ISO 45001 clause-by-clause guide

All 30 clauses from section 4 to 10, each with what it is about, the questions auditors ask and the evidence to keep on a UAE construction site. Written in plain language by Site Safety UAE — it is not the official text of the standard, which you can buy from ISO. The software supports an ISO 45001 system; it does not certify your company.

Search the clause map and download the audit checklist

4. Context of the organization

4.1 Understanding the organization and its context

What this clause is about

Understand what is going on around and inside the company that could help or harm safety performance — the market, the law, the workforce, the climate, the clients.

Questions auditors ask

What internal and external issues affect your OH&S system?
How often do you review them?
How did they shape your risks and objectives?

Evidence to keep on a UAE site

Context or SWOT/PESTLE review, dated and approved
Legal register covering each emirate you work in
Notes on heat, labour-camp and subcontractor issues
Management review minutes showing the context was reviewed

Where it lives in the system: Compliance scope, Organisation profile, Legal register

Clause 4.1 in detail

4.2 Needs and expectations of workers and interested parties

What this clause is about

Know who has a stake in your safety performance — workers, clients, consultants, authorities, neighbours — and what they expect from you.

Questions auditors ask

Who are your interested parties?
Which of their needs have you taken on as obligations?
How do you keep this list current?

Evidence to keep on a UAE site

Interested parties register with needs and expectations
Client HSE requirements and contract clauses
Authority requirements (ADOSH-SF, Dubai Municipality, MOHRE)
Subcontractor agreements with HSE terms

Where it lives in the system: Interested parties, Subcontractors, Client view link (Site dashboard)

Clause 4.2 in detail

4.3 Determining the scope of the OH&S management system

What this clause is about

Draw a clear boundary around what the safety system covers — which sites, activities, companies and workers — and write it down.

Questions auditors ask

What is in and out of scope?
Are all sites and activities under your control included?
Is the scope available to interested parties?

Evidence to keep on a UAE site

Written scope statement
List of sites and activities covered
Justification for any exclusions

Where it lives in the system: Compliance scope, Organisation profile

Clause 4.3 in detail

4.4 OH&S management system

What this clause is about

Set up, run and keep improving a safety management system made of connected processes, not just a pile of documents.

Questions auditors ask

Show me how your main processes link together.
How do you know the system is working?
What has changed since last year?

Evidence to keep on a UAE site

HSE manual or site safety plan
Process map or document hierarchy
Controlled document register

Where it lives in the system: Site safety plan, Document control

Clause 4.4 in detail

5. Leadership and worker participation

5.1 Leadership and commitment

What this clause is about

Top management leads safety personally and is accountable for it — providing resources, setting direction and protecting workers who raise concerns.

Questions auditors ask

How does top management show leadership in safety?
What resources were approved this year?
How are workers protected from reprisal when reporting?

Evidence to keep on a UAE site

Management review minutes with decisions and owners
Records of leadership site walks
Approved HSE budget or resource plan
Policy or statement on no-reprisal reporting

Where it lives in the system: Management review, Compliance dashboard

Clause 5.1 in detail

5.2 OH&S policy

What this clause is about

Have a signed safety policy that commits to safe conditions, legal compliance, removing hazards, consultation and continual improvement, and make sure people know it.

Questions auditors ask

Is the policy signed and dated?
How is it communicated to workers and subcontractors?
When was it last reviewed?

Evidence to keep on a UAE site

Signed OH&S policy with review date
Policy posted on site in the workforce's languages
Acknowledgement records from staff and subcontractors

Where it lives in the system: Safety policy, Document acknowledgements

Clause 5.2 in detail

5.3 Roles, responsibilities and authorities

What this clause is about

Everyone knows their safety role, responsibility and authority, and these are assigned and communicated at every level.

Questions auditors ask

Who is responsible for the system reporting to top management?
Do supervisors know their safety duties?
Where are responsibilities written down?

