ISO 45001 Explained: Occupational Health and Safety Management

ISO 45001 is the international standard for occupational health and safety (OH&S) management systems. It gives organisations a framework to protect workers, reduce incidents and improve safety performance over time.

What replaced OHSAS 18001?

ISO 45001 was published in 2018 and replaced the earlier British standard OHSAS 18001. Organisations certified to OHSAS 18001 had a transition period to migrate, and that period has ended, so ISO 45001 is the current standard. If you still see OHSAS 18001 mentioned in a tender or policy, it is worth checking that it has been updated.

The structure of the standard

ISO 45001 follows the same high-level structure as other ISO management standards, which makes it easier to combine with quality (ISO 9001) and environmental (ISO 14001) systems. It is built on the Plan-Do-Check-Act cycle and covers:

• Context – understanding the organisation and the needs of workers and other parties.
• Leadership and worker participation – top management commitment and real involvement of workers.
• Planning – identifying hazards, assessing risks and opportunities, and setting objectives.
• Support – resources, competence, awareness and communication.
• Operation – operational controls, change management, procurement and emergency preparedness.
• Performance evaluation – monitoring, internal audit and management review.
• Improvement – investigating incidents and taking corrective action.

Why organisations adopt it

• Fewer incidents and lower costs from injury and downtime.
• Clearer legal compliance and stronger audit results.
• Higher worker trust and engagement.
• A competitive advantage when bidding for contracts that require certification.

What does a lead auditor do?

A lead auditor plans and leads audits of an OH&S management system, checks evidence against the standard, reports findings and verifies corrective actions. Training builds skills in audit planning, interviewing, sampling and reporting. See our ISO 45001:2018 Lead Auditor course.

Where to start

Begin with a gap analysis against the standard, involve workers early and assign clear responsibilities. If you want an independent review, our audit and survey service can help, and our team is available via a partner enquiry.

ISO 45001 compared with OHSAS 18001

• Leadership: top management now carries clear accountability for the system.
• Worker participation: consultation and involvement of workers is a core requirement.
• Context and risk thinking: organisations must consider internal and external issues and opportunities, not only hazards.
• Integration: a common structure with other ISO standards makes one combined system easier.

A simple implementation roadmap

1. Obtain management commitment and appoint a project owner.
2. Carry out a gap analysis against the standard.
3. Define the policy, objectives and responsibilities.
4. Identify hazards and risks and set controls.
5. Train people and implement procedures.
6. Audit internally and hold a management review.
7. Invite a certification body for the external audit.

Frequently asked questions

Is ISO 45001 mandatory?

No, it is voluntary. Some clients and tenders require certification, and it can help demonstrate legal compliance.

Can small organisations use ISO 45001?

Yes. The standard is written to apply to organisations of any size, and the system can be proportionate to the risks.

How long does certification take?

It depends on the size of the organisation and its starting point. A gap analysis gives the most reliable estimate.