ISO 45001:2018 Occupational Health & Safety Certification
ISO 45001 replaced OHSAS 18001 with a stronger demand: leadership accountability and genuine worker participation. It is the safety system that regulators, clients and insurers now expect to see.
4.9/5 average client rating · 1200+ engagements delivered
What the standard demands
ISO 45001 makes top management personally accountable for OH&S performance — it cannot be delegated to a safety officer. It also requires non-managerial workers to be consulted on hazard identification, incident investigation and the effectiveness of controls.
Risk must be treated using the hierarchy of controls in order: eliminate, substitute, engineering controls, administrative controls, and only then personal protective equipment. Auditors specifically check that PPE has not been used as a first resort.
- Hazard identification and risk assessment covering routine and non-routine activities, and emergency situations
- Legal and other requirements register with compliance evaluation
- Hierarchy of controls applied and evidenced in risk treatment
- Consultation and participation mechanisms for non-managerial workers
- Incident, near-miss and non-conformity investigation with root cause analysis
- Emergency preparedness, response drills and contractor and procurement controls
Key facts
| Standard | ISO 45001:2018 (replaced OHSAS 18001) |
|---|---|
| Distinctive requirement | Consultation and participation of workers and, where they exist, worker representatives |
| Core method | Hazard identification, risk assessment and the hierarchy of controls |
| Typical timeline | 10–16 weeks |
| Integrates with | ISO 9001, ISO 14001, ISO 22301 |
System components we deliver
Built around the way work is actually performed, including by contractors and temporary workers.
HIRA & job safety analysis
Activity-level hazard identification and risk assessment with control hierarchy applied and residual risk recorded.
Legal register
Factories Act, state rules, building and construction worker regulations and client requirements, with compliance evaluation.
Worker participation framework
Safety committees, toolbox talks, suggestion and stop-work authority mechanisms with documented outcomes.
Operational controls
Permit to work, lockout-tagout, work at height, confined space, hot work, electrical safety and contractor management.
Emergency preparedness
Scenario plans, evacuation, first aid, mock drills and post-drill corrective actions.
Incident management
Reporting, investigation, root cause analysis, corrective action and leading/lagging indicator reporting.
Who needs ISO 45001
Any organisation with physical operations, contractor workforces, or client contracts carrying safety prequalification requirements.
- Construction, infrastructure and EPC contractors
- Manufacturing plants, warehouses and logistics operations
- Energy, renewables, oil and gas installations
- Railway, metro and transport operators and their suppliers
- Facility management, engineering services and industrial maintenance providers
Fewer incidents
Systematic hazard control and near-miss reporting reduce lost-time injuries and their downstream cost.
Contract prequalification
Required by most EPC, government and multinational contractors before you can bid.
Workforce trust
Consultation mechanisms surface the risks that supervisors do not see, and improve reporting culture.
Insurance and liability
Documented due diligence supports insurance negotiations and defends against statutory liability.
How the engagement runs
Baseline safety review
Site assessment, incident history analysis, legal applicability check and gap assessment.
Risk framework build
HIRA methodology, registers, control hierarchy application and operational control procedures.
Deployment & training
Competence training, permit systems, safety committee formation and drill programme.
Audit & review
Internal audit, compliance evaluation, incident investigation review and management review.
Certification
Accredited certification body audit support and non-conformity closure.
What you receive
- OH&S policy, scope and context analysis
- HIRA registers with hierarchy of controls and residual risk ratings
- Legal and other requirements register with compliance evaluation
- Permit to work system and high-risk activity procedures
- Worker consultation framework and safety committee records
- Emergency response plans, drill schedule and records
- Incident investigation procedure, indicator dashboard and audit reports
ISO 45001 — frequently asked questions
OHSAS 18001 was withdrawn; ISO 45001 is the only recognised standard now. The main additions are context and interested party analysis, explicit top management accountability, worker consultation and participation, and stronger requirements around procurement, contractors and outsourcing.
Auditors interview non-managerial workers directly and look for evidence: safety committee minutes with worker representation, records of hazards raised by workers and what was done, and participation in incident investigations. A committee that exists only on paper is a common non-conformity.
Yes, where you control or influence their work. Contractor prequalification, induction, permit compliance and monitoring records are always sampled at Stage 2, particularly in construction and plant environments.
It is voluntary in law, but it is frequently a contractual prerequisite — PSU tenders, EPC subcontracts and multinational supply chains commonly require it. The Factories Act and state rules remain your statutory obligation regardless of certification.
Yes. An integrated QHSE management system is our most common industrial engagement: one context, one document control system, one internal audit programme and a single integrated certification audit.
Still not sure what applies to you?
Ask an assessor directly — we answer scoping questions before anyone talks about a fee.
Get a realistic timeline and a fixed fee
A 30-minute call is usually enough to scope ISO 45001 accurately. You will leave with a timeline, an evidence checklist and a number — whether or not you engage us.