ISO 45001 clause 8.1: turn planning into controlled work
ISO 45001:2018 clause 8.1 requires planning, implementation, control and maintenance of processes needed to meet OH&S requirements and carry out planned actions. Its subclauses connect operating criteria, the hierarchy of controls, change management and procurement. The common purpose is to make prevention part of the actual work arrangement.
What clause 8.1 requires in practice
Clause 8.1 covers operational planning and control. It brings together four subclauses with one purpose: making prevention part of how work is actually organised. Subclause 8.1.1 asks for processes needed to meet system requirements and carry out the planned actions, using criteria, control against them, necessary documented information and adapting work to workers, with coordination between employers where several share a workplace.
Subclause 8.1.2 sets the hierarchy of controls. Subclause 8.1.3 requires a process for planned temporary and permanent changes, and review of unintended ones. Subclause 8.1.4 covers procurement, treating general purchasing, contractors and outsourcing separately. The clause does not prescribe technical methods; competent assessment of the work and the applicable legal and other requirements determine those, and the management system provides the framework for deciding and recording them.
Connect the operational requirements
Clause 8.1.1 establishes criteria, process control, necessary documented information, adaptation of work to workers and coordination at multi-employer workplaces. Clause 8.1.2 applies the hierarchy for eliminating hazards and reducing risk. Clause 8.1.3 manages planned and unintended changes.
Clause 8.1.4 addresses procurement, with distinct requirements for general purchasing, contractors and outsourcing. These are not isolated administrative topics. A purchased item, contractor task or outsourced function can change the conditions and interfaces that operational control must address.
Define criteria people can apply
Operating criteria explain the conditions under which work should proceed and how relevant controls are applied. Their detail depends on the work and risk. Competent technical decisions may be needed; the management-system standard does not supply a universal safe method for every activity.
Involve workers in assessing whether the arrangement is workable. A control that depends on unrealistic timing, inaccessible information or conflicting responsibilities can fail despite a well-written instruction. Adapt work to workers rather than relying only on demands for greater care.
Why linking these controls prevents gaps
Hazards seldom arise from one activity alone. They emerge at the joins: a new supplier changes equipment, a contractor brings a different method, a reorganised shift removes a handover. Treating criteria, control selection, change and procurement as one connected system closes those joins. This reduces the likelihood of surprise incidents, supports client confidence in subcontracting arrangements and shows insurers a reasoned approach to operational risk. Audit teams value a clear path from a purchasing or change decision to the control that results.
How to implement clause 8.1
The following approach is one way to connect the four subclauses in practice. Involving purchasing, operations and workers in the same discussion tends to reveal links that separate procedure reviews miss.
- Pick an operation that involves purchasing, a contractor or a recent change.
- List the decisions along the way: what is bought, who does the work, how it is scheduled and who approves changes.
- State the criteria for the work and the controls chosen, showing how the hierarchy of controls was applied.
- Check that purchasing and change processes pass the OH&S requirements to the people who control the activity.
- Ask workers whether the arrangement is workable, adjusting work to people where it is not.
- Observe the activity once it begins and record any mismatches for correction.
- Feed the findings into management review and into the planning of the next change or purchase, so the connections are kept up to date.
Two illustrative operational systems
A manufacturer plans recurring contractor maintenance. Purchasing requirements, task coordination, competent hazard assessment, control selection and change handling are connected before work. The organisation checks the implemented arrangement and learns from workers’ observations. A supplier approval record alone would not demonstrate that the maintenance interface is controlled.
A software support company changes its service coverage. Operational planning considers staffing, handovers, escalation and the effect on work-related conditions. Workers contribute to the design and evaluation of the arrangement. The system does not treat the change as purely commercial or assume an awareness reminder can compensate for an impractical schedule.
Manage change and external interfaces
Assess relevant temporary and permanent changes before implementation and review unintended consequences. Procurement should bring necessary OH&S requirements into selection and delivery decisions. Contractor coordination addresses risks between the organisation, contractors and other affected parties, while outsourcing requires defined control of the function or process.
Legal and other requirements remain part of these decisions. A contract cannot automatically transfer away every responsibility, and a certification claim cannot substitute for competent control of the actual activity.
Evidence and common mistakes
Maintain and retain documented information to the extent necessary for confidence that processes are carried out as planned. Useful evidence may include criteria, coordination decisions, requirements communicated to providers, observations and change reviews. No single permit or procedure format is universally prescribed by clause 8.1.
Common weaknesses include treating control as a document issue, choosing protective equipment before considering higher-order options and failing to coordinate multi-employer work. Another is assuming that the operational arrangement remains effective after conditions or personnel change.
Worker observations can reveal whether controls remain usable during unusual demand or disrupted work. Feed that evidence into operational review rather than treating it only as an informal comment.
Explore each numbered part
8.1.1 · establish workable operating criteria
The general operational-control requirement connects planned action with criteria that people can apply. Clause 8.1.1 includes process control, necessary evidence, adaptation of work to workers and coordination at multi-employer workplaces. This guide shows how to test those arrangements in practice, rather than assume that an approved instruction proves the work is controlled.
8.1.2 · Apply the Hierarchy of Controls
The hierarchy of controls helps organisations consider stronger preventive options before relying on instructions or personal protective equipment. Clause 8.1.2 applies that approach to eliminating hazards and reducing OH&S risks. Manufacturing and IT examples identify actual exposures, higher-order options and follow-up checks while preserving the need for competent assessment and review of residual risk.
8.1.3 · Manage Change Before Work Shifts
Temporary and permanent changes can invalidate assumptions behind existing OH&S controls. Clause 8.1.3 addresses planned change and the consequences of unintended change. Software and manufacturing examples connect affected workers, new hazard information, assessment and authorised implementation, including the need to review temporary arrangements before they become an unexamined normal way of working.
8.1.4 · Procurement and External Work
Procurement, contractor coordination and outsourcing require related but distinct OH&S decisions. Clause 8.1.4 connects buying requirements with risks at work interfaces and defined control of outsourced functions. Manufacturing and IT examples show how selection, communication and operating evidence support the arrangement, without treating a contract or supplier certificate as complete assurance.
Frequently asked questions
Does operational control mean written procedures only?
No. It includes the actual criteria, resources, arrangements and controls that shape work, with necessary documented information.
Can contractor work be ignored because it is external?
No. Procurement and coordination requirements address relevant external work and its risks.
Does the standard prescribe one safe work method?
No. Select competent, task-specific controls consistent with the hierarchy and applicable requirements.
Trace a work package from planning to completion
Discuss OH&S operational-control support with Sterling, including documentation and audit readiness. The ISO 45001 Awareness course explains the system’s foundations. Effivity ISO & GRC automation software can be scoped to agreed processes. See operation and the directory.