Most businesses treat change as an event. A new contract comes in, a piece of plant is replaced, a key person leaves, and the organisation reacts — sometimes well, mostly not. The real problem is that unplanned change is one of the most consistent causes of workplace incidents, quality failures, and environmental breaches. And in an integrated management system, unmanaged change does not just affect one function. It ripples across quality, safety, and environment simultaneously.
ISO 9001:2015, ISO 14001:2015, and ISO 45001:2018 all contain explicit requirements for managing change. If your IMS does not include a structured approach to change planning, you are not compliant with any of them. This post covers what change management looks like in practice and how to build it into your IMS from the ground up.
Why Change Management Is a Core IMS Requirement
ISO 9001:2015 Clause 6.3 requires that when you determine the need for changes to your quality management system, you must carry out those changes in a planned and systematic manner — considering the purpose of the change, potential consequences, resource availability, and reallocation of responsibilities.
ISO 45001:2018 goes further. Clause 8.1.3 specifically addresses the management of change, requiring organisations to establish a process for implementing planned changes, including new or changed products, services, and processes; changes to work processes, procedures, equipment, and organisation; changes to legal requirements; and changes to knowledge or information about hazards and risks.
ISO 14001:2015 Clause 6.1.4 requires organisations to plan how environmental management actions will be integrated into business processes. When the business changes, that integration must be maintained and reassessed.
The WHS Regulations 2017 (Cth) — particularly obligations relating to plant and structures and hazardous chemicals — also require a reassessment of risks when changes occur that could affect worker safety.
Put together, change management is not optional. It is a foundational requirement that cuts across every pillar of your IMS.
What ‘Change’ Actually Covers in an IMS Context
The difficulty for many organisations is that ‘change’ is not clearly defined in their systems. Without a clear definition, changes slip through without review. In an IMS context, change covers the following categories.
- Structural and organisational change includes leadership transitions, restructuring, role changes, and new appointments that shift accountability within the system.
- Operational and process change covers new work methods, updated procedures, changes to how tasks are sequenced, or how work is supervised on site or in a facility.
- Equipment and plant change applies to new or modified plant, tools, vehicles, and equipment — including changes to how existing plant is configured or operated.
- Legal and regulatory change encompasses new legislation, updated codes of practice, revised Australian Standards, or changes to licensing requirements that alter your obligations.
- Subcontractor and supplier change is relevant where changes in the supply chain affect quality outputs, safety management, or environmental performance.
- Physical environment change includes new or altered worksites, new facilities, or changes to the layout of existing environments that affect how work is performed or supervised.
Your IMS should define each category and set a clear trigger for when a formal change management process is required, as opposed to routine updates that fall within existing documented procedures.
Building a Change Management Process That Works
A change management process does not need to be bureaucratic to be effective. The core elements are identification, assessment, approval, communication, implementation, and review. Each of these steps must be documented and assigned to an accountable person.
- Identification begins with a clearly accessible mechanism for anyone in the business to raise a proposed or necessary change. This might be a simple form or a digital submission point within your management platform. The critical point is that all changes — whether driven by internal decision or external obligation — are captured in one place.
- Assessment requires someone with appropriate authority and knowledge to evaluate the change against your IMS. What hazards or risks does it introduce or modify? Does it affect your quality processes? Does it change your environmental footprint or obligations? Does it trigger a legal requirement? The assessment does not need to be complex, but it must be documented and traceable.
- Approval ensures that no change proceeds without sign-off at an appropriate level. Routine minor changes may be approved by a team leader or supervisor. Changes that affect multiple functions of the IMS, or that introduce new significant risks, should require senior management authorisation.
- Communication means that everyone affected by the change is informed before it is implemented — workers, supervisors, subcontractors, and where required, regulators or certifying bodies. Under ISO 45001:2018 Clause 7.4, you have a specific obligation to communicate changes that affect occupational health and safety.
- Implementation should be phased where operationally possible, with clear ownership and timelines. Where changes affect documented procedures or safe work method statements, those documents must be updated before the change is actioned, not after.
- Review closes the loop. After implementation, assess whether the change had its intended effect and whether it introduced any unintended consequences. This review sits naturally within your internal audit and management review cycle.
Putting It Into Practice
Start by building a Change Management Register — a simple log that records every change request, the assessment outcome, who approved it, the implementation date, and the review outcome. This single document gives you an audit-ready record and makes the process visible to management at a glance.
Define your change categories and triggers in your IMS procedure. The more clearly you articulate what constitutes a reportable change, the fewer things will fall through the gaps unreviewed.
Where your business uses SWMS, establish a clear trigger for SWMS review whenever a change affects the work activity covered by that document. A new piece of equipment, a change in site conditions, or a new subcontractor on-site can all invalidate an existing SWMS and require a fresh review before work continues.
Assign a change coordinator role — someone responsible for overseeing the register, tracking approvals, and confirming that communication has occurred before implementation proceeds. This does not need to be a full-time responsibility, but it must be someone’s accountability.
Conclusion
Change is inevitable in any operating business. The question is not whether change will happen but whether your system is ready for it. A structured change management process, embedded in your IMS and aligned with ISO 9001:2015 Clause 6.3, ISO 14001:2015 Clause 6.1.4, ISO 45001:2018 Clause 8.1.3, and the WHS Regulations 2017, is one of the most effective controls you can put in place for quality, safety, and environmental risk.
If your IMS does not yet include a change management procedure, this is the week to build one. Download the free Change Management Register (Document ID: MISAFE-IMS-TMP-021-V1.0) to get started, or contact the MiSAFE team to discuss how we can support your next phase.
Email: contact@misafesolutions.com.au
Phone: +61 7 5641 2101
Mobile: +61 400 977 769
Book a free 1-hour IMS consultation
Recent Comments