ISO 45001 Explained

An independent overview from DQS, an accredited certification body.

ISO 45001 is the international standard that specifies requirements for an occupational health and safety management system (OH&S management system), together with guidance for its use. It gives organizations a structured framework for identifying work-related hazards, controlling OH&S risks, meeting legal and other requirements, and continually improving how they protect the people who work under their control. Because it applies to any organization regardless of size, sector, or geography, it is relevant to employers, regulators, clients, supply-chain partners, and worker representatives alike. The current edition is ISO 45001:2018, extended by Amendment 1:2024 on climate action; a revised second edition is under development at the Draft International Standard (DIS) stage and is expected to be published around 2027.

What is ISO 45001, from a certification body’s perspective?

From a certification body’s standpoint, ISO 45001 is a certifiable management system standard — the flagship of the ISO 45000 family for occupational health and safety. An accredited certification body assesses an organization’s OH&S management system against its requirements through an independent, two-stage audit and, on conformity, issues a certificate that is then maintained by periodic surveillance.

ISO 45001 is built on the High Level Structure shared by modern ISO management system standards and follows the Plan-Do-Check-Act (PDCA) cycle, so it integrates readily with standards such as ISO 9001 and ISO 14001. Third-party ISO 45001 certification matters because it provides independent evidence of conformance — a recognized, comparable reference that customers, regulators, and supply-chain partners can rely on instead of taking an organization’s own word for it.

As an accredited certification body, DQS assesses and certifies conformity — it does not design or implement your management system. That independence is what gives an ISO 45001 certificate its value: the organization builds and runs the management system, and a third party verifies it against the standard.

Key Facts at a Glance

Context and Drivers

Regulatory Pressure

Occupational health and safety is one of the most heavily regulated areas of business activity. National legislation in virtually every jurisdiction places a legal duty on employers to provide safe and healthy workplaces, and enforcement can carry significant penalties, operating restrictions, and personal liability for managers. ISO 45001 does not replace these legal obligations, but it gives organizations a systematic way to identify the requirements that apply to them and to demonstrate, with documented evidence, that they are being met. For public authorities and labor inspectorates, a certified OH&S management system signals that an organization has a managed, auditable approach rather than ad hoc arrangements.

Market and Supply-Chain Expectations

Increasingly, occupational health and safety performance is a condition of doing business. Large buyers, public-sector procurers, and prime contractors frequently require their suppliers to hold ISO 45001 certification as a prerequisite for tendering, prequalification, or site access — particularly in construction, manufacturing, logistics, energy, and other higher-risk sectors. A recognized ISO 45001 certificate offers a comparable, independently verified reference point that simplifies supplier assessment across borders and reduces the need for repeated second-party audits.

ESG and Workforce Considerations

Worker safety and wellbeing sit squarely within the social dimension of environmental, social, and governance (ESG) reporting, and stakeholders — from investors to prospective employees — now scrutinize how organizations protect their people. A structured OH&S management system supports credible disclosure of safety data and demonstrates a proactive commitment to preventing work-related injury and ill health. The 2024 amendment, which adds explicit consideration of climate change as a factor in an organization’s context, reflects how broader sustainability concerns are increasingly intersecting with occupational safety.

Core Requirements

Clause 4 — Context of the Organization

The organization determines the external and internal issues relevant to its OH&S management system, identifies workers and other interested parties and their needs and expectations, and defines the scope of the system. Following the 2024 amendment, this includes considering whether climate change is a relevant issue.

Clause 5 — Leadership and Worker Participation

Top management must take accountability for the effectiveness of the management system, establish an OH&S policy, and assign roles and responsibilities. A defining feature of ISO 45001 is its strong emphasis on the consultation and participation of workers at all levels, ensuring that those exposed to hazards have a genuine voice in the system.

Clause 6 — Planning

The organization identifies hazards, assesses OH&S risks and opportunities, determines applicable legal and other requirements, and sets measurable OH&S objectives together with plans to achieve them. This risk-based approach is central to preventing incidents before they occur.

Clause 7 — Support

Requirements cover the resources, competence, awareness, communication, and documented information needed to support the system — ensuring that people understand the hazards they face and are equipped to work safely.

Clause 8 — Operation

The organization plans and controls the processes needed to meet OH&S requirements, applying the hierarchy of controls to eliminate or reduce risks. It also addresses management of change, outsourcing, procurement, contractors, and emergency preparedness and response.

Clause 9 — Performance Evaluation

Performance is monitored, measured, analyzed, and evaluated; legal compliance is assessed; internal audits are conducted; and top management reviews the management system at planned intervals to judge its continuing suitability, adequacy, and effectiveness.

Clause 10 — Improvement

The organization responds to incidents and nonconformities, takes corrective action to address root causes, and continually improves the OH&S management system and its performance over time.

Target Groups and Application Areas

ISO 45001 is deliberately generic: it is designed to be applicable to any organization that employs or directs people, regardless of size, sector, or risk profile. Because the standard scales to context, a small office-based business and a multinational industrial group can both implement it meaningfully, applying its requirements in proportion to the hazards their workers actually face.

Its relevance is most immediately visible in sectors where physical risk is high or tightly regulated, including the following:

• Construction and engineering, where hazards such as work at height, heavy plant, and changing site conditions demand rigorous control.
• Manufacturing and process industries, where machinery, hazardous substances, and continuous operations require systematic risk management.
• Transport, logistics, and warehousing, where vehicle movement, manual handling, and shift work present recurring risks.
• Energy, utilities, and mining, where high-consequence hazards make demonstrable safety management essential.
• Healthcare, facilities management, and public services, where worker exposure to biological, ergonomic, and psychosocial risks is significant.

Beyond these higher-risk environments, the international standard is equally relevant to service organizations and knowledge-based businesses that wish to manage issues such as ergonomics, stress, and workplace wellbeing. In every case, the OH&S management system provides the basis for evidence-based management: it supports informed decisions about where to focus prevention effort and gives external stakeholders — clients, regulators, and supply-chain partners — a consistent reference for how the organization protects its workforce.

Related Standards

High Level Structure and Typical Combinations

ISO 45001 shares the High Level Structure (since 2021: Harmonized Structure) — the common framework of identical clause numbering, text, and core terms used across modern ISO management system standards. This makes it straightforward to combine with ISO 9001 (quality management) and ISO 14001 (environmental management) in an integrated management system, and frequently with ISO 50001 (energy management) as well. Many organizations operate these standards together under one management system, audited in combination to reduce duplication.
 

Predecessor and Family Members

ISO 45001 superseded OHSAS 18001, the British Standards Institution specification that served as the de facto occupational health and safety benchmark before an international standard existed; OHSAS 18001 was formally withdrawn after a transition period that ended in 2021. ISO 45001 is supported by other members of the ISO 45000 family, such as ISO 45002, which offers implementation guidance, and ISO 45003 on psychological health and safety at work. These are guidance documents rather than certifiable standards, so they complement but do not replace ISO 45001.

Differentiation from Similar Standards

Although ISO 45001 sits alongside ISO 9001 and ISO 14001 structurally, its focus is distinct: it addresses risks to the health and safety of workers and other people affected by an organization’s activities, not product quality or environmental impact. It does not cover product safety, property damage, or environmental effects beyond the risks they pose to workers. This clear scope is what makes it complementary to, rather than overlapping with, the other core management system standards.