ISO 45001:2018 Framework and Implementation

Core Elements of ISO 45001

ISO 45001 adopts Plan-Do-Check-Act (PDCA) structure and requires organizations to establish occupational health and safety management systems (OHSMS) addressing:

Context and Scope

Organizations must understand internal and external context: business environment, stakeholder expectations, regulatory requirements, supply chain characteristics, and organizational capabilities. Scope defines operational boundaries (all facilities or specific ones), workforce coverage (employees only or contractors/temporary workers), and hazard types addressed.

Hazard Identification and Risk Assessment

Organizations systematically identify hazards (sources of potential harm) and assess risks (probability and severity of harm). Risk assessment methodology should include:

• Hazard types: Physical (machinery, electrical, chemical), biological (pathogens), ergonomic (repetitive motion, manual handling), psychosocial (stress, harassment, violence)
• Risk prioritization: High-consequence/low-probability risks (catastrophic injury) and high-probability/moderate-consequence risks (chronic illness) both require control
• Vulnerable groups: Pregnant workers, young workers, workers with disabilities, migrant workers, night shift workers, lone workers require special consideration

Controls and Hierarchy of Controls

Organizations implement controls following the hierarchy:

1. Elimination: Remove the hazard (most effective; e.g., stop using toxic chemicals)
2. Substitution: Replace hazard with less dangerous alternative (e.g., non-toxic cleaner)
3. Engineering controls: Isolate hazard through design (machine guards, ventilation, containment)
4. Administrative controls: Work procedures, training, rotation to reduce exposure (temporary or incomplete control)
5. Personal Protective Equipment (PPE): Last resort; protects worker but doesn’t eliminate hazard

Competence and Training

Organizations ensure workers have competence to work safely: training on hazard recognition, safe procedures, emergency response. Training should be documented, regularly refreshed, and verified as effective through competency assessments and on-the-job observation.

Emergency Preparedness and Response

Organizations plan for and test emergency response: fire evacuation, chemical spills, medical emergencies, natural disasters. Emergency plans should include communication, evacuation routes, first aid, business continuity, and post-incident investigation and learning.

Incident Investigation and Continuous Improvement

When incidents occur (near-misses, injuries, illnesses), organizations investigate root causes and implement preventive actions. Incident data aggregation identifies patterns and trends, driving systemic improvements (equipment redesign, process changes, training enhancement).

Consultation and Worker Participation

ISO 45001 emphasizes worker voice in OHS decision-making: involvement in hazard identification, risk assessment, control design, training development, and incident investigation. Effective worker participation (vs. perfunctory) improves control relevance and increases buy-in, strengthening safety culture.

Psychosocial Risk Management (ISO 45003)

Defining Psychosocial Hazards and Risks

Psychosocial hazards are aspects of work design, organization, management, and social environment that can cause psychological or physical harm. The ISO 45003:2023 (recently released) framework addresses:

Work Intensity and Workload

Hazard: Excessive workload, time pressure, unrealistic deadlines, insufficient time for breaks/recovery.

Health impact: Stress, fatigue, anxiety, burnout, cardiovascular disease, musculoskeletal disorders.

Controls: Workload assessment, adequate staffing/resources, realistic scheduling, flexibility for rest breaks, workload monitoring.

Control and Influence Over Work

Hazard: Lack of participation in decisions affecting work, limited autonomy, micromanagement, inability to influence work methods.

Health impact: Psychological distress, disengagement, burnout, depression.

Controls: Decision-making participation, job autonomy, feedback on performance, career development pathways.

Organizational Change and Instability

Hazard: Frequent restructuring, unclear organizational direction, frequent leadership changes, job insecurity, contract instability.

Health impact: Anxiety, depression, stress-related illness, reduced engagement and productivity.

Controls: Change management planning, transparent communication about direction and changes, job security where feasible, support during transitions.

Interpersonal Conflict and Harassment

Hazard: Bullying, harassment (sexual, racial, etc.), aggressive management styles, interpersonal conflict, lack of supportive team culture.

Health impact: Anxiety, depression, PTSD, burnout, physical health consequences, attrition.

Controls: Code of conduct, harassment policies with clear reporting/investigation, training on respectful workplaces, leadership coaching, bystander intervention programs, zero-tolerance enforcement.

Role Ambiguity and Conflict

Hazard: Unclear job expectations, conflicting demands, role conflict (e.g., safety vs. production pressure).

Health impact: Stress, anxiety, reduced performance, turnover.

Controls: Clear job descriptions, role clarification, conflict resolution processes, management training on role clarity.

Inadequate Support and Resources

Hazard: Lack of management support, inadequate tools/equipment, limited training, isolation (especially for remote/lone workers).

Health impact: Stress, reduced capability/competence, burnout.

Controls: Management development, adequate tools/resources, accessible training, connectivity for remote workers, check-in mechanisms.

Psychosocial Risk Assessment Methodology

Organizations assess psychosocial risk through:

• Employee surveys: Validated questionnaires (e.g., Copenhagen Psychosocial Questionnaire, General Health Questionnaire) measuring stress, control, support, job satisfaction. Frequency: annual or biennial; compare across departments/tenure to identify hotspots.
• Focus groups and interviews: Qualitative exploration of stressors, coping mechanisms, support adequacy. Especially valuable for identifying contextual factors.
• Absence and health data: Track absenteeism, turnover, workers’ compensation claims for psychological injuries, healthcare utilization patterns. Elevated rates signal psychosocial risk.
• Workplace culture assessment: Evaluate management style, psychological safety, trust, fairness, inclusion through survey and interview.

