ISO 45001 Implementation: A Step-by-Step Guide
How to implement an ISO 45001 occupational health and safety management system — from scope and worker participation to hazard identification, the hierarchy of controls and readiness for certification.
Management System Certification
Fewer incidents, provable diligence, and a workforce that trusts the system.
Why organisations certify
What certification actually returns, stated specifically rather than generically.
Certification demonstrates that safety is a governed system with board-level ownership, not a poster on a wall.
Principal employers, EPC contractors and international clients routinely restrict tendering to ISO 45001 certified contractors.
The hierarchy of controls and management-of-change requirements attack the root causes of serious incidents rather than their symptoms.
Incidents cost production time, investigation effort, replacement labour and premiums. Fewer incidents is directly fewer disrupted days.
A visibly safe workplace changes recruitment, retention and workforce trust — and is increasingly examined in client social audits.
The system provides structured evidence of due diligence under the Factories Act, BOCW Act, state safety rules and the OSH Code.
How it works
Every stage has a defined purpose, a realistic duration and a stated output.
2–3 working days
You submit an application form covering scope, headcount, sites and shift pattern. We review complexity, confirm audit-day allocation against accreditation rules and issue a fixed quotation.
1 week
On acceptance we appoint a lead auditor with verified technical competence for your sector, agree audit dates and share the audit plan in advance.
1 day (typical)
A documentation and readiness assessment: scope confirmation, review of your management system documents, internal audit and management review evidence, and identification of anything that would block Stage 2.
2–5 days (scope dependent)
On-site assessment of the system in operation. We sample processes, interview staff, examine records and raise findings graded as major, minor or opportunity for improvement.
2–4 weeks
You close out any nonconformities with root-cause analysis and evidence. An independent certification decision-maker — not the audit team — reviews the file and grants certification.
3–5 working days
A three-year certificate is issued and your organisation is listed on our public certified-client directory for verification by your customers.
Annual
Surveillance audits at 12 and 24 months confirm the system remains effective. A full recertification audit is completed before the three-year expiry.
Preparation
What we will ask to see. Having these ready before Stage 1 is the single biggest factor in a certification that runs to schedule.
Scope is the single thing most often got wrong, and it appears verbatim on your certificate. We will review yours before you apply, at no charge — it costs us less than fixing it at recertification.
Talk to a specialistOften certified together
Standards sharing the High Level Structure can be operated as one integrated system and audited together, which reduces total audit days.
Certify a quality management system that delivers consistent products and services and satisfies customers.
Learn moreCertify an environmental management system that controls impacts, meets compliance obligations and reduces waste.
Learn moreCertify a business continuity management system built on impact analysis, tested plans and proven recovery times.
Learn moreIndustries
From the blog
How to implement an ISO 45001 occupational health and safety management system — from scope and worker participation to hazard identification, the hierarchy of controls and readiness for certification.
They share a structure and a vocabulary, which makes the differences easy to underestimate. Here is what genuinely diverges, and why integrating them is usually the right call anyway.
Common questions
Direct answers, including where the honest answer is inconvenient for us.
OHSAS 18001 was withdrawn in March 2021 and is no longer a valid certification. Migration requires you to add the elements ISO 45001 introduced — organisational context, interested parties, leadership accountability, worker consultation mechanisms, and OH&S risks and opportunities beyond hazard-level risk. In most cases a transition audit rather than a full initial certification is sufficient.
Yes. Clause 8.1.4 explicitly extends control to procurement, contractors and outsourced processes. Auditors will examine contractor selection criteria, induction, work permits and supervision, because that is where a large share of serious injuries occur.
By speaking to non-managerial workers directly, in confidence. We look for evidence that workers were consulted on hazard identification and incident investigation, that they can raise concerns without fear of reprisal, and that raised concerns were acted upon.
Question not answered here? Ask a certification specialist — we answer technical questions without requiring an enquiry first.
Talk to us
Tell us your scope and headcount and we will send a fixed quotation for ISO 45001 with the audit-day calculation shown.
Next step
We will scope it honestly, show you the calculation behind the price, and tell you plainly if the timeline you need is not achievable.