Category: Certification Guides

The complete guide to ISO 45001 occupational health and safety management certification — requirements, costs, audit process, implementation steps, and how to get your organization certified in 2026.

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

---

Workplace Safety Is No Longer Just an OSHA Problem

Every year, thousands of workers are injured or killed in preventable workplace incidents. The legal, financial, and human cost of those incidents falls directly on the organizations where they occur — through OSHA citations, workers’ compensation claims, litigation, lost productivity, and reputational damage that affects your ability to win contracts and retain employees.

ISO 45001 is the international standard for occupational health and safety management systems. It gives organizations a systematic, auditable framework to identify hazards, control risks, prevent incidents, and demonstrate to customers, regulators, and employees that safety is managed — not just talked about.

Over 400,000 organizations in more than 130 countries are currently certified to ISO 45001. In high-risk industries — fabrication, manufacturing, construction, mining, and energy — it is increasingly a requirement, not a differentiator.

This guide covers everything you need to know about ISO 45001 certification in 2026 — what it requires, how much it costs, how the audit process works, how to implement it, and where to get the support your organization needs.

---

In This Guide

• What ISO 45001 is and what it actually requires
• Who needs ISO 45001 certification and why
• The complete ISO 45001 requirements clause by clause
• The ISO 45001 certification process step by step
• How ISO 45001 relates to OSHA and other safety frameworks
• How much ISO 45001 certification costs
• How long certification takes
• How to implement ISO 45001 in a manufacturing environment
• Common audit findings and how to avoid them
• Where to get the standard, training, and certification support

---

---

👉 Start Here (Top Resources)

👉 Get ISO 45001 certified with an accredited certification body → ISOQAR ISO 45001 Certification

👉 Get ISO 45001 training for your team → BSI Group ISO 45001 Training

👉 Purchase the official ISO 45001:2018 standard → ISO 45001:2018 — ANSI Webstore

👉 Save on the full ISO 45001 standards collection → ISO 45001 Collection — ANSI Webstore

👉 Save up to 50% buying ISO standards as a bundle → ISO Standards Packages — ANSI Webstore

👉 Use coupon code CC2026 for 5% off ISO standards → Apply at ANSI Webstore (valid through December 31, 2026)

---

What Is ISO 45001?

ISO 45001:2018 is the internationally recognized standard for occupational health and safety (OH&S) management systems. Published by the International Organization for Standardization in March 2018, it replaced OHSAS 18001 as the global benchmark for workplace safety management.

ISO 45001 provides a framework that organizations of any size, in any industry, can use to proactively manage occupational health and safety risks — preventing workplace injuries, illnesses, and fatalities rather than reacting to them after they occur.

What ISO 45001 Is — And What It Isn’t

ISO 45001 does not specify what your safety performance targets must be. It does not require zero incidents or a specific injury rate. What it requires is that you:

• Identify hazards and assess occupational health and safety risks systematically
• Implement controls to eliminate or reduce those risks
• Meet your legal and regulatory OH&S obligations
• Involve workers actively in safety management
• Set objectives to improve OH&S performance
• Demonstrate ongoing improvement over time

This distinction matters. ISO 45001 is a management system standard — it defines how you manage safety, not what the outcome must be.

Why ISO 45001 Matters in 2026

Three forces are driving ISO 45001 adoption across manufacturing and industrial operations:

Supply chain requirements — OEM manufacturers, energy companies, and government contractors increasingly mandate ISO 45001 certification from their suppliers. In many industries, it sits alongside ISO 9001 as a standard supplier qualification requirement.

OSHA alignment — ISO 45001 is structured to complement OSHA regulations, not replace them. Organizations certified to ISO 45001 typically demonstrate stronger OSHA compliance as a natural byproduct of the system.

Legal and financial risk reduction — A documented, audited safety management system is one of the strongest defenses available when workplace incidents occur and litigation or regulatory action follows.

