Home/Services/Certification/ISO 45001:2018

ISO 45001:2018

International standard for Occupational Health and Safety Management Systems.

Overview
What is ISO 45001?

ISO 45001 is an internationally recognized Occupational Health and Safety Management System standard designed to help organizations provide safe and healthy workplaces by preventing work-related injury, ill health, and fatality. It establishes a framework for identifying hazards, reducing risks, preventing incidents, promoting worker participation, and improving occupational health and safety performance over time.

The standard places worker participation at the center of effective OH&S management, recognizing that workers at all levels must be consulted and involved in the development, planning, implementation, and continual improvement of the management system. This approach reflects the understanding that a safety culture cannot be imposed from the top; it must be built through genuine engagement across the organization.

ISO 45001 supersedes OHSAS 18001 as the global benchmark for occupational health and safety management. It shares the ISO High Level Structure with ISO 9001 and ISO 14001, enabling integrated management system approaches for organizations managing quality, environment, and safety under a single governance framework. Organizations holding OHSAS 18001 certification are expected to have migrated to ISO 45001.

Key Themes
What does the standard focus on?
Worker Participation
The standard requires organizations to consult workers and their representatives at all levels in the development, planning, implementation, and review of the OH&S management system, recognizing participation as a precondition for effective safety management.
Hazard Identification
Organizations must establish, implement, and maintain processes for identifying hazards across all work activities, including routine and non-routine tasks, emergency situations, and activities carried out by contractors and visitors on site.
Risk Reduction
The hierarchy of controls — elimination, substitution, engineering controls, administrative controls, and personal protective equipment — provides the framework for prioritizing risk treatment actions and demonstrating that the highest practicable level of control has been applied.
Incident Prevention
The standard requires organizations to investigate incidents, nonconformities, and near-misses; determine root causes; and implement corrective actions designed to prevent recurrence, using incident data as a driver of systematic safety improvement.
Legal Compliance
Organizations must identify applicable OH&S legal requirements, maintain awareness of relevant legislation and regulations, and demonstrate that compliance obligations are being met consistently across all operations and sites within the certification scope.
Continual Improvement
A permanent commitment to improving OH&S performance, reducing hazards and risks, and enhancing the effectiveness of the management system is embedded throughout the standard as a core expectation of top management and the organization as a whole.
Applicability
Who typically implements ISO 45001?
Construction
High-risk project environments with complex contractor management, multi-employer worksites, and significant incident exposure requiring systematic safety governance.
Manufacturing
Industrial facilities managing mechanical, chemical, ergonomic, and process safety hazards across production operations and maintenance activities.
Energy
Power generation, transmission, and distribution operators managing high-consequence electrical, pressure, and confined-space hazards.
Mining
Extractive operations with significant occupational health and safety risk profiles including ground control, explosives, dust, and equipment hazards.
Transportation
Road, rail, and air transport operators managing driver fatigue, vehicle safety, and manual handling risks across mobile and remote work activities.
Logistics
Warehousing and distribution operators managing forklift operations, manual handling, racking systems, and shift-work fatigue across large facilities.
Healthcare
Clinical environments with biological, chemical, ergonomic, and psychosocial hazard exposures affecting nurses, allied health professionals, and support staff.
Utilities
Electrical, water, and gas service providers managing high-consequence operational risks during infrastructure installation, maintenance, and emergency response.
Government
Public agencies demonstrating duty of care to employees, contracted workers, and volunteers across diverse operational and office-based environments.
Professional Services
Service organizations addressing psychosocial risks, ergonomic hazards, and travel-related OH&S obligations for office-based and mobile workforces.
Benefits
Why organizations pursue certification
Improved Worker Safety
Systematic hazard identification and risk control reduces the frequency and severity of workplace injuries, ill health, and fatalities.
Reduced Workplace Risk
A structured approach to identifying, assessing, and controlling hazards reduces exposure across all operations and working environments.
Enhanced Compliance Confidence
A structured framework for identifying and demonstrating compliance with applicable OH&S legislative and regulatory requirements.
Improved Incident Prevention
Formal incident investigation and corrective action processes reduce the likelihood of recurrence and support a learning-based safety culture.
Stronger Safety Culture
Worker participation requirements and visible leadership commitment build a safety culture that extends beyond procedure compliance.
Improved Stakeholder Confidence
Independent certification demonstrates OH&S management maturity to customers, principal contractors, insurers, and regulators.
Better Operational Resilience
Reduced incidents and improved worker wellbeing support uninterrupted operations, lower absenteeism, and sustained workforce productivity.
Continual Improvement
Built-in monitoring, review, and corrective action mechanisms ensure OH&S performance is systematically measured and improved over time.
Regulatory Context
Is ISO 45001 certification required?

ISO 45001 certification is generally voluntary. However, occupational health and safety regulations, customer requirements, contractor qualification requirements, procurement criteria, and tender requirements frequently drive organizations to implement occupational health and safety management systems. In many sectors — particularly construction, mining, infrastructure, and utilities — principal contractors require demonstrated OH&S management competence from their supply chains as a condition of engagement.

