What ISO 45001 is
ISO 45001:2018 is the international standard for an occupational health and safety (OH&S) management system. It asks you to find the hazards in your work, assess the risk they create, control them, and involve workers in that process. In 2024 ISO added a short amendment asking organizations to consider climate change as part of their context.
ISO 45001 replaced OHSAS 18001. The migration period for accredited OHSAS 18001 certificates ended in September 2021, so OHSAS 18001 certificates are no longer valid and new certification is to ISO 45001.
Certification is carried out by an independent, accredited certification body. BookMyLLC prepares your system and records so you are ready for that audit. We do not issue certificates.
Who this is for
- Manufacturers, workshops and fabrication units with machinery, chemicals or manual handling.
- Construction, facilities, logistics and warehousing companies.
- Exporters whose overseas buyers audit supplier safety, and contractors bidding for infrastructure or industrial tenders.
- Offices and service firms that want a structured approach to ergonomics, travel and remote-work risks.
The standard applies to any size or sector. A 20-person unit and a multi-site group follow the same clauses, only the depth changes.
What BookMyLLC handles
- A gap assessment against the ISO 45001 clauses and your current safety practice.
- A hazard identification and risk assessment method, applied to each process, site and job role.
- A legal and other requirements register listing the health and safety laws that apply at each site. Your local counsel or safety officer should confirm it.
- The OH&S policy, objectives, and procedures for incident reporting, investigation, contractor control and change management.
- Emergency preparedness plans and drill records.
- A worker consultation and participation process, which the standard treats as a core requirement.
- Internal auditor training, the internal audit and the management review.
- Coordination with the certification body for Stage 1 and Stage 2.
Step-by-step process
- Site walk and gap review. We look at how work is actually done, including shifts, contractors and maintenance.
- Context and scope. You confirm the sites, activities and workers the system covers.
- Hazard and risk assessment. Each hazard is rated and assigned controls using the hierarchy of controls: eliminate, substitute, engineer, administrate, then protective equipment.
- Legal register. Requirements under national and state law are listed with how you comply.
- Procedures and training. Documents are kept short enough for supervisors to use on the floor.
- Operate and record. Toolbox talks, inspections, near-miss reports and drills generate the evidence auditors will sample.
- Internal audit and management review.
- Certification audits. Stage 1 checks readiness, Stage 2 checks that the system works, and any nonconformities are closed before the certificate is issued.
Documents and information you need
- Site addresses, layouts and headcount by shift, including contract workers.
- Process flows, list of machinery and chemicals, and safety data sheets.
- Past incident, injury and near-miss records.
- Existing permits, licences, factory or fire approvals and inspection reports.
- Names of safety committee members or worker representatives.
Timeline
A single-site organization with basic safety practices in place typically needs three to six months to implement and produce enough records for the audit. High-hazard or multi-site operations usually take longer. Certificates are generally valid for three years, with surveillance audits in between.
Common mistakes to avoid
- Writing risk assessments at a desk. Auditors interview workers and compare what they say with the documents.
- Ignoring contractors. Contractor and visitor control is a frequent audit finding.
- Treating consultation as a notice board. Workers must have a real way to raise hazards and take part in decisions.
- Assuming certification means legal compliance. ISO 45001 is voluntary. It helps you manage legal duties but does not replace them, so confirm your obligations with a local safety professional or lawyer.
- Not investigating near misses. They are the cheapest lesson you will get.
In the US, for example, workplace safety law is enforced by OSHA and state plans, and ISO 45001 certification does not change what OSHA requires of you. The same applies to factory and labour laws in India and elsewhere.
What auditors look for on site
Expect the Stage 2 auditor to walk the floor, not just read documents. They typically pick a few high-risk tasks and trace them from the risk assessment to the controls in place: machine guarding, permits to work, protective equipment issued, training records for the people doing the job. They will talk to operators and supervisors in their own language where possible, so procedures need to be explained, not just signed.
Auditors also sample the records that show the system is alive. That means recent inspections, a near-miss or incident that was investigated to root cause, a drill with lessons noted, and minutes of worker consultation meetings. A system with perfect paperwork and no near-miss reports at all tends to raise more questions than one with honest records of small problems fixed.
Costs that sit outside our work
The certification body charges its own audit fee, set by headcount, risk level and number of sites under accreditation rules. You may also spend on safety improvements the risk assessment identifies, such as guarding, signage, ventilation or training. We flag these early so they can be planned rather than discovered a week before the audit.
Related services
Many clients combine safety with quality and environmental systems into one integrated audit. See ISO 9001 quality management and ISO 14001 environmental management, or book a business consultation to decide which standards your buyers actually need. For project fees, see current pricing.
ISO 45001 at a glance
| Question | Short answer |
|---|---|
| What it covers | An occupational health and safety management system. |
| Core activity | Finding hazards, controlling risks and consulting workers. |
| Who certifies | An accredited certification body. |
| Validity | Three years, with surveillance audits between. |
| Who needs it | Construction, manufacturing, logistics and any organisation with physical risk. |
The certification path
| Stage | What happens |
|---|---|
| Gap analysis | Compare what you do today with the standard |
| Build the system | Write the documents and processes the standard requires |
| Run it | Operate the system long enough to produce records |
| Internal audit and management review | Check the system yourself before the auditor does |
| Stage 1 audit | The certification body reviews your documents and readiness |
| Stage 2 audit | The certification body audits how the system works in practice |
| Certificate | Issued for three years, with surveillance audits between |
What auditors see on site
| Area | Example evidence |
|---|---|
| Hazard identification | Risk assessments for each activity |
| Worker consultation | Meeting records and safety committee minutes |
| Emergency planning | Plans, drills and equipment checks |
| Incident handling | Reports and corrective actions |
| Legal compliance | A register and evidence of compliance |
Auditors walk the site and speak to workers, so the system must be real, not only on paper.
Involving your workers
The standard requires you to consult workers on matters that affect their safety and to include them in hazard identification and incident investigation. That is not a formality: auditors speak to workers and ask what they know about the system. A short toolbox talk or safety committee that actually meets is better evidence than a policy nobody has read.
Documents an auditor will ask for
| Document | Purpose |
|---|---|
| OH&S policy and scope | Defines what the system covers |
| Hazard register and risk assessments | Identify and rank risks |
| Legal requirements register | Lists the rules that apply |
| Incident and corrective action records | Show learning from events |
| Training and competence records | Show people are able to work safely |
