OH&S Opportunities Explained: Clause 6.1.2.3 of ISO 45001

Why Most OH&S Systems Ignore the Opportunities Requirement

Ask any auditor what they check under Clause 6.1.2 of ISO 45001 and most will talk about hazard identification and risk assessment. They will walk you through hazard registers, risk matrices, and control hierarchies. That is all legitimate. But there is a third subclause that routinely gets overlooked, underimplemented, and sometimes missed entirely: Clause 6.1.2.3, which deals with the assessment of OH&S opportunities.

In practice, organisations often treat this clause as an afterthought. They write a brief statement in their planning documentation, reference it during management review, and consider the box ticked. Certification auditors sometimes let it slide too, particularly when the hazard identification and risk assessment processes are well developed and the audit schedule is tight.

This article explains what Clause 6.1.2.3 actually requires, why it exists, how it connects to the rest of the OH&S management system, and what genuine compliance looks like in Australian workplaces. If you are preparing for a certification audit, running internal audits, or studying for your ISO 45001 auditor qualification, this is the clause that deserves more of your attention than it typically gets.

What Clause 6.1.2.3 Actually Says

ISO 45001:2018 Clause 6.1.2 is titled Hazard identification and assessment of risks and opportunities. It contains three subclauses. Clause 6.1.2.1 covers hazard identification. Clause 6.1.2.2 covers the assessment of OH&S risks and other risks. Clause 6.1.2.3 is the assessment of OH&S opportunities and other opportunities.

The standard requires the organisation to assess OH&S opportunities to enhance OH&S performance, taking into account planned changes to the organisation, its processes, and the OH&S management system. It also requires assessment of opportunities to adapt work, work organisation, and work environment to workers.

There is a second category too: other opportunities. These are opportunities for improving the OH&S management system that are not directly tied to OH&S risk reduction but relate to the broader functioning of the system itself. Think process improvements, better training structures, improved communication, or more effective consultation mechanisms.

The key word throughout is assess. The standard does not just ask you to list opportunities. It asks you to evaluate them, which implies some form of structured thinking about their value, feasibility, and priority.

The Intent Behind the Clause

ISO 45001 was built on the principle that an effective OH&S management system does more than prevent harm. It actively improves worker health, safety, and wellbeing. The inclusion of opportunities alongside risks reflects a deliberate shift in how the standard frames OH&S management.

Traditional safety management was largely reactive and risk focused. You identified hazards, assessed risks, and applied controls. That remains essential. But ISO 45001 asks organisations to also look for what could go right, not just what could go wrong. Where can the organisation proactively improve conditions? Where can it move beyond minimum compliance and create genuinely better workplaces?

This is not idealism. It is practical. Organisations that only manage risks tend to plateau. They reach a state where the obvious hazards are controlled and improvement stalls. Organisations that also pursue opportunities tend to keep improving because they are actively looking for better ways of working, not just preventing the next incident.

The Note in the standard is worth reading carefully. It states that OH&S opportunities can include eliminating hazards and reducing OH&S risks, adapting work to workers, and other opportunities for improving the OH&S management system. That last category is broad by design. It gives organisations room to identify improvements that do not fit neatly into the hazard and risk framework but still make the system more effective.

What Counts as an OH&S Opportunity

This is where many organisations struggle. They understand risks conceptually but find it harder to think systematically about opportunities. Here are examples drawn from real workplaces that illustrate what genuine OH&S opportunities look like.

Adapting Work to Workers

This is explicitly mentioned in the standard and is often the most impactful category. It covers ergonomic improvements, changes to work scheduling, modifications to task design, and adjustments to the work environment that reduce strain, fatigue, or discomfort even when no formal hazard has triggered the review.

A warehouse operation might identify that its current picking routes require workers to bend repeatedly at floor level. No incident has occurred. The risk assessment rates the ergonomic exposure as medium. But an opportunity assessment might identify that rearranging storage locations to keep high volume items at waist height would significantly reduce cumulative strain across the workforce. That is an OH&S opportunity worth assessing and potentially acting on.

Technology and Process Improvements

New equipment, automation, or revised work methods can create opportunities to eliminate or reduce exposures that currently require administrative controls or PPE. An organisation planning to introduce new plant has an opportunity to specify safety features at the procurement stage rather than retrofitting controls later. Clause 6.1.2.3 connects directly here because planned changes to the organisation are explicitly mentioned as a trigger for opportunity assessment.

Improving Worker Consultation and Participation

If the current consultation process is formal but not genuinely engaging workers in hazard identification and improvement, that is an opportunity to improve the system. Better participation often surfaces hazards and improvement ideas that management would never identify on their own. Strengthening consultation mechanisms is a legitimate OH&S opportunity under the broader system improvement category.

