On this page
The short version
- Clause 8.1.3 mandates controlling planned temporary and permanent changes to prevent the introduction of new workplace hazards.
- Organisations must assess occupational health and safety risks before implementing planned changes under Clause 6.1.1 and Clause 8.1.3.
- Reviewing unintended changes and taking action to mitigate adverse effects is a mandatory requirement under Clause 8.1.3.
- Internal auditors must evaluate change management evidence across equipment, workforce, working conditions, and legal requirements.
Background, Regulatory Context, and Affected Roles
ISO 45001 establishes an operational framework designed to prevent work-related injury and ill health while continually improving occupational health and safety performance. Operational transitions, facility modifications, and organisational restructuring frequently introduce unanticipated risks into the work environment. Consequently, Clause 8.1.3 requires organisations to establish formal processes to implement and control planned temporary and permanent changes that impact health and safety performance. Quality managers, compliance leads, and internal auditors must rigorously audit management of change mechanisms to prevent system deficiencies.
This operational scope impacts top management, line supervisors, procurement leads, project managers, and non-managerial workers. Uncontrolled changes to workplace locations, work organisation, working conditions, equipment, or workforce composition directly increase accident likelihood and regulatory non-compliance. ISO 45001 embeds management of change into the broader Plan-Do-Check-Act cycle, requiring risk assessment prior to execution. Internal auditors must verify that management of change operates as an active operational safeguard rather than a retrospective administrative record.
Technical Nuances: Planned Versus Unintended Changes
Clause 8.1.3 establishes distinct operational requirements for managing planned changes compared to unintended changes. For planned temporary or permanent changes, Clause 6.1.1 mandates that the assessment of risks and opportunities must be undertaken before the change is implemented. Under Clause 8.1.3 a), planned changes encompass new products, services, and processes, or modifications to existing ones, including workplace surroundings, equipment, and workforce levels. Furthermore, planned changes include updates to legal requirements under Clause 8.1.3 b), changes in hazard knowledge under Clause 8.1.3 c), and technological developments under Clause 8.1.3 d).
Conversely, unintended changes occur without advance planning, such as emergency equipment failures, sudden workforce absences, or unexpected material shortages. Clause 8.1.3 dictates that organisations must review the consequences of unintended changes and take action to mitigate any adverse effects. Non-managerial workers must participate in determining control measures for changes under Clause 5.4 e) 6). Additionally, organisations may utilise specific methodologies, such as design reviews or job hazard analyses, to assess risks and opportunities arising from operational changes under Annex A.8.1.3.
| Change Type | Clause Trigger | Timing of Risk Assessment | Core Audit Nonconformity Risk |
|---|---|---|---|
| Planned Process or Equipment Changes | Clause 8.1.3 a) | Mandatory prior to implementation under Clause 6.1.1 | Implementing machinery or layout modifications without pre-change hazard reviews |
| Regulatory and Legal Updates | Clause 8.1.3 b), Clause 6.1.3 | Prior to operational adoption of new compliance duties | Failing to update operational procedures following statutory legal updates |
| Knowledge and Technology Advances | Clause 8.1.3 c), Clause 8.1.3 d) | Ongoing upon receipt of new hazard information | Ignoring published safety alerts, industry technical standards, or research |
| Unintended Operational Disruptions | Clause 8.1.3 paragraph 2 | Retrospective review following the change event | Failing to mitigate adverse safety consequences after emergency process deviations |
Common Audit Nonconformities and Verification Methods
Internal auditors frequently identify recurring nonconformities when evaluating management of change processes under Clause 8.1.3. A primary nonconformity is assessing hazards retrospectively after a planned change has been commissioned, violating Clause 6.1.2.1 g) which mandates proactive hazard identification for proposed changes. A second common failure involves ignoring temporary changes, such as provisional contractor bypasses or temporary staffing arrangements. Auditors must inspect shift handovers, maintenance logs, and temporary work permits to verify that temporary modifications receive identical risk controls.
Another major nonconformity is failing to involve non-managerial workers in determining change control measures. Clause 5.4 e) 6) explicitly mandates non-managerial worker participation in determining control measures for Clause 8.1.3. Internal auditors must verify that workers operating modified machinery or subject to new shift patterns actively contributed to the hazard review. Finally, when investigating incidents under Clause 10.2 d), organisations must determine corrective actions in accordance with management of change principles to prevent recurrence.
| Audit Focus Area | Clause Requirement | Mandatory Verification Action |
|---|---|---|
| Pre-Change Risk Assessment | Clause 6.1.1, Clause 8.1.3 | Inspect risk assessment records completed prior to project sign-off |
| Temporary Change Controls | Clause 8.1.3 | Verify review dates and risk controls for temporary process bypasses |
| Worker Participation | Clause 5.4 e) 6) | Interview operational staff to confirm involvement in control selection |
| Corrective Action Integration | Clause 10.2 d), Clause 8.1.3 | Cross-reference incident corrective actions with change management logs |
What to do now
- Review management of change procedures to confirm that pre-implementation risk assessment is explicitly mandated for all planned temporary and permanent changes.
- Audit recent engineering projects, equipment procurements, and facility modifications to verify that hazard identification was completed before launch.
- Inspect records of unintended operational changes and emergency deviations to confirm that consequences were reviewed and mitigated.
- Sample incident investigation files under Clause 10.2 to ensure that corrective actions involving process modifications were managed under Clause 8.1.3.
- Interview non-managerial workers to confirm their participation in determining operational control measures during recent workplace changes.
Reference documents
- BS ISO 45001:2018 Occupational health and safety management systems — Requirements with guidance for use
Manage this work in 4Auditee
Keep audit plans, problems, corrective actions and document versions in one place. See the records behind each change and decision.
Book a demo