ISO 45001 clause 6.1.4: plan effective action on OH&S priorities
ISO 45001:2018 clause 6.1.4 requires planning action to address risks and opportunities, legal and other requirements, and emergency preparedness and response. It also requires planning how actions will be integrated into management-system or other business processes and how their effectiveness will be evaluated. A list of tasks is incomplete if it does not connect assessment with actual control.
What clause 6.1.4 requires in practice
Clause 6.1.4 turns the findings of earlier planning into a plan of action. The organisation plans actions to deal with its risks and opportunities, to address its legal and other requirements, and to prepare for and respond to emergency situations. It also plans how those actions will be built into the OH&S management system or other business processes, and how it will judge whether they worked.
Two further expectations shape the choice of action. The hierarchy of controls, set out in clause 8.1.2, and the outputs of the management system are taken into account. The organisation also considers good practice, technology options and its financial, operational and business requirements. These considerations help select a workable response; they do not excuse a duty that applies. The clause does not name a form for the plan: a combined action record, a project plan or an extension of an existing improvement process can all serve if the three planning elements are visible.
Why action planning decides whether risk really falls
Risk assessments and legal registers only protect people once something changes in the work. Clause 6.1.4 is where that change is decided, funded and given an owner. Without it, organisations accumulate findings that never reach purchasing, scheduling or maintenance, and the same hazards return at the next audit or the next incident. Planning how effectiveness will be judged also saves management from closing actions on a delivery date when the risk has not moved. For customers and insurers, a plan that shows a sensible choice between elimination, engineering and training is stronger assurance than a long list of completed tasks.
How to implement clause 6.1.4
The following sequence is one practical route; the clause leaves the format open. Keep the plan short and tied to named owners. Review it whenever assessment findings change.
- Gather the outputs of risk assessment, legal and other requirements, incident learning and emergency planning into one list of needs.
- State for each need what the action must achieve, for example removing exposure, improving coordination or strengthening a response.
- Test options against the hierarchy of controls and note why the chosen level is workable, with worker input.
- Place each action in the business process that can deliver it, such as design, purchasing, maintenance or scheduling, with an owner who has authority.
- Define what must be in place before affected work or a change begins, separate from later improvements.
- Agree how effectiveness will be judged, for instance observation, worker feedback, a test or record review, and when.
- Review outcomes and feed lessons back before closing the action.
Choose action using the hierarchy and system evidence
Take the hierarchy of controls and outputs from the OH&S system into account. Consider good practices, technological options and financial, operational and business requirements. These considerations help select a workable response; they do not permit applicable duties to be ignored.
Identify the specific issue the action must address. Is the aim to eliminate a hazard, reduce exposure, improve coordination, fulfil a requirement or strengthen emergency arrangements? A generic training action may be unsuitable when the main problem is work design or unavailable equipment.
Integrate the response where decisions occur
Place actions in the processes that can implement them: design, purchasing, scheduling, maintenance, competence or operational planning may be relevant. Assign ownership with authority to act, involve workers appropriately and clarify necessary resources and dependencies.
Consider what must be complete before work or a change begins. Some evaluation can occur only after implementation, but that does not justify starting without the controls needed at the outset. Use competent, task-specific decisions rather than a universal approval checklist.
Two illustrative action plans
A manufacturer identifies hazardous interaction during a recurring cleaning task. The action plan first considers whether the task or exposure can be eliminated or reduced through a different arrangement, using competent assessment and worker participation. Procurement, engineering and operations have defined contributions. The effectiveness check examines the actual revised work and remaining risks, not only delivery of a purchased item.
A BPO provider identifies weaknesses in an emergency communication arrangement for its evening shift. The plan clarifies responsibilities, suitable information and coordination with relevant parties. A planned exercise tests whether the arrangement works for the people actually present. Sending a daytime email is not treated as evidence that the evening response is effective.
Define effectiveness before closure
Decide what would show that the action achieved its purpose. Evidence may include observation, suitable monitoring, worker feedback, tests or review of records. The method should match the risk and the response. A completed training session or revised document can demonstrate implementation activity but not necessarily risk reduction.
Check unintended effects and new hazards where relevant. If a change improves one part of the task while creating another difficult interface, the overall result needs assessment. Feed findings back into planning and change management rather than closing the action on its original deadline.
Evidence and common mistakes
The broader planning requirements call for documented information on relevant risks, opportunities, processes and actions. Clause 6.1.4 does not prescribe a particular action tracker. Existing project or operational records can be suitable if they preserve the decision, integration and evaluation logic.
Common weaknesses include choosing low-order controls without examining better options, assigning action to people without authority and using completion percentages as the only performance measure. Another is planning emergency arrangements separately from the hazards and scenarios that make them necessary.
Frequently asked questions
Must every action become an OH&S objective?
No. Actions can be integrated into suitable system or business processes; objectives are a separate planning mechanism.
Can cost alone justify ignoring a duty?
No. Financial considerations inform planning but do not remove applicable legal or other requirements.
When should effectiveness be checked?
Plan the evaluation at a time and under conditions that provide useful evidence of the action’s intended result.
Turn one assessment into an executable response
Ask Sterling to review an OH&S action plan, including worker involvement and audit evidence. The Risk Management course supports structured decisions. Effivity ISO & GRC automation software can be scoped to agreed consulting and documentation work needs. Return to clause 6.1 and the directory.