In ISO 45001, organizations must establish and maintain an ongoing, proactive hazard identification process (Clause 6.1.2.1) and a corresponding risk assessment process (Clause 6.1.2.2).