Eliminating Hazards at Source

When a hazard currently managed through administrative controls or PPE could be eliminated through a design change or substitution, that is an OH&S opportunity. The hierarchy of controls tells us elimination is always preferable. An opportunity assessment should be asking regularly whether current controls could be upgraded to a higher level of the hierarchy. You can read more about this in our article on the hierarchy of controls in Clause 8.1.2.

Training and Competence Uplift

If workers are technically competent but lack awareness of why certain controls matter, improving training quality and depth is an OH&S opportunity. It does not eliminate a specific hazard, but it strengthens the system's ability to sustain controls and identify new hazards over time.

How Opportunity Assessment Differs from Risk Assessment

One reason Clause 6.1.2.3 gets neglected is that organisations try to apply their risk assessment methodology to opportunities and find it does not fit well. Risk assessment is structured around likelihood and consequence. Opportunity assessment needs a different lens.

When assessing an opportunity, you are asking questions like: What improvement could this deliver? How significant would the improvement be? What resources would it require? Is it feasible given current constraints? How does it compare to other opportunities we have identified?

You do not need a complex scoring matrix. What you do need is a documented, repeatable process that shows the organisation has genuinely considered its opportunities, evaluated them in some meaningful way, and made informed decisions about which ones to pursue. That evidence is what an auditor will be looking for.

Some organisations build opportunity assessment into their hazard identification process, reviewing opportunities alongside risks during workplace inspections and hazard register reviews. Others treat it as a separate activity, perhaps linked to management review or the annual OH&S planning cycle. Either approach can work as long as the assessment is genuine and documented.

Connecting Opportunities to Planning and Objectives

Clause 6.1.2.3 does not exist in isolation. The opportunities identified here feed directly into Clause 6.1.4, which covers planning action to address risks and opportunities. They also inform Clause 6.2, which deals with OH&S objectives and planning to achieve them.

If your opportunity assessment identifies a meaningful improvement, the logical next step is either to incorporate it into an OH&S objective with a plan to achieve it, or to treat it as a planned action with an owner, timeline, and success measure. Opportunities that are assessed but never acted on, and never explained as to why they were deprioritised, are a red flag in an audit. It suggests the assessment was a paper exercise rather than a genuine decision making process.

Our article on risks and opportunities in Clause 6.1.1 covers the broader planning framework that Clause 6.1.2.3 sits within, which is worth reading alongside this one.

What Auditors Look for Under Clause 6.1.2.3

Whether you are preparing for a certification audit or conducting an internal audit of your own OH&S management system, understanding what auditors actually check under this clause is practical knowledge.

Evidence of a Defined Process

The auditor will want to see that the organisation has a process for assessing OH&S opportunities, not just risks. This does not need to be a separate procedure. It can be embedded in the hazard identification procedure, the risk management process, or the planning documentation. But it needs to be defined somewhere, and the process needs to be followed in practice.

Records of Opportunity Assessments

The standard requires documented information to be retained as evidence of results of the assessment of OH&S risks and opportunities. That means records. The auditor will ask to see them. A register that lists only risks, with no mention of opportunities, is an immediate gap. The records do not need to be elaborate, but they need to demonstrate that opportunities were identified, considered, and evaluated.

Linkage to Planned Changes

The standard specifically mentions planned changes as a trigger for opportunity assessment. If the organisation has introduced new equipment, changed a process, restructured a team, or moved to a new site in the past year, the auditor will ask whether an opportunity assessment was conducted as part of that change process. This is a common gap. Organisations conduct hazard identification for planned changes but forget the opportunity assessment requirement.

Connection to Objectives and Actions

The auditor will trace identified opportunities through to either OH&S objectives or planned actions. If the opportunity register shows ten items identified over the past year but none of them appear in the objectives register, the action log, or the management review outputs, that is a concern. It suggests the assessment is not driving any actual improvement.

Worker Involvement

Given that Clause 6.1.2.3 specifically mentions adapting work to workers, auditors may ask how workers are involved in identifying opportunities. If opportunities are identified exclusively by management with no worker input, that is worth noting. The consultation and participation requirements of Clause 5.4 are directly relevant here.

Common Gaps Found in Practice

After conducting audits across a range of industries, the same patterns appear repeatedly under this clause.

The most common gap is simply the absence of any documented opportunity assessment. The organisation has a thorough risk register and a well developed hazard identification process, but opportunities are not documented anywhere. When asked, the auditee says something like we consider opportunities informally or that comes up in toolbox talks. That is not sufficient. The standard requires documented results.