→ Purchase the official ISO 45001:2018 Standard — ANSI Webstore. Use coupon code CC2026 to save 5% through December 31, 2026.

---

Who Needs ISO 45001 Certification?

Organizations That Need ISO 45001

High-risk manufacturing operations Fabrication shops, machine shops, metal stamping operations, foundries, chemical processors, and heavy assembly operations face daily hazards that demand systematic management. ISO 45001 provides the framework — and certification provides the proof. See ISO 45001 for High-Risk Manufacturing for manufacturing-specific requirements.

Construction and civil engineering contractors Construction is one of the most hazardous industries in the world. Falls, struck-by incidents, electrical hazards, and confined space entries are daily risks. ISO 45001 certification is increasingly required on major public and private construction projects.

Tier 1 and Tier 2 suppliers in regulated supply chains Automotive, aerospace, energy, and defense supply chains are pushing safety management requirements down to suppliers. If your customer holds ISO 45001 certification, expect the requirement to eventually flow to you. See What ISO Standards Do Tier 1 Suppliers Need? for the full supplier picture.

Organizations with significant OSHA exposure Any organization operating in industries with high OSHA citation rates — general industry, construction, maritime — benefits from the systematic hazard identification and control framework ISO 45001 provides.

Organizations already certified to ISO 9001 or ISO 14001 Adding ISO 45001 to an existing management system is significantly more efficient than starting from scratch. All three standards share the same Harmonized Structure — your existing document control, internal audit, and management review processes extend directly to cover OH&S requirements. See Integrated Management Systems for how this works.

---

ISO 45001 Requirements — Clause by Clause

ISO 45001:2018 uses the Harmonized Structure (HS) — the same framework shared by ISO 9001 and ISO 14001:2026. Clauses 4 through 10 cover the fundamental management system elements, with OH&S-specific requirements layered throughout.

Clause 4 — Context of the Organization

Your organization must understand its internal and external context — including the needs and expectations of workers and other interested parties as they relate to OH&S. Your OH&S management system scope must be defined and documented.

A critical and unique element of ISO 45001 Clause 4: worker consultation and participation must be established as a foundational element of the system — not an afterthought. Workers must have a meaningful role in OH&S decision-making from the start.

Clause 5 — Leadership and Worker Participation

This is where ISO 45001 differs most significantly from its predecessor OHSAS 18001. Top management must:

• Demonstrate active, visible leadership commitment to OH&S — not delegate it entirely to a safety manager
• Establish an OH&S policy that includes commitments to provide safe working conditions, eliminate hazards, and fulfill legal obligations
• Ensure OH&S is integrated into business processes — not siloed in a safety department
• Actively promote worker participation in hazard identification, risk assessment, and incident investigation

Worker participation is not optional under ISO 45001. It is a clause requirement — and auditors will verify it is genuine, not performative.

Clause 6 — Planning

Hazard identification Your organization must establish, implement, and maintain a process for ongoing hazard identification — covering all activities, locations, situations, and people (including contractors and visitors) under your control or influence.

Risk and opportunity assessment OH&S risks associated with identified hazards must be assessed. Controls must be implemented using the hierarchy of controls — elimination first, then substitution, engineering controls, administrative controls, and PPE as the last resort.

Legal and other requirements All applicable OH&S legal requirements and other obligations (customer requirements, industry codes, voluntary commitments) must be identified, documented, and tracked.

OH&S objectives Measurable targets for improving OH&S performance must be set, with documented plans including actions, responsibilities, resources, timelines, and how results will be evaluated.

Clause 7 — Support

Resources, competence, awareness, communication, and documented information. All workers must be competent for the OH&S aspects of their work. Awareness of hazards, risks, and controls must be maintained across the organization. Communication processes must ensure OH&S information reaches everyone who needs it.