Mental Health and Wellbeing Programs

Holistic Wellbeing Strategy

Organizations should integrate mental health into broader wellbeing:

• Prevention (primary): Address root causes—hazard elimination, workload management, supportive culture, training, leadership development
• Early intervention (secondary): Mental health screening, stress management training, resilience coaching, peer support programs
• Treatment and support (tertiary): Employee assistance programs (EAPs), counseling, mental health services, accommodation for diagnosed conditions

Employee Assistance Programs (EAPs)

EAPs provide confidential, short-term counseling for personal/work issues: stress, anxiety, depression, substance abuse, family problems, financial concerns. Key features:

• Confidentiality (independent provider; employer anonymized); no disciplinary consequence for utilizing EAP
• Accessibility: phone/web-based, multiple counselors, multiple languages, accessible hours
• Referral to specialized care if needed (psychiatry, long-term therapy)
• Usage tracking (aggregate level) to monitor uptake and ROI

Mental Health Training and Awareness

Organizations should train all leaders and managers in mental health awareness: recognizing signs of psychological distress, having supportive conversations, accessing resources, reducing stigma. “Mental health first aid” training equips leaders to respond compassionately to workers in distress.

Flexible Work and Workload Management

Policies supporting work-life balance: flexible schedules, remote work options, reasonable working hours, parental leave, sabbaticals. Flexibility reduces burnout risk and improves retention, particularly for caregiving-responsible workers.

Health and Safety Performance Metrics and Reporting

Traditional OHS Metrics

Injury and Illness Rates

Lost Time Injury Frequency Rate (LTIFR): (Number of lost-time injuries / Total hours worked) × 1,000,000. Measures serious injuries requiring absence from work. Industry comparisons enable benchmarking.

Total Recordable Incident Rate (TRIR): Includes all work-related injuries requiring medical treatment or work restriction, not just lost-time injuries. Captures broader injury incidence.

Fatality Rate: Work-related fatalities per million hours worked. Any fatality is significant; aggregated, industry fatality rates reveal high-risk sectors.

Absence Due to Illness and Injury

Days lost to injury/illness: Total person-days absent due to work-related or work-aggravated incidents, normalized per 100 workers. Captures impact beyond immediate injury.

Return-to-work rate: Percentage of injured workers returning to work. Delayed return indicates injury severity or inadequate accommodation.

Psychosocial and Wellbeing Metrics (Emerging)

Psychological distress indicator: Percentage of workers screening positive for depression, anxiety, stress (from surveys). Target: declining trend toward industry/regional benchmarks.

Workplace culture score: Aggregate score from psychosocial risk assessment (control, support, fairness, inclusion). Target: year-over-year improvement and above-industry-average.

EAP utilization rate: Percentage of workforce accessing EAP services annually. Typical range: 5-10%. Low utilization may signal accessibility barriers or stigma.

Mental health leave: Percentage of leave taken for mental health reasons. Increasing trend may signal improvement in normalization/reporting rather than worsening conditions, especially if coupled with declining psychological distress metrics.

Leading Indicators (Predictive of Future Incidents)

• Safety training completion rate: % of workforce completing required safety training. Target: 100%.
• Hazard reports and corrective actions: Number of hazards identified and controls implemented. Organizations with high-reporting culture demonstrate strong safety engagement.
• Near-miss reporting: Incidents without injury; indicate controls are catching hazardous situations. Higher reporting reflects stronger safety awareness.
• Safety audit findings: Gap analysis vs. standards; identifies systemic improvement needs.
• Turnover (especially of experienced workers): High turnover can signal poor workplace culture, management issues, or inadequate compensation.

GRI 403 and ISSB IFRS S1 Alignment

GRI 403: Occupational Health and Safety (2018)

GRI 403 requires disclosure of:

• OHS management system: approach, scope, worker participation
• Hazard identification and risk assessment: methodology, key hazards addressed
• Worker training: coverage and effectiveness
• Incident management: investigation process, reporting
• Performance: injury/illness rates (LTIFR, TRIR), fatalities, aggregate days lost; comparison to prior periods and industry benchmarks
• Accessibility for workers with disabilities and other accommodations

ISSB IFRS S1: Human Capital and Workplace Conditions

ISSB IFRS S1 expects disclosure of material human capital impacts:

• OHS governance and strategy alignment with enterprise value
• Material OHS risks and mitigation effectiveness
• Psychosocial wellbeing programs and outcomes (stress, mental health, engagement)
• Quantitative health and safety metrics (injury rates, wellbeing indicators)
• Workforce diversity and inclusion (demographic data, pay equity)
• Training and development investment (hours, investment, outcomes)

Frequently Asked Questions

Connecting Related ESG Topics

Workplace health and safety integrates with broader social responsibility and human capital management. Explore related resources:

• Supply Chain Human Rights Due Diligence — occupational safety standards in supply chain
• Community Impact Assessment and Social License to Operate — worker and community health impacts
• Governance in ESG: The Complete Professional Guide — board accountability for workplace health
• Social Responsibility in ESG: The Complete Professional Guide (2026) — comprehensive social ESG strategy