Skip to content

Clause map - ISO 45001:2018

One row per distinct obligation of ISO 45001:2018: what the duty concerns, the document that implements it, how the system complies, where the evidence lands, and its status. The standards themselves are not reproduced here. Source of truth: docs/clause-map-45001.csv.

Clause 4

Req ID Clause Obligation Implementing document Statement of compliance Section Evidencing register Records folder Status Integrated with
OHS4.1-1 4.1 Business context shaping the OH&S system context-interested-parties-compliance-obligations Handled through the issues table of Context, Interested Parties & Compliance Obligations (section 3.1, Context Review Method), maintained by the {{ROLE_QUALITY_MANAGER}} and {{ROLE_OHS_COORDINATOR}}. Issues are re-examined at the management review context slice and on defined trigger events, with each session logged in the Management Review Log register and its record committed to docs/records/management-reviews/. Confirmed issues feed the Risk & Opportunity Register, and the Hazard Register where relevant, under risk-opportunity-hazard-methodology. Context review method Documented Q4.1-1
OHS4.2-1 4.2 Interested parties and the requirements they raise context-interested-parties-compliance-obligations Handled in the interested parties table of Context, Interested Parties & Compliance Obligations (section 3.2), reviewed at the management review context slice and on trigger events. Worker input reaches the table through the consultation and participation arrangements, evidenced in docs/records/consultation/, and via the Hazard Register reporting channel. Requirements adopted as compliance obligations pass into the Instruments & Commitments register and are managed under compliance-obligations-procedure. Interested parties Documented Q4.2-1
OHS4.3-1 4.3 Boundary and applicability of the integrated management system ims-scope-statement Answered wholly by the IMS Scope Statement: section 3.1 (Scope of the IMS) carries the boundary and applicability decisions, drawing on the context and interested-party inputs documented in context-interested-parties-compliance-obligations, with the boundary particulars completed as [ORG-DECISION] items at instantiation and re-examined per the document's review trigger. The statement itself is the maintained documented information for the scope, controlled under document-record-control-procedure, indexed in the Document Register, and available to workers through the published IMS site and to external parties on request. Scope Documented Q4.3-1
OHS4.4-1 4.4 The OH&S management system and its processes ims-scope-statement Handled by the System processes map in section 3.2 of the IMS Scope Statement, which defines the interacting processes and their plan-do-check-act loop, with working-level detail governed by each process's slug-matched procedure or plan and improvements routed through the pipeline in ims-objectives-improvement-plan. Conformity is traced through document clause_refs frontmatter and the clause-map CSVs, checked in CI, and evidence that processes ran as planned lands append-only in the docs/records/ subfolders and per-job operational files. System processes Documented Q4.4.1-1

Clause 5

Req ID Clause Obligation Implementing document Statement of compliance Section Evidencing register Records folder Status Integrated with
OHS5.1-1 5.1 Leadership and commitment from the top quality-ohs-policy Section 4.1 (Leadership commitments) of quality-ohs-policy records how {{ROLE_TOP_MANAGEMENT}} personally leads the IMS, held as a controlled document under the standard lifecycle. There is no separate record stream per commitment: leadership is demonstrated collectively through management review records in docs/records/management-reviews/, resourcing decisions and day-to-day conduct. Leadership commitments Documented Q5.1.1-1
OHS5.2-1 5.2 The OH&S policy and its communication quality-ohs-policy quality-ohs-policy is both the policy and its machinery: section 3 (Policy Statements) carries the policy content issued by {{ROLE_TOP_MANAGEMENT}}, whose PR merge as frontmatter approver is the establishing act, taken after worker consultation through {{ROLE_WORKER_REP}} under communication-consultation-participation-procedure and evidenced in docs/records/consultation/. Section 3.4 (Communication of the Policy) keeps the policy as controlled documented information indexed in the Document Register and puts it in front of everyone it applies to through acknowledgement campaigns captured in the Policy Acknowledgements register, with snapshot records landing in docs/records/acknowledgements/. Policy statements Policy Acknowledgements acknowledgements Documented Q5.2.1-1; Q5.2.2-1
OHS5.3-1 5.3 Assigning and communicating IMS roles, responsibilities and authorities ims-scope-statement Section 3.3 (Roles, responsibilities and authorities) of ims-scope-statement is the maintained documented information: its role table holds every assignment {{ROLE_TOP_MANAGEMENT}} makes, from the named IMS roles through to the All workers row, while the People register alone carries who currently holds each role. Assignments are communicated at all levels through induction, the document itself and the published IMS site, with understanding built and checked under competence-training-awareness-procedure. Roles, responsibilities and authorities People Documented Q5.3-1
OHS5.4-1 5.4 Worker consultation and participation across the management system communication-consultation-participation-procedure Section 3.2 (Consultation and participation) of communication-consultation-participation-procedure is the home of the machinery: a mechanisms table sets out the standing channels, a defined sequence of steps governs how each consultation runs, and the {{ROLE_OHS_COORDINATOR}} and {{ROLE_WORKER_REP}} jointly run standing reviews of how well the channels are working in practice. Every consultation and participation event is evidenced by a record in docs/records/consultation/. Consultation and participation consultation Documented

