Operational Planning and Control for ISO 45001 Workplace Safety

ISO 45001 Clause 8.1

This is the bit that shows you actually run the management system, not just write about it.

ISO 45001 Clause 8.1 - Operational Planning and Control

ISO 45001 Clause 8.1 covers how you plan, implement, control and maintain the processes needed to deliver the OH&S management system in practice. It pulls together hazard elimination, the hierarchy of controls, management of change, and the work needed to keep day-to-day operations safe.

The clause has three parts in the main body of 8.1 - General (8.1.1), Eliminating hazards and reducing OH&S risks (8.1.2), and Management of change (8.1.3). Procurement (8.1.4) is covered in a separate article. UK organisations operating under HASAWA, the Management Regulations and the various activity-specific sets of regulations (PUWER, COSHH, Working at Height, etc.) will already have many of these controls in place - 8.1 is the framework that brings them together.

What Clause 8.1 Asks For

8.1.1 General - plan, implement, control and maintain the processes needed to meet the OH&S management system requirements and to put the actions from Clause 6 into effect. Set criteria for the processes, control them in line with those criteria, keep documented information enough to have confidence work is done as planned, and adapt work to workers. Where multiple employers share a workplace, coordinate the relevant parts of the management system with them.

8.1.2 Eliminating hazards and reducing OH&S risks - establish, implement and maintain a process for eliminating hazards and reducing risks using the hierarchy of controls, in this order: eliminate the hazard, substitute with less hazardous processes or materials, use engineering controls and reorganise work, use administrative controls including training, and finally provide adequate PPE.

8.1.3 Management of change - establish a process for implementing and controlling planned changes that affect OH&S performance, including changes to workplace location and surroundings, work organisation, working conditions, equipment, and the workforce. The process must also handle changes to legal requirements, changes in knowledge about hazards and OH&S risks, developments in knowledge and technology, and the consequences of unintended changes - taking action to mitigate adverse effects as needed.

The Hierarchy of Controls

The hierarchy of controls in 8.1.2 is not just a recommendation - it is the order the standard requires you to apply. PPE is the last line of defence, not the first. UK case law and HSE guidance reinforce the same principle. When auditors review your controls, they look for evidence that elimination and substitution were considered before engineering, administrative or PPE controls were chosen.

Level	What it means	Example
1. Elimination	Remove the hazard entirely	Stop using a hazardous chemical; redesign a task to remove a fall risk
2. Substitution	Replace with something less hazardous	Switch to a water-based solvent; use a smaller load to reduce manual handling strain
3. Engineering controls	Isolate people from the hazard	Local exhaust ventilation; machine guarding; barriers and edge protection
4. Administrative controls	Change the way people work	Safe systems of work; permits to work; training; rotation; signage
5. PPE	Protect the worker	Hard hats, gloves, respirators, hi-vis, harnesses

Practical Compliance Guidance

alphaZ document	How to use it
ISO 45001 Toolkit	Complete document set for an ISO 45001 management system, including the hazard register, change review form and supporting documents listed below.
ER14 Hazard Risk Assessment Register	Lists every workplace hazard with the assessed risk, the controls applied, and the residual risk. The single best evidence point for the hierarchy of controls in action.
F-Q23 Change Review Form	Used before any planned change that could affect OH&S - new equipment, new process, restructure, site move. Captures the hazards introduced, the controls needed, and sign-off.
ER1 Issues Actions Register	Tracks the actions arising from hazard identification, change reviews and incident investigations through to completion.

For more on these documents see the ISO 45001 Toolkit.

The simplest way to evidence Clause 8.1 is a hazard and risks register that sits alongside the activities you actually do. Each row should show a hazard, the assessed risk, the controls in place, and where they sit in the hierarchy. If you have a welding shop, that register will show extraction (engineering), training (administrative) and respiratory protection (PPE) - each chosen because the higher levels were considered first.

Management of change is where I see most slip-ups. A team moves to a new building and forgets to redo the fire risk assessment. A contract changes shift patterns and lone working is not reviewed. Use the change review form before the change - not after the incident.

I check three things on 8.1. Can you show me criteria for your high-risk processes? Can you show me the hierarchy of controls in action - not just PPE at the bottom? And can you show me a change review that actually changed something?

Multi-Employer Workplaces

Clause 8.1.1 specifically requires coordination of the OH&S management system with other employers operating in the same workplace. Construction sites, shared offices, manufacturing facilities with on-site contractors, and warehousing with multiple logistics providers are common examples. UK organisations meeting CDM 2015 duties already have a framework for coordination on construction projects - the same principles extend to other shared sites.

Frequently Asked Questions

Does Clause 8.1 mean we need written procedures for everything?

No. The clause asks for documented information sufficient to have confidence work is being done as planned. For a low-risk task that is well understood, a simple instruction may be enough. For a high-risk activity like working at height or with hazardous chemicals, written procedures are normally needed and are often required by UK regulations independently of ISO 45001.

Can PPE be the main control for a hazard?

Only when higher-order controls are not reasonably practicable. The hierarchy in 8.1.2 requires elimination, substitution, engineering controls and administrative controls to be considered first. Auditors will look for evidence that the higher levels were assessed before settling on PPE.

When does management of change apply?

Whenever a planned change could affect OH&S performance. That includes new or modified equipment, changes to workplace layout, changes to working hours, restructures, new processes, new chemicals, or changes to the workforce. The clause also requires you to handle the consequences of unintended changes - so unplanned events that change risk also need a response.

What does "adapting work to workers" mean?

It is the principle that work should fit the people doing it - taking account of physical and mental capabilities, fatigue, shift patterns, and individual factors. In practice it covers DSE assessments, manual handling assessments, accommodating workers with health conditions, and reviewing rota patterns where fatigue is a risk.

UK Legislation

UK organisations meeting Clause 8.1 also have to satisfy specific operational and change-control duties under statute.

Further Resources