Overview
Document operational controls mapped to hazards, management of change (MOC) procedure, and contractor/procurement OH&S management per ISO 45001:2018 Clauses 8.1.1, 8.1.3, and 8.1.4. Validates hazard linkage, MOC completeness, contractor lifecycle, and procurement OH&S criteria.
Without documented operational controls linked to identified hazards, organizations rely on ad-hoc safety practices that lead to incidents, regulatory non-compliance, and audit findings. This skill produces three interconnected deliverables that form the operational backbone of your OHSMS.
What It Covers
- Operational Controls Register — maps controls (safe work procedures, permits to work, LOTO, confined space entry, hot work permits) to identified hazards using the hierarchy of controls (elimination, substitution, engineering, administrative, PPE)
- Management of Change (MOC) Procedure — systematic assessment of process, equipment, organizational, and regulatory changes before implementation, with risk assessment, approval authority, communication, and post-change review
- Contractor & Procurement OH&S Management — complete contractor lifecycle from pre-qualification through induction, monitoring, and audit, plus procurement OH&S criteria for goods, services, and equipment, and outsourced process controls
Output Documents
| Document | Purpose |
|---|---|
| Operational Controls Register | Master register of controls mapped to hazards with control hierarchies |
| Management of Change Procedure | MOC triggers, risk assessment, approval authority, communication, post-change review |
| Contractor OH&S Management Plan | Contractor pre-qualification, induction, monitoring, procurement criteria, outsourced processes |
Example Conversation
You: We’re SafeBuild Construction, 200 employees across 3 active construction sites. We need to document our operational controls, MOC procedure, and contractor management for ISO 45001 certification.
Agent: I’ll help you build all three documents. Let me start by understanding your key hazards so I can map operational controls to them. What are the primary work activities across your 3 construction sites?
You: We do structural steel erection, concrete pouring, excavation and trenching, electrical installation, and roofing. We also use a variety of chemicals for waterproofing and adhesives.
Agent: Those activities present significant OH&S risks. I’ll build the operational controls register linked to your hazard profile. Based on your activities, the key controls will include:
- Working at height — fall protection procedures, scaffold inspection, roof edge protection (linked to falls from height hazard)
- Excavation and trenching — excavation permits, trench shoring requirements, soil stability assessment (linked to collapse hazard)
- Electrical work — lock-out/tag-out (LOTO) procedure, live work permits, electrical isolation verification (linked to electrocution hazard)
- Hot work — hot work permits with fire watch requirements, gas testing for confined areas (linked to fire/explosion hazard)
- Chemical handling — SDS management, chemical handling procedures, PPE matrix for waterproofing chemicals (linked to chemical exposure hazard)
For each control, I’ll reference the hierarchy: can we eliminate the hazard? If not, substitute, engineer out, administratively control, or specify PPE. How many contractors do you typically have on site at any given time?
You: Usually 8 to 12 subcontractors per site — electricians, plumbers, scaffolders, crane operators, concrete pumpers. We’ve had issues with contractors not following our safety procedures.
Agent: That’s a common challenge in construction. The contractor management plan will address this with a structured lifecycle approach:
- Pre-qualification — OH&S performance criteria (EMR, TRIFR), required certifications, safety management plan review
- Site induction — mandatory site-specific safety induction covering your emergency procedures, permit requirements, and reporting obligations
- Coordination — daily pre-start meetings for overlapping activities, permit coordination between trades
- Monitoring — weekly contractor safety inspections, monthly performance scorecards, right to stop work
Now, regarding management of change — what kinds of changes do you typically deal with? New equipment, process changes, regulatory updates?
You: We just bought a new tower crane, we’re switching to a different waterproofing chemical system, and the local council updated noise regulations for our urban site.
Agent: All three of those are MOC triggers. I’ll draft the procedure to require a risk assessment before implementation for each type:
- New tower crane — equipment change: updated lift plan, exclusion zones, operator competency verification, structural load assessment
- New chemical system — substance change: updated SDS review, revised PPE requirements, chemical handling procedure update, worker training
- Noise regulation update — regulatory change: noise assessment at the urban site, updated controls (barriers, scheduling), neighbor communication
Let me draft all three documents now, then validate them together.
[Agent drafts all three documents…]
Running
validate_operational_controls_ohs…Result: PASS — All mandatory checks passed. Operational controls are linked to identified hazards, MOC procedure covers all 5 key sections, and contractor management addresses the full lifecycle. 2 warnings to consider: document all 5 hierarchy of controls levels explicitly, and add outsourced process controls for waste disposal.
Sample Output Excerpt
Below is a representative excerpt from the Operational Controls Register showing how controls are mapped to identified hazards using the hierarchy of controls.
