OH&S management

systems
THE DIFFERENCES
ISO 45001:2018
Sections included:
 High Level Structure

 Gap Analysis and Guidance

Estimated completion time:

60 minutes
High Level Structure
 ISO 45001:2018 is now based on the ISO High Level Structure (HLS).

 This provides identical structure, core text and common terms with core
definitions designed to implement into multiple ISO management systems
standards.

 This ensures streamlined integration with other ISO Management Systems and is
a simpler process.

 The HLS uses core text which will be in every management system standard.

 Contextualized text is then used depending on what the management system

is – whether it be Quality, Safety or Environment.

 While the HLS is followed, ISO 45001 does not include requirements specific to
other management systems, such as those for quality, social responsibility,
environmental, security or financial management, though its elements can be
aligned or integrated with those of other management systems
Examples from the new Annex SL
High Level Structure:

➢ Clause 1 – Scope
➢ Clause 2 – Normative References
➢ Clause 3 – Terms and definitions
➢ Clause 4 – Context of the Organization
➢ Clause 5 – Leadership
➢ Clause 6 – Planning
➢ Clause 7 – Support
➢ Clause 8 – Operation
➢ Clause 9 – Performance Evaluation
➢ Clause 10 – Improvement

REFERENCE www.iso.org
The 10 core clauses of the HLS
1. SCOPE – This is referring to the scope of the ISO standard, not the scope of
the management system. For an occupational health and safety
management system this is about the prevention of work-related injury
and ill health and to proactively improve its OH&S performance.
2. NORMATIVE REFERENCES – This section is included to keep the numbering
in alignment with other ISO standards. There are no normative references
for ISO 45001:2018.
3. TERMS AND DEFINITIONS – Includes generic management system terms
and definitions, along with some discipline-specific terms.
4. CONTEXT OF THE ORGANIZATION – The requirement to determine the
issues that influence your organization, whether they are internal or
external. External context may include areas such as legal,
technological, or cultural and may be international, national or local.
Internal may include areas such as values, culture and knowledge.
5. LEADERSHIP – Top management are required to demonstrate leadership.
This may be through the establishment of policies, provision of resources
and the promotion of the OH&S management system across the
organization.
6. PLANNING – Objectives and plans are required to be developed using a
risk-based approach. Changes also need to be planned and the
potential consequences are to be identified whether positive or negative.
7. SUPPORT – Resources are required to be provided to support the OH&S
management system. This includes the provision of competent workers
impacting on the OH&S management system.
8. OPERATION – There is a strong emphasis on organizations determining the
processes required for their operations, along with establishing criteria and
controls. Change management and control of external providers
(contractors, outsourced processes and procurement) requirements are
also included in this section.
9. PERFORMANCE EVALUATION – Requires the monitoring of OH&S activities,
hazards and controls. Compliance obligations, Internal Audits and
Management Review are also included in this section.
10. IMPROVEMENT – Requirements for appropriate actions to address
incidents and non-conformances with the requirement to eliminate the
cause to prevent recurrence.
Gap Analysis and Guidance
ISO 45001 vs AS/NZS 4801 vs OHSAS
18001
DIFFERENCES
 There are some key differences and changes with ISO 45001, which we
have provided general guidance for in the following tables.
 More detailed information of the content of these changes per clause is
included throughout the relevant areas of the course modules.
 It is understood that in some, if not most instances, while there has been an
associated similarity of clauses across the Standards, there are unique
differences throughout.
 These tables serve to provide a summary of the higher level differences
between the Standards and clauses
 Scope, Normative references,
terms and definitions
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences
1. Scope 1. Scope 1. Scope No significant changes

2. Normative references 2. Referenced 2. Reference There are no normative references in ISO

documents publications 45001.

AS/NZS 4801 did refer to ISO 9001 and

14001 as well as AS 1885

OHSAS 18001 did refer to OHSAS 18002 and

ILO:2001
3. Terms and Definitions 3. Definitions 3. Terms and definitions General clause remains the same, with
some additional/changes in terms included
4. Context of the organization

ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences

4.1 Understanding the A requirement to determine the issues that

organization and its influence your organization, whether
context internal or external. External context may
include areas such as legal, technological,
or cultural and may be international,
national or local. Internal may include
areas such as values, culture and
knowledge.