Evidence to keep on a UAE site

Organisation chart with HSE roles
Job descriptions with safety duties
Appointment letters (HSE manager, first aiders, fire wardens)
Competency matrix

Where it lives in the system: Organisation charts, Competency matrix

Clause 5.3 in detail

5.4 Consultation and participation of workers

What this clause is about

Workers and their representatives are consulted and take part in safety decisions, with barriers such as language, literacy and fear removed.

Questions auditors ask

How are non-managerial workers consulted?
What language barriers exist and how are they handled?
Show examples of worker input changing something.

Evidence to keep on a UAE site

Safety committee minutes with worker members
Toolbox talk attendance sheets
Suggestion or near-miss reports from workers
Materials in Arabic, Hindi, Urdu and other workforce languages

Where it lives in the system: Toolbox talks, Communication log, Subcontractor portal

Clause 5.4 in detail

6. Planning

6.1.1 Actions to address risks and opportunities — general

What this clause is about

Plan for the risks and opportunities that could affect the safety system, then build the actions to address them into your processes.

Questions auditors ask

What risks and opportunities did you identify for the system itself?
What actions came out of them?
How do you check those actions worked?

Evidence to keep on a UAE site

Risk and opportunity register
Site safety plan referencing the register
Actions with owners and due dates

Where it lives in the system: Risk register, Site safety plan

Clause 6.1.1 in detail

6.1.2 Hazard identification and assessment of risks

What this clause is about

Find hazards continually — routine and non-routine work, people, equipment, design, emergencies, changes — and assess the risks they create.

Questions auditors ask

How are hazards identified before a task starts?
Is your method for rating risk consistent?
How do you capture hazards from changes and incidents?

Evidence to keep on a UAE site

Risk register with ratings and controls
Task risk assessments and RAMS/MSRA
Inspection findings feeding the register
Records of reviews after incidents or changes

Where it lives in the system: Risk register, Task risk assessment, Inspections

Clause 6.1.2 in detail

6.1.3 Determination of legal and other requirements

What this clause is about

Know which laws and other requirements apply to you, how they apply, and keep that knowledge up to date.

Questions auditors ask

How do you track new laws and authority circulars?
Which requirements apply to this site?
Who is responsible for updates?

Evidence to keep on a UAE site

Legal register (federal, emirate, free zone)
Authority permits, NOCs and approvals
Record of the last legal update review

Where it lives in the system: Legal register, Authority submission checklists

Clause 6.1.3 in detail

6.1.4 Planning action

What this clause is about

Plan concrete actions for your risks, legal requirements and emergencies, using the hierarchy of controls, and check they work.

Questions auditors ask

Where are the planned actions?
Did you apply the hierarchy of controls?
How is effectiveness evaluated?

Evidence to keep on a UAE site

Action plan linked to risks and legal items
Control measures showing elimination/substitution considered
Follow-up inspection results

Where it lives in the system: Site safety plan, Objectives

Clause 6.1.4 in detail

6.2 OH&S objectives and planning to achieve them

What this clause is about

Set measurable safety objectives at relevant levels, and plan who will do what, by when, with what resources, and how results will be judged.

Questions auditors ask

What are your safety objectives this year?
How are they measured?
How are you performing against them?

Evidence to keep on a UAE site

Objectives and targets register
KPI dashboard (e.g. permit close-out, training in date)
Progress reports in management review

Where it lives in the system: Objectives, HSE KPIs

Clause 6.2 in detail

7. Support

7.1 Resources

What this clause is about

Provide the people, money, equipment and time the safety system needs.

Questions auditors ask

How do you decide resources for HSE?
Are there enough HSE staff for the workforce size?
Is safety equipment available and maintained?

Evidence to keep on a UAE site

HSE staffing plan versus workforce numbers
PPE and equipment issue records
Budget approvals

Where it lives in the system: Team dashboard, Equipment register

Clause 7.1 in detail

7.2 Competence

What this clause is about

Make sure people doing work that affects safety are competent through training, education or experience, and keep proof.