Operational Controls Register — SafeBuild Construction
1. Working at Height Controls
| Hazard Ref | Hazard | Activity | Control Type | Control Description | Hierarchy Level |
|---|---|---|---|---|---|
| HAZ-004 | Falls from height | Structural steel erection | Engineering | Fixed guardrails on all platforms above 2m; safety nets below work areas | Engineering Control |
| HAZ-004 | Falls from height | Roofing work | Administrative | Working at Height Permit (PTW-003) required; task-specific rescue plan | Administrative Control |
| HAZ-004 | Falls from height | Scaffold access | Engineering + PPE | Scaffold inspection tag system (green/red); full-body harness when tag is yellow | Engineering + PPE |
| HAZ-007 | Falling objects | All elevated work | Engineering | Toe boards on all platforms; tool tethering above 4m; exclusion zones below | Engineering Control |
Safe Work Procedure: SWP-004 — Working at Height
- Pre-work hazard assessment required for all work above 2m
- Scaffold erected by licensed scaffolder; inspected before each shift
- Fall arrest equipment inspected daily; recorded in equipment register
- Rescue plan reviewed at pre-start meeting; rescue equipment within 50m
2. Lock-Out/Tag-Out (LOTO) Procedure
Applicable to: All electrical, mechanical, hydraulic, and pneumatic energy isolation
| Step | Action | Responsible | Verification |
|---|---|---|---|
| 1 | Notify affected workers of planned isolation | Supervisor | Verbal + toolbox record |
| 2 | Identify all energy sources (electrical, mechanical, hydraulic, pneumatic, gravity) | Authorized person | Energy source checklist |
| 3 | Shut down equipment using normal operating controls | Operator | Equipment off confirmation |
| 4 | Apply isolation devices (locks, tags, blanks) | Authorized person | Each energy source locked |
| 5 | Verify zero energy state — attempt restart, test with meter | Authorized person | Test results recorded |
| 6 | Perform work under isolation | Tradesperson | Permit active |
| 7 | Remove tools, replace guards, remove locks in reverse order | Authorized person | All locks accounted for |
| 8 | Re-energize and confirm normal operation | Supervisor | Equipment functional |
Lock allocation: Each authorized person has a uniquely numbered padlock. Multi-lock hasps used when multiple trades work on the same equipment.
Extension Tools
validate_operational_controls_ohs
Validates all three operational control documents in a single pass. Reads the operational controls register, MOC procedure, and contractor management plan, then checks for completeness and cross-references.
Inputs:
| Parameter | Description |
|---|---|
operational_controls_path | Path to the operational controls register (Markdown) |
moc_procedure_path | Path to the management of change procedure (Markdown) |
contractor_management_path | Path to the contractor OH&S management plan (Markdown) |
Checks performed:
| Area | Check | Severity |
|---|---|---|
| Operational Controls | Controls linked to identified hazards (Clause 6.1.2 references) | ERROR |
| Operational Controls | Hierarchy of controls referenced (elimination through PPE) | WARNING |
| Operational Controls | Common control types present (safe work procedures, permits, LOTO, confined space, hot work) | WARNING |
| MOC Procedure | Types of changes defined | ERROR |
| MOC Procedure | Risk assessment before change implementation | ERROR |
| MOC Procedure | Approval authority specified | ERROR |
| MOC Procedure | Communication of change requirements | ERROR |
| MOC Procedure | Post-change review process | ERROR |
| MOC Procedure | MOC triggers/initiation criteria defined | WARNING |
| Contractor Management | Pre-qualification OH&S criteria | WARNING |
| Contractor Management | Contractor hazard communication / induction | WARNING |
| Contractor Management | Coordination of overlapping activities | WARNING |
| Contractor Management | Contractor OH&S performance monitoring | WARNING |
| Contractor Management | Procurement OH&S criteria for goods/services/equipment | WARNING |
| Contractor Management | Outsourced process controls | WARNING |
The tool produces a finding-level report with ERROR, WARNING, and INFO severity. All ERRORs must be resolved before finalizing.
Getting Started
Activate the ISO 45001 Operational Controls skill. For best results, complete these prerequisite skills first:
- Organization Profile — provides organizational context and worker activities
- Hazard Identification & Legal Register — provides the hazard register that controls must reference
- OH&S Policy & Leadership — provides the policy framework and roles
Have this information ready:
- Your work activities that present OH&S risks (e.g., working at height, chemical handling, electrical work, confined space entry)
- Current contractor arrangements and typical subcontractor types on site
- Recent or planned changes to processes, equipment, organization, or regulations
- Existing safe work procedures, permits to work, or other operational controls to build upon
- Procurement practices for safety-critical equipment, chemicals, and PPE
The agent guides you through a 6-step workflow: map controls to the hazard register, develop the MOC procedure, define contractor management lifecycle, address procurement OH&S criteria, establish outsourced process controls, and validate all three documents together.