Why Are Contractors Important in ISO 45001?

Contractors may perform activities that create or affect OH&S risks in the workplace. Examples include maintenance, construction, cleaning, equipment installation and specialised technical work.

If contractor activities are not properly coordinated, they can create risks for both contractors and the organisation's workers. ISO 45001 therefore requires organisations to consider contractor activities within their OH&S management processes.

Which ISO 45001 Clause Covers Contractors?

Contractors are mainly addressed under Clause 8.1.4.2 of ISO 45001:2018.

The organisation needs to coordinate its procurement processes with contractors to identify hazards and assess and control OH&S risks arising from contractor activities.

The organisation should also ensure that its procurement process defines and applies OH&S criteria for selecting contractors.

How Does an Organisation Control Contractors?

The organisation can establish a contractor-management process based on the risks associated with the work.

Before work begins, the organisation may assess the contractor's competence, understand the planned activities and communicate relevant workplace safety requirements.

During the work, the organisation can monitor whether agreed controls are being followed and coordinate activities where contractors and employees work in the same area.

The level of control should be appropriate to the nature and OH&S risks of the contractor's activities.

What OH&S Information Should Be Given to Contractors?

Contractors should receive relevant information about the OH&S requirements that apply to their work.

This may include workplace hazards, emergency arrangements, access requirements, restricted areas, safe working procedures and other relevant controls.

The organisation should ensure that contractors understand the requirements that apply to their activities before and during the work.

How Does Contractor Competence Matter in ISO 45001?

Contractors performing safety-related or specialised activities may need appropriate knowledge, skills, qualifications or experience.

The organisation can establish suitable contractor-selection and verification processes to ensure that relevant competence requirements are considered.

This connects with What Is Competence and Training in ISO 45001? because competence is an important part of controlling OH&S risks.

How Does Risk Assessment Apply to Contractors?

Contractor activities can introduce hazards that need to be considered during the organisation's OH&S risk-management process.

For example, if a contractor is carrying out maintenance work on machinery, the organisation may need to consider hazards associated with the equipment, isolation procedures, access and interaction with other workers.

For more information, see What Is Risk Assessment in ISO 45001? A Simple Guide for Beginners?

How Does ISO 45001 Manage Contractor Activities in the Workplace?

Contractor activities should be coordinated with the organisation's own operations where necessary.

For example, if a contractor is performing maintenance while employees are working nearby, the organisation may need to establish controls to prevent conflicts between the two activities.

Communication and coordination can help ensure that workers understand who is responsible for particular activities and what controls need to be followed.

What Happens During an ISO 45001 Audit?

During an ISO 45001 audit, the auditor may examine how the organisation selects, communicates with and controls contractors.

The auditor may review contractor requirements, risk assessments, competence information, communication records and other relevant evidence.

The auditor may also interview employees or contractors and observe contractor activities to determine whether the required controls are being implemented.

You can learn more about the overall process in How Does an ISO 45001 Audit Work From Start to Finish?

How Does Operational Control Connect With Contractors?

Contractor management is closely connected with operational control because contractor activities may form part of the organisation's operational processes.

The organisation needs to determine appropriate controls for relevant contractor activities and ensure that those controls are implemented.

For more information, see What Is Operational Control in ISO 45001?

What If a Contractor Does Not Follow OH&S Requirements?

If a contractor does not follow applicable OH&S requirements, the organisation may need to take appropriate action based on its contractor-management process.

This could involve communicating the requirement again, correcting the unsafe activity, reviewing the control measures or taking action regarding the contractor's work.

The organisation should consider whether the issue indicates a weakness in its existing OH&S controls.