Questions auditors ask

How do you know a worker is competent for this task?
What happens when a certificate expires?
How do you check training was effective?

Evidence to keep on a UAE site

Training records with certificate numbers and expiry dates
Competency matrix per role
Third-party certificates (scaffold, rigging, crane)
Training effectiveness checks

Where it lives in the system: Training records, Competency matrix, Induction renewals

Clause 7.2 in detail

7.3 Awareness

What this clause is about

Workers are aware of the policy, the hazards of their work, what went wrong in incidents, and their right to remove themselves from danger.

Questions auditors ask

Ask a worker: what are the main hazards here?
Do workers know they can stop unsafe work?
How are incident lessons shared?

Evidence to keep on a UAE site

Site induction records
Toolbox talks on recent incidents
Stop-work authority briefing records

Where it lives in the system: Toolbox talks, Toolbox talk effectiveness

Clause 7.3 in detail

7.4 Communication

What this clause is about

Decide what to communicate on safety, to whom, when and how — inside the company and to outside parties — in ways people understand.

Questions auditors ask

How do you communicate with subcontractors and clients?
How do you reach workers who don't read English?
What do you tell authorities and when?

Evidence to keep on a UAE site

Communication plan or log
Notice boards and multilingual signage
Client reports and authority notifications

Where it lives in the system: Communication log, Emergency contacts

Clause 7.4 in detail

7.5 Documented information

What this clause is about

Create, control and keep the documents and records the system needs, so the right version is available and records are protected.

Questions auditors ask

How do you stop old versions being used?
How long are records kept?
Who approves documents?

Evidence to keep on a UAE site

Document register with revision numbers
Approval and review records
Record retention rules

Where it lives in the system: Document control, Controlled documents register, External documents register

Clause 7.5 in detail

8. Operation

8.1.1 Operational planning and control

What this clause is about

Plan and control day-to-day work so it is done safely, following set criteria, and adapt work to workers where needed.

Questions auditors ask

What controls apply to high-risk work?
Show me the method statement for today's task.
How is work adapted in summer heat?

Evidence to keep on a UAE site

Approved RAMS / method statements
Permit-to-work records
Heat stress plan and midday break compliance

Where it lives in the system: Permits to work, Inspections, Scaffolding register

Clause 8.1.1 in detail

8.1.2 Eliminating hazards and reducing OH&S risks

What this clause is about

Remove hazards and reduce risks using the hierarchy: eliminate, substitute, engineer, administer, then PPE.

Questions auditors ask

Give an example where a hazard was eliminated.
Why is PPE the chosen control here?
How were controls selected?

Evidence to keep on a UAE site

Risk assessments showing control ranking
Design reviews removing hazards
Records of substitutions (e.g. safer materials or methods)

Where it lives in the system: Risk register, PPE matrix

Clause 8.1.2 in detail

8.1.3 Management of change

What this clause is about

Manage planned changes — new methods, equipment, laws, people — so they don't create new unassessed risks.

Questions auditors ask

How is a change assessed before it happens?
Who approves it?
Show a recent example.

Evidence to keep on a UAE site

Management of change forms with risk review
Updated RAMS after the change
Approval signatures

Where it lives in the system: Management of change, Design change control

Clause 8.1.3 in detail

8.1.4 Procurement, contractors and outsourcing

What this clause is about

Control buying, contractors and outsourced work so they meet your safety requirements.

Questions auditors ask

How are subcontractors pre-qualified?
How do you monitor their safety on site?
How are purchased items checked for safety?

Evidence to keep on a UAE site

Subcontractor pre-qualification records
Subcontractor inspection and performance records
Equipment inspection certificates on arrival

Where it lives in the system: Subcontractor prequalification, Contractor scorecard, Subcontractor dashboard

Clause 8.1.4 in detail

8.2 Emergency preparedness and response

What this clause is about

Prepare for and respond to emergencies — plan, train, test through drills and improve after each one.

