o you have a documented procedure that covers the identification of hazards/risks for purchased goods and services? (AS/NZS 4801 Clause 4.3.1) (OHSAS 1801 Clause 4.3.1) Note: OHSAS 18001 requires a procedure which by definition can be documented or not.