# ISO 45001 Operational Controls > Document operational controls mapped to hazards, management of change (MOC) procedure, and contractor/procurement OH&S management per ISO 45001:2018 Clauses 8.1.1, 8.1.3, and 8.1.4. Validates hazard linkage, MOC completeness, contractor lifecycle, and procurement OH&S criteria. Tags: ISO 45001, OHSMS, Operational Control, Change Management, Contractors ## Example Prompts - Document operational controls for our manufacturing OH&S hazards - Create a management of change procedure for our workplace - Define contractor OH&S pre-qualification and monitoring requirements - Establish procurement OH&S criteria for equipment and chemicals URL: https://rakenne.app/skills/ohsms-operational-control/index.md Try this skill: https://rakenne.app/a/?skill=ohsms-operational-control ## Overview Document operational controls mapped to hazards, management of change (MOC) procedure, and contractor/procurement OH&S management per ISO 45001:2018 Clauses 8.1.1, 8.1.3, and 8.1.4. Validates hazard linkage, MOC completeness, contractor lifecycle, and procurement OH&S criteria. Without documented operational controls linked to identified hazards, organizations rely on ad-hoc safety practices that lead to incidents, regulatory non-compliance, and audit findings. This skill produces three interconnected deliverables that form the operational backbone of your OHSMS. ### What It Covers - **Operational Controls Register** — maps controls (safe work procedures, permits to work, LOTO, confined space entry, hot work permits) to identified hazards using the hierarchy of controls (elimination, substitution, engineering, administrative, PPE) - **Management of Change (MOC) Procedure** — systematic assessment of process, equipment, organizational, and regulatory changes before implementation, with risk assessment, approval authority, communication, and post-change review - **Contractor & Procurement OH&S Management** — complete contractor lifecycle from pre-qualification through induction, monitoring, and audit, plus procurement OH&S criteria for goods, services, and equipment, and outsourced process controls ### Output Documents | Document | Purpose | |----------|---------| | Operational Controls Register | Master register of controls mapped to hazards with control hierarchies | | Management of Change Procedure | MOC triggers, risk assessment, approval authority, communication, post-change review | | Contractor OH&S Management Plan | Contractor pre-qualification, induction, monitoring, procurement criteria, outsourced processes | ## Example Conversation > **You:** We're SafeBuild Construction, 200 employees across 3 active construction sites. We need to document our operational controls, MOC procedure, and contractor management for ISO 45001 certification. > > **Agent:** I'll help you build all three documents. Let me start by understanding your key hazards so I can map operational controls to them. What are the primary work activities across your 3 construction sites? > > **You:** We do structural steel erection, concrete pouring, excavation and trenching, electrical installation, and roofing. We also use a variety of chemicals for waterproofing and adhesives. > > **Agent:** Those activities present significant OH&S risks. I'll build the operational controls register linked to your hazard profile. Based on your activities, the key controls will include: > > - **Working at height** — fall protection procedures, scaffold inspection, roof edge protection (linked to falls from height hazard) > - **Excavation and trenching** — excavation permits, trench shoring requirements, soil stability assessment (linked to collapse hazard) > - **Electrical work** — lock-out/tag-out (LOTO) procedure, live work permits, electrical isolation verification (linked to electrocution hazard) > - **Hot work** — hot work permits with fire watch requirements, gas testing for confined areas (linked to fire/explosion hazard) > - **Chemical handling** — SDS management, chemical handling procedures, PPE matrix for waterproofing chemicals (linked to chemical exposure hazard) > > For each control, I'll reference the hierarchy: can we eliminate the hazard? If not, substitute, engineer out, administratively control, or specify PPE. How many contractors do you typically have on site at any given time? > > **You:** Usually 8 to 12 subcontractors per site — electricians, plumbers, scaffolders, crane operators, concrete pumpers. We've had issues with contractors not following our safety procedures. > > **Agent:** That's a common challenge in construction. The contractor management plan will address this with a structured lifecycle approach: > > 1. **Pre-qualification** — OH&S performance criteria (EMR, TRIFR), required certifications, safety management plan review > 2. **Site induction** — mandatory site-specific safety induction covering your emergency procedures, permit requirements, and reporting obligations > 3. **Coordination** — daily pre-start meetings for overlapping activities, permit coordination between trades > 4. **Monitoring** — weekly contractor safety inspections, monthly performance scorecards, right to stop work > > Now, regarding management of change — what kinds of changes do you typically deal with? New equipment, process changes, regulatory updates? > > **You:** We just bought a new tower crane, we're switching to a different waterproofing chemical system, and the local council updated noise regulations for our urban site. > > **Agent:** All three of those are MOC triggers. I'll draft the procedure to require a risk assessment before implementation for each type: > > - **New tower crane** — equipment change: updated lift plan, exclusion zones, operator competency verification, structural load assessment > - **New chemical system** — substance change: updated SDS review, revised PPE requirements, chemical handling procedure update, worker training > - **Noise regulation update** — regulatory change: noise assessment at the urban site, updated controls (barriers, scheduling), neighbor communication > > Let me draft all three documents now, then validate them together. > > *[Agent drafts all three documents...]