Questions auditors ask

What emergencies could happen here?
When was the last drill and what did it show?
Are first aid and rescue arrangements in place?

Evidence to keep on a UAE site

Emergency response plan per site
Drill reports with lessons learned
First aider and fire warden lists
Rescue plans for work at height and confined spaces

Where it lives in the system: Emergency response scenarios, Emergency drills, Emergency contacts

Clause 8.2 in detail

9. Performance evaluation

9.1.1 Monitoring, measurement, analysis and performance evaluation

What this clause is about

Decide what to measure, how and when, then monitor and analyse safety performance with calibrated equipment where relevant.

Questions auditors ask

What do you measure and why?
How often are results analysed?
Is monitoring equipment calibrated?

Evidence to keep on a UAE site

KPI dashboard and monthly reports
Inspection and audit schedules with results
Calibration certificates (gas detectors, noise meters)

Where it lives in the system: HSE KPIs, Site dashboard and safety score, Compliance dashboard

Clause 9.1.1 in detail

9.1.2 Evaluation of compliance

What this clause is about

Check regularly whether you are meeting your legal and other requirements, and keep the results.

Questions auditors ask

How do you evaluate compliance?
What did the last evaluation find?
What did you do about gaps?

Evidence to keep on a UAE site

Compliance evaluation records against the legal register
Authority inspection reports
Actions raised from non-compliances

Where it lives in the system: Legal register, Audit readiness

Clause 9.1.2 in detail

9.2 Internal audit

What this clause is about

Run a planned programme of internal audits by objective auditors to check the system works and meets the standard.

Questions auditors ask

Show the audit programme.
Are auditors independent of the area audited?
How were findings closed?

Evidence to keep on a UAE site

Internal audit programme
Audit reports and checklists
Auditor competence records
Findings with corrective actions

Where it lives in the system: Audit programme, Audit schedule, Audit findings

Clause 9.2 in detail

9.3 Management review

What this clause is about

Top management reviews the system at planned intervals and makes decisions on improvement, resources and changes.

Questions auditors ask

When was the last management review?
Were all required inputs covered?
What decisions came out of it?

Evidence to keep on a UAE site

Management review minutes
Performance data presented (incidents, audits, objectives)
Decisions and actions with owners

Where it lives in the system: Management review, Management review pack, Safety meetings

Clause 9.3 in detail

10. Improvement

10.1 Improvement — general

What this clause is about

Look for and act on opportunities to improve safety performance.

Questions auditors ask

What improvements did you make this year?
Where do improvement ideas come from?
How do you pick which to act on?

Evidence to keep on a UAE site

Improvement register or action log
Worker suggestions acted on
Before-and-after performance data

Where it lives in the system: Corrective actions (CAPA), Objectives

Clause 10.1 in detail

10.2 Incident, nonconformity and corrective action

What this clause is about

When incidents or nonconformities happen, react, investigate the root cause, take corrective action and check it worked.

Questions auditors ask

Show an investigation from start to close.
How was the root cause found?
How did you confirm the fix worked?

Evidence to keep on a UAE site

Incident reports and investigations
Root cause analysis (5 Whys, fishbone)
Corrective actions with close-out evidence
Authority notifications where required

Where it lives in the system: Incidents, Incident investigation, Corrective actions (CAPA)

Clause 10.2 in detail

10.3 Continual improvement

What this clause is about

Keep improving the safety system overall — culture, participation, performance — year on year.

Questions auditors ask

How has performance improved over time?
How do you promote a positive safety culture?
How are results shared with workers?

Evidence to keep on a UAE site

Trend data across years
Safety culture surveys or recognition schemes
Communication of results to the workforce

Where it lives in the system: Lessons linked to risks, Management review

Clause 10.3 in detail