Draft stage 40.60, close of voting 19 May 2026· Publication expected 2027· ISO 45001:2018 remains the standard a system is certified against
ISO 45008 Revision CheckerRemote working guidance, read beside the 40 clauses you already run
8.1.4.3
ISO 45001:2018
Operation

Clause 8.1.4.3: Outsourcing

Requirement todayISO 45001:2018Remote overlay: OutsourcingPublic scope

The organization makes sure that functions and processes it outsources are kept under control and that its outsourcing arrangements fit both its legal and other requirements and the results its OH&S management system is meant to deliver.

What clause 8.1.4.3 asks

The organization makes sure that functions and processes it outsources are kept under control and that its outsourcing arrangements fit both its legal and other requirements and the results its OH&S management system is meant to deliver. Within the system it sets how much control, and of what kind, is applied to those outsourced functions and processes.

Outsourcing does not transfer the duty. The organization still has to define how much control it keeps and of what kind, and the arrangement has to meet its legal and other requirements.

The remote working overlay

Retained control when the work is outsourced. An outsourced function may be performed remotely by another organization, but the duty to control the health and safety of the organization's own workers does not disappear. The public record does not address outsourcing specifically; the current clause still requires the arrangement to fit the legal and other requirements and the system. The remote element is the location and the reporting route.

Basis: ISO, BSI Standards Development. For clause 8.1.4.3, the public record is a draft guideline and does not state a requirement in terms that this site can quote. The clause 8.1.4.3 overlay is our reading of the public scope and the named summaries, not the draft text.

Evidence for clause 8.1.4.3

An auditor will ask for an outsourced process, the control actually exercised, and the evidence that the arrangement meets legal requirements.

  • Outsourcing Register of outsourced functions with the defined type and degree of control
  • Outsourcing Agreements specifying OH&S requirements and reporting
  • Outsourcing Evidence of oversight of outsourced processes

Where clause 8.1.4.3 commonly fails

  • Outsourced processes treated as out of scope
  • Degree of control never defined

What to do about clause 8.1.4.3 before the guidance lands

List the outsourced functions performed remotely and the control the organization retains. Put the health and safety requirements, the reporting route and the audit right in the agreement. Check the provider's own remote arrangements at least once.

For clause 8.1.4.3, do the work that will be right under either instrument. The current requirement for clause 8.1.4.3 is ISO 45001:2018, and the certificate, if you hold one, is issued against it. The clause 8.1.4.3 remote working preparation is an extension of the existing duty to a group of workers the system already covers, not a new system and not a reason to rebuild around a draft.

Read across from clause 8.1.4.3

← Clause 8.1.4.2 | Clause 8.2 →

Open the full index. The public record behind clause 8.1.4.3 shows the scope and the themes.

Source for clause 8.1.4.3: ISO 45001:2018, clause 8.1.4.3, retrieved 20 October 2026, record at the standards library. The clause 8.1.4.3 remote overlay rests on the public 45008 record named above. The clause 8.1.4.3 requirement, evidence and gaps are written from our clause record. Every source.