4.2 Understanding the Person or organization that can affect, be

needs and expectations affected by, or perceive itself to be
of workers and other affected by a decision or activity
interested parties conducted by the organization.
 4. Context of the organization
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences

4.3 Determining the scope When determining scope, the organization

of the OH&S management shall determine the boundaries and
system applicability of the OH&S management
system considering:
a) the external and internal issues
referred to in 4.1
b) Take into account the requirements
referred to in 4.2
c) Take into account the planned or
performed work related activities

4.4 OH&S management 4.1 General 4.1 General No significant change

system requirements
 5. Leadership and worker participation
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences

5.1 Leadership and The focus is more about Top Management

commitment demonstrating leadership and
commitment. While there is ‘some’
crossover with the clauses in previous
Standards listed, there is far more
emphasis on Leadership commitment and
Top Management in ISO 45001.
A commitment to active participation of
workers using consultation is also
emphasised as well as integration of the
OH&S management system into the
organization’s business processes
5.2 OH&S Policy 4.2 OHS Policy 4.2 OH&S Policy Enhanced requirements including
commitments to eliminate hazards and
reduce OH&S risks as well as consultation
and participation of workers.

5.3 Organizational roles, 4.4.1.2 Responsibility 4.4.1 Resources, roles, The fundamental requirements remain the
responsibilities and and accountability responsibility, same
authorities accountability and There is no longer an official role of a
authority management representative however top
management is to assign these
responsibilities and authorities.
 5. Leadership and worker participation
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences

5.4 Consultation and 4.4.3.1 Consultation 4.4.3.2 Consultation This clause is a holistic clause which
participation of workers references and links to many other areas
of the Standard (hence the higher number
of cross-references to the superseded
Standards).

It’s focus is on participation and

consultation and highlights the strengths of
all linked clauses to achieve this in an
effective OH&S management system.
 6. Planning
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences

6.1 Actions to address risks This clause collates all areas (clauses) that
and opportunities have been identified as risks and
opportunities such as:
6.1.1 General
- 4.1 Understanding the organization
and its context
- 4.2 Understanding the needs and
expectations of workers and other
interested parties
- 4.3 Determining the scope of the OH&S
management system
- 6.1.3 Determination of legal
requirements and other requirements
- 6.1.2.2 Assessment of risks
- 6.1.2.3 Assessment of opportunities

An assessment of risks and opportunities

identified and documented information of
risks and opportunities that then need to
be addressed is a requirement.
 6. Planning
ISO 45001 Clause
6.1.2 Hazard identification
and assessment of risks and
opportunities
AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences
4.3.1 Planning 4.3.1 Hazard identification, Far more significant changes when
identification of risk assessment and compared to AS/NZS 4801 in the planning
hazards, hazard/risk determining controls stage.
assessment and control
of hazards/risks On-going proactive identification of
hazards arising.
4.4.6.2 Hazard
Generally following the same fundamental
4.4.6.3 Hazard/risk requirements for hazard identification and
assessment assessment.
 6. Planning
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences

6.1.3 Determination of 4.3.2 Legal and other 4.3.2 Legal and other Fundamentally the same however
applicable legal requirements requirements specifically states that documented
requirements and other information is to be retained
requirements
6.1.4 Planning action

6.2 OH&S objectives and 4.3.3 Objectives and 4.3.3 Objectives and Fundamental requirements remain the
planning to achieve them targets programme(s) same. Now includes a requirement to
take into account risks and opportunities
6.2.1 OH&S objectives 4.3.4 OHS management as well as a requirement for monitoring,
plans updating and communicating.
6.2.2 Planning to achieve Planning to achieve objectives specifically
OH&S objectives includes resources, monitoring indicators
and integration into the business
processes.
 7. Support
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences
7.1 Resources 4.4.1.1 Resources 4.4.1 Resources, roles, Fundamental requirements remain the
responsibility, same
accountability and
authority

7.2 Competence 4.4.2 Training and 4.4.2 Competence, training Documented information is to be retained
competency and awareness (records) as evidence of competency.
7.3 Awareness
More specific requirements for awareness
regarding the OH&S policy and the
information and outcome of the
investigation of relevant incidents. As well
as their contribution to the OH&S
management system and the implications
and potential consequences of not
conforming.
7.4 Communication 4.4.3.2 Communication 4.4.3.1 Communication Strengthened in the terms of who, what,
when and with whom as well as defining
internal and external communication.
 7. Support
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences

7.5 Documented 4.4.4 Documentation 4.4.4 Documentation Documented information replaces the
information previous requirements for procedures,
4.4.5 Document and 4.4.5 Control of documents documents and records.
7.5.1 General data control
4.5.3 Control of records Specific requirements are detailed for:
7.5.2 Creating and 4.5.3 Records and - Creating and updating
updating records management - Control

7.5.3 Control of Access by workers and workers

documented information representatives (where they exist) to
relevant documented information
 8. Operation
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences
8.1 Operational planning 4.4.6 Hazard 4.4.6 Operational control The word ‘plan’ has been introduced to
and control identification, this section to support the implementation
hazard/risk assessment and control of the processes needed.
8.1.1 General and control of Criteria for the processes is to be
hazards/risks established based on what was identified
in clause 6. Planning.