The second most common gap is that opportunities are listed but not assessed. There is a column in the register headed Opportunities and a few items are noted, but there is no evaluation of significance, feasibility, or priority. That is closer to compliance but still falls short. Assessment implies more than listing.

A third gap is the failure to connect opportunity assessment to planned changes. Organisations often have strong change management processes for hazard identification but do not extend them to opportunity identification. A new production line gets a thorough hazard assessment. Nobody asks what opportunities the new line creates to improve worker conditions or eliminate existing exposures.

Finally, some organisations assess opportunities but then do nothing with them. They sit in a register, unreviewed and unactioned, for years. This undermines the entire purpose of the clause and suggests the assessment is not genuinely informing decision making.

Building a Practical Opportunity Assessment Process

You do not need a complex system. Here is a practical approach that works in most Australian workplaces.

Start by embedding opportunity identification into your existing hazard identification activities. Every time your team reviews a task, area, or process for hazards, also ask: what could we improve here beyond just controlling the identified risks? Prompt the question explicitly. Without prompting, people default to risk thinking.

Create a simple opportunity register alongside your risk register. Capture the opportunity, the potential benefit, who identified it, when, and the outcome of the assessment. If the opportunity is pursued, link it to an action or objective. If it is deprioritised, note why.

Review the opportunity register at management review. This is where the connection between opportunity assessment and strategic OH&S planning becomes visible. Management review is the right forum for deciding which opportunities to pursue, which to defer, and which to close as not feasible.

When planned changes occur, include an explicit opportunity assessment step in your change management process. This can be a single question on the change request form: what OH&S opportunities does this change create? That is enough to prompt the right thinking and create a record.

Involve workers in the process. They are closest to the work and often have the best ideas about how to improve conditions. A structured approach to worker consultation, as required by Clause 5.4, should be generating opportunity inputs as well as hazard inputs.

If you want to deepen your understanding of how auditors evaluate this clause in practice, our article on how auditors evaluate OH&S opportunity assessment in Clause 6.1.2.3 walks through the audit approach in detail.

Opportunities and the Broader ISO 45001 Framework

Clause 6.1.2.3 is one piece of a larger picture. ISO 45001 is built around the PDCA cycle: Plan, Do, Check, Act. The opportunity assessment sits firmly in the Plan phase. It informs what the organisation decides to do, what objectives it sets, and what actions it plans.

But the connection runs further. The results of opportunity assessments should surface in management review inputs, informing the Act phase. They should be reflected in the OH&S objectives set under Clause 6.2. They should drive the operational controls and changes implemented under Clause 8. And they should be evaluated for effectiveness during monitoring and measurement under Clause 9.1.

An organisation that genuinely works through this cycle will find that Clause 6.1.2.3 is not a compliance burden. It is a mechanism for continuous improvement that makes the OH&S system more effective over time. That is precisely what the standard intends.

For those preparing for ISO 45001 auditor training, understanding the interplay between hazard identification, risk assessment, and opportunity assessment is fundamental. The ISO 45001 auditing guide on our blog provides a broader overview of what auditors need to know across all clauses of the standard.

Preparing Your System for Audit

If you are a WHS Manager or OH&S consultant preparing your organisation for certification or surveillance, here is a practical checklist for Clause 6.1.2.3.

• Is there a documented process for assessing OH&S opportunities, distinct from or integrated with the risk assessment process?
• Does the opportunity register contain genuine assessments, not just a list of items?
• Are opportunities linked to planned changes in the organisation?
• Do identified opportunities connect to OH&S objectives, planned actions, or documented decisions about deprioritisation?
• Are workers involved in identifying opportunities, and is that involvement documented?
• Are opportunity assessments reviewed at management review?
• Is there evidence of opportunities being pursued and their outcomes evaluated?

If you can answer yes to each of these with supporting documentation, you are well positioned for an audit of this clause. If there are gaps, address them before the audit. Most of these gaps are straightforward to close with a small amount of structured effort.

Building Your ISO 45001 Auditing Skills

Understanding clauses like 6.1.2.3 at this level of depth is what separates competent ISO 45001 auditors from those who work through a checklist without really understanding what they are looking for. If you are working toward your ISO 45001 Internal Auditor or Lead Auditor qualification, Audit Workshop offers practical training that covers the full standard with the kind of applied focus this article demonstrates. Courses are available at Foundation, Internal Auditor, and Lead Auditor levels, delivered live and self paced, with real audit scenarios built in throughout. Visit auditworkshop.com to find the right course for your stage of the journey.