In upstream drilling and pipeline work, OSHA doesn't cite the hazard — they cite the missing communication record. Here's what that looks like.
The citation doesn't read "you had a hazard." It reads "you had no documented evidence that affected personnel were informed of the hazard." That's the distinction that costs upstream drilling and pipeline contractors $16,131 per serious violation — and the one most safety coordinators don't catch until an CSHO is already standing in the toolbox talk trailer asking for the sign-in sheets from the last six months.
ISO 45001 Clause 7.4 governs communication — who gets told what, when, and how you can prove it. Clause 8.1 governs operational planning and control — the documented procedures, controls, and criteria that make sure high-hazard work doesn't get handed off by verbal agreement between a driller and a floor hand at shift change. In oil and gas contractor environments, these two clauses are where the most preventable audit failures happen. Not because the work is being done wrong. Because nobody kept the paper.
Most safety coordinators understand Clause 7.4 at the surface level: communicate relevant OHS information to workers and interested parties. What they underestimate is the specificity the standard demands around what information, to whom, by what method, and when.
In a well servicing operation, the practical gap shows up like this: a coiled tubing unit gets moved to a new location midway through a campaign. The well control procedures change because the wellhead configuration is different. The driller knows. The company man knows. The competent person on BOP testing knows. But nobody generated a revised communication record showing that the floor hands, the chemical hands, and the third-party wireline crew were briefed on the updated control points before work resumed.
That's a Clause 7.4 failure. The hazard was understood by people at the top of the crew. The communication — specifically the documented, verifiable communication to all affected personnel — never happened. When OSHA shows up after a well control event, they're not going to find a gap in technical knowledge. They're going to find a gap in the paper trail. That gap is the citation.
Most safety coordinators assume the documentation problem is a training problem — if the crew knew the procedure, someone would have written it down. The real problem is that documentation discipline in upstream environments lives entirely downstream of operational pressure. When a well servicing crew is waiting on a workover rig and the company man needs the coiled tubing unit rigged up in four hours, the JSA gets filled out after the work starts, not before. The toolbox talk happens but the sign-in sheet goes missing because nobody's hand was free to hold a clipboard.
The documentation gap isn't ignorance. It's sequencing. The work comes first; the paper comes whenever someone remembers. ISO 45001 Clause 8.1 specifically requires that operational controls — including the criteria for how work is performed — be established and maintained in a way that gives workers access to them at the point of task, not reconstructed afterward from memory.
In pipeline construction and maintenance, Clause 8.1 failures cluster around two specific scenarios: management of change (MOC) events that never got documented, and contractor hand-off points where the prime contractor assumes the sub has the procedure and the sub assumes the procedure came with the work order.
A right-of-way crew doing a hot tap on a live gas line has a work permit, a confined space entry record if the excavation qualifies, and a tie-in procedure. What often doesn't exist is the documented communication record showing that the third-party inspection company and the welding contractor both received and acknowledged the current revision of the tie-in procedure — not the one from the last project on this same pipeline. That's Clause 7.4 and Clause 8.1 failing at the same time at the same location, and OSHA's PSM standard and its Clause 8.1 analog both require that evidence.
A willful or repeat citation for failure to maintain required written procedures in a PSM-covered process can reach $161,323 per violation. More immediately for most upstream contractors: a single citation finding during a client audit will drop an ISNetworld safety score before the ink dries, which can freeze bid eligibility on the next project before any fine is even assessed.
A mid-size well servicing contractor working for a major operator in the Permian Basin went through a third-party ISO 45001 surveillance audit. The safety manager — one person covering four active well sites — had solid procedures written for H2S monitoring, hot work, and rig-up sequencing. The procedures existed. The training had happened. What the auditor found was that there was no documented evidence of how those procedures were communicated to day-rate hands who rotated onto the crew mid-project. The safety manager knew she'd talked to each of them personally. She'd done site-specific orientations. None of it was on paper in a retrievable format. The audit finding wasn't "your program is deficient." It was "you cannot demonstrate that affected workers received required OHS information." That's a nonconformity under Clause 7.4 — and in a regulatory inspection, that becomes a citation.
ISO 45001 Clause 7.4 requires a systematic, documented communication process — not just that communication happens, but that the organization has defined what gets communicated, to whom, when, and how. OSHA standards often specify the required communication (e.g., informing workers of hazardous chemicals under HazCom), but ISO 45001 requires the organization to own the entire communication architecture, including how contractor and subcontractor personnel are included in the loop. For upstream oil and gas contractors with rotating crews and multiple subs on site, that's a materially higher bar than most realize.
OSHA's Process Safety Management standard (29 CFR 1910.119) requires written operating procedures for covered processes and a management of change process for any changes to those procedures. ISO 45001 Clause 8.1 mirrors this at the OHS management system level — requiring that operational controls be documented, implemented, and maintained. For upstream contractors working on PSM-covered wellhead or processing equipment, failure to satisfy Clause 8.1 often means failure to satisfy OSHA PSM simultaneously. Both auditors look for the same records.
Start with a communication matrix — a simple document that maps each OHS topic to the personnel who must receive it, the frequency, the method, and who's responsible for confirming receipt. For an upstream drilling crew, this typically covers daily JSA reviews, shift-change briefings, MOC communications, emergency response procedures, and contractor onboarding. The matrix itself becomes evidence of a systematic communication process, not just ad hoc verbal briefings that nobody can reconstruct later.
Not manually — not without something failing eventually. The documentation volume across four active sites means someone is always one missed signature sheet away from a nonconformity. This is precisely why contractors increasingly move this administrative burden to a managed service rather than asking one safety coordinator to run four sites' worth of compliance records from a truck cab.
If the paperwork is eating time that should be spent in the field, Talk to EHS — we handle the documentation so your safety coordinator can be on location instead of behind a laptop.
Aaron West
Founder, EHS, Inc. — 18+ years in EHS compliance and contractor safety
Aaron West has spent over 18 years helping contractors and businesses navigate OSHA compliance, ISNetworld® certification, and workplace safety management. He founded EHS, Inc. to make enterprise-level EHS accessible to companies of all sizes — serving contractors and businesses nationwide — without long-term contracts or enterprise overhead.
Our team handles the complexity so you can focus on running your business. No long-term contracts, no learning curve.
Talk to EHSUtility safety managers track the wrong things under Clause 9.1 — here's what ISO 45001 actually requires and where the gap gets costly.
High turnover and subcontractor layering quietly destroy ISO 45001 Clause 10.2 compliance — and your audit report won't show it until it's too late.
Oil & gas contractors get cited not because the hazard wasn't identified—because nobody documented how they identified it.
Framework to achieve zero incidents
Stop hitting paywalls
54 topics in English & Spanish