Clause 6

Req ID Clause Obligation Implementing document Statement of compliance Section Evidencing register Records folder Status Integrated with
OHS6.1.1-1 6.1.1 Planning risks and opportunities for the OH&S system risk-opportunity-hazard-methodology The Assessment flow of risk-opportunity-hazard-methodology is the planning machinery for the OH&S side of the system, run in step with the standing consultation channels of communication-consultation-participation-procedure. Confirmed items are carried in the Risk & Opportunity Register; consultation on planning matters is evidenced in docs/records/consultation/, and point-in-time snapshots land in docs/records/ at review and audit points. Assessment flow Risk & Opportunity Register consultation Documented Q6.1.1-1
OHS6.1.2.1-1 6.1.2.1 Ongoing identification of workplace hazards risk-opportunity-hazard-methodology Hazard identification runs through the Hazard pathway section of risk-opportunity-hazard-methodology: standing channels headed by the worker-facing Hazard & Incident Report form, together with inspections, job planning, consultation forums and defined trigger reviews, feed the Hazard Register, and the section fixes the breadth of work, people and situations identification deliberately covers. The {{ROLE_OHS_COORDINATOR}} triages each new Hazard Register row promptly. Hazard pathway Hazard Register Documented
OHS6.1.2.2-1 6.1.2.2 Assessing OH&S risks and risks to the management system risk-opportunity-hazard-methodology Assessment runs through the Assessment flow of risk-opportunity-hazard-methodology, with the Risk matrix section fixing the shared 5×5 matrix, rating vocabulary, bands and acceptance criteria; the methodology document is itself the maintained definition of the approach. Hazard-derived risks are assessed on the Hazard Register by the {{ROLE_OHS_COORDINATOR}} in consultation with the workers who do the work, while risks to the management system itself are assessed with the same matrix and indexed on the Risk & Opportunity Register. Assessment flow Hazard Register; Risk & Opportunity Register Documented
OHS6.1.2.3-1 6.1.2.3 OH&S improvement opportunities under the risk methodology risk-opportunity-hazard-methodology Opportunities are identified through the Opportunities section of risk-opportunity-hazard-methodology, using the same Assessment flow inputs, and recorded in the Risk & Opportunity Register with Type set to Opportunity; the owner records a benefit and feasibility narrative and the realisation plan in place of likelihood and consequence ratings. Opportunities Risk & Opportunity Register Documented
OHS6.1.3-1 6.1.3 Legal and other requirements and how the system carries them compliance-obligations-procedure This clause is handled through the Identification and decomposition section of compliance-obligations-procedure: instruments are captured in the Instruments & Commitments register and decomposed into atomic obligation rows of the Compliance Obligations register, and the two registers together are the maintained documented information, kept current by standing identification channels and scheduled currency checks. The registers then serve as standing inputs across the wider IMS, through the risk methodology, each obligation's Implemented By link into its implementing documents, objective setting, management review and management-of-change checks, with retained evidence accumulating in docs/records/legal-compliance-evaluations/. Identification and decomposition Instruments & Commitments; Compliance Obligations Documented
OHS6.1.4-1 6.1.4 Action planning under the risk and hazard methodology risk-opportunity-hazard-methodology Planned actions are governed by the Action planning section of risk-opportunity-hazard-methodology: each action is built into the everyday IMS process where the work actually happens, carries an owner and a due date, and emergency-type items are cross-linked to emergency-preparedness-response-plan. Treatment selection follows the hierarchy of controls and the proportionality rules the section fixes, and constraints that limit a chosen control are recorded honestly in the register's Treatment narrative. Action planning Documented Q6.1.2-1
OHS6.2.1-1 6.2.1 Setting OH&S objectives across functions and levels ims-objectives-improvement-plan OH&S objectives are set through the two-level model in the Company-wide objectives section of ims-objectives-improvement-plan, which also binds each objective to the house well-formedness attributes and keeps it current through the document lifecycle. Every objective is mirrored by an Objectives & Targets register row carrying current result, last-measured date and status, and the OH&S input rule holds a row back from Active until its Linked Risks and Consultation Ref are in place. Company-wide objectives Objectives & Targets Documented Q6.2.1-1
OHS6.2.2-1 6.2.2 Planning how objectives are achieved and evidencing progress ims-objectives-improvement-plan Each objective is planned under the Objective planning section of ims-objectives-improvement-plan, which sets the planning questions answered before the objective's Objectives & Targets register row is set to Active. The plan document plus that register is the maintained documented information; retained evidence of progress and results is produced at each objectives review slice, where the register is snapshotted into docs/records/management-reviews/ and the session minutes record results, evaluations and decisions. Objective planning Objectives & Targets management-reviews Documented Q6.2.1-1; Q6.2.2-1

