Most businesses write procedures after the work has already settled into a habit. The habit came first. A document arrived later to describe it, and by then nobody was designing anything. That is the gap QHSE operational planning closes, because a procedure that records a habit cannot control a risk.
Clause 8.1 of ISO 9001, ISO 14001 and ISO 45001 asks for something harder than a procedure library. It asks you to plan, implement and control the processes you need before the work runs, not after.
Designing from the ground up means deciding how the crew will do the work safely, to specification and within your environmental obligations. You then build the criteria, controls, competence and records that make that outcome repeatable on a wet Tuesday with a new crew.
What Clause 8.1 actually requires
All three standards share the Annex SL structure, so Clause 8.1 Operational planning and control reads consistently across them. ISO 9001:2015 asks you to determine the requirements for your products and services. You then establish criteria for the processes and for acceptance, determine the resources you need, control the work against those criteria, and keep enough documented information to have confidence the processes ran as planned.
ISO 14001:2015 Clause 8.1 adds the environmental dimension. You establish operating criteria, control planned changes, review the consequences of unintended changes, and control or influence outsourced processes. It also applies a life cycle perspective, which pulls procurement and end of life into scope.
ISO 45001:2018 Clause 8.1 goes furthest. Sub-clause 8.1.2 wants processes that eliminate hazards and reduce OH&S risks through the hierarchy of controls. Management of change follows at 8.1.3. Procurement, contractors and outsourcing then arrive at 8.1.4 as three distinct control problems rather than one.
Underneath all of it sits section 19 of the Work Health and Safety Act 2011, the primary duty to ensure health and safety so far as is reasonably practicable. Regulations 34 to 38 of the Work Health and Safety Regulation 2011 then set the sequence. Identify hazards. Eliminate the risk if you reasonably can. Minimise it through the hierarchy in regulation 36 if you cannot. Operational planning is where that sequence either happens or does not.
QHSE operational planning starts with the work, not the document
The most common failure starts with a template. Someone downloads a procedure, swaps the company name, adds a logo and files it. Nobody ever examines the real sequence of the work, so the document controls nothing.
Walk the process instead. Find where it begins, what triggers it and who touches it. Note the plant and hazardous substances involved, the handoffs, and what the output must look like before anyone signs it off. Only then decide what needs controlling and at what level.
Good QHSE operational planning produces a design, not a description. A design states what must be true for the process to run. That means the acceptance criteria, the competence of the people, the condition of the plant, the environmental limits, the verification check and the record that proves it happened.
The criteria that turn a described process into a controlled one
Six design decisions separate a controlled process from a documented one. Each one maps to a clause an auditor will test.
Defined inputs and triggers come first. If nobody can say what starts the process, nobody can say when the controls should be active. Operating criteria come second, and both ISO 9001 and ISO 14001 name them explicitly at Clause 8.1. Criteria must be measurable. A torque value. A maximum noise level at the boundary. An exposure standard from the Safe Work Australia workplace exposure standards. A hold point before backfill.
Third comes the choice of control, driven by the hierarchy rather than by convenience. Regulation 36 is a sequence, not a menu. So a design that jumps straight to personal protective equipment must justify why elimination, substitution, isolation and engineering controls were not reasonably practicable. Competence sits fourth. Tie it to ISO 45001 Clause 7.2 and to any high risk work licence or verification of competency the task legally requires.
Verification is fifth. Somebody has to check the process ran to criteria, and the design names who, when and against what. Documented information is sixth. Keep it at the level that gives you confidence the process ran as planned. That is the actual wording of Clause 8.1. It is a practical test, not an invitation to generate paperwork.
Where operational plans break: change, procurement and outsourcing
Three areas break more operational plans than anything else, and ISO 45001 treats all three as part of Clause 8.1 for exactly that reason.
Change comes first. Clause 8.1.3 wants a process for implementing and controlling planned changes. That covers new products and processes, changes to legal requirements, changes in what you know about a hazard, and developments in technology. In practice a management of change trigger sits inside the process design itself. A new supplier, a new machine or a new site condition then reopens the design rather than quietly bypassing it.
Procurement comes second. Clause 8.1.4.1 wants controls that keep purchased products and services in line with your OH&S management system. A pump bought on price alone can import a noise, chemical or guarding problem that no downstream procedure will fix. Section 23 of the WHS Act places a duty on anyone who supplies plant or substances, and section 22 on designers. Your supply chain therefore carries obligations you can verify and rely on.
Outsourcing comes third. Clause 8.1.4.3 requires you to control outsourced functions, and the standard is blunt: outsourcing does not transfer the duty. Section 16 of the WHS Act reinforces it. More than one person can hold the same duty, and each must discharge it to the extent of their influence and control. The contractor manages the work. You still own the outcome.
Practical Application
Take an Australian manufacturing business with 60 staff, three production lines and a small maintenance crew. The team picks one process to design properly first: changeover between product runs. That is where quality defects, guard removal and waste solvent all cluster.
They walk the changeover with the operators. A production schedule change triggers it. Inputs are the new run sheet, a clean line and the correct tooling. Success looks like a line producing to specification on the first pallet, with no guard left open and no solvent going to landfill.
Risks surface quickly. Operators remove guards for tooling access. Isolation varies between people. Purge solvent goes into whatever drum sits closest. Two of the three lines run a different changeover sequence for no reason anyone can remember.
Then come the design decisions. Elimination is not available here. So a standard tooling kit removes the need to open the main guard at all, and a single lockout point covers the rest. That swaps a procedural control for an engineering one. Operating criteria follow. A first article inspection before the run continues. Isolation checked by a second person. Purge solvent going only into the labelled recovery drum. Competence becomes an annual verification of competency, and verification is a two-line entry on the run sheet. Any new tooling, solvent or line modification reopens the design.
Three months later, changeover defects have dropped. The waste line item is smaller. An auditor sees a single planner row showing the criteria, the control, the competence, the record and the review date. That is what QHSE operational planning looks like when you treat it as design rather than documentation.
Conclusion
A procedure that describes a habit will always lag the work. Processes designed from the ground up hold, because you settle the criteria, the controls, the competence and the records together before the first run. Start with one process that hurts. Design it properly, prove the pattern, then work through the rest of the operation the same way. QHSE operational planning done this way turns Clause 8.1 into an operational advantage instead of an audit finding.
The MiSAFE All-in-One QHSE subscription includes design workshops for your critical operational processes, operating criteria and hold points built into digital forms, management of change workflows, and dashboards showing which processes you control and which still run on habit.
Ready to act? Contact us today or book a free 45-minute consultation.
Download the Free Template
Download the free Operational Process Design Planner (.xlsx) and start designing your operational processes instead of describing them.
| Field | Content |
|---|---|
| Document Title | Operational Process Design Planner |
| Document ID | MISAFE-IMS-TMP-035-V1.0 |
| Document Caption | A ready-to-use Excel planner that designs each operational process against Clause 8.1, sets the operating criteria and schedules the next review automatically. |
| Document Description | The MiSAFE Operational Process Design Planner takes each of your operational processes and forces the design decisions that Clause 8.1 expects: the trigger and inputs, the required output, the key quality, safety and environmental risks, the operating criteria, the highest level of control applied from the hierarchy, the competence required, the records, the change triggers and the verification method. A Next Review date column drives an automatic Current, Due Soon or Overdue status. |
| Download Filename | MISAFE-IMS-TMP-035-V1.0 Operational Process Design Planner.xlsx |
Recent Comments