ISO 45001 is the international standard for occupational health and safety (OH&S) management systems. It provides a structured framework to help organisations prevent work-related injury and ill health, reduce risk, and create safer working environments.
ISO 45001 certification demonstrates that an organisation has effective systems in place to identify hazards, manage health and safety risks, and continually improve workplace safety performance.
What is ISO 45001?
ISO 45001 is an international standard published by the International Organization for Standardization. It sets out requirements for establishing, implementing, maintaining, and continually improving an occupational health and safety management system.
The standard replaced OHSAS 18001 and follows the same high-level structure as ISO 9001 and ISO 14001, making it easier to integrate health and safety into wider business management systems.
What does ISO 45001 cover?
ISO 45001 focuses on proactive risk management rather than reacting to incidents. Key areas include:
- Identification of hazards and assessment of OH&S risks
- Legal and regulatory compliance
- Worker consultation and participation
- Operational controls and safe working practices
- Incident investigation and corrective action
- Emergency preparedness and response
- Monitoring, measurement, and continual improvement
The emphasis is on preventing harm before it occurs.
Who is ISO 45001 for?
ISO 45001 is suitable for organisations of all sizes and sectors, including:
- Construction and engineering firms
- Manufacturing and industrial operations
- Logistics and transport providers
- Facilities and property management companies
- Healthcare and social care organisations
- Offices with occupational health risks
It is particularly valuable where organisations manage physical risk, contractor activity, or complex operations.
ISO 45001 requirements explained
To achieve ISO 45001 certification, an organisation must demonstrate:
Leadership and worker participation
- Clear OH&S policy and objectives
- Defined roles and responsibilities
- Active involvement of workers and representatives
Hazard identification and risk control
- Systematic identification of hazards
- Risk assessment and control measures
- Consideration of routine and non-routine activities
Operational planning and control
- Safe systems of work
- Contractor and supplier controls
- Change management processes
Support and competence
- Training and awareness
- Communication processes
- Documented information control
Performance evaluation and improvement
- Incident reporting and investigation
- Internal audits
- Management review and continual improvement
Auditors look for evidence that health and safety controls are actively used and effective.
How to get ISO 45001 certified
The certification process typically involves:
- Reviewing existing health and safety arrangements
- Identifying hazards and assessing OH&S risks
- Developing policies, procedures, and controls
- Implementing the OH&S management system
- Carrying out an internal audit and management review
- Passing a Stage 1 and Stage 2 certification audit
Once certified, the system must be maintained through ongoing monitoring and review.
How long does ISO 45001 certification take?
Indicative timeframes are:
- Small organisations: 6–12 weeks
- Medium organisations: 2–4 months
- Large or higher-risk organisations: 3–6 months+
Timelines depend on workforce size, risk exposure, and the maturity of existing health and safety processes.
How much does ISO 45001 certification cost?
Indicative total costs (initial certification):
- Small organisations: £3,000–£8,000 | $3,500–$10,000 | €3,200–€9,000
- Medium organisations: £8,000–£20,000 | $10,000–$26,000 | €9,000–€22,000
- Large or complex organisations: £20,000–£40,000+ | $26,000–$50,000+ | €22,000–€45,000+
Costs vary depending on risk level, audit duration, and whether external consultancy support is used.
Benefits of ISO 45001 certification
Organisations commonly achieve:
- Reduced workplace accidents and incidents
- Improved legal and regulatory compliance
- Better risk awareness and control
- Increased worker engagement and morale
- Reduced downtime and disruption
- Stronger reputation with clients and stakeholders
The greatest benefits come from embedding health and safety into everyday operations.
Common ISO 45001 mistakes to avoid
- Treating ISO 45001 as paperwork only
- Failing to involve workers in risk management
- Incomplete hazard identification
- Poor incident investigation
- Lack of continual improvement
Auditors expect practical, living systems rather than static documentation.
ISO 45001 certification FAQs
No. ISO 45001 is voluntary, but it is often required by clients, regulators, or contractual frameworks.
Yes. Office environments still have occupational health and safety risks that can be managed through ISO 45001.
Certification is typically valid for three years, with regular surveillance audits.
Yes. ISO 45001 integrates well with ISO 9001 and ISO 14001 as part of an integrated management system.
Next steps
If you are considering ISO 45001 certification:
- Identify workplace hazards and risks
- Define the certification scope clearly
- Decide whether to prepare internally or use external support
- Plan realistic timescales and costs
ISOcertified.net provides detailed guidance on ISO 45001 certification, including preparation steps, audit expectations, costs, and ongoing compliance.