ISO 45001 clause 8.1.4.1: bring OH&S into purchasing decisions
ISO 45001:2018 clause 8.1.4.1 requires processes to control procurement of products and services so they conform to the OH&S management system. The decision begins before an order is placed. Purchasing requirements should reflect how the item or service will be used, the relevant risks and the organisation’s control arrangements.
What clause 8.1.4.1 requires in practice
Clause 8.1.4.1 is the general purchasing duty. The organisation establishes, implements and maintains a process to control how products and services are procured, with the aim that what is bought conforms to the OH&S management system. The wording is broad on purpose: it covers equipment, materials, substances, services and anything else an external supplier provides that can influence working conditions or the controls the organisation relies on.
In practice this means OH&S needs are stated before a supplier is chosen, suitability is evaluated against how the item will really be used, and what arrives is checked before it enters the workplace. The clause does not name a questionnaire, approved supplier list or certification requirement. The output is a purchasing route that gives OH&S a say at the right moments, together with whatever records the organisation needs to be confident the route was followed.
Define the need before comparing offers
Involve the people who understand the work, including relevant workers and competent specialists. Establish the OH&S requirements that matter to selection and use. Depending on the purchase, these may concern suitability, information, competence, maintenance or interfaces with existing work.
The standard does not prescribe a universal supplier questionnaire or require every supplier to hold ISO 45001 certification. A certificate can provide information within its scope, but it does not prove that a particular product or service is suitable for the organisation’s intended use.
Connect procurement with assessment and change
A new purchase can alter hazards, exposure or work organisation. Use the relevant planning and change-management processes before introduction. Clarify who evaluates technical suitability and who can approve the purchase when important requirements are uncertain.
Communicate requirements clearly to the provider and determine how delivery will be checked. The acceptance decision should examine what was supplied and the information needed for its safe integration into work. Payment or delivery confirmation is not the same as OH&S acceptance.
Why clause 8.1.4.1 matters to the business
Purchasing is where many hazards are chosen, often without anyone realising. A cheaper machine with an awkward maintenance access, a cleaning product with a harsher profile, a service contract that assumes a night shift: each shapes risk for years. Building OH&S into purchasing means problems are found when changing the order costs little. It protects workers, spares the business expensive modifications, and reduces friction between operations and procurement teams who otherwise argue after delivery. Suppliers also benefit from knowing early what the organisation expects. In an audit, a clear link between a purchase and its OH&S review shows the system is part of normal business decisions.
How to implement clause 8.1.4.1
Make the purchasing route simple enough that buyers use it without being reminded. One approach is below. Keep the route light for low-risk items so that buyers do not bypass it, and remember that a method is a means to the requirement, never the requirement itself; no particular form is mandatory.
- Decide which categories of purchase need OH&S review, for example new equipment, substances, outsourced services and anything entering occupied work areas.
- Add a short prompt to the purchase request asking how, where and by whom the item will be used.
- Involve workers and a competent technical reviewer when the purchase alters exposure or work organisation.
- State the OH&S expectations to the supplier in the enquiry, not after selection, and ask for the information needed to judge suitability.
- Treat supplier certificates as one input to evaluation, not as proof that the item suits your workplace.
- Define acceptance: who inspects the delivery, what they check, and who can refuse it.
- Record substitutions and changes by the supplier, and check whether they alter your assumptions.
Two illustrative purchasing decisions
A manufacturer considers a new material-handling device. Workers and competent technical personnel review the intended task, interfaces, information and maintenance implications before procurement selects an option. The organisation checks the delivered arrangement against the agreed requirements before use. This example does not specify equipment dimensions or claim that one device is suitable for all tasks.
A software company purchases a service to assess remote-work equipment needs. It defines the competence, scope and information expected from the provider and how recommendations will be evaluated and acted on. Buying the service does not itself demonstrate that work-related concerns were resolved; the organisation needs a route from advice to implementation.
Maintain responsibility after the order
Procurement can support continuing needs such as access to relevant information, replacement arrangements or provider communication. Clarify who handles a delivered item or service that fails to meet the agreed requirements. Do not leave the purchasing team to make technical safety decisions outside its competence.
For contractor activities and outsourced processes, apply the additional requirements in the following subclauses. General purchasing control does not replace coordination of contractor risks or the defined control of an outsourced function.
Evidence and common mistakes
Useful evidence can include specifications, selection reasoning, competent review, communicated requirements and acceptance records. The general operational requirement determines the documented information needed for confidence in planned execution. No single procurement form is mandatory.
Common weaknesses include adding OH&S requirements after selection, relying entirely on a supplier’s generic assurance and treating a low purchase cost as the main decision criterion. Another is accepting a substitute without checking whether it changes the work or control assumptions.
Frequently asked questions
Must every supplier be ISO 45001 certified?
No such universal requirement is stated. Determine suitable controls for the product or service and its relevance to the system.
Can purchasing staff assess every technical issue?
Not necessarily. Bring in competent input and worker knowledge appropriate to the decision.
Does delivery complete the procurement control?
No. Check conformity with the agreed needs and manage introduction into the actual work arrangement.
Review a purchase before the specification is fixed
Discuss OH&S procurement controls with Sterling, including documentation and audit samples. The ISO 45001 Awareness course helps purchasing teams understand the system. Effivity ISO & GRC automation software can be scoped to agreed workflows. See procurement and the directory.