3.1 Clause 6.1.1–6.1.2.1: Proactive Hazard Identification Methodologies
Key Takeaways
- Hazard identification under ISO 45001:2018 Clause 6.1.2.1 must be proactive and ongoing, moving decisively beyond reactive incident-driven reporting.
- Clause 6.1.2.1 mandates the identification of hazards across eight distinct dimensions, explicitly incorporating human factors, work organization, and psychosocial risks such as workload and harassment.
- Assessments must encompass routine operations, non-routine activities (e.g., maintenance turnarounds, equipment commissioning, emergency shutdowns), and all persons with access to the workplace.
- Lead auditors must verify that hazard identification methodologies are structured, systematically deployed, and actively involve non-managerial workers rather than existing as static administrative exercises.
3.1 Clause 6.1.1–6.1.2.1: Proactive Hazard Identification Methodologies
Under ISO 45001:2018, planning (Clause 6.1) drives the Occupational Health and Safety Management System (OH&S MS). Without a systematic mechanism to identify workplace hazards, subsequent risk assessments, operational controls, and performance metrics rest on flawed assumptions. For a lead auditor, determining whether an organization maintains an ongoing and proactive hazard identification process—rather than a static, reactive register—is a decisive test of management system maturity.
1. Proactive vs. Reactive Hazard Identification
ISO 45001 mandates that hazard identification be fundamentally proactive:
- Reactive Identification: Relies on trailing indicators and adverse outcomes after harm has occurred. Sources include lost-time injury (LTI) logs, illness records, workers' compensation claims, near-miss reports, and regulatory citations. While past incident data is an essential input under Clause 6.1.2.1(c), relying solely on post-incident analysis means hazards are recognized only after workers suffer harm.
- Proactive Identification: Systematically interrogates processes, equipment, and work organization to identify potential sources of harm before incidents occur. Methods include engineering design reviews, Hazard and Operability Studies (HAZOP), Failure Mode and Effects Analysis (FMEA), Job Safety Analysis (JSA), Gemba walkthroughs, and worker surveys.
An organization that updates hazard registers only following accidents fails the proactive mandate of Clause 6.1.2.1.
2. Mandatory Scope of Clause 6.1.2.1 (Subclauses a–h)
Clause 6.1.2.1 establishes that the organization's hazard identification process must be ongoing and proactive, explicitly covering eight dimensions:
- a) Work Organization and Social Factors: Workload distribution, work hours, shift patterns, leadership style, workplace culture, and psychosocial hazards (e.g., workplace stress, bullying, victimization, and harassment, as detailed in ISO 45003).
- b) Routine and Non-Routine Activities: Normal operating cycles as well as non-routine situations: periodic maintenance, equipment commissioning, vessel cleaning, conveyor unjamming, plant turnarounds, utility outages, and emergency startups or shutdowns.
- c) Past Incidents: Historical internal and external incidents, near-misses, and emergency events, evaluating systemic causes to prevent recurrence.
- d) Potential Emergency Situations: Foreseeable emergencies, such as chemical releases, fires, structural collapses, confined space entrapments, extreme weather, and medical crises.
- e) People in the Workplace: Full-time workers, contractors, subcontractors, agency workers, visitors, delivery drivers, neighboring communities, and mobile or lone workers.
- f) Workplace and Infrastructure Design: Physical layouts, access/egress routes, machinery guarding, materials handling, traffic management, and adapting workstations to human physiological capabilities.
- g) Actual or Proposed Changes: Modifications in organizational structure, staffing, process chemistry, equipment, or operational procedures (linking directly to Clause 8.1.3 Management of Change).
- h) Changes in Knowledge: New scientific findings, updated Safety Data Sheets (SDS), revised occupational exposure limits (OELs), or industry alerts.
3. Human Factors, Ergonomics, and Psychosocial Hazards
ISO 45001 treats human factors not as individual blame, but as system design characteristics:
- Physical Ergonomics: Heavy lifting, awkward postures, repetitive motions, localized vibration, and extreme thermal conditions.
- Cognitive Ergonomics: Information overload, alarm fatigue in control rooms, complex human-machine interfaces, and shift-handover miscommunications.
- Psychosocial Risks (ISO 45003): Chronic fatigue from excessive overtime, isolated lone working, lack of role clarity, and toxic supervision. Auditors must verify that workers have confidential, non-punitive mechanisms to report psychosocial hazards without fear of reprisal.
