Clause 8.1 of ISO 45001:2018 covers the operational implementation of the controls planned in earlier clauses. This is where the “Do” phase of the PDCA cycle takes shape — establishing criteria for processes, implementing controls, managing change, and ensuring procurement and contractor activities meet OH&S requirements.
8.1.2: Eliminating Hazards and Reducing OH&S Risks
Organizations must establish processes for the elimination of hazards and reduction of OH&S risks using the hierarchy of controls. Always start with elimination and substitution before considering lower-order controls. Document the rationale when higher-order controls are not feasible, and review controls periodically and after incidents.
8.1.3: Management of Change
Establish processes for managing planned temporary and permanent changes that can impact OH&S performance. Changes requiring review include new products, services, or processes, changes to work organization or working conditions, new or modified equipment, changes in legal requirements, and new knowledge about hazards or OH&S information.
Best Practices for Management of Change
- Implement a formal management of change (MOC) process that triggers a hazard review before changes are implemented
- Define clearly what constitutes a “change” so nothing falls through the cracks
- Include temporary changes such as shift schedule modifications and equipment substitutions
- Communicate changes and updated controls to affected workers before implementation
- Review the effectiveness of controls after the change has been implemented
8.1.4: Procurement
Establish controls to ensure that procurement of products and services, including contractors and outsourced processes, conforms to OHSMS requirements. Coordinate with contractors to identify hazards and assess risks from contractor activities, your activities that affect contractor workers, and contractor activities that affect others in the workplace.
Best Practices for Procurement and Contractor Management
- Include OH&S criteria in contractor pre-qualification and selection
- Require contractors to comply with your OH&S requirements and verify compliance
- Review safety data sheets for new chemicals before procurement approval
- Conduct contractor safety orientations and periodic performance evaluations
- Establish clear communication channels for OH&S information with contractors
Common Pitfalls
- Implementing changes without conducting a hazard review
- Not including temporary changes in the MOC process
- Treating contractor safety as the contractor’s sole responsibility
- Failing to verify that operational controls remain effective over time


