What Is ISO 45001 Clause 7.4 and Why Does It Matter?
If you have been working through an ISO 45001 implementation, you have probably spent a lot of time on hazard identification, risk assessments, and legal compliance. Communication often gets treated as an afterthought. That is a mistake, and it is one of the most common reasons businesses get hit with nonconformances during their certification audit.
On this page
ISO 45001 Clause 7.4 deals specifically with communication. It sits within Section 7, which covers the support requirements of your occupational health and safety management system (OH&S MS). The clause requires your organisation to determine what needs to be communicated about your OH&S system, who it needs to be communicated to, when it should happen, how it should be done, and who is responsible for doing it.
This is not about sending a monthly safety newsletter and calling it done. It is about building a deliberate, structured approach to communication that keeps workers informed, engages relevant external parties, and ensures safety information flows in both directions. Get it right, and it actively reduces incidents. Get it wrong, and your entire management system can fall apart at the seams.
In this guide, we will walk through every element of Clause 7.4 in plain language, with practical examples you can apply to your own business regardless of your industry or size.
The Structure of Clause 7.4: Breaking It Down
Clause 7.4 is divided into three sub-clauses. Understanding each one separately makes implementation far more manageable.
Clause 7.4.1 General
This sub-clause sets the foundation. It requires the organisation to establish, implement, and maintain the processes needed for both internal and external communication relevant to the OH&S management system.
The standard asks you to determine five things for your communications:
- What will be communicated
- When it will be communicated
- Who to communicate with internally and externally
- How the communication will happen
- Who is responsible for carrying it out
There is also an important requirement that often gets overlooked. When determining your communication processes, you must take into account your legal requirements, the need to ensure consistent and reliable information, the diversity of your workforce (including language, literacy, and disability), and the views of interested parties.
The clause also explicitly states that your organisation shall respond to relevant communications on OH&S. This is a two-way street. You cannot just broadcast safety information and ignore what comes back. Workers raising concerns, contractors flagging hazards, or regulators requesting information all require a documented response process.
Clause 7.4.2 Internal Communication
This sub-clause focuses on communication within your organisation. It requires you to internally communicate information relevant to the OH&S management system across the various levels and functions of your organisation.
There are two specific requirements here that are worth highlighting. First, your processes must ensure that workers are able to contribute to continual improvement. This means communication cannot just flow downward from management. Workers need a genuine mechanism to raise safety concerns, suggest improvements, and provide feedback.
Second, you must ensure that changes to the OH&S management system are communicated to relevant workers. This is critical. If you update a safe work procedure, change a chemical, introduce new equipment, or modify a process, the workers affected by that change must be told. Auditors look for evidence of this constantly.
Clause 7.4.3 External Communication
This sub-clause covers communication with parties outside your organisation. This includes contractors, visitors, suppliers, customers, regulators, emergency services, and the local community where relevant.
The requirement is straightforward: you must communicate externally on matters relevant to the OH&S management system as established by your communication processes and as required by your legal and other requirements.
In practice, this means having documented processes for how you brief contractors before they enter your site, how you notify regulators of notifiable incidents, how you communicate emergency procedures to visitors, and how you respond to external enquiries about your OH&S performance.
Practical Examples of Clause 7.4 in Action
Understanding the theory is one thing. Seeing how it plays out in real workplaces makes it far more useful. Here are several examples across different industries.
Example 1: Construction Site (Internal Communication)
A mid-size construction company in Queensland has a daily pre-start toolbox talk as part of its OH&S communication process. Every morning before work begins, the site supervisor gathers the crew for a 10 to 15 minute briefing. The content is structured: hazards identified for the day, any changes to work methods, weather conditions, and any near misses from the previous day.
The company records attendance on a sign-in sheet, and the supervisor notes the key topics discussed. This serves as documented evidence that internal communication is happening consistently. Workers are also encouraged to raise concerns during the toolbox talk, which satisfies the requirement for workers to contribute to continual improvement.
When a new subcontractor joins the site, the site manager conducts a site induction that covers emergency procedures, hazard reporting, and the site-specific safety rules. This covers external communication requirements under Clause 7.4.3.
Example 2: Manufacturing Facility (Communication of System Changes)
A food processing plant in Victoria introduces a new piece of equipment on the production line. Under Clause 7.4.2, the change must be communicated to relevant workers before it is put into operation.