4. Hazard Identification Methodologies
| Methodology | Industrial Application | Operational Mechanism | Audit Evidence |
|---|---|---|---|
| HAZOP | Continuous chemical and process plants | Interdisciplinary team applies guide words (No, More, Less, Reverse) to process parameters (Flow, Temp, Pressure) to identify deviations. | P&IDs, HAZOP worksheets, action item tracking logs. |
| FMEA | Machinery, automation, and safety interlocks | Evaluates component failure modes, assessing causes, effects, and Risk Priority Numbers (RPN = Severity × Occurrence × Detection). | Equipment failure mode registers, preventive maintenance logs. |
| JSA / JHA | Discrete tasks, maintenance, construction | Deconstructs a job into sequential steps, identifies hazards at each step, and prescribes mandatory controls. | Step-by-step task sheets, pre-task risk assessments, permits-to-work. |
| Gemba Walks | Manufacturing, warehousing, facilities | Planned physical workplace walkthroughs by joint worker-management teams observing actual work practices. | Inspection checklists, photo logs, maintenance work requests. |
| Worker Surveys | Enterprise-wide, distributed workforces | Standardized tools evaluating safety climate, physical discomfort, and psychosocial stress; pre-shift toolbox discussions. | Survey analysis reports, safety committee minutes, toolbox talk sign-in sheets. |
5. Lead Auditor Checkpoints: Assessing Completeness and Ongoing Nature
To verify that hazard identification is comprehensive and continuous:
- Triangulate with Maintenance Work Orders: Sample maintenance logs for the past 12 months. Cross-reference hazardous non-routine jobs (e.g., boiler descaling, high-voltage maintenance) against the hazard register. Unlisted tasks indicate nonconformity with Clause 6.1.2.1(b).
- Verify Worker Consultation: Interview frontline personnel and contractors. Confirm whether non-managerial workers participated in identifying hazards in their areas (Clause 5.4).
- Trace Management of Change: Sample a recent process or machinery change. Check that hazard identification occurred prior to implementation (Clause 6.1.2.1(g)).
- Audit Revision Frequency: Ensure assessments reflect changing operational conditions rather than existing as static, historic paperwork.
6. Real-World Audit Scenario: The Overlooked Turnaround
Context: During a Stage 2 certification audit of a commercial brewery, the auditor reviews the hazard register, which covers bottling lines, warehousing, and grain milling. However, during maintenance interviews, the auditor learns that outside contractors enter brew kettles biannually for high-pressure caustic descaling and refractory welding.
Finding: The safety manager states that because third-party contractors perform these tasks during shutdowns under independent contracts, they are omitted from the plant's hazard register.
Evaluation: The auditor issues a Major Nonconformity under Clause 6.1.2.1(b) and (e). The standard requires proactive identification of hazards from non-routine activities and all persons with workplace access. Outsourcing hazardous tasks does not exempt an organization from identifying hazards on its site.
7. Common Exam Traps and Candidate Errors
- Trap 1: Confusing Hazard with Risk. A hazard is a source or situation with potential to cause injury or ill health (Clause 3.19). A risk is the combination of likelihood and severity (Clause 3.20). Hazard identification must precede risk assessment.
- Trap 2: Excluding Psychosocial Factors. Candidates often assume bullying, harassment, and excessive workload are strictly HR issues. Clause 6.1.2.1(a) explicitly includes them as mandatory OH&S hazards.
- Trap 3: Treating Identification as an Annual Event. Hazard identification must be an ongoing and proactive process, dynamically triggered by changes, incidents, and new information.
According to ISO 45001:2018 Clause 6.1.2.1, which of the following must be explicitly included in an organization's proactive hazard identification process?
During an on-site audit of a chemical blending plant, the auditor notes that while standard blending routines are comprehensively assessed, non-routine tasks such as semi-annual vessel cleaning and emergency pump replacements are omitted from the hazard register. The safety manager explains that outside contractors handle these tasks under their own commercial contracts. What is the auditor's appropriate course of action?
Which hazard identification methodology is most structured around applying systematic guide words (such as 'More', 'Less', 'No', or 'Reverse') to process parameters to discover unintended operating deviations in continuous processing systems?