Clause 8.1.4.3: Outsourcing
The organization makes sure that functions and processes it outsources are kept under control and that its outsourcing arrangements fit both its legal and other requirements and the results its OH&S management system is meant to deliver.
What clause 8.1.4.3 asks
The organization makes sure that functions and processes it outsources are kept under control and that its outsourcing arrangements fit both its legal and other requirements and the results its OH&S management system is meant to deliver. Within the system it sets how much control, and of what kind, is applied to those outsourced functions and processes.
Outsourcing does not transfer the duty. The organization still has to define how much control it keeps and of what kind, and the arrangement has to meet its legal and other requirements.
Draft 8.1.6 Externally provided processes, products and services, from clause 8.1.4.3. The draft retires outsourcing as a term in favour of external provider, and folds the requirement into 8.1.6. The organization still has to define the type and degree of control over an externally provided process.
The draft treatment of clause 8.1.4.3 has its own page: 8.1.6 Externally provided processes, products and services.
Evidence for clause 8.1.4.3
An auditor will ask for an outsourced process, the control actually exercised, and the evidence that the arrangement meets legal requirements.
- OutsourcingRegister of outsourced functions with the defined type and degree of control
- OutsourcingAgreements specifying OH&S requirements and reporting
- OutsourcingEvidence of oversight of outsourced processes
Where clause 8.1.4.3 commonly fails
- Outsourced processes treated as out of scope
- Degree of control never defined
What to do about clause 8.1.4.3 before the revision
List every outsourced function and the control retained. Put OH&S requirements and reporting duties in the agreement. Show an oversight record. Update the term and the clause references before the transition.
What the record shows for clause 8.1.4.3
An auditor working on clause 8.1.4.3 will start with Register of outsourced functions with the defined type and degree of control. The failure this record sees most often is Outsourced processes treated as out of scope. Both are carried into the kit as row 31, with an owner field and a dated action.
Read across from clause 8.1.4.3
Read the next clause in the group, or open the full index. The revision map shows the draft structure.
Source for clause 8.1.4.3: ISO 45001:2018, clause 8.1.4.3, retrieved 18 October 2026. The draft note rests on the public DIS contents and the two named summaries; the requirement, evidence and gaps are written from the held clause record. Every source.