard record: iso.org.
Disclaimer. This guide is provided for general information only. It is not the text of the standard, not legal or professional advice, and not a representation of how any certification body will assess your organisation. Sterling International Consulting accepts no liability for any loss arising from reliance on it. Requirements are applied to each organisation's own context through an engagement; contact us to implement ISO 45001 in your organisation.