Clause 7

Req ID Clause Obligation Implementing document Statement of compliance Section Evidencing register Records folder Status Integrated with
OHS7.1-1 7.1 Resourcing of the integrated management system ims-scope-statement Resourcing of the IMS is handled through the Resources section of ims-scope-statement, where {{ROLE_TOP_MANAGEMENT}} determines and provides what the system needs, with needs surfacing through the IMS's own planning, review and consultation channels. Resource decisions are recorded in the Management Review Log, and externally sourced resources are controlled under procurement-contractor-management-procedure. Resources Documented Q7.1.1-1
OHS7.2-1 7.2 Competence management through the training matrix competence-training-awareness-procedure Competence is managed end to end under competence-training-awareness-procedure (Training matrix section): the Training Curriculum register crossed with each person's IMS Roles in the People register forms the competence and training matrix, operated by the {{ROLE_QUALITY_MANAGER}} with the {{ROLE_OHS_COORDINATOR}} for OH&S-affecting work. The Training Log is the live index of the cycle's outcomes, and evidence lands as append-only snapshots in docs/records/training/ produced by tools/snapshot_register.py. Training matrix Training Curriculum; Training Log training Documented Q7.2-1
OHS7.3-1 7.3 Worker awareness of key OH&S matters competence-training-awareness-procedure Awareness is built through the awareness topics table in competence-training-awareness-procedure (Awareness section), delivered through induction, toolbox talks and ongoing training. Awareness items are Training Curriculum items like any other, so currency is chased by the register automation and evidence lands through Training Log snapshots in docs/records/training/, with acknowledgement campaign records in docs/records/acknowledgements/ supplementing the evidence where campaigns apply. Awareness Documented Q7.3-1
OHS7.4.1-1 7.4.1 OH&S communication arrangements and their evaluation communication-consultation-participation-procedure Communication is planned and run through the Communication matrix section of communication-consultation-participation-procedure, whose internal and external matrices record each planned communication with its aim, audience, timing, method and responsible role; matrix changes are document changes through the PR lifecycle. The same section carries the inbound-handling process that routes incoming OH&S matters to the register or procedure they belong to, and the {{ROLE_OHS_COORDINATOR}} and {{ROLE_QUALITY_MANAGER}} evaluate the matrices annually, feeding management review. Documentation of communications is retained with the record stream each matter routes to. Communication matrix Documented Q7.4-1
OHS7.4.2-1 7.4.2 Internal OH&S communication arrangements communication-consultation-participation-procedure Internal IMS communication runs to the internal communication matrix in communication-consultation-participation-procedure (Communication matrix section), each row carrying a defined aim, audience, timing, method and responsible role and reaching the whole of {{ORG_NAME}} through standing channels such as induction, all-hands briefings, toolbox talks and acknowledgement campaigns. Communication matrix (internal) Documented
OHS7.4.3-1 7.4.3 External communication of OH&S information communication-consultation-participation-procedure External OH&S communication runs to the external communication matrix in communication-consultation-participation-procedure (Communication matrix section), where each external audience and matter has a defined row with its aim, timing, method and responsible role; rows tied to legal notification duties trace to the Compliance Obligations register. Communication matrix (external) Documented
OHS7.5.1-1 7.5.1 The documented information the system needs document-record-control-procedure The scope and shape of IMS documentation is set by document-record-control-procedure (Document control framework section): all documented information lives in the three-tier model of versioned documents, append-only records and Airtable registers, is indexed in the Document Register, and is deliberately scaled to {{ORG_NAME}}'s size and complexity. Document control framework Document Register Documented Q7.5.1-1
OHS7.5.2-1 7.5.2 Creating and updating controlled documents document-record-control-procedure Creating and updating controlled documents is governed by the Creating and updating section of document-record-control-procedure: every document carries YAML frontmatter with fields defined solely in schemas/document-types.yml, is held as plain-text Markdown in the private Git repository, and changes only through the Git branch, PR and merge lifecycle, with the merge as the approval event. tools/check_docs.py enforces conformance in CI and the Document Register mirrors each document's frontmatter. Creating and updating Document Register Documented Q7.5.2-1
OHS7.5.3-1 7.5.3 Control of documents in use document-record-control-procedure Documents in use are controlled through the Control of documents section of document-record-control-procedure: the current approved version of everything is what sits on main, the single distribution point, with branch protection, per-person access grants, plain-text Markdown and indefinite Git history providing the structural controls, and the control-activities table mapping each control activity to its mechanism. The Document Register indexes internal and external-origin documents alike, and the same section carries the worker access rules and the {{ROLE_DOCUMENT_CONTROLLER}}'s currency checks on external-origin entries. Control of documents Document Register Documented Q7.5.3-1

