ISO 45001 clause 7.1: provide resources for effective prevention
ISO 45001:2018 clause 7.1 requires the organisation to determine and provide the resources needed to establish, implement, maintain and continually improve the OH&S management system. The test is whether the system has what it needs to work. A budget line or named safety officer does not by itself demonstrate adequate provision.
What clause 7.1 requires in practice
Clause 7.1 is short and broad. The organisation decides what resources are needed, and provides them, so the OH&S management system can be established, put into effect, maintained and continually improved. Both verbs matter: working out what is needed is not enough, and the resources have to be provided.
The clause does not list resource types, because the answer depends on the organisation's activities and risks. In practice, people, time, competence, equipment, information, facilities and funding can all be involved, along with the opportunity for workers to take part. The need covers the whole life of the system: setting it up, running it, keeping it current and improving it. The standard sets no staffing ratio and does not require a dedicated safety manager; it asks whether the system has what it needs to function. Evidence of this is judged through the operation of the system rather than through a specific record.
Identify resources through the work
Consider the resources needed for hazard identification, assessment, controls, worker involvement, competence, communication and evaluation. These may include people, time, information, facilities, equipment, technical support and funding. The required combination depends on activities and risks.
Start with an important control or process and ask what enables it. A supervisor may need time and authority to coordinate work; workers may need access to relevant information and participation opportunities; a specialist assessment may require competent external support. Resource planning should reflect these practical needs.
Why resourcing is where commitment becomes visible
Leaders show their commitment to safety less through the policy than through whether supervisors have time to coordinate work and workers have equipment that functions. Unresourced objectives and unfollowable controls are a common root cause behind repeated overdue actions and incident patterns. Showing that resource needs were identified and decided deliberately also helps management defend its choices to clients, insurers and regulators after an event. For audits, clause 7.1 is often where a reviewer tests whether the plans made under clause 6 had any realistic prospect of delivery.
How to implement clause 7.1
The following steps give a practical way to size and maintain resources. Resourcing is a management decision, so bring the evidence to the people who can decide and ask for a clear answer, even when the answer is no.
- Choose one important control or process and list what enables it: people, time, information, equipment, access and technical support.
- Ask the owner and the workers what stops the control working as intended.
- Describe each gap in terms of its consequence so management can decide among options.
- Check whether the cause is really resourcing, or instead work design, authority or competence.
- Record the decision and the arrangements for continuity if a key person is unavailable.
- Build resource review into change planning and management review, and check whether added resources solved the original need.
- Revisit the same control after any resource change to confirm it now works as intended and that the original need was truly met.
Connect gaps with leadership decisions
Explain the consequence of a resource gap and the options for resolving it. This gives management a basis for action rather than a disconnected request for more budget. Applicable duties and necessary controls remain relevant when choices are made.
Do not assume every problem is solved by hiring another safety specialist or buying equipment. The gap may concern work design, decision authority or the time available to follow a process. Select the response after understanding what prevents the system from functioning.
Two illustrative resource decisions
A construction contractor expects a supervisor to coordinate several simultaneous work interfaces while also performing unrelated delivery duties. Worker feedback and observations show that important coordination is being missed. Management reassesses the allocation, provides suitable support and checks the revised arrangement. Issuing a longer checklist would not create the missing capacity.
A software business introduces an OH&S reporting route for remote workers but assigns no time or competent support to assess concerns. Reports accumulate without meaningful response. The organisation allocates responsibility, access to appropriate expertise and follow-up capacity, then evaluates whether concerns are addressed. The reporting tool itself was only one resource.
Maintain adequacy as the organisation changes
Expansion, new contracts, changed work patterns or loss of experienced personnel can alter resource needs. Include those needs in change planning and management review. Repeated overdue actions or controls that cannot be followed may indicate an underlying resource problem rather than simple lack of effort.
When resources are added, examine whether they address the original need. More training does not resolve unavailable equipment, and new equipment does not necessarily resolve poor coordination. Use evidence from the work and worker feedback to assess the result.
Evidence and common mistakes
Clause 7.1 does not prescribe a separate resource register or a universal staffing ratio. Evidence can include allocation decisions, competent service arrangements, availability of equipment and actual operation of the required processes. The organisation’s broader documentation and evaluation requirements still apply.
Common weaknesses include approving objectives without resources, assuming workers can participate only in unpaid spare time and relying on one individual without continuity arrangements. Another is treating outsourcing as a transfer of all responsibility for providing an effective system. The organisation still needs to manage the relevant interfaces and decisions.
Frequently asked questions
Must we employ a dedicated OH&S manager?
No single staffing model is prescribed. Determine the competence, capacity and authority needed for the system.
Can external specialists provide resources?
Yes, where suitable. Clarify competence, scope, responsibilities and how their work informs organisational action.
Does purchasing software satisfy clause 7.1?
Software can support agreed needs, but people, processes, competence and other necessary resources remain essential.
Resolve a practical capacity gap
Discuss OH&S resource needs with Sterling, linked to implementation and audit evidence. The ISO 45001 Awareness course helps managers understand system responsibilities. Effivity ISO & GRC automation software can be considered after those needs are defined. See support and the full guide.