ISO 45001:2018 Occupational health and safety management system
Reduce workplace accidents and occupational ill health through systematic hazard management — with the participation of the people who do the work.
- levels of risk control
- 5
- mandatory clauses (4–10)
- 7
- current edition
- 2018
- certificate validity
- 3 yrs
The new edition is expected in 2027
The current edition is ISO 45001:2018 with Amendment 1:2024 on climate change. The revision draft (DIS) was published in June 2026, and the final standard is expected in 2027, with an anticipated three-year transition period.
Certificates to the 2018 edition remain valid. We build the system so the transition is easy.
What is ISO 45001
ISO 45001 sets the requirements for an occupational health and safety management system. The aim is to prevent work-related injury and ill health and to provide safe and healthy workplaces.
The standard replaced the British OHSAS 18001 and places strong emphasis on leadership and on worker consultation and participation.
The system does not replace legal health and safety requirements — it organises them: risk assessment, briefings, control and improvement.
Every activity has its own hazards
ISO 45001 fits any organisation — from an office to a construction site. Pick your activity and see where the focus lies.
- Machinery and moving parts
- Noise, vibration and chemicals
- Forklifts and internal traffic
- Hierarchy of controls
- Management of change in processes
A near miss — and what happens next
Warehouse, Monday, 06:40. A pallet falls from the third level of a rack. Nobody is hurt. This is how ISO 45001 turns luck into measures.
Report
A worker reports it from their phone in two minutes. The area is cordoned off.
- Report via QR code
- Area cordoned off
- No blame culture
Investigation
Why did it happen? A bent beam and an overloaded shelf.
- Root-cause analysis
- Workers from the shift take part
- All racks inspected
Measures
Measures follow the hierarchy — PPE comes last.
- New beam and end stops
- Maximum load marked
- Helmets in the racking area
Check
After 30 days: are the measures working?
- Weekly rack inspection
- Load checks
- Logged in the register
Lesson for all
The lesson reaches every shift and every warehouse.
- Updated risk assessment
- Short on-site briefing
- Item in the management review
The law sets the minimum. ISO 45001 adds the system.
Statutory health and safety duties remain. The standard organises them and adds what actually prevents accidents.
OSH Act Risk assessment of workplaces A hazard register reviewed at every change OSH Act Occupational health service Measurable health objectives and tracked results OSH Act Working conditions committee or group Real consultation and participation of workers in decisions Ord. RD-07-2 Safety briefings and training Assessment of competence and training effectiveness OSH Act Personal protective equipment PPE only as the last measure — after the hierarchy of controls Social Security Code Report a work accident within 3 working days Investigation of near misses too — before anyone gets hurt ISO 45001 only Not explicitly required Control of contractors and subcontractors on site ISO 45001 only Not explicitly required Tested emergency preparedness, internal audit and management review A system that works on the shop floor
Documents people actually use — and evidence that stands up to audits and inspections.
Free consultation- Health and safety policy and objectives
- Hazard register and risk assessment
- Register of legal requirements
- Incident and near-miss procedure
- Requirements for contractors and subcontractors
- Emergency plan and drill report
- Training and briefing programme
- Internal audit and management review
An integrated system — fewer documents
ISO 45001 shares its structure with ISO 9001 and ISO 14001 — the three are implemented as one system.
The structure of the standard
Clauses 4–10 are mandatory. The structure is shared with ISO 9001 and ISO 14001 — so systems integrate easily.
Clause 4 — Context of the organisation
Internal and external issues, needs of workers and interested parties, scope.
Clause 5 — Leadership and worker participation
Management responsibility, policy, roles, consultation and participation of workers.
Clause 6 — Planning
Hazard identification, assessment of risks and opportunities, legal requirements, objectives.
Clause 7 — Support
Resources, competence, awareness, communication, documented information.
Clause 8 — Operation
Hierarchy of controls, management of change, procurement and contractors, emergency preparedness.
Clause 9 — Performance evaluation
Monitoring, evaluation of compliance, internal audit, management review.
Clause 10 — Improvement
Incidents, nonconformities, corrective action, continual improvement.
The hierarchy of controls
ISO 45001 requires controls to be chosen in a set order — from the most effective to the weakest.
- 01
Elimination
The hazard is removed entirely — for example, work is done without height.
- 02
Substitution
Less hazardous substances, processes or equipment.
- 03
Engineering controls
Isolating people from the hazard — guards, ventilation, barriers.
- 04
Administrative controls
Procedures, training, signage, rotation, briefings.
- 05
Personal protective equipment
The last line of defence — when other controls are not enough.
What you gain
Fewer accidents
Hazards are found and controlled before an incident.
Legal compliance
Systematic control of health and safety obligations.
Engaged people
Workers take part in assessment and decisions.
Contractor control
Clear requirements for subcontractors on site.
An edge in tenders
A frequent requirement in construction and manufacturing.
Less absence
A healthy workplace, including psychosocial risks.
The route to certification
Six stages with a clear deliverable at each.
- 01 1–2 wks
Current state review
Health and safety documents, risk assessments, briefings.
- 02 2–3 wks
Hazards and risks
Hazard register and risk assessment by workplace.
- 03 1 wk
Policy and objectives
Direction, objectives and worker participation.
- 04 3–5 wks
Operational control
Procedures, contractors, emergency preparedness, training.
- 05 1–2 wks
Internal audit
Evaluation of compliance and management review.
- 06 Stage 1 + 2
Certification audit
Stage 1 and Stage 2 by an accredited body.
Timeline and cost — what drives them
The cost depends mainly on how hazardous the activity is. These are the factors — plus an indicative estimator.
Employees and sites
Set the workload and audit days (per IAF MD 5).
Risk level
Construction and manufacturing need more time than office work.
Contractors
Subcontractors and external workers on site.
Current state
Risk assessments, briefings and H&S records.
Integration
Implementing together with ISO 9001 or ISO 14001.
Certification fee
Paid separately to the certification body.
01 How is it different from OHSAS 18001?
ISO 45001 replaced OHSAS 18001. It shares a structure with ISO 9001 and ISO 14001 and puts stronger emphasis on leadership, worker participation and the context of the organisation.
02 Does it replace legal H&S requirements?
No. Legal obligations remain. ISO 45001 organises them into a system and proves they are met consistently.
03 Will the standard change?
Yes — the revision is at draft stage and the new edition is expected in 2027. Certificates to 2018 remain valid, and the transition will have its own deadline.
04 Is it suitable for office companies?
Yes, with a lighter scope — ergonomics, psychosocial risks, fire safety. ISO 45003 gives guidance on psychological health.
05 How long does it take?
Usually 2 to 5 months, depending on how hazardous the activity is. Use the estimator for guidance.
No such question in the list — ask us directly and we will reply.
Your first consultation is free
Tell us about your company and your goal. You will get a clear plan and a quote within one business day.