Clause 8

Req ID Clause Obligation Implementing document Statement of compliance Section Evidencing register Records folder Status Integrated with
OHS8.1.1-1 8.1.1 Planned, controlled delivery work including shared and multi-employer workplaces operational-control-service-delivery-procedure Delivery work runs under the OH&S operational controls of the Operational Control & Service Delivery Procedure (section 3.10), which sets the criteria work is planned and carried out to and, through section 3.10.2, coordinates {{ORG_NAME}}'s arrangements with the other organisations present at shared and multi-employer workplaces. Evidence that work ran as planned sits in the per-job files under the operational evidence convention rather than in docs/records/. OH&S operational controls operational Documented Q8.1-1
OHS8.1.2-1 8.1.2 Risk control selection through the hierarchy of controls risk-opportunity-hazard-methodology Risk control selection runs through the hierarchy of controls fixed in section 3.4 of the Risk, Opportunity & Hazard Methodology, worked in mandatory priority order when treatments are chosen. Each treatment records its hierarchy level, and the Hazard Register's Control Level field carries the highest level achieved by the applied controls. Hierarchy of controls Hazard Register Documented
OHS8.1.3-1 8.1.3 Management of change affecting health and safety management-of-change-procedure Changes with OH&S implications, whether planned or discovered after the fact, run through the change assessment of the Management of Change Procedure: section 3.1 sets the assessment steps, drawing on the Risk, Opportunity & Hazard Methodology and worker consultation, and section 3.2 applies the same steps retrospectively to anything found to have changed without assessment. Assessment outcomes are held with the change decision, and recurring patterns of unassessed change feed the nonconformity machinery. Change assessment Documented Q6.3-1; Q8.1-1
OHS8.1.4.1-1 8.1.4.1 OH&S controls in procurement procurement-contractor-management-procedure OH&S-relevant purchases pass the controls of the OH&S procurement section of the Procurement & Contractor Management Procedure (section 3.2) before purchase and again before first use, with approvals and checks noted on the provider's Supplier & Contractor Register row. Any new hazard a purchase introduces feeds the hazard and risk process before the item enters service. Evaluation and selection (OH&S procurement) Supplier & Contractor Register Documented Q8.4.1-1
OHS8.1.4.2-1 8.1.4.2 Contractor selection, coordination and safety compliance procurement-contractor-management-procedure Contractor engagements are governed end to end by the Contractors section of the Procurement & Contractor Management Procedure (section 3.5), applying the OH&S performance criteria of section 3.1 from selection onward and carrying coordination and oversight through mobilisation and the work itself. The resulting evaluations, coordination records and monitoring entries all sit on the contractor's Supplier & Contractor Register row. Contractors Supplier & Contractor Register Documented Q8.4.1-1
OHS8.1.4.3-1 8.1.4.3 Control of outsourced processes procurement-contractor-management-procedure Outsourced processes stay inside the IMS through the Outsourcing section of the Procurement & Contractor Management Procedure (section 3.6): each arrangement is registered on the Supplier & Contractor Register with a named internal owner and a written definition of the control applied, is monitored on the section 3.1 cycle, and any change to it routes through the Management of Change Procedure. Where nothing is outsourced the section stands ready and the register simply carries no such rows. Outsourcing Documented Q8.1-1; Q8.4.2-1
OHS8.2-1 8.2 Emergency preparedness, response, drills and review emergency-preparedness-response-plan The Emergency Preparedness & Response Plan is the maintained process for emergency preparedness and response, its scenario set fed by the hazard and risk process under the Risk, Opportunity & Hazard Methodology: Section 5 carries the planned response, Section 6 the communication and interested-party arrangements, and Section 7 the drill, training and review cycle, with training delivered as Training Curriculum items under the Competence, Training & Awareness Procedure. Drills are scheduled through the Schedule register and retained evidence lands append-only in docs/records/emergency-drills/, with training evidence in the Training Log and docs/records/training/, and worker consultation on the plan and drill debriefs evidenced in docs/records/consultation/. Response Schedule; Training Log emergency-drills Documented

