Clause 6.1.2.2: Assessment of OH&S risks and other risks to the OH&S MS
The organization sets up, runs and keeps a process to assess the OH&S risks arising from identified hazards, taking account of how effective existing controls are, and to assess other risks connected with establishing, implementing, operating and maintaining the OH&S management system.
What clause 6.1.2.2 asks
The organization sets up, runs and keeps a process to assess the OH&S risks arising from identified hazards, taking account of how effective existing controls are, and to assess other risks connected with establishing, implementing, operating and maintaining the OH&S management system. It defines and applies methodologies and criteria for the assessment with respect to scope, nature and timing, so that the assessment is proactive and systematic, and it maintains and retains documented information about the methodologies and criteria and about the results.
A risk assessment is only useful if it says how effective the controls already in place really are. Assuming a control works is the most common way a low score is manufactured.
A remote assessment that can be repeated. A remote risk assessment cannot depend on a site walk. The public record points to practical methods and to review as circumstances change, and the practitioner summary names self-assessment questionnaires, photographs, video calls and checklists as ways to gather the information. The assessment still has to weigh severity and likelihood, take account of existing controls and record who decided what.
Basis: BSI, Arinite. For clause 6.1.2.2, the public record is a draft guideline and does not state a requirement in terms that this site can quote. The clause 6.1.2.2 overlay is our reading of the public scope and the named summaries, not the draft text.
Evidence for clause 6.1.2.2
An auditor will pick a control marked effective and ask for the evidence that it is, then look for a hazard where two exposures combine.
- Risk assessment Documented risk assessment methodology with defined criteria
- Risk assessment Risk register considering effectiveness of existing controls
- Risk assessment Separate assessment of risks to the OH&S MS itself
- Risk assessment Reviewer competence records
Where clause 6.1.2.2 commonly fails
- Existing controls assumed effective without verification
- OH&S MS risks not separately considered
What to do about clause 6.1.2.2 before the guidance lands
Choose a repeatable method for each remote group: a self-assessment with evidence, a video walkthrough, or a competent assessment where the risk is higher. Record the criteria and the result, and set a re-assessment trigger for a move, new equipment, a health change or an incident.
For clause 6.1.2.2, do the work that will be right under either instrument. The current requirement for clause 6.1.2.2 is ISO 45001:2018, and the certificate, if you hold one, is issued against it. The clause 6.1.2.2 remote working preparation is an extension of the existing duty to a group of workers the system already covers, not a new system and not a reason to rebuild around a draft.
Read across from clause 6.1.2.2
← Clause 6.1.2.1 | Clause 6.1.2.3 →
Open the full index. The public record behind clause 6.1.2.2 shows the scope and the themes.
Source for clause 6.1.2.2: ISO 45001:2018, clause 6.1.2.2, retrieved 20 October 2026, record at the standards library. The clause 6.1.2.2 remote overlay rests on the public 45008 record named above. The clause 6.1.2.2 requirement, evidence and gaps are written from our clause record. Every source.