2.2 Clause 5.1–5.3: Leadership, Commitment & OH&S Policy

2.2 Clause 5.1–5.3: Leadership, Commitment & OH&S Policy

Lead Auditor Core Concept: Leadership in ISO 45001:2018 is active, visible, and non-delegable. The standard permanently abolishes the legacy practice of appointing a lone "Management Representative" to carry safety responsibility in isolation. Top management must personally own the OH&S management system, embed safety into corporate strategy, and establish an uncompromising culture where workers are actively protected from reprisals when reporting hazards.

Clause 5 serves as the operational engine of ISO 45001. It establishes the organizational obligations of top management—defined as the person or group of people who directs and controls an organization at the highest level. In an occupational health and safety context, executive commitment cannot be satisfied by signing an annual policy statement; it demands tangible, verifiable governance behaviors.

---

1. Clause 5.1: Leadership and Commitment

Clause 5.1 outlines 13 explicit leadership duties that top management must personally demonstrate. Lead auditors do not audit leadership through glossy corporate brochures; they audit leadership through executive interviews, capital expenditure records, board meeting minutes, and shop-floor verification.

The Thirteen Leadership Mandates (Clause 5.1.a–m)

Top management must demonstrate leadership and commitment by:

1. Taking overall responsibility and accountability for the prevention of work-related injury and ill health, as well as the provision of safe and healthy workplaces;
2. Ensuring that the OH&S policy and related OH&S objectives are established and are compatible with the strategic direction of the organization;
3. Ensuring the integration of OH&S management system requirements into the organization's business processes (finance, procurement, HR, engineering);
4. Ensuring that the resources needed to establish, implement, maintain, and improve the OH&S MS are available;
5. Communicating the importance of effective OH&S management and of conforming to OH&S MS requirements;
6. Ensuring that the OH&S MS achieves its intended outcomes;
7. Directing and supporting persons to contribute to the effectiveness of the OH&S MS;
8. Ensuring and promoting continual improvement;
9. Supporting other relevant management roles to demonstrate their leadership as it applies to their areas of responsibility;
10. Developing, leading, and promoting a culture in the organization that supports the intended outcomes of the OH&S MS;
11. Protecting workers from reprisals when reporting incidents, hazards, risks, and opportunities;
12. Ensuring the organization establishes and implements a process for consultation and participation of workers;
13. Supporting the establishment and functioning of health and safety committees.

The Elimination of the "Management Representative"

In OHSAS 18001:2007 (Clause 4.4.1), top management was permitted to delegate the operational oversight of the safety system to an appointed "Management Representative" (frequently an isolated EHS officer). In practice, this allowed senior executives to disengage from safety governance until an audit or serious incident occurred.

ISO 45001 deliberately abolished this role. While top management may assign specific operational duties to qualified safety personnel (Clause 5.3), top management retains overall accountability and responsibility for the prevention of work-related injury and ill health. In a certification audit, an executive cannot deflect audit findings by stating, "I don't track safety metrics; that is the safety manager's job." Such a statement demonstrates an immediate failure of Clause 5.1 leadership.

Protection from Reprisals (Clause 5.1.k)

A groundbreaking requirement in ISO 45001 is the explicit obligation for top management to protect workers from reprisals when reporting incidents, hazards, risks, and opportunities:

• Direct Reprisals: Termination, formal disciplinary warnings, demotion, pay reductions, or assignment to undesirable work shifts.
• Indirect and Systemic Reprisals: Disciplinary points under rigid absence-management policies for seeking off-site medical attention, disqualification from group production bonuses due to reported near-misses, or interpersonal ostracization by supervisors.

Lead auditors cross-examine frontline workers and union representatives in confidential settings to determine whether the reporting culture is genuinely psychological safe and free from retribution.

---

2. Clause 5.2: OH&S Policy

The OH&S Policy is the foundational constitution of the management system. Established by top management, it sets the overall health and safety direction and boundaries for the organization.

The Six Mandatory Commitments of Clause 5.2

To comply with ISO 45001, the policy must be appropriate to the organization's purpose, size, context, and specific risk profile, and it must contain six mandatory commitments:

Document Control and Communication

Under Clause 5.2, the OH&S policy must be:

• Maintained as documented information;
• Communicated within the organization so that workers understand how their individual work behaviors contribute to safety goals;
• Available to interested parties (e.g., publicly displayed, provided to visiting contractors, published on corporate portals);
• Reviewed periodically to ensure it remains relevant and appropriate.

Auditor Field Technique: Auditors should never test policy awareness by asking workers to recite the policy text from memory. Instead, auditors ask practical, contextual questions: "What does the company safety policy mean for the daily setup of your computer numerical control (CNC) lathe?" or "If you observe oil leaking near an emergency exit, how does the safety policy direct you to respond?"

---

3. Clause 5.3: Organizational Roles, Responsibilities, and Authorities

Top management must ensure that responsibilities and authorities for relevant roles within the OH&S MS are assigned, communicated, and understood at all levels of the organization, and maintained as documented information.

Operational Delegation vs. Accountability

While top management cannot delegate its ultimate accountability, operational authority must be structured effectively:

• Assigning Functional Roles: Clear, documented job descriptions, organizational charts, and safety responsibility matrices.
• Worker Ownership at Every Level: Clause 5.3 explicitly notes that workers at each level must assume responsibility for those aspects of the OH&S MS over which they have control.
• Stop-Work Authority: Personnel must be granted clear authority to halt operations or remove themselves from situations presenting imminent, serious danger without fear of penalty.
• Reporting to Top Management: Top management must assign specific responsibility and authority for:
  1. Ensuring the OH&S MS conforms to ISO 45001 requirements;
  2. Reporting on the performance of the OH&S MS directly to top management.

---

4. Comparison: OHSAS 18001 vs. ISO 45001:2018 Leadership

---

5. Real Audit Scenario: The Detached Chief Executive

During a Stage 2 certification audit of a steel fabrication facility, the lead auditor conducts an executive interview with the Chief Executive Officer (CEO). The auditor inquires how top management reviews hazard logs and allocates capital for engineering controls.

The CEO states: "Safety is handled exclusively by our EHS Director, Mr. Reynolds. He has complete autonomy. I sign whatever annual policy document he puts in front of me. My responsibility is commercial sales, capital markets, and shareholder earnings. If you want to know about safety performance or incident investigations, talk to Reynolds."

Audit Finding: The lead auditor issues a Major Nonconformity against Clause 5.1(a), (c), and (e). The CEO has abdicated overall accountability, treated the OH&S MS as an isolated technical silo, and failed to integrate safety into executive governance. Merely signing a document without active operational oversight violates the core leadership requirements of ISO 45001.

---

Common Candidate Traps & Exam Tips

• Trap 1: The "Dedicated Safety Manager" Fallacy: Exam questions frequently describe an organization hiring a full-time EHS professional and ask if top management has satisfied its Clause 5 obligations. Appointing a safety manager satisfies Clause 5.3 (assigning roles), but does NOT relieve top management of its Clause 5.1 overall accountability.
• Trap 2: Missing Mandatory Policy Commitments: Multiple-choice questions often present an eloquent corporate policy statement and ask if it is fully compliant. Candidates frequently overlook the omission of one of the six mandatory commitments—most commonly the commitment to consultation and participation of workers or hazard elimination.
• Trap 3: Rote Memorization vs. Comprehension: Lead auditors do not cite a nonconformity simply because a warehouse worker cannot recite Clause 5.2 verbatim. A nonconformity only exists if the worker is unaware of the policy's intent or how their specific job duties relate to safety objectives.