* > > Running `validate_operational_controls_ohs`... > > **Result: PASS** — All mandatory checks passed. Operational controls are linked to identified hazards, MOC procedure covers all 5 key sections, and contractor management addresses the full lifecycle. 2 warnings to consider: document all 5 hierarchy of controls levels explicitly, and add outsourced process controls for waste disposal. ## Sample Output Excerpt Below is a representative excerpt from the Operational Controls Register showing how controls are mapped to identified hazards using the hierarchy of controls. --- ### Operational Controls Register — SafeBuild Construction #### 1. Working at Height Controls | Hazard Ref | Hazard | Activity | Control Type | Control Description | Hierarchy Level | |------------|--------|----------|-------------|--------------------| --------------- | | HAZ-004 | Falls from height | Structural steel erection | Engineering | Fixed guardrails on all platforms above 2m; safety nets below work areas | Engineering Control | | HAZ-004 | Falls from height | Roofing work | Administrative | Working at Height Permit (PTW-003) required; task-specific rescue plan | Administrative Control | | HAZ-004 | Falls from height | Scaffold access | Engineering + PPE | Scaffold inspection tag system (green/red); full-body harness when tag is yellow | Engineering + PPE | | HAZ-007 | Falling objects | All elevated work | Engineering | Toe boards on all platforms; tool tethering above 4m; exclusion zones below | Engineering Control | **Safe Work Procedure**: SWP-004 — Working at Height - Pre-work hazard assessment required for all work above 2m - Scaffold erected by licensed scaffolder; inspected before each shift - Fall arrest equipment inspected daily; recorded in equipment register - Rescue plan reviewed at pre-start meeting; rescue equipment within 50m #### 2. Lock-Out/Tag-Out (LOTO) Procedure **Applicable to**: All electrical, mechanical, hydraulic, and pneumatic energy isolation | Step | Action | Responsible | Verification | |------|--------|-------------|-------------| | 1 | Notify affected workers of planned isolation | Supervisor | Verbal + toolbox record | | 2 | Identify all energy sources (electrical, mechanical, hydraulic, pneumatic, gravity) | Authorized person | Energy source checklist | | 3 | Shut down equipment using normal operating controls | Operator | Equipment off confirmation | | 4 | Apply isolation devices (locks, tags, blanks) | Authorized person | Each energy source locked | | 5 | Verify zero energy state — attempt restart, test with meter | Authorized person | Test results recorded | | 6 | Perform work under isolation | Tradesperson | Permit active | | 7 | Remove tools, replace guards, remove locks in reverse order | Authorized person | All locks accounted for | | 8 | Re-energize and confirm normal operation | Supervisor | Equipment functional | **Lock allocation**: Each authorized person has a uniquely numbered padlock. Multi-lock hasps used when multiple trades work on the same equipment. ## Extension Tools ### `validate_operational_controls_ohs` Validates all three operational control documents in a single pass. Reads the operational controls register, MOC procedure, and contractor management plan, then checks for completeness and cross-references. **Inputs:** | Parameter | Description | |-----------|-------------| | `operational_controls_path` | Path to the operational controls register (Markdown) | | `moc_procedure_path` | Path to the management of change procedure (Markdown) | | `contractor_management_path` | Path to the contractor OH&S management plan (Markdown) | **Checks performed:** | Area | Check | Severity | |------|-------|:--------:| | Operational Controls | Controls linked to identified hazards (Clause 6.1.2 references) | ERROR | | Operational Controls | Hierarchy of controls referenced (elimination through PPE) | WARNING | | Operational Controls | Common control types present (safe work procedures, permits, LOTO, confined space, hot work) | WARNING | | MOC Procedure | Types of changes defined | ERROR | | MOC Procedure | Risk assessment before change implementation | ERROR | | MOC Procedure | Approval authority specified | ERROR | | MOC Procedure | Communication of change requirements | ERROR | | MOC Procedure | Post-change review process | ERROR | | MOC Procedure | MOC triggers/initiation criteria defined | WARNING | | Contractor Management | Pre-qualification OH&S criteria | WARNING | | Contractor Management | Contractor hazard communication / induction | WARNING | | Contractor Management | Coordination of overlapping activities | WARNING | | Contractor Management | Contractor OH&S performance monitoring | WARNING | | Contractor Management | Procurement OH&S criteria for goods/services/equipment | WARNING | | Contractor Management | Outsourced process controls | WARNING | The tool produces a finding-level report with ERROR, WARNING, and INFO severity. All ERRORs must be resolved before finalizing. ## Getting Started Activate the *ISO 45001 Operational Controls* skill. For best results, complete these prerequisite skills first: 1. **Organization Profile** — provides organizational context and worker activities 2. **Hazard Identification & Legal Register** — provides the hazard register that controls must reference 3. **OH&S Policy & Leadership** — provides the policy framework and roles Have this information ready: - Your work activities that present OH&S risks (e.g., working at height, chemical handling, electrical work, confined space entry) - Current contractor arrangements and typical subcontractor types on site - Recent or planned changes to processes, equipment, organization, or regulations - Existing safe work procedures, permits to work, or other operational controls to build upon - Procurement practices for safety-critical equipment, chemicals, and PPE The agent guides you through a 6-step workflow: map controls to the hazard register, develop the MOC procedure, define contractor management lifecycle, address procurement OH&S criteria, establish outsourced process controls, and validate all three documents together. --- Back to [Skill Library](https://rakenne.app/skills/index.md)