4. Context of the Organization

4.1 Understanding the Organization and its Context

                    Before designing controls, the organisation has to map the conditions it operates in. That means surfacing the external and internal factors — regulatory pressure, site conditions, workforce profile, legacy incident history — that shape what the OH&S management system needs to deliver. Without this groundwork, objectives drift away from real workplace risk.
                

Key Requirements:

1Identify external issues affecting OH&S objectives and worker safety

2Identify internal issues affecting OH&S objectives and workplace conditions

3Ensure issues are relevant to organizational purpose and worker protection

4Align with strategic direction and OH&S commitment

5Monitor and review these issues regularly

External Issues in OH&S Context

Examples of External OH&S Issues:

Legal and Regulatory: Changes in OH&S legislation, industry-specific safety standards, regulatory enforcement trends
Economic: Economic pressures affecting safety budgets, availability of safety equipment and resources
Social: Changing worker expectations, public awareness of workplace safety, community concerns
Technological: New safety technologies, automation impacts, emerging hazards from new processes
Market: Industry safety benchmarks, customer safety requirements, supply chain safety standards
Environmental: Climate impacts on outdoor work, natural disaster risks, extreme weather conditions

Internal Issues in OH&S Context

Examples of Internal OH&S Issues:

Organizational Culture: Safety culture maturity, management commitment, worker attitudes toward safety
Resources: Availability of competent personnel, safety equipment, emergency response resources
Processes: Work processes with inherent hazards, maintenance practices, operational controls
Infrastructure: Facility conditions, equipment age and reliability, workplace layout
Performance: Historical incident rates, near-miss trends, health surveillance findings
Knowledge: Worker competence levels, safety awareness, organizational memory of past incidents

Keeping context current:
Context is not a once-off scoping document. New regulations, plant modifications, contractor turnover and shifting incident patterns all change the risk picture. Review the context register on a defined cadence — and after any material change — so the OH&S system stays aligned with what's actually happening on site.

4.2 Understanding the Needs and Expectations of Workers and Other Interested Parties

                    Identify everyone who has a legitimate stake in workplace health and safety — workers first, then regulators, contractors, communities, insurers, clients — and capture what each of them needs from the system. Some of those expectations are legal duties (OHS Act, Mine Health and Safety Act, sector regulations); others are contractual or social. Both feed the compliance obligations register.
                

Key Interested Parties in OH&S

1 Identify the interested parties that are relevant to the OH&S management system

2 Determine the relevant needs and expectations of these interested parties

3 Identify which needs and expectations are, or could become, legal requirements and other requirements

4 Monitor and review information about these interested parties and their relevant requirements

Primary Interested Parties in OH&S:

Workers: Employees, contractors, temporary workers, visitors - expectations for safe workplace, health protection, participation in safety decisions
Worker Representatives: Safety committees, union representatives, elected health and safety representatives - expectations for consultation, information sharing
Regulatory Authorities: Government inspectors, licensing bodies - compliance with OH&S laws and regulations
Contractors and Suppliers: Service providers, equipment suppliers - safe systems of work, competent personnel
Emergency Services: Fire services, medical services, rescue teams - coordination, access, information sharing
Insurance Providers: Workers' compensation insurers - risk management, incident reporting
Local Communities: Neighbors, affected populations - protection from workplace hazards, emergency preparedness
Customers and Clients: Expectations for safe products/services, contractor safety performance
Top Management: Legal compliance, business continuity, reputation protection

Workers are not just another stakeholder:
ISO 45001 puts workers at the centre. Consultation and participation are explicit clauses (5.4) — not optional gestures. Their input on hazards, near misses, control adequacy and procedural changes carries operational weight, and the system must demonstrate that input was sought and acted on.

4.3 Determining the Scope of the OH&S Management System

Scope is the boundary line. It states which sites, activities, products, services and people fall inside the management system and which sit outside it. A clear scope prevents the system from being silently narrowed to the easy parts of the operation.

Scope Determination Process

Scope is set against three reference points:

1 The external and internal issues referred to in 4.1

2 The requirements of interested parties referred to in 4.2

3 The planned or performed work-related activities

                    What counts as a work-related activity:

                    Anything the organisation controls or can influence — operations, products, services, the physical work environment — and every person exposed to it. That includes contractors, labour brokers, temporary staff, learners and visitors, not just permanent employees.

Scope Considerations for OH&S:

Geographic Boundaries: All sites, facilities, field locations where work activities occur
Organizational Units: Departments, divisions, business units to be included
Activities: All work activities, including routine, non-routine, emergency situations
Worker Types: Direct employees, contractors, temporary workers, homeworkers
Products and Services: All outputs that may impact worker safety and health
Authority and Control: Areas where organization has control or influence over OH&S

What the scope document needs to cover:

A documented scope statement, kept current and accessible

The work activities, products and services in scope

Physical sites and organisational units covered

Confirmation that the full ISO 45001 clause set applies inside the boundary

No carve-outs for activities that affect OH&S performance or legal compliance — exclusions of that kind invalidate certification

The honesty test: if an activity, product or service can affect worker safety and the organisation has any control or influence over it, it belongs inside the scope. Convenience-based exclusions are a common audit finding and an easy one for an external auditor to spot.

4.4 OH&S Management System

                    The OH&S management system is the connective tissue: a defined set of processes, interactions, controls and accountabilities that together deliver safe work. ISO 45001 expects it to be set up, run, kept alive and improved over time — not built once and shelved.
                

Process-Based OH&S Management System

For each process inside the system, the following has to be worked out and documented:

1 Inputs needed and outputs expected

2 How processes connect — sequence, hand-offs, dependencies

3 Performance criteria, monitoring methods and indicators that show the process is in control

4 Resources required — people, time, equipment, budget — and how availability is secured

5 Named accountabilities and decision rights

6 Treatment of OH&S risks and opportunities (linking back to clause 6.1)

7 Periodic evaluation, with corrective changes when the process isn't delivering

8 A path for improvement — both the individual process and the system as a whole

Key OH&S Processes

Essential OH&S Management Processes:

Hazard Identification and Risk Assessment: Ongoing identification of workplace hazards and evaluation of OH&S risks
Legal Compliance: Identification, access and application of legal requirements and other requirements
OH&S Objectives and Planning: Setting objectives and planning actions to achieve them
Operational Control: Implementing controls to eliminate hazards and reduce OH&S risks
Emergency Preparedness: Planning and preparing for potential emergency situations
Worker Consultation and Participation: Engaging workers in OH&S decision-making
Competence and Training: Ensuring workers are competent for their roles
Communication: Internal and external OH&S communication processes
Monitoring and Measurement: Tracking OH&S performance and compliance
Incident Investigation: Investigating incidents, nonconformities and implementing corrective actions
Internal Audit: Systematic evaluation of OH&S management system effectiveness
Management Review: Top management review of system performance

Documentation Requirements

Two kinds of documented information matter:

1 Live documents — procedures, work instructions, JSAs — that direct how the work is done

2 Records — completed permits, training rosters, inspection reports, incident files — that prove the work happened the way it was planned

OH&S System Integration:

The OH&S management system processes should be integrated with the organization's business processes to ensure:

OH&S is considered in strategic planning and decision-making
Safety is embedded in operational procedures and work instructions
Resources are allocated effectively for OH&S performance
Worker participation is facilitated in relevant business processes
Continual improvement drives both safety and business outcomes