The safety manager updates the relevant safe operating procedure, then conducts a short training session with the operators who will use the equipment. The session is documented, and workers sign off to confirm they have been informed. The updated procedure is posted at the workstation and added to the controlled document register.
This is a clean example of how internal communication and document control work together. Auditors will often trace a change through the system, from the decision to introduce the equipment, through to evidence that workers were told about it.
Example 3: Office Environment (Two-Way Communication)
A financial services firm in Sydney has a small team of 30 people. Their OH&S communication process includes a monthly safety moment in team meetings, a hazard reporting form accessible on the company intranet, and a quarterly review where the safety committee discusses reported hazards and near misses.
The two-way nature of this setup is important. Workers can submit hazard reports anonymously if they choose. Every report receives a written response within five business days, even if the response is simply to acknowledge the concern and confirm it is being investigated. This documented response process satisfies the requirement in Clause 7.4.1 to respond to relevant communications on OH&S.
Example 4: Mining Operation (External Communication with Regulators)
A mining company operating in Western Australia has a documented process for communicating with the Department of Mines, Industry Regulation and Safety in the event of a notifiable incident. The process defines what constitutes a notifiable incident, who is responsible for making the notification, the timeframe required by law, and what records must be kept.
This is a direct example of external communication driven by legal requirements, which is explicitly referenced in Clause 7.4.1. The company also has a process for briefing emergency services about site-specific hazards, which is reviewed annually and updated whenever site conditions change significantly.
What Auditors Look for Under Clause 7.4
When an auditor assesses your compliance with Clause 7.4, they are not just checking whether you have a communication procedure document. They are looking for evidence that your communication processes are actually working. Here is what typically gets examined.
Documented Communication Processes
You need to be able to show that you have thought through the five elements: what, when, who, how, and responsibility. This does not have to be a complex document. A simple communication matrix or table that maps out your key OH&S communications can be very effective. The key is that it is documented and that people actually follow it.
Evidence of Internal Communication
Auditors will ask to see records. Toolbox talk sign-in sheets, meeting minutes with safety agenda items, induction records, emails communicating system changes, and training records are all valid forms of evidence. If you cannot produce records, the auditor has no way to confirm the communication is actually happening.
Evidence of Two-Way Communication
This is where many businesses fall short. Having a suggestion box or a hazard reporting form is not enough on its own. You need to show that reports and concerns are being received, reviewed, and responded to. Auditors will often ask workers directly whether they feel they can raise safety concerns and whether they receive feedback when they do. If workers say they never hear back, that is a significant finding.
Communication of Changes
Auditors are particularly interested in how you communicate changes to the OH&S management system. They may select a recent change, such as a new procedure or a piece of equipment, and trace the evidence that affected workers were informed. If that trail goes cold, you are likely looking at a nonconformance.
External Communication Records
For external communication, auditors will look at contractor induction records, visitor safety briefing processes, and any records of communication with regulators or emergency services. If you have had a notifiable incident, they will review how that was communicated and documented.
Common Mistakes Businesses Make With Clause 7.4
Having reviewed a lot of OH&S management systems over the years, the same mistakes come up repeatedly. Here are the ones worth watching out for.
Treating Communication as One-Way
The most common mistake is designing a communication system that only pushes information out. Safety notices on the noticeboard, emails from management, and induction videos are all useful, but they do not satisfy the requirement for workers to be able to contribute to continual improvement. You need a genuine feedback loop.
No Documentation of Routine Communications
Verbal communication happens constantly in workplaces. The problem is that verbal communication leaves no audit trail. If your toolbox talks are not being recorded, if your site briefings are not being signed off, and if your team meetings have no minutes, you have a documentation gap that will be visible to an auditor.
Failing to Communicate System Changes
This is a very common nonconformance. A procedure gets updated, a new chemical is introduced, or a work process changes, and the relevant workers are not formally notified. The change happens, but there is no record that anyone was told. Build a change communication step into your document control process to prevent this.
No Process for Responding to External Communications
Businesses often have good processes for sending information out to contractors and visitors but no defined process for responding when those parties raise OH&S concerns. If a contractor reports a hazard on your site, how does that get recorded and actioned? That process needs to be defined.