Clause 9

Req ID Clause Obligation Implementing document Statement of compliance Section Evidencing register Records folder Status Integrated with
OHS9.1.1-1 9.1.1 Monitoring, measurement, analysis and evaluation of OH&S performance monitoring-measurement-calibration-procedure Handled end to end by the Monitoring, Measurement & Calibration Procedure: the section 3.1 monitoring plan drives what is watched and by whom, section 3.3 covers analysis and evaluation at the management review slices, and section 3.4 covers calibration and measuring equipment. Results land in the registers each plan line names, with committed register snapshots, management review records in docs/records/management-reviews/ and, where the calibration capability is instantiated, certificates in docs/records/calibration/ forming the retained evidence. Monitoring plan operational Documented Q9.1.1-1; Q9.1.3-1
OHS9.1.2-1 9.1.2 Planned evaluation of compliance with obligations compliance-obligations-procedure Run through section 3.4 Compliance evaluation of the Compliance Obligations Procedure, with evaluation runs driven by Schedule register rows and worked against the Compliance Obligations register, whose fields carry the live status picture between runs and feed management review. Each run commits its record to docs/records/legal-compliance-evaluations/ with a register snapshot alongside via tools/snapshot_register.py, and shortfalls are raised in the Nonconformity & CAPA Register and handled per the Nonconformity, Corrective Action & Improvement Procedure. Compliance evaluation Compliance Obligations legal-compliance-evaluations Documented
OHS9.2.1-1 9.2.1 Regular internal audits of the system internal-audit-procedure Delivered by the rolling audit programme in section 3.1 of the Internal Audit Procedure: twelve short monthly slices whose full cycle covers every clause-map requirement area of both standards. Slices are seeded as dated Schedule register rows and tracked in the Internal Audit Log. Audit programme Internal Audit Log Documented Q9.2.1-1
OHS9.2.2-1 9.2.2 Running the internal audit programme from planning to follow-up internal-audit-procedure Sits entirely within the Internal Audit Procedure: section 3.1 Audit programme shapes and weights the rolling programme, section 3.2 Auditor independence keeps the process objective and impartial, and section 3.3 Audit execution carries each session from planning to close-out, with worker-facing communication routed through the Communication, Consultation & Participation Procedure. Every session commits its record to docs/records/internal-audits/ and updates its Internal Audit Log row, and anything requiring correction is raised in the Nonconformity & CAPA Register and handled per the Nonconformity, Corrective Action & Improvement Procedure. Audit programme Internal Audit Log; Nonconformity & CAPA Register internal-audits Documented Q9.2.2-1
