The rules this is built from, and the law around them
The product reads the ISO 45001:2018 requirement set in full. The four markets below are the jurisdictions a management system owner usually has to read beside it. Their occupational health and safety law is named here, not held: this product does not state the text of a statute it does not hold. Clause 6.1.3 is where your own legal register records the duty.
The 40 requirements that apply today
Context of the organization
- 4.1 Understanding the organization and its context
- 4.2 Understanding the needs and expectations of workers and other interested parties
- 4.3 Determining the scope of the OH&S management system
- 4.4 OH&S management system
Leadership and worker participation
- 5.1 Leadership and commitment
- 5.2 OH&S policy
- 5.3 Organizational roles, responsibilities and authorities
- 5.4 Consultation and participation of workers
Planning
- 6.1.1 General
- 6.1.2.1 Hazard identification
- 6.1.2.2 Assessment of OH&S risks and other risks to the OH&S MS
- 6.1.2.3 Assessment of OH&S opportunities and other opportunities for the OH&S MS
- 6.1.3 Determination of legal requirements and other requirements
- 6.1.4 Planning action
- 6.2.1 OH&S objectives
- 6.2.2 Planning to achieve OH&S objectives
Support
- 7.1 Resources
- 7.2 Competence
- 7.3 Awareness
- 7.4.1 General
- 7.4.2 Internal communication
- 7.4.3 External communication
- 7.5.1 General
- 7.5.2 Creating and updating
- 7.5.3 Control of documented information
Operation
- 8.1.1 General
- 8.1.2 Eliminating hazards and reducing OH&S risks
- 8.1.3 Management of change
- 8.1.4.1 Procurement, general
- 8.1.4.2 Contractors
- 8.1.4.3 Outsourcing
- 8.2 Emergency preparedness and response
Performance evaluation
- 9.1.1 General
- 9.1.2 Evaluation of compliance
- 9.2.1 General
- 9.2.2 Internal audit programme
- 9.3 Management review
Improvement
Four markets, named
Federal OSHA and state plans
The Occupational Safety and Health Act 1970 and the standards at 29 CFR 1910 and 1926 set the federal duties; states and territories run their own plans. Named, not held. Record the duty that applies to each site in your clause 6.1.3 register.
Clause 6.1.3 legal registerFramework Directive 89/391/EEC
The framework directive and its daughter directives set minimum duties, transposed nationally. Named, not held. The national transposition is what an auditor will ask you to evidence.
Clause 6.1.3 legal registerHealth and Safety at Work etc. Act 1974
The 1974 Act and the Management of Health and Safety at Work Regulations 1999 set the core duties, with sector regulations beside them. Named, not held. A UK site meets the ISO requirement through its own legal register.
Clause 6.1.3 legal registerWork Health and Safety Act 2011
The model Work Health and Safety Act and Regulations, as adopted in each state and territory, set the duties; some jurisdictions have their own Act. Named, not held. Record the adopted instrument for each site.
Clause 6.1.3 legal registerThe rules this is built from
Nothing here is invented. The 40 requirements that apply today are read from the held ISO 45001:2018 record, each with the evidence an auditor asks for and the ways it commonly fails. The revision layer is read from the public ISO stage record, the public draft contents and two named certification-body summaries. Where the record is silent, the page says so.
ISO 45001:2018, clause by clause
Each clause page states the requirement in our words, the evidence, the gaps and what to do before the revision lands.
Open the clause indexThe new and moved clauses
6.3, 8.1.3, 8.1.4, 8.1.6 and the consolidated 10.1, read from the public record.
Read the revision mapAnnex A, clearly labelled
Informative guidance, not requirements. It explains how to read the clauses and what it does not add.
Open Annex AThe ISO 45001:2018 text is licensed and is not reproduced. The ISO/DIS 45001 text is not public and is not reproduced. The record this site reads is linked on the standards page.