→ Get your team trained to meet ISO 45001 competence requirements → BSI Group ISO 45001 Training

Clause 8 — Operation

Operational planning and control — how your organization manages OH&S risks during actual operations. Key requirements include:

• Operational controls using the hierarchy of controls
• Management of change — planned changes must be evaluated for OH&S impact before implementation
• Controls for contractors and visitors under your organization’s control
• Emergency preparedness and response — documented procedures for foreseeable emergency situations, tested at planned intervals

Clause 9 — Performance Evaluation

Monitoring and measurement of OH&S performance. Internal audits must be conducted at planned intervals covering all elements of the OH&S management system. Management review must evaluate system performance and drive improvement decisions.

Clause 10 — Improvement

Incidents, nonconformities, and near misses must be investigated, root causes identified, and corrective actions implemented. The system must demonstrate continual improvement in OH&S performance — not just compliance maintenance.

For a comparison of how ISO 45001 requirements relate to OSHA standards, see OSHA vs ISO Requirements for Metal Fabrication.

---

The ISO 45001 Certification Process Step by Step

Step 1 — Purchase and Study the Standard

Purchase the official ISO 45001:2018 — ANSI Webstore and review the full requirements before building your system. Use coupon code CC2026 to save 5% through December 31, 2026.

Step 2 — Conduct a Gap Assessment

Compare your current safety management practices against ISO 45001 requirements. Where are the hazard identification gaps? What risks haven’t been formally assessed? What legal requirements aren’t being tracked? What documentation doesn’t exist? Your gap assessment drives your implementation plan.

Step 3 — Define Your OH&S Management System Scope

Determine which parts of your organization, locations, and activities are covered. Scope must accurately reflect what you do and where — auditors will evaluate everything within the stated scope.

Step 4 — Establish Worker Participation Mechanisms

This step is unique to ISO 45001 and non-negotiable. Before building documentation, establish how workers will be consulted and participate in hazard identification, risk assessment, incident investigation, and OH&S objective setting. This must be genuine participation — not a suggestion box.

Step 5 — Conduct Hazard Identification and Risk Assessment

For every activity, location, and situation your organization operates in, identify:

• What hazards are present
• Who could be harmed and how
• What controls are currently in place
• What additional controls are needed based on the hierarchy of controls

This is the foundational work of ISO 45001 — everything else builds on top of it.

Step 6 — Identify Legal and Other Requirements

Document every applicable OH&S regulation, OSHA standard, customer requirement, and voluntary commitment your organization is subject to. This must be actively maintained — regulations change.

Step 7 — Build Your OH&S Management System Documentation

All required documented information must be in place before your certification audit. See What Documentation ISO 45001 Requires below.

Step 8 — Train Your Team

All workers must be competent for the OH&S aspects of their work. Supervisors and managers need foundation-level training. Your safety manager or EHS coordinator needs lead implementer or requirements-level training.

→ ISOQAR ISO 45001 Training → BSI Group ISO 45001 Training

For the full training sequence by role, see ISO Training for Manufacturing Teams.

Step 9 — Operate Your OH&S Management System

Run your system for a meaningful period before your certification audit — three to six months minimum. You need records demonstrating the system is actually operating — hazard reports, inspection records, incident investigations, near miss reports, training records.

Step 10 — Conduct an Internal Audit

Before your certification body arrives, audit your own OH&S management system against every ISO 45001 requirement. Find the gaps before the auditor does.

Step 11 — Conduct a Management Review

Top management must review OH&S system performance. Required inputs include: legal compliance status, OH&S objectives progress, incident and near miss trends, audit results, worker participation outcomes, and corrective action status.

Step 12 — Stage 1 Audit (Documentation Review)

Your certification body reviews your OH&S management system documentation to verify completeness and readiness for Stage 2.

Step 13 — Stage 2 Audit (Certification Audit)

Full on-site audit verifying your documented system is implemented. Auditors will interview workers at all levels — including shop floor personnel — and walk your operations looking for evidence that hazards are controlled and the system is functioning. Successful completion results in ISO 45001 certification.

