1.2 Core OH&S Terminology & Definitions

1.2 Core OH&S Terminology & Definitions

The Normative Authority of ISO 45001 Clause 3

In management system auditing under ISO 19011:2018, definitions establish the formal criteria against which objective evidence is evaluated. Clause 3 of ISO 45001:2018 contains 37 normative definitions. During certification and surveillance audits, lead auditors must evaluate conformity strictly against these standardized terms rather than colloquial usages, statutory jargon, or legacy habits from OHSAS 18001. Misinterpreting terms like "hazard," "worker," or "incident" compromises audit integrity and can lead to flawed nonconformity findings.

Furthermore, lead auditors must recognize the precise normative weight of verbal forms employed throughout the standard:

• "shall" indicates a mandatory requirement;
• "should" indicates a recommendation or best practice;
• "may" indicates a permission;
• "can" indicates a possibility or an operational capability.

Audit findings can only be raised against "shall" requirements.

Hazards, OH&S Risks, and OH&S Opportunities

Hazard (Clause 3.19)

ISO 45001:2018 defines a hazard as a:

"Source with a potential to cause injury and ill health."

A vital distinction between ISO 45001 and legacy safety frameworks is the deliberate omission of "damage to property" or "environmental damage" from this definition. In ISO 45001, hazards relate exclusively to human health and physical, mental, or cognitive integrity. Property damage only enters the scope if it creates a source that could harm workers (e.g., a damaged structural beam that could collapse onto personnel).

Hazards are categorized across six primary workplace classifications:

1. Physical: Unguarded rotating machinery, high-voltage electrical conductors, extreme noise, vibration, ionizing radiation, and thermal extremes.
2. Chemical: Toxic solvents, airborne heavy metal dusts, respirable crystalline silica, asphyxiant gases, and corrosive acids.
3. Biological: Airborne pathogens, bloodborne viruses, Legionella bacteria in cooling towers, and toxic mold spores.
4. Ergonomic: Highly repetitive wrist motions, poorly designed workstation geometry, excessive heavy lifting, and poor lighting.
5. Psychosocial: Excessive workloads, shift work fatigue, workplace bullying, verbal abuse, harassment, and lone-worker isolation (governed under ISO 45003).
6. Mechanical / Gravitational: Forklift traffic intersections, machinery pinch points, suspended overhead loads, and slippery floor thresholds.

OH&S Risk (Clause 3.21) vs. Risk (Clause 3.20)

Generic risk (Clause 3.20) is defined in Annex SL as the "effect of uncertainty." An effect is a deviation from the expected—either positive or negative. However, ISO 45001 establishes a specific, auditable definition for OH&S risk (Clause 3.21):

"Combination of the likelihood of occurrence of a work-related hazardous event or exposure(s) and the severity of injury and ill health that can be caused by the event or exposure(s)."

Auditors must verify that the organization's risk assessment methodologies evaluate both dimensions rigorously:

1. Likelihood of Occurrence: The realistic frequency or probability of the hazardous event or exposure occurring under existing safeguards.
2. Severity of Consequences: The credible worst-case degree of physical or psychological harm (ranging from minor first aid to permanent disability or fatality).

OH&S Opportunity (Clause 3.22)

An OH&S opportunity is defined as a:

"Circumstance or set of circumstances that can lead to improvement of OH&S performance."

Opportunities represent proactive initiatives that go beyond merely mitigating known hazards. Examples include:

• Modifying production layout to eliminate material handling bottlenecks and forklift pedestrian crossings;
• Implementing automated robotic arms to handle toxic chemical immersion baths;
• Introducing ergonomic sit-stand workstations and task-rotation schedules before workers report discomfort;
• Establishing worker wellness and mental health support programs.

Injury and Ill Health (Clause 3.18)

Clause 3.18 defines injury and ill health as an:

"Adverse effect on the physical, mental or cognitive condition of a person."

ISO 45001 explicitly mandates that occupational health is evaluated across three distinct dimensions:

• Physical: Acute physical trauma (fractures, lacerations, burns, amputations) as well as chronic occupational diseases (occupational asthma, hearing loss, musculoskeletal disorders, silicosis).
• Mental: Psychological conditions arising from work organization, such as clinical depression, occupational burnout, anxiety disorders, and post-traumatic stress disorder (PTSD).
• Cognitive: Impairment of cognitive faculties, including chronic sleep-deprivation fatigue, memory impairment from chemical neurotoxin exposure, and decision-making lapses caused by extreme heat or sensory overload.

Lead auditors must verify that an organization's hazard identification process does not focus exclusively on physical safety while ignoring mental and cognitive occupational health.

Incidents, Accidents, Near-Misses, and Nonconformities

Incident (Clause 3.35)

An incident is defined as an:

"Occurrence arising out of, or in the course of, work that could or does result in injury and ill health."

The standard includes two critical notes to entry:

• Note 1: An incident where no injury and ill health occurs, but has the potential to do so, is referred to as a "near-miss," "close call," or "dangerous occurrence."
• Note 2: An incident where injury and ill health occurs is colloquially referred to as an "accident."