On multi-employer workplaces, the

organization shall implement a process for
coordinating the relevant parts of the
OH&S management system with other
organizations.
8.1.2 Eliminating hazards 4.4.6.4 Control of 4.4.6 Operational control Hierarchy of control is still referred to as the
and reducing OH&S risks hazards/risks preferred order of control, with possibly a
little more detail:
- Eliminate the hazard
- Substitute with less hazardous materials,
processes, operations or equipment
- Use engineering controls
- Use administrative controls
- Provide and ensure use of adequate
personal protective equipment
 8. Operation
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences
8.1.3 Management of The objective of this new clause
change requirement is to manage the change
process to enhance OH&S at work,
through minimizing the introduction of new
hazards and risks.
8.1.4 Procurement Specific requirements to address
procurement for e.g. supplies, equipment,
raw materials and any other
goods/services purchased to ensure they
conform to the OH&S management
system.
8.1.4.2 Contractors This process recognizes that some
contractors (external providers) possess
specialized knowledge, skills, methods and
means. Assignment of activities to
contractors does not eliminate the
organization’s responsibility for the
occupational health and safety of
workers.
8.1.4.3 Outsourcing Specific requirement to address the
control of outsourced processes to ensure
the intended outcome of the OH&S
management system is still achieved.
 8. Operation
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences
8.2 Emergency 4.4.7 Emergency 4.4.7 Emergency Now includes the periodic testing and
preparedness and preparedness and preparedness and exercise of emergency response
response response response capability.

The communication and provision of

relevant information to all workers and at
all levels of the organization on their duties
and responsibilities. This includes
contractors, visitors, emergency response
services, government authorities and, as
appropriate, the local community.

The provision of training for emergency

prevention, first aid, preparedness and
response.

Documented information is to be
maintained (procedures) and retained
(records) on the process and plans for
responding to potential emergency
situations.
 9. Performance evaluation
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences
9.1 Monitoring, 4.5.1 Monitoring and 4.5.1 Performance More specific with the inclusion of the
measurement, analysis and measurement measurement and criteria against which the organization will
evaluation monitoring evaluate the OH&S performance.
4.5.1.1 General
9.1.1 General Results are to be communicated.
4.4.6.5 Evaluation
Monitoring and measurement equipment
calibration, verification and maintenance
remains within this clause.
9.1.2 Evaluation of 4.5.1.1 General 4.5.2 Evaluation of More specific with determining the
compliance compliance frequency and methods of evaluation.
 9. Performance evaluation
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences
9.2 Internal audit 4.5.4 OHSMS audit 4.5.5 Internal audit Fundamental requirements remain the
same:
9.2.1 General - Competent auditors to be selected
- Relevant audit findings reported to
9.2.2 Internal audit workers
programme - Audit programme based on risk
including significant changes to the
organization, performance and
improvement evaluation/results and
significant OH&S risks and OH&S
opportunities

9.3 Management review 4.6 Management 4.6 Management review Strengthened from the superseded
review Standards, particularly AS/NZS 4801.
Emphasis is on improvement and results
feeding back into linked clauses of the
Standard. Management review is the key
driver to identify change, manage
change and report on performance
improvement.
 10. Improvement
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences
10.1 General General statement regarding
improvement
10.2 Incident, 4.5.2 Incident 4.5.3 Incident investigation, Preventive action has been removed, as a
nonconformity and investigation, corrective nonconformity, corrective phrase within ISO 45001 as it is considered
corrective action and preventive action action and preventive that the planning, operation and control
action elements of the Standard are inherently
classed as preventive action.
Specific requirements to note are:
- Take direct action to control and
correct
- Deal with consequences
- Participation of workers and any other
interested parties in the evaluation of
the root cause
- Communicate to relevant workers and
interested parties
 10. Improvement
ISO 45001 Clause AS/NZS 4801 Clause OHSAS 18001 Clause Guidance on Differences
10.2 Continual While preventive action was included in
improvement the superseded Standards and
contributed to continual improvement this
clause is very specific regarding:
- Prevent recurrence or occurrence
elsewhere of incidents and
nonconformances
- Promoting a positive OH&S culture
- Enhance OH&S performance
Documented information is required to be
retained as evidence of the results of
continual improvement