Building the Foundation: A Guide to Support and Resources in ISO 45001
1. Introduction: The Role of Support in OH&S Success
In the architecture of ISO 45001:2018, Clause 7—the "Support" pillar—represents the bridge between strategic planning and operational reality. As a Lead Auditor, I view this clause as the litmus test for Top Management’s commitment. Without the deliberate provision of resources, even the most sophisticated Occupational Health and Safety (OH&S) policy remains a dormant document.
The core purpose of Clause 7 is to mandate that the organization identifies and provides every resource necessary to establish, implement, maintain, and continually improve the OH&S management system. For office managers and safety leads, this is where "buy-in" is quantified into budget, personnel, and time.
2. The Four Essential Resource Categories
To sustain an "audit-ready" system, organizations must move beyond reactive measures and provide proactive support. Per Lecture 2.5, Top Management must ensure the availability of four distinct resource types:
Human Resources: Adequate staffing levels and access to specialized expertise (e.g., ergonomic consultants or mental health first aiders).
Natural Resources: In an office context, this focuses on resource availability (Lecture 2.2), such as energy efficiency for facilities, water access, and the procurement of sustainable office supplies.
Infrastructure: The physical environment, including safe facilities, ergonomically designed workstations, and necessary IT equipment.
Financial Resources: Specific, ring-fenced budgets for safety initiatives, PPE, equipment upgrades, and health-tracking software.
3. Competence: Moving Beyond Basic Training
From an auditor’s perspective, Training is an activity, but Competence is the verified result. Competence is defined by the triad of Education, Training, and Experience. Strategic safety management requires a shift from "attending a class" to "proving ability."
Action Steps for Ensuring Competence:
Determine Requirements: Define the specific competence levels required for each role, particularly those impacting OH&S performance.
Acquire Competence: Close gaps through targeted training, mentoring, or strategic hiring.
Verify Competence: Move beyond attendance sheets; verify ability through direct observation, practical testing, or technical interviews.
Evaluate Effectiveness: Periodically review if the actions taken actually improved safety performance.
Note: Auditors require Documented Information as evidence of competence. Organizations must maintain a formal Competency Matrix or individual Training Files. This applies to all workers under the organization’s control, including contractors and temporary staff.
4. The Awareness Mandate: What Every Worker Needs to Know
Awareness is the frontline of risk management. Every individual in the office must understand not just the "what," but the "why" behind safety protocols.
Worker Awareness Checklist:
[ ] OH&S Policy and Objectives: Knowledge of the organization’s formal safety commitment and specific, measurable goals.
[ ] Individual Contribution: A clear understanding of how their specific actions (e.g., reporting a near-miss) contribute to system effectiveness.
[ ] Implications of Non-conformance: Knowledge of the potential consequences—both the physical risk to safety and the systemic risk to the management system—when requirements are ignored.
[ ] Incident Outcomes: Awareness of results from relevant investigations and the lessons learned to prevent recurrence.
5. Strategic Communication: Internal and External Flows
Communication must be more than a one-way broadcast; it is the primary vehicle for worker participation and the breaking down of organizational silos (Lecture 2.3). A strategist defines not just the message, but the process.
Communication Type
What is Communicated
When/Frequency
Audience (With Whom)
Method (How)
Internal
OH&S Policy, incident investigation results, and system changes.
Monthly or as changes occur.
Employees at all levels and functions.
Team meetings, newsletters, safety briefings.
External
Safety protocols, site-specific hazards, and emergency procedures.
Upon arrival or contract commencement.
Contractors, visitors, regulators, emergency services.
Induction videos, visitor badges, formal reports.
6. The Documentation Backbone: Creation and Control
Documented information provides the evidence of "due diligence" during legal or regulatory inspections. Key requirements include the Scope, Policy, Risk Assessments, and Evidence of Competence.
Instructions for the Control of Documented Information:
Availability and Suitability: Ensure documents are accessible at the point of use (e.g., digital portals) and in a format the user understands.
Protection: Implement safeguards against the loss of integrity, unintended changes, or improper use of sensitive health data.
Creation and Updating: Establish a workflow for identification (titles/dates) and formal review/approval for adequacy.
Version Control: Ensure obsolete documents are removed from use to prevent conflicting instructions.
Retention and Disposal: Define specific retention periods based on legal requirements (Lecture 3.5). Ensure secure disposal for records containing confidential worker health information.
7. Real-World Application: Support in Action
The following case studies from Module 6 demonstrate how Clause 7 investment translates into measurable ROI.
Case in Point: TechCorp TechCorp (450 employees) transitioned from a reactive safety model to a proactive support structure. By investing in Infrastructure—including 320 ergonomic chairs, 150 sit-stand desks, and automated break-reminder software—the firm addressed their highest risks. Outcome: They achieved an 85% reduction in RSI incidents (from 28 cases down to 4) within 12 months, proving that infrastructure support is a financial investment, not just a cost.
Case in Point: Global Finance Firm Managing 12,000 employees across 18 countries, this firm focused on Competence and Legal Resources. They established a Global Training Program to harmonize safety knowledge across different cultures. Crucially, they maintained a Global Legal Register as a live resource. Outcome: By ensuring the register was quarterly-reviewed, they maintained 100% compliance across varying jurisdictions and successfully secured a $50 million contract that required proven OH&S excellence.
8. Conclusion: Support as a Catalyst for Improvement
Clause 7 is the engine of the Plan-Do-Check-Act (PDCA) cycle. Resources are the "fuel" for the "Do" phase (implementation) and the "Check" phase (monitoring and measurement). Without robust support, the cycle stalls at the planning stage.
By providing comprehensive resources, Top Management transforms OH&S from a static manual into a living organizational culture. When workers are competent, aware, and supported by the right infrastructure, safety ceases to be a checklist and becomes a core business value.