Occupational health and safety legislation in virtually every jurisdiction imposes legal obligations on organizations relating to hazard identification, risk control, worker consultation, and incident investigation. ISO 45001 provides a management system framework aligned with these legal requirements. Some jurisdictions formally recognize certification as evidence of compliance with regulatory obligations, or provide reduced inspection frequency to certified organizations.

Certification can demonstrate commitment to worker safety and occupational health management in a way that goes beyond minimum legal compliance — providing independently verified assurance to workers, customers, regulators, and insurers that safety is managed systematically and with genuine leadership commitment. Insurance underwriters may also consider OH&S certification when assessing liability and workers compensation risk.

Certification Journey
The certification lifecycle
01
Application
The organization submits an application for certification. Exelera reviews the scope of activities, sites, applicable standard, and certification requirements.
02
Application Review
Exelera evaluates the application, confirms scope boundaries, identifies any specific requirements, and prepares the certification proposal and audit program.
03
Stage 1 Audit
Review of management system documentation, scope boundaries, hazard identification processes, and organizational readiness for the Stage 2 conformance assessment.
04
Stage 2 Audit
On-site evaluation of the implementation and effectiveness of the occupational health and safety management system against all applicable standard requirements.
05
Certification Decision
Independent review of the audit report and findings by a Certification Decision Maker not involved in the audit, followed by a formal certification decision.
06
Certificate Issuance
Following a positive certification decision, Exelera issues the certificate and publishes the organization on the public certification register.
07
Surveillance Audit — Year 1
Scheduled surveillance visit conducted no later than 12 months after the certification decision to verify continued conformance and system effectiveness.
08
Surveillance Audit — Year 2
Continued verification of management system implementation, performance, and the effectiveness of corrective actions from prior audits.
09
Recertification Audit
Comprehensive reassessment of the full management system scope before renewal of the certification cycle at the end of year three.
10
Certification Renewal
Following a successful recertification audit and positive certification decision, a new three-year certification cycle commences.
FAQ
Common questions
Implementing an occupational health and safety management system means developing and operating a system that meets the requirements of ISO 45001. Certification is the independent verification by an accredited certification body — such as Exelera — that the system conforms to the standard. An organization may implement an OH&S management system without pursuing certification, but certification provides formal, third-party assurance to workers, customers, principal contractors, and regulators.
Yes. ISO 45001:2018 supersedes OHSAS 18001 as the global benchmark for occupational health and safety management systems. OHSAS 18001 was withdrawn in 2021, and organizations that held certification to it were required to migrate to ISO 45001. The two standards share many common requirements, but ISO 45001 introduces a stronger emphasis on leadership commitment, worker participation, and the organizational context in which safety management operates.
The time required depends on the size of the organization, the complexity and risk profile of its operations, and the maturity of its existing safety management practices. For a small to medium-sized organization with a reasonably developed system, the process from initial application to certificate issuance typically takes between three and six months. Organizations with multiple sites, complex contractor arrangements, or significant hazard profiles may require a longer program.
Yes. ISO 45001 is applicable to organizations of any size. The standard is designed to be scalable, and Exelera adapts the audit program to reflect the scope and complexity of the organization being assessed. Small organizations should not expect a proportionally lighter burden in terms of meeting substantive requirements, but audit duration and documentation expectations are calibrated to reflect size and operational complexity.
Yes. ISO 45001 requires organizations to manage OH&S risks associated with contractors, subcontractors, and other workers whose activities may affect workers within the organization's scope. This includes establishing controls for contracted activities, communicating OH&S requirements to contractors, and verifying that contractor activities are conducted in a manner consistent with the organization's safety management system.
Nonconformities identified during an audit are documented formally. Major nonconformities must be closed — through verified corrective action — before certification can be granted or maintained. Minor nonconformities require a corrective action plan to be submitted within an agreed timeframe, with verification of effectiveness at the next scheduled audit. Exelera auditors assess the quality of the corrective action as well as its effectiveness when verifying closure.
Yes. ISO 45001, ISO 9001, and ISO 14001 all share the ISO High Level Structure, which means their requirements follow a common clause framework covering context, leadership, planning, support, operation, performance evaluation, and improvement. This enables organizations to implement and maintain an integrated management system — commonly referred to as an QHSE or IMS — covering quality, environment, and safety simultaneously. Exelera can conduct combined audits across multiple standards, significantly reducing the time and cost of separate certification programs.
Following initial certification, surveillance audits are conducted annually — with the first surveillance no later than 12 months after the certification decision and the second no later than 24 months. A full recertification audit is required at the end of the three-year certification cycle before the certificate can be renewed.
Applications can be submitted through the Exelera website or by contacting the certification team directly. The application process involves providing information about the organization’s scope of activities, number of sites, employee headcount, significant hazards, and existing OH&S management documentation. Exelera will review the application and prepare a certification proposal for consideration.
Related Standards
Standards commonly pursued alongside ISO 45001
ISO 9001:2015
View standard →
ISO 14001:2015
View standard →
ISO 22301:2019
View standard →

Apply for certification.

Discuss your certification objectives with Exelera.

Apply now →
© 2026 Exelera. All rights reserved.