Management system guidance

5.0 Leadership and Worker Participation

ISO Navigator Pro™ is a free tool that provides practical, expert guidance for businesses wishing to interpret and better implement the requirements of ISO 9001:2026, ISO 14001:2026 and ISO 45001:2018.

Our range of ISO templates cover the requirements of ISO 9001:2026, ISO 14001:2026 and ISO 45001:2018, and offer an easy way to implement your next management system.

5.2 OH&S policy

|

Clause 5.2 requires top management to establish, implement and maintain an OH&S policy. The policy is a set of principles, stated as commitments, that sets the long-term direction for supporting and continually improving OH&S performance. It also gives the framework within which OH&S objectives are set and actions are taken.

What the policy must contain

Your OH&S policy must include:

  1. A commitment to provide safe and healthy working conditions to prevent work-related injury and ill health, suited to your organization’s purpose, size and context and to the particular OH&S risks and OH&S opportunities it faces;
  2. A framework for setting OH&S objectives;
  3. A commitment to fulfil legal requirements and other requirements (see 6.1.3);
  4. A commitment to eliminate hazards and reduce OH&S risks, which is delivered through the hierarchy of controls in 8.1.2;
  5. A commitment to continual improvement of the OH&S management system;
  6. A commitment to consult workers, and workers’ representatives where there are any, and to enable their participation (see 5.4).

A generic, off-the-shelf statement will rarely be “appropriate to the specific nature” of your OH&S risks. Refer to the hazards that matter most in your organization, such as work at height, driving, manual handling or psychosocial risks, and to the outcome of your context review. If you have determined that climate change is a relevant issue (for example, heat stress for outdoor workers), the policy should be consistent with that context.

How the policy must be managed

The OH&S policy must:

  • Be kept as documented information, usually a dated, signed and controlled policy statement (see 7.5);
  • Be communicated within the organization;
  • Be available to interested parties, as appropriate, such as contractors, visitors and clients;
  • Be relevant and appropriate.

When developing the policy, consider how it fits and coordinates with other organizational policies, such as quality, environmental, HR, wellbeing and driving policies, so that they do not contradict each other.

Consult workers on the policy

Clause 5.4 requires the organization to emphasize the consultation of non-managerial workers when establishing the OH&S policy. Share the draft with workers or their representatives, or through the health and safety committee, give them time to comment, and consider their feedback before top management approves the policy. Keep a record of the consultation.

Communicating the policy

You should check whether the policy has been communicated and understood throughout your organization. Clause 7.3 requires workers to be aware of the OH&S policy (see 7.3 Awareness). Auditors will wish to determine whether the policy is understood by interviewing personnel at all levels. Interviewees do not need to recite it, but they should know where to find it and be able to explain, in their own words, what it means for their work and how their job affects the OH&S objectives.

If personnel interviewed do not know the OH&S objectives that their work directly affects, the auditor is likely to look further at how top management has communicated the policy and objectives. Inferred awareness through knowledge of procedures alone is not considered sufficient.

A quick and convenient way to promote the policy is to create a shortened version; try condensing it to five key words or a couple of short sentences. This can be posted on noticeboards in each department, shown on screens, included in induction for workers and contractors, or added to the reverse of security passes or ID badges. If an auditor asks a worker about the policy, they can point to the noticeboard or their badge and explain what it means to them and how it influences their work.

Reviewing the policy

Review the policy whenever the organization’s context, activities, hazards or legal requirements change significantly, and at least as part of management review. A policy that still describes last year’s operations is no longer relevant and appropriate. Our health and safety management system templates include an editable OH&S policy.

You should seek and record evidence that the OH&S policy contains each of the six required commitments, reflects the organization’s actual OH&S risks and context, is approved and maintained by top management, was developed in consultation with non-managerial workers, has been communicated to workers at all levels and is available to relevant interested parties. Interview workers and contractors to confirm they know where the policy is and what it means for their work.

|

More information on PDCA

Planning

Context

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
4.1 Organizational Context 4.1 Organizational Context 4.1 Organizational Context
4.2 Relevant Interested Parties 4.2 Relevant Interested Parties 4.2 Workers & Interested Parties
4.3 Management System Scope 4.3 EMS Scope 4.3 OH&S Management System Scope
4.4 QMS Processes 4.4 Environmental Management System 4.4 OH&S Management System

Planning

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
5.1 Leadership & Commitment 5.1 Leadership & Commitment 5.1 Leadership & Commitment
5.2 Quality Policy 5.2 Environmental Policy 5.2 OH&S Policy
5.3 Roles, Responsibilities & Authorities 5.3 Roles, Responsibilities & Authorities 5.3 Roles, Responsibilities & Authorities
    5.4 Consultation & Participation

Support

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
6.1 Risks & Opportunities (6.1.1–6.1.3) 6.1.1 Risks & Opportunities - General 6.1.1 Risks & Opportunities - General
6.2.1 Quality Objectives 6.1.2 Environmental Aspects 6.1.2 Hazard Identification & Assessment
6.2.2 Planning to Achieve Objectives 6.1.3 Compliance Obligations 6.1.3 Legal & Other Requirements
6.3 Planning of Changes 6.1.4 Risks & Opportunities 6.1.4 Planning Action
  6.1.5 Planning Action 6.2.1 OH&S Objectives
  6.2.1 Environmental Objectives 6.2.2 Planning to Achieve Objectives
  6.2.2 Planning to Achieve Objectives  
  6.3 Planning of Changes  
 

Doing

Support

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
7.1 Resources 7.1 Resources 7.1 Resources
7.2 Competence 7.2 Competence 7.2 Competence
7.3 Awareness 7.3 Awareness 7.3 Awareness
7.4 Communication 7.4.1 Communication - General 7.4.1 Communication - General
7.5 Documented Information 7.4.2 Internal Communication 7.4.2 Internal Communication
  7.4.3 External Communication 7.4.3 External Communication
  7.5 Documented Information 7.5 Documented Information

Operations

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
8.1 Operational Planning & Control 8.1 Operational Planning & Control 8.1.1 General
8.2 Customer Requirements 8.2 Emergency Preparedness & Response 8.1.2 Eliminating Hazards
8.3 Design & Development   8.1.3 Management of Change
8.4 Purchasing   8.1.4 Procurement
8.5 Product & Service Provision   8.2 Emergency Preparedness
8.6 Release of Products & Services    
8.7 Nonconforming Outputs    
 

Checking

Monitoring, measurement, analysis and evaluation

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
9.1 Monitoring & Measurement 9.1.1 Performance Evaluation 9.1.1 Performance Evaluation
9.2 Internal Audit 9.1.2 Evaluation of Compliance 9.1.2 Evaluation of Compliance
9.3 Management Review 9.2 Internal Audit 9.2 Internal Audit
  9.3 Management Review 9.3 Management Review
 

Acting

Improvement

ISO 9001:2026
ISO 14001:2026
ISO 45001:2018
10.1 Continual Improvement 10.1 Continual Improvement 10.1 Improvement - General
10.2 Nonconformity & Corrective Action 10.2 Nonconformity & Corrective Action 10.2 Incident, Nonconformity & Corrective Action
    10.3 Continual Improvement
 

Want to know more?

SSL certification

A certificate guarantees the information your internet browser is receiving now originates from the expected domain - https://www.iso9001help.co.uk. It guarantees that when you make a purchase, sensitive data is encrypted and sent to the right place, and not to a malicious third-party.

Free PDCA guidance

ISO Navigator™ is our FREE online training tool that shows you how to apply the principles of PDCA to your operations. We also offer many helpful templates that get you on the road to documenting your management system, please visit the download page.