ISO 45001 Clause 4: Define Context and a Credible Scope
ISO 45001:2018 clause 4 establishes the context and boundaries of the occupational health and safety management system. It requires the organisation to understand relevant circumstances, workers and other interested parties, define scope and establish the necessary processes. These decisions determine whether later assessments and controls address the work that actually takes place.
What clause 4 requires in practice
Clause 4 asks the organisation to establish the basis on which the rest of the system is built. In practice it contains four connected duties. First, determine the external and internal issues that matter to its purpose and its ability to reach the intended outcomes. Second, determine the other interested parties besides workers, their relevant needs and expectations, and which of those are or could become legal or other requirements. Third, set the boundaries and applicability of the system, taking the first two into account along with planned or performed work, and keep that scope as documented information. Fourth, establish, implement, maintain and continually improve the system, including its needed processes and how they interact.
The outputs are a defensible understanding of context and requirements, a documented scope that includes activities within the organisation's control or influence, and a system that works as connected processes. The clause names no register, matrix or map as a required format.
4.1: understand conditions affecting the system
Relevant internal and external issues can affect the organisation's ability to achieve its OH&S outcomes. Examine work organisation, workforce changes, premises, external dependencies and other circumstances that matter to the actual activities. A long list of generic business trends is less useful than a few explained issues that influence a management decision.
The 2024 climate amendment adds a determination of whether climate change is relevant. Consider the connection to OH&S outcomes. This does not turn ISO 45001 into an environmental management standard. A reasoned finding should inform planning where relevant and remain open to review when circumstances change.
Why context and scope decide everything that follows
If the context review misses how work is actually done, the hazard assessment that follows will describe an imaginary workplace. If the scope omits an awkward activity, that activity runs without the controls the organisation tells customers it has. Getting clause 4 right protects the business from claims that look wider than the real system, and focuses effort on the issues that influence safe work rather than on a generic list. It is also where worker and client expectations first enter the system, which affects trust in tenders and in daily management. Time spent here usually shortens later audits, because the questions an auditor asks about planning and control have a clear starting point.
How to implement clause 4
Treat clause 4 as a working conversation among managers and workers, not a paper exercise. One practical sequence used by Sterling teams is below. Keep the focus on decisions the organisation can actually make, and write down the reasoning so a new manager can follow it.
- Hold a short session with operational managers and worker representatives to name the issues that really shape safe work, such as staffing patterns, subcontracting and customer site conditions.
- List the interested parties by activity and location, and record what each needs or expects from the organisation, noting the legal or contractual source.
- Walk through the activities of the business, including travel, remote work and work at customer premises, and decide which are within control or influence.
- Draft a scope statement in plain words and check it against contracts and observed work.
- Map how information flows between planning, purchasing, operations and review, and name an owner for each interface.
- Set the triggers that reopen the review, such as a new contract, site or major change.
Evidence an auditor expects for clause 4
An auditor typically begins with the documented scope and compares it with what is observed: sites visited, work that is subcontracted and activities carried out away from the main premises. Expect interviews with managers about how context issues reached planning, and with workers about whether their circumstances were considered. Records that show the reasoning, such as notes of a context discussion, decisions on interested-party requirements or minutes of a management review, are helpful but no format is prescribed. A sampled job or contract that shows requirements passing to the people doing the work is often more convincing than a polished list. Where a climate-related determination has been made, expect a short explanation of the conclusion.
Common nonconformities with clause 4
Typical findings at this stage include:
- A scope that names only the head office while significant work takes place at customer or temporary sites.
- A context list copied from another organisation, with no link to planning or objectives.
- Interested-party needs recorded without any decision on which are legal or other requirements.
- A hazardous process excluded from scope while the wider operation is described as covered.
- Processes that exist on paper but whose interfaces nobody owns, so worker input never reaches a decision.
Illustrative construction example: changing site conditions
A hypothetical contractor works across temporary sites with different access arrangements and environmental conditions. Its context review identifies that shared access and changing work areas affect coordination with other employers. The team also examines whether climate-related conditions alter relevant assumptions about the work.
The practical response is to feed the findings into competent site planning, responsibilities and relevant controls. Evidence could include the context decision, the connection to project assessment and coordination records. This example does not prescribe exposure limits, work schedules or technical protective measures; these depend on the actual conditions and applicable requirements.
4.2: include workers and relevant interested parties
Workers are explicit in this clause. Determine other relevant interested parties and the needs and expectations that matter to the OH&S system, then identify which are or could become legal and other requirements. Relevant parties may differ by activity and location. Do not treat every stakeholder preference as a legal obligation or ignore a commitment the organisation has adopted.
The climate amendment also notes that relevant interested parties can have climate-related requirements. Its application remains connected to the management system's purpose. A practical review asks which requirement affects OH&S planning or operation and who is responsible for keeping the information current.
4.3: make the scope representative
Scope considers context, relevant requirements and planned or performed work-related activities. It includes activities, products and services within the organisation's control or influence that can affect its OH&S performance. A building address alone may not describe this adequately when workers travel, work remotely or perform activities at a customer's site.
The scope must be available as documented information. Its wording should make the boundary understandable and defensible. Do not use it to avoid relevant activities or obligations. When the system covers part of a larger organisation, clarify the responsibilities and interfaces that enable that part to operate its system effectively.
Illustrative IT example: staff working at customer premises
A fictional IT services business initially describes its scope as “head-office activities”. Its engineers also install and maintain equipment at customer locations. The review examines the work and the organisation's control or influence, rather than assuming customer premises are automatically outside consideration.
The business clarifies the covered activities and responsibilities for obtaining relevant site information, preparing workers and coordinating with customers. Useful evidence includes the updated scope, the identified interface and a sampled job showing how the arrangement operates. The customer may control the premises, but that does not by itself remove the employer's responsibilities for its own work.
4.4: establish connected processes
The organisation establishes, implements, maintains and improves the OH&S system and its processes. Context and scope should therefore connect with leadership, participation, assessment, control and evaluation. A finding about an outsourced activity should reach procurement and operational owners; a concern about worker access should inform communication and participation arrangements.
An auditor may compare the written scope with actual activities and ask how relevant issues reach planning. Context registers or stakeholder maps can help, but clause 4 does not prescribe those document titles. The required scope and other applicable information need adequate control, while supporting methods should suit the organisation.
Explore each numbered part
4.1 · understand the context of safe and healthy work
Context helps an organisation recognise the conditions that shape work-related health and safety. Clause 4.1 covers relevant internal and external issues, with the 2024 amendment requiring a determination of climate-change relevance. This guide connects those issues with practical planning decisions while keeping attention on workers, actual activities and the OH&S system’s intended outcomes.
4.2 · understand workers and other interested parties
Workers are central to understanding OH&S requirements, alongside other relevant interested parties. Clause 4.2 asks the organisation to identify relevant needs and determine which are or could become legal and other requirements. This guide explains the distinctions, including the climate-related note added in 2024, with practical examples of shared workplaces and changing work arrangements.
4.3 · define a defensible OH&S system scope
The OH&S scope defines where the management system applies and must reflect the work the organisation controls or influences. Clause 4.3 connects that boundary with context, relevant requirements and planned or performed activities. This guide explains how to handle sites, remote work and shared arrangements without using the scope to hide significant responsibilities.
4.4 · connect the processes that manage OH&S
A functioning OH&S management system connects decisions across the organisation. Clause 4.4 requires the system, its processes and their interactions to be established, implemented, maintained and continually improved. This guide shows how to connect worker input, purchasing, work planning and evaluation so that a set of procedures becomes a coherent way of managing work.
Frequently asked questions
Can a group use one context review?
It can coordinate shared issues, but should examine relevant differences between sites, workers and activities. Local information must have a route into group decisions.
Does climate relevance require the same conclusion everywhere?
No. The determination depends on the organisation's circumstances and OH&S outcomes. It should be a reasoned decision, not an automatic label copied between sites.
Is a head-office address sufficient to define scope?
Not when it obscures relevant activities elsewhere. Describe boundaries and applicability using the work and the organisation's control or influence, including relevant external locations.
Set boundaries that support implementation
Discuss scope and OH&S implementation with Sterling, including documentation, employee learning and agreed Effivity ISO & GRC automation software. Independent bodies decide certification; the organisation retains its legal duties. Enrol in ISO 45001 Awareness to build a shared foundation. Course completion is not job-specific safety authorisation.
Return to the ISO 45001 requirements overview, the starting point before this guide, or continue to clause 5 leadership and worker participation.