ISO 45001 Clause 4.1

Internal and external issues that affect how the OH&S management system delivers its intended outcomes.

ISO 45001 Clause 4.1 - Understanding the Organisation and Its Context

ISO 45001:2018 Clause 4.1 sets the starting point for the occupational health and safety management system. Before an organisation can decide what its OH&S policy should commit to, what objectives to set or what controls to put in place, it needs a clear picture of the issues that influence its ability to manage health and safety effectively.

The clause requires the organisation to determine external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended outcomes of the OH&S management system. Issues here means important topics, problems for debate, or changing circumstances - the conditions the organisation operates within.

External issues might include the regulatory landscape, customer or client expectations on safety performance, the local availability of trained workers, technological change in the equipment and methods used, and the social and economic conditions of the markets served. Internal issues might include the activities, products and services themselves, the organisation's strategic direction, its safety culture, the skills and knowledge of its workforce, accident and ill-health history, and the state of its current OH&S performance.

Why ISO 45001 Clause 4.1 Matters in Practice

The output of the context review is not a document that sits on a shelf. It feeds directly into Clause 6.1 on risks and opportunities, where the issues identified become inputs for planning. It informs the scope of the OH&S management system at Clause 4.3. It helps shape the OH&S policy at Clause 5.2. And it gets revisited at every management review under Clause 9.3.

An effective approach is to combine the context review with the SWOT analysis or risk register the organisation already maintains. The same issues that affect business performance - workforce availability, regulatory change, customer expectations on safety - typically also affect OH&S performance. Treating them as one set of issues rather than two parallel exercises is both more efficient and more honest about how the organisation actually works.

People overcomplicate this clause. They think context means writing a long company history. It does not. It means being able to answer two questions. What is going on around us that affects how we keep people safe at work, and how does the way we work affect the people around us. If you can answer those, you have done what the clause asks for. A SWOT analysis covers it for most organisations.

Clause 4.1 is the entry point to the whole standard. If you have not properly understood your context, the rest of your OH&S management system is built on guesswork.

The standard does not require this to be a separate document. Many organisations capture context in a management system manual or a company-wide opportunities and risks register. What matters is that the issues have been determined and can be discussed during an audit, not just produced on paper.

I look for evidence the context has been thought about, not just written down. When I sit with top management and ask what the main issues are for the OH&S management system, I want a clear answer.

Practical Compliance Guidance

The IMS1 Manual sets out how internal and external issues are captured for the integrated management system. Section 1.3 Context, Company Profile and Scope of Operations provides the structure for documenting the context review.

The following alphaZ documents support compliance with ISO 45001:2018 Clause 4.1. The IMS1 Manual itself is included within the toolkits listed below.

alphaZ document How to use it
ISO 9001/14001/45001 IMS Toolkit The full set of integrated management system documents covering the requirements of all three standards, including the IMS1 Manual.
ISO 45001 Toolkit The standalone set of documents covering ISO 45001:2018 only, for organisations focused on health and safety certification.
F-IMS23 Opportunities and Risks Register Captures internal and external issues alongside a SWOT analysis. Use to record context issues including those affecting OH&S performance.

Note - all the above files can be downloaded with an alphaZ subscription.

Frequently Asked Questions

No. The standard does not require Clause 4.1 outputs to be held in a specific document. Many organisations capture context within their management system manual, an opportunities and risks register, a SWOT analysis, or the management review record. What matters is that the issues have been determined and can be discussed and evidenced.
The standard does not specify a frequency. The context review is normally revisited as part of the annual management review, and updated whenever a significant change occurs - new sites, new activities, regulatory changes, or significant accidents that highlight conditions not previously identified.
Activities and operations carried out, the safety culture of the organisation, workforce skills and competence, accident and incident history, the condition of equipment and premises, organisational changes, and the resources available for OH&S management.
Yes. While the format is not prescribed, an external auditor will expect to see evidence that the organisation has determined its issues and can talk about them. Top management should be able to discuss the issues, not just point at a document.

UK Legislation

The following UK legislation forms part of the broader regulatory context that organisations operating in the UK consider under Clause 4.1. Organisations outside the UK should identify equivalent legislation in their jurisdiction.

Further Resources

payment logos