ISO 45001 clause 3: understand the terms behind safety decisions
ISO 45001:2018 clause 3 defines the terms used throughout the OH&S management system. Precise meaning matters because a discussion about a hazard, an incident or worker participation can lead to different actions. Definitions explain the requirements; they do not independently require a separate procedure for each term.
How to use the terms in clause 3
Clause 3 gives the meanings that apply wherever the standard uses a term. It does not itself require a procedure for each term, but the definitions decide what a requirement actually requires, so they bind the reading of the other clauses. Several are easy to misread: a worker covers anyone doing work under the organisation's control, not only employees; consultation and participation are different things; and an incident includes an event that did not cause harm.
Read each term in context. The notes to entry carry real weight, for instance on how far workplace responsibility extends with the degree of control, and on how an incident can exist without any nonconformity. The terms are also arranged by concept rather than alphabetically, with an index at the end, so look at neighbouring definitions before deciding what one word means.
Understand people, work and responsibility
An organisation is the entity with functions, responsibilities and relationships directed towards objectives. Top management directs and controls it at the highest relevant level and retains ultimate responsibility for the OH&S management system. An interested party can affect, be affected by or perceive itself to be affected by decisions or activities.
A worker is someone performing work or work-related activities under organisational control. The concept extends beyond permanent employees and can include people working through other arrangements, depending on control. Managers are workers too, although the standard gives particular attention to non-managerial worker involvement.
A workplace is a place under organisational control where a person needs to be for work. Responsibility depends on the degree of control. A contractor is an external organisation providing services under agreed arrangements. Outsourcing is an arrangement in which another organisation performs part of a function or process; the provider is external, but the outsourced function or process remains relevant to the system’s scope.
Keep consultation and participation distinct
Consultation involves seeking views before a decision. Participation involves involvement in making the decision. Sending workers a completed policy is communication, but does not by itself demonstrate either meaningful consultation or participation. Representatives and committees can contribute where they exist, without the definition imposing one universal committee structure.
The distinction affects timing and authority. A team asked to comment after a control is purchased may have little influence. A team involved in evaluating workable options can contribute practical knowledge before the choice is fixed.
Distinguish hazards, risks and opportunities
A hazard is a source or situation with potential to cause injury or ill health. Injury and ill health include adverse physical, mental or cognitive effects. OH&S risk combines the likelihood of a work-related hazardous event or exposure with the severity of the resulting harm. The general concept of risk concerns uncertainty, while the standard also addresses other risks to the management system.
An OH&S opportunity is a circumstance that can improve OH&S performance. Opportunities can involve adapting work to workers, eliminating hazards or improving the management system. An opportunity is not simply the positive wording of a hazard, and a low recorded incident count does not establish that risks are adequately controlled.
How to put the terms to work
Clause 3 needs no record of its own. The aim is shared understanding, and one way Sterling teams build it is as follows. Keep the glossary modest and practical, because a long list that nobody opens helps no one.
- Pick the dozen or so terms that most often cause confusion in your organisation, such as worker, incident, hazard, risk and participation.
- Write each in plain language, taking the meaning from the standard rather than from habit or from another standard's use of the word.
- Test the wording with a real case, such as an unexpected movement of equipment that hurt nobody, and ask whether people classify it the same way.
- Check that contractors, agency staff and visiting workers are recognised as workers where the organisation shares control of their work.
- Align forms, investigation templates and training slides with the agreed meanings.
- Revisit the wording when audit findings or incident reviews reveal misunderstanding.
Connect direction with capability and evidence
A requirement is a stated, implied or obligatory need or expectation. Legal and other requirements include relevant duties and commitments the organisation has to or chooses to fulfil, including applicable collective arrangements. A management system connects policy, objectives and processes. The OH&S management system directs those elements towards prevention and safe, healthy workplaces.
A policy expresses formal direction; the OH&S policy concerns prevention and workplace conditions. An objective is a result to achieve, and an OH&S objective expresses a specific result consistent with that policy. A process transforms inputs into outputs through related activities, while a procedure specifies how an activity or process is carried out and need not always be a standalone document.
Competence is the ability to apply knowledge and skills to achieve results. Documented information includes controlled information and its medium, whether instructions or evidence. Monitoring establishes status; measurement determines a value. Performance is a measurable result, including suitable qualitative evaluation, and OH&S performance concerns the effectiveness of prevention and provision of safe, healthy workplaces.
Interpret evaluation and learning correctly
Effectiveness concerns planned activities and intended results. An audit is a systematic, independent and documented evaluation of evidence against criteria. Conformity means fulfilment of a requirement; nonconformity means it is not fulfilled. An incident is a work-related occurrence that could or does result in injury or ill health, so a near miss can be an incident even without harm.
An incident can occur without an identified nonconformity. Corrective action addresses causes of a nonconformity or incident to prevent recurrence. Continual improvement is recurring activity that enhances performance; it does not require improvement in every measure every day.
Common nonconformities from misreading terms
Findings are raised against the requirements that depend on the terms, for example:
- Near misses not reported or investigated because only events with injury were treated as incidents.
- Workers told about a decision after it was made and the activity recorded as consultation.
- Contractor and agency workers left out of participation and information arrangements.
- Risk treated as the same thing as hazard, so assessments list sources without considering likelihood and severity.
- Every incident automatically recorded as a nonconformity, or the reverse, without checking the facts.
Two illustrative terminology decisions
A construction team reports that a suspended load moved unexpectedly near workers without causing injury. The event is still relevant as an incident. The team distinguishes the hazardous situation, potential consequences, existing controls and any unmet requirement. Worker participation helps the investigation consider the actual work arrangement rather than assuming that no injury means no action is needed.
A software support team reports excessive workload during repeated release periods. Management distinguishes the work-related conditions to investigate from assumptions about individual health. It consults workers before selecting changes and involves them in evaluating options. The effectiveness check examines the revised work arrangement and appropriate evidence, without treating attendance at an awareness session as proof that the issue is resolved.
Frequently asked questions
Are consultation and participation the same?
No. Consultation seeks views before a decision; participation involves people in making decisions.
Can an incident occur without injury?
Yes. A work-related event with potential for injury or ill health can be an incident even when harm did not occur.
Does every incident prove a nonconformity?
No. Investigate the facts and applicable requirements. An incident can occur without an identified failure to fulfil a requirement.
Give the team a shared vocabulary
Discuss a practical OH&S terminology workshop with Sterling using your own work examples. The ISO 45001 Awareness course provides a foundation, while role-specific competence remains separate. Effivity ISO & GRC automation software can be considered for agreed system needs. Explore worker involvement and the complete guide.