→ ISOQAR ISO 45001 Certification

---

ISO 45001 vs OSHA — How They Work Together

This is one of the most common questions from U.S. manufacturers. The short answer: ISO 45001 and OSHA are complementary, not competing.

Factor	OSHA	ISO 45001
Nature	Legal requirement	Voluntary standard
Enforcement	Government inspections and citations	Third-party certification audits
Focus	Minimum compliance requirements	Systematic safety management and improvement
Scope	Industry-specific standards	Applicable to any organization
Worker participation	Limited specific requirements	Core requirement throughout
Hazard approach	Prescriptive rules	Risk-based, proactive

The key distinction: OSHA tells you what the minimum safety requirements are. ISO 45001 tells you how to build a system that manages safety beyond minimums — proactively identifying hazards before incidents occur and driving continuous improvement.

Organizations certified to ISO 45001 typically demonstrate stronger OSHA compliance as a byproduct — because the systematic hazard identification and control process catches OSHA-applicable issues before an inspector does.

ISO 45001 does not replace OSHA compliance. You must meet both. ISO 45001 makes meeting OSHA requirements more systematic and sustainable.

For a full detailed comparison, see ISO 45001 vs OSHA and OSHA vs ISO Requirements for Metal Fabrication.

---

How Much Does ISO 45001 Certification Cost?

ISO 45001 certification costs vary based on organization size, complexity, number of sites, and certification body. Here’s a realistic breakdown:

Cost Category	Typical Range	Notes
ISO 45001:2018 Standard	$150–$200	Required — purchase from ANSI
Gap Assessment	$1,500–$5,000	Internal or consultant-led
Training	$500–$3,000 per person	Based on course level
Implementation (internal labor)	$5,000–$20,000	Highly variable by size
Stage 1 Audit	$1,500–$4,000	Certification body fee
Stage 2 Audit	$3,000–$8,000	Certification body fee
Annual Surveillance Audits	$2,000–$5,000/year	Required to maintain certification
Recertification (every 3 years)	$3,000–$7,000	Full audit cycle

Total first-year investment for a small to mid-size manufacturer: $12,000–$40,000 depending on implementation approach and existing system maturity.

Organizations already certified to ISO 9001 or ISO 14001 can reduce implementation costs by 30–40% by leveraging existing management system infrastructure.

→ Save on standard purchases — use coupon code CC2026 for 5% off ISO 45001:2018 at the ANSI Webstore through December 31, 2026.

For a full cost breakdown, see How Much Does ISO 45001 Cost? and How Much Does ISO Certification Cost?

---

How Long Does ISO 45001 Certification Take?

Phase	Duration
Gap assessment and planning	4–6 weeks
Hazard identification and risk assessment	4–8 weeks
Legal requirements register	2–4 weeks (overlapping)
Documentation development	6–10 weeks
Team training	2–4 weeks (overlapping)
OH&S system operation and record generation	8–12 weeks minimum
Internal audit and management review	2–3 weeks
Stage 1 audit and gap closure	2–4 weeks
Stage 2 audit	1–2 days on-site

New certification starting from scratch: 6–12 months Adding ISO 45001 to an existing ISO 9001 system: 4–6 months

For a fully sequenced implementation roadmap, see ISO Implementation Timeline for Manufacturers.

---

How ISO 45001 Works With ISO 9001 and ISO 14001

ISO 45001:2018 uses the same Harmonized Structure as ISO 9001:2015 and ISO 14001:2026. This is the most practical benefit of the standard for organizations already in the ISO ecosystem.

ISO 45001 + ISO 9001

The most common two-standard combination in manufacturing. Your document control, internal audit, corrective action, and management review processes from ISO 9001 extend directly to cover ISO 45001 requirements. Implementation time is significantly reduced. See ISO 9001 vs ISO 45001 for a full comparison.

