What Is Operational Control in ISO 45001?

Operational control involves managing workplace activities in a way that prevents or reduces OH&S risks.

For example, an organisation may establish safe operating procedures for machinery, controls for hazardous substances, requirements for personal protective equipment, or procedures for high-risk activities.

The controls should be appropriate to the organisation's hazards, risks and operational conditions.

Which Clause Covers Operational Control in ISO 45001?

Operational planning and control is addressed under Clause 8.1 of ISO 45001:2018.

The organisation needs to plan, implement, control and maintain the processes needed to meet OH&S requirements and implement actions identified through its planning processes.

The organisation should also maintain and retain appropriate documented information to provide confidence that processes have been carried out as planned.

Why Is Operational Control Important in ISO 45001?

Identifying a workplace hazard is not enough. The organisation also needs to establish controls that help manage the associated OH&S risk.

For example, if workers are exposed to machinery hazards, the organisation may establish machine guarding, safe operating procedures, training and inspection requirements.

Operational control helps ensure that these controls are actually incorporated into day-to-day activities.

How Does Risk Assessment Connect With Operational Control?

Risk assessment helps an organisation understand its hazards and determine which risks need to be controlled.

The results of risk assessment can then be used to establish operational controls. If you want to understand this relationship in more detail, read What Is Risk Assessment in ISO 45001? A Simple Guide for Beginners? .

Operational controls should reflect the organisation's actual workplace risks rather than being generic procedures that are not followed in practice.

What Are Examples of Operational Controls in ISO 45001?

Operational controls can vary depending on the organisation's activities.

A manufacturing organisation may use machine safety procedures, maintenance controls and inspection processes. A construction company may establish controls for work at height, excavation or the use of equipment.

The appropriate controls depend on the hazards, risks and nature of the work.

How Does Management of Change Affect Operational Control?

Changes to equipment, processes, materials, technology or workplace conditions can affect existing operational controls.

When a relevant change is introduced, the organisation should consider whether existing controls remain suitable or need to be modified.

For more information, see What Is Management of Change in ISO 45001? .

How Are Contractors Covered by Operational Control?

Organisations may need to establish controls for activities performed by contractors where those activities can affect OH&S.

The organisation should communicate relevant OH&S requirements and ensure that applicable controls are implemented.

Contractor activities can be particularly important where contractors work alongside employees or perform higher-risk activities.

How Does Worker Participation Support Operational Control?

Workers can provide practical information about whether operational controls are effective in real working conditions.

Their experience can help identify problems with procedures, equipment or workplace controls. Worker involvement can therefore support the implementation and improvement of operational controls.

For more information, see What Is Worker Consultation and Participation in ISO 45001? .

How Does an ISO 45001 Auditor Check Operational Control?

During an ISO 45001 audit, an auditor may review procedures and documented information related to operational controls.

The auditor may also observe workplace activities and interview workers to determine whether the controls are actually being implemented.

For example, an auditor may compare a documented safe working procedure with how the activity is performed in practice.

You can learn more about the overall audit process in How Does an ISO 45001 Audit Work From Start to Finish? .

What Happens When Operational Controls Are Not Effective?

If an operational control is not working as intended, the organisation may need to investigate the reason and take appropriate action.

This could involve updating a procedure, providing additional training, improving equipment, changing a process or introducing additional controls.

The organisation should consider the effectiveness of its controls as part of maintaining and improving the OHSMS.