Language and Literacy Barriers
Clause 7.4.1 specifically requires you to consider the diversity of your workforce when designing communication processes. In workplaces with workers from diverse language backgrounds, communicating safety information only in written English is not sufficient. Auditors will ask about this, particularly in industries like construction, agriculture, and food processing where workforce diversity is common.
For a broader understanding of how worker participation connects to your communication obligations, it is worth reading our guide on how to get worker participation in ISO 45001 implementation.
Building a Practical Communication Plan for ISO 45001
Rather than creating a complex document, a practical communication plan for ISO 45001 can be structured as a simple table. For each communication, you define the topic, the audience, the frequency, the method, and the person responsible.
Here is an example of what that might look like for a small to medium business:
- Daily toolbox talk: All site workers, delivered by the supervisor, covering daily hazards and any changes. Recorded on a sign-in sheet.
- Monthly safety committee meeting: Management and worker representatives, covering hazard reports, incident reviews, and system improvements. Documented with minutes.
- Contractor site induction: All contractors before commencing work, covering site rules, emergency procedures, and hazard reporting. Signed induction record retained.
- Incident notification to regulator: Relevant manager notifies the regulator within the legally required timeframe. Notification records retained.
- Annual OH&S policy review communication: All workers notified when the OH&S policy is reviewed and updated. Email or team meeting with attendance record.
- Hazard report response: Person who raised the report receives written feedback within five business days. Tracked in the hazard register.
This kind of structured plan makes it easy to demonstrate to an auditor that you have thought through your communication requirements systematically. It also makes it easier to train new managers and supervisors on their communication responsibilities.
If you are also working toward ISO 45001 certification and want to understand how the OH&S policy fits into your communication obligations, our article on how to write an ISO 45001 OH&S policy that passes audit is a useful companion read.
How Clause 7.4 Connects to Other Parts of ISO 45001
Communication does not exist in isolation within the standard. It connects directly to several other clauses, and understanding those connections helps you build a more integrated system.
Clause 5.4 on worker consultation and participation is closely linked. Workers need to be consulted on OH&S matters, and your communication processes are the mechanism through which that consultation happens. If your communication is one-way, your consultation is likely to be insufficient as well.
Clause 6.1 on actions to address risks and opportunities connects to communication because workers and other interested parties are often the source of information about hazards and risks. If your communication channels are not working, your risk identification will be incomplete.
Clause 7.3 on awareness also connects closely. Workers need to be aware of the OH&S policy, their contribution to the effectiveness of the management system, and the implications of not conforming to requirements. Communication is the primary tool for building that awareness.
Clause 8.1 on operational planning and control requires that relevant information about hazards and controls is communicated to workers and contractors. This is where your communication processes directly support safe work outcomes.
For a broader view of the ISO 45001 standard and how these clauses fit together, our beginner's guide to ISO 45001 provides a solid foundation.
Documented Information Requirements Under Clause 7.4
ISO 45001 does not prescribe a specific format for your communication records. What it does require is that you retain documented information as evidence that your communication processes are operating effectively. This is covered under Clause 7.5 on documented information, but it directly supports your ability to demonstrate Clause 7.4 compliance.
At a minimum, you should be retaining records of toolbox talks and safety briefings, induction records for workers and contractors, minutes of safety meetings, hazard reports and responses, records of communications with regulators, and evidence that system changes were communicated to affected workers.
The ISO 45001:2018 standard published by ISO provides the full normative requirements, and it is worth having a copy on hand as you build your communication processes.
Getting Expert Help With ISO 45001 Implementation
Clause 7.4 is one of those requirements that looks straightforward on paper but requires genuine thought to implement well. The businesses that do it best are the ones that treat communication as a core safety function rather than a compliance checkbox.
If you are working through your ISO 45001 implementation and want to make sure your communication processes will hold up under audit, getting advice from an experienced OH&S consultant can save you a significant amount of rework. The challenge, of course, is finding someone who actually knows the standard and your industry.
That is exactly the problem that CertBetter was built to solve. You submit one form describing your business and what you need, and you receive up to three competing quotes from verified ISO consultants and accredited certification bodies. It is completely free for businesses seeking certification help, and it means you can compare options without spending hours searching and cold-calling. If you are serious about getting ISO 45001 right, it is worth taking five minutes to see what is available.