ISO 45001 + ISO 14001

Environmental and safety management systems share significant overlap in manufacturing — hazardous materials, emergency response, worker exposure, and regulatory compliance management are concerns of both standards. Many organizations pursue ISO 14001:2026 and ISO 45001 together as a combined EHS management system. See ISO 14001 vs ISO 45001 for a full comparison.

The Integrated Management System Approach

Organizations pursuing ISO 9001 + ISO 14001 + ISO 45001 together — the most common combination in manufacturing — can implement a single integrated management system satisfying all three standards simultaneously. This approach reduces documentation overhead, streamlines internal auditing, and simplifies management review significantly.

See Integrated Management Systems for the complete integration guide.

→ Save on purchasing all three standards together → ISO Standards Packages — ANSI Webstore

---

How to Implement ISO 45001 in a Manufacturing Environment

Manufacturing environments have specific OH&S hazards that require targeted controls. Here’s what implementation looks like on the shop floor:

Key Hazard Categories in Manufacturing

Physical hazards — machine guarding gaps, struck-by risks from moving equipment, caught-in/between machinery, ergonomic hazards from repetitive motion and heavy lifting, slip and fall risks from floor conditions

Chemical hazards — welding fumes, solvent vapors, cutting fluid exposure, hazardous material handling, chemical spill risks

Electrical hazards — arc flash, lockout/tagout (LOTO) requirements, electrical panel access controls

Thermal hazards — burns from welding, hot work operations, heat stress in summer months

Noise and vibration — hearing loss risks from machining, grinding, and fabrication operations

Confined spaces — entry into tanks, vessels, or enclosed fabrications

Working at height — overhead cranes, elevated work platforms, roof access

Each of these must be identified in your hazard register, risk-assessed, and controlled using the hierarchy of controls.

The Hierarchy of Controls in Practice

ISO 45001 requires that hazard controls be implemented using this priority order:

Level	Control Type	Manufacturing Example
1	Elimination	Remove the hazard entirely — redesign the process
2	Substitution	Replace hazardous material or process with a safer alternative
3	Engineering Controls	Machine guarding, ventilation, LOTO systems, barriers
4	Administrative Controls	Safe work procedures, training, job rotation, permit systems
5	PPE	Respirators, hearing protection, safety glasses, gloves

PPE is the last resort — not the first response. Auditors will look for evidence that higher-level controls were considered before defaulting to PPE requirements.

For specific safety management requirements in high-risk manufacturing, see ISO 45001 for High-Risk Manufacturing and OSHA vs ISO Requirements for Metal Fabrication.

---

What Documentation ISO 45001 Requires

Document / Record	Clause	Audit Risk if Missing
OH&S Policy	5.2	Major nonconformance
OH&S Management System Scope	4.3	Major nonconformance
Hazard Identification Process	6.1.2	Major nonconformance
Hazard Register	6.1.2	Major nonconformance
Risk Assessment Records	6.1.2	Major nonconformance
Legal Requirements Register	6.1.3	Major nonconformance
OH&S Objectives and Plans	6.2	Major nonconformance
Worker Participation Records	5.4	Minor to major finding
Competence / Training Records	7.2	Minor to major finding
Operational Control Procedures	8.1	Major nonconformance
Management of Change Records	8.1.3	Minor to major finding
Contractor Management Records	8.1.4	Minor to major finding
Emergency Preparedness Procedures	8.2	Major nonconformance
Emergency Drill Records	8.2	Minor to major finding
Monitoring and Measurement Records	9.1	Minor to major finding
Legal Compliance Evaluation Records	9.1.2	Major nonconformance
Internal Audit Records	9.2	Major nonconformance
Management Review Records	9.3	Minor to major finding
Incident Investigation Records	10.2	Major nonconformance
Corrective Action Records	10.2	Minor to major finding

For implementation support and documentation resources, see ISO Documentation Kits for Manufacturers and 9001Simplified Documentation Kits.

---

Common ISO 45001 Audit Findings

These nonconformities appear repeatedly in ISO 45001 certification audits:

1. Incomