ISO 45001 requires genuine consultation and participation of workers in health and safety decisions, not just informing them after the fact. Most businesses I audit have communication. Very few have consultation. That distinction is where a lot of otherwise solid management systems pick up findings.
What Clause 5.4 actually requires
Clause 5.4 covers consultation and participation of workers, including those without management responsibility. Consultation means seeking views before a decision is made and taking them into account. Participation means workers contribute to hazard identification, risk assessment, incident investigation, and setting objectives — not just senior management or the health and safety lead. The standard is explicit that this applies at every level, including non-managerial staff and, where relevant, contractors. A system where the H&S manager decides everything and tells the workforce afterwards fails this requirement, however well documented the decisions are.
The toolbox talk trap
Most businesses treat a toolbox talk as consultation. It isn't, on its own. A toolbox talk is communication — information flowing one way, from management to the floor. Consultation needs a return path: a way for workers to raise concerns, question a control, or suggest a better way of doing something, and evidence that what they said was considered. I've seen firms with excellent toolbox talk records and no functioning feedback mechanism at all. The talk happened. Nobody was actually asked anything. That's the gap auditors are trained to probe.
Where it needs to show up in practice
Consultation isn't a single meeting — it needs to appear at specific points in the system. Hazard identification under Clause 6.1.2.1 should draw on the people doing the job, who usually know the real risks better than anyone writing a risk assessment from a desk. Incident investigations under Clause 10.2 should involve the people present, not just a manager reconstructing events afterwards. Objective-setting should reflect what the workforce actually flags as a problem. If none of your significant risk assessments show worker input, that's a pattern an auditor will pick up quickly.
Smaller businesses without a safety rep structure
Businesses without a recognised trade union or elected safety representatives sometimes assume consultation doesn't apply to them in the same way. It does. Where there's no formal representative structure, the standard still expects direct consultation with workers themselves. In practice this is often easier in a smaller business — a genuine five-minute conversation on site can outperform a large company's formal committee that meets quarterly and achieves little. Scale the mechanism to the business. Don't skip it because there's no committee to point to.
Evidence auditors want to see
An auditor will ask three things: how do you consult workers, can you show me a record of it, and can you show me an example where their input changed something. The first two are usually covered. The third is where most systems fall down — there's a suggestion log or a meeting minute, but nothing that shows a control, procedure, or risk assessment actually changed as a result. Keep it simple: a safety committee note, a corrective action linked to a worker-raised concern, or a dated record of a site conversation that led to a changed method statement all count as evidence.
If your consultation process is currently a noticeboard and a toolbox talk register, start smaller and more direct. Pick one area — a recent near-miss, a new piece of equipment, an upcoming risk assessment — and consult the people who'll actually be affected before you finalise it. Record what they said and what you did about it. That single habit, repeated consistently, does more for your ISO 45001 system than any policy rewrite.
Ready to talk about your business?
Book a free, no-obligation call. We will tell you exactly what certification would involve for your size, sector, and starting point.