OHS9.3-1 9.3 Top management review of the IMS management-review-procedure Handled by the Management Review Procedure: the section 3.1 review programme runs twelve short monthly slices chaired by {{ROLE_TOP_MANAGEMENT}}, section 3.2 governs how each slice's inputs are prepared from the live registers and committed records, and section 3.3 governs its outputs and their communication, the worker-facing part via the Communication, Consultation & Participation Procedure. Each session commits a record to docs/records/management-reviews/ and updates the Management Review Log, with register snapshots committed alongside where the procedure calls for them. Review programme Management Review Log management-reviews Documented Q9.3.1-1; Q9.3.2-1; Q9.3.3-1

Clause 10

Req ID Clause Obligation Implementing document Statement of compliance Section Evidencing register Records folder Status Integrated with
OHS10.1-1 10.1 Improvement opportunities and the pipeline carrying them nonconformity-corrective-action-improvement-procedure Improvement opportunities are identified, selected and acted on under the Improvement section (3.3) of the Nonconformity, Corrective Action & Improvement Procedure, drawing on the outputs of the system's own evaluation activities. Each selected improvement is tracked to completion as an Objectives & Targets register row, a Nonconformity & CAPA Register row, or a change under the Management of Change Procedure, per the improvement pipeline in the IMS Objectives & Improvement Plan, with results feeding back into management review. Improvement Documented Q10.1-1
OHS10.2-1 10.2 Incident and nonconformity handling and corrective action nonconformity-corrective-action-improvement-procedure Handling splits between two paired procedures: the Incident Reporting & Investigation Procedure carries every reported event from the Hazard & Incident Report form and triage onto the Incident Register through to communicated outcomes, while the Root cause and corrective action section of the Nonconformity, Corrective Action & Improvement Procedure is the CAPA engine that takes each matter to effectiveness-checked closure on the Nonconformity & CAPA Register. Findings that reach further route through the Risk, Opportunity & Hazard Methodology, updating the Risk & Opportunity and Hazard Registers, and through the Management of Change Procedure. Evidence is retained append-only in docs/records/incidents/ and docs/records/nonconformities/, indexed by the two registers. Root cause and corrective action Incident Register; Risk & Opportunity Register; Hazard Register; Nonconformity & CAPA Register incidents Documented Q10.2.1-1; Q10.2.2-1
OHS10.3-1 10.3 Continual improvement of the integrated system ims-objectives-improvement-plan Continual improvement runs through the Improvement pipeline in the IMS Objectives & Improvement Plan (section 3.6): candidate improvements drawn from the system's own outputs are weighed and selected at management review, and each is tracked to completion as either an Objectives & Targets register row or a Nonconformity & CAPA Register row. The Communication, Consultation & Participation Procedure supplies the workforce channels the pipeline uses, with evidence landing in docs/records/consultation/ and in the objective snapshots and management-review minutes committed to docs/records/management-reviews/. Improvement pipeline Objectives & Targets consultation Documented Q10.3-1