ISO 45001 clause 5.3: assign safety responsibilities with authority
ISO 45001:2018 clause 5.3 requires responsibilities and authorities for relevant roles to be assigned and communicated at all levels and maintained as documented information. Workers take responsibility for aspects of the OH&S management system over which they have control. Top management retains overall accountability while assigning the necessary operational and system roles.
What clause 5.3 requires in practice
Clause 5.3 requires top management to make sure responsibilities and authorities for relevant roles in the OH&S system are assigned and communicated at every level, and kept as documented information. Workers at each level take responsibility for the parts of the system they control. The standard adds a note that responsibility and authority can be delegated, but top management remains accountable for how the system functions.
Two assignments must be made explicitly. One is the responsibility and authority for ensuring the system conforms to the standard. The other is for reporting on its performance to top management. These may sit with one person or several, as long as the arrangement is clear. The clause does not prescribe a job title, a matrix or a particular layout for the documentation, but the role information has to be kept current and understood by the people it affects.
Match the role with what it can control
Identify the decisions that affect work-related health and safety and the people authorised to make them. Clarify responsibility for planning, control implementation, supervision, communication, evaluation and escalation. Avoid assigning an outcome to someone who cannot obtain resources or influence the work.
Responsibility should reflect the degree of control. Workers can contribute within their roles, but cannot be made solely responsible for hazards created by management decisions or unavailable resources. Clear authority helps people act or escalate when an issue exceeds their control.
Assign conformity and reporting responsibilities
Top management assigns responsibility and authority for ensuring that the OH&S management system conforms to the standard and for reporting performance to top management. These roles may be combined or distributed, provided the arrangement is clear. An OH&S coordinator can support the work without taking over every operational responsibility.
Performance reporting should provide information management can use. It may include control effectiveness, incidents, worker participation, objectives and unresolved system issues. A reporting role needs access to relevant information and a route to raise matters requiring leadership decisions.
How to implement clause 5.3
The clause requires documented roles, though not in a prescribed form. The approach below is one that Sterling teams find effective, particularly where work runs across shifts or contractors. Keep the allocation realistic for night shifts, absences and contractor interfaces, where gaps usually appear.
- List the decisions that affect work-related health and safety, such as stopping work, approving changes and releasing spending.
- Match each decision with a named role, checking that the holder has the authority and resources to carry it out.
- Assign the conformity and performance-reporting responsibilities to specific people and give them access to the information needed.
- Describe responsibilities for contractor and shared-site interfaces, including who leads when several parties are involved.
- Document the allocation in whichever form people will actually consult, such as role descriptions or process responsibilities.
- Communicate it to managers and workers, then ask a sample who could decide a given matter and compare their answers with the document.
Two illustrative responsibility arrangements
A construction contractor coordinates several subcontractors. The project manager controls sequencing, procurement manages contractual requirements and supervisors coordinate daily work. The organisation documents who decides on conflicting work interfaces and how workers raise concerns. Merely naming a site safety officer would not resolve decisions controlled by other managers.
A BPO business operates across day and night shifts. It identifies who handles an urgent work-condition concern when the normal manager is absent and who can authorise a change to the arrangement. Workers receive the relevant contact and escalation information. The documented roles are tested against the actual shift pattern rather than assumed from the daytime organisation chart.
Document and communicate the allocation
Documented information can include job descriptions, process responsibilities, delegation records or a suitable matrix. The standard does not prescribe a particular form, but it does explicitly require the role information to be maintained. Keep it current when people, structures or contracts change.
Communication needs to reach the people who use the arrangement. Ask workers and managers who can make a relevant decision and compare their answers with the documented allocation. If they rely on informal workarounds, investigate whether the formal authority is unclear or impractical.
Common mistakes and evidence
Useful evidence includes current responsibility information, decisions made under the assigned authority, reporting and worker understanding. A signed job description without access to the decision-maker or necessary resources may demonstrate a gap rather than effective allocation.
Frequent weaknesses include assigning every responsibility to the safety function, naming several owners without a lead and leaving contractor interfaces undefined. Another is assuming that workers’ personal responsibility removes the organisation’s duties. The system needs coordinated responsibility at the levels that control the work.
Frequently asked questions
Must roles be documented?
Yes. Unlike a merely optional responsibility chart, clause 5.3 requires the relevant responsibilities and authorities to be maintained as documented information.
Can one person coordinate the whole system?
Yes, but operational managers and workers still need clear responsibilities within their control, and top management retains accountability.
Does assigning a safety officer transfer management duties?
No. The assignment can support implementation, but it does not remove responsibilities attached to management decisions and control.
Resolve an authority gap
Discuss OH&S roles and escalation with Sterling, using an actual work interface and audit evidence. The ISO 45001 Awareness course helps people understand the system. Effivity ISO & GRC automation software can be scoped to agreed responsibilities and information needs. See leadership and the directory.