Auditor Principle: The Word "Accident" is Omitted from Clause 3. In ISO 45001 terminology, an accident is simply an incident that resulted in actual harm. The standard deliberately avoids "accident" in requirement clauses to reinforce that occurrences are not unavoidable acts of fate, but foreseeable events stemming from system breakdowns. Every near-miss is an incident and must be evaluated under Clause 10.2.

Nonconformity (Clause 3.34)

A nonconformity is defined as the "non-fulfilment of a requirement." Requirements stem from three sources:

1. The requirements of ISO 45001:2018 (e.g., failure to conduct internal audits under Clause 9.2);
2. The organization's own documented procedures and rules (e.g., failure to follow an internal permit-to-work protocol);
3. Applicable statutory, regulatory, and other compliance obligations (Clause 6.1.3).

Correction vs. Corrective Action (Clause 3.36)

Lead auditors must strictly differentiate between these two terms:

• Correction: Action taken to eliminate a detected nonconformity or contain an immediate issue (e.g., cleaning up a chemical spill, replacing a broken safety latch).
• Corrective Action (Clause 3.36): "Action to eliminate the cause(s) of a nonconformity or an incident and to prevent recurrence." Corrective action requires structured root cause analysis (e.g., 5-Whys, fishbone diagram) to identify systemic failures and implement lasting controls.

The Expanded Scope of "Worker" and "Workplace"

Worker (Clause 3.3)

ISO 45001 defines a worker as a:

"Person performing work or work-related activities that are under the control of the organization."

This expansive definition reaches far beyond full-time direct payroll employees to include:

• Direct permanent, part-time, and seasonal employees;
• Temporary agency workers and leased labor;
• Subcontractors, trade contractors, and service vendors on site;
• Apprentices, student interns, and unpaid volunteers;
• Top management and salaried corporate officers.

Any individual performing work under the organization's operational direction falls within the OH&S MS scope. Excluding temporary or contractor staff from training, PPE provision, or hazard reporting constitutes an immediate audit nonconformity.

Workplace (Clause 3.6)

A workplace is defined as a:

"Place under the control of the organization where a person needs to be or to go for work purposes."

This definition extends beyond fixed manufacturing facilities and offices to include:

• Fleet vehicles operated by transport drivers, field engineers, or sales personnel;
• Client sites, construction projects, and installation facilities where workers execute tasks;
• Temporary storage yards, laydown areas, and loading docks;
• Remote home-office environments to the extent that ergonomic workstations and work practices remain under the employer's directional control.

Consultation vs. Participation: The Critical Distinction (Clause 5.4)

The boundary between consultation and participation is fundamental to ISO 45001 governance:

Clause 5.4 delineates mandatory allocations for non-managerial personnel:

• Mandatory Consultation: Determining interested parties' needs (4.2), establishing the OH&S policy (5.2), assigning organizational roles (5.3), determining compliance obligations (6.1.3), setting objectives (6.2), establishing procurement/contractor controls (8.1.4), planning monitoring activities (9.1.1), and designing audit programmes (9.2.2).
• Mandatory Participation: Establishing consultation/participation mechanisms (5.4a), identifying hazards and assessing risks (6.1.2.1), determining hazard elimination actions (6.1.4), determining competence requirements (7.2), determining communication channels (7.4), determining operational controls (8.1.2), and investigating incidents and nonconformities (10.2).

Core Normative Definitions Reference Table

Lead Auditor Scenario: Classifying a Complex Warehouse Occurrence

During a Stage 2 surveillance audit of an automated logistics hub, the Lead Auditor reviews equipment breakdown logs and discovers that a 500 kg steel storage rack assembly collapsed into an active pedestrian walkway during the night shift. Because the warehouse workers were on an official scheduled meal break in the cafeteria, no workers were struck or injured. The facility operations manager logged the event as an "Internal Structural Defect" and arranged for maintenance contractors to replace the uprights, without completing an incident report or notifying the joint safety committee. When questioned, the operations manager explained: "No workers suffered injury or ill health, so this was not an incident under our safety system; therefore, Clause 10.2 does not apply."

Lead Auditor Evaluation: The Lead Auditor must raise a Major Nonconformity against Clause 10.2 (Incident, nonconformity and corrective action) in conjunction with Clause 3.35 (Incident). Under ISO 45001, an incident is an occurrence that could or does result in injury and ill health. Note 1 explicitly clarifies that an event where no injury occurs but could have occurred is a near-miss. Classifying a high-potential near-miss as a mere equipment defect bypasses mandatory root-cause analysis, excludes worker participation from investigations, and violates the fundamental preventive architecture of ISO 45001.

Common Candidate Traps & Exam Pitfalls

• The "Accident" Word Search Trap: Expecting to find "accident" defined in Clause 3. ISO 45001 deliberately uses "incident" as the universal term. An accident is simply an incident that resulted in injury or ill health.
• Equating Consultation with Co-Management or Veto: Consultation requires seeking views and engaging in genuine two-way dialogue before deciding; it does not grant workers unilateral veto power over management decisions.
• Excluding Non-Permanent Workers: Assuming that contractor, temporary agency, or seasonal worker safety is purely a commercial procurement issue. Anyone working under the organization's direction is a "worker" under Clause 3.3.
• The Property Damage Misconception: Raising an OH&S nonconformity solely for damaged equipment when no potential worker injury exists. Clause 3.19 restricts hazards strictly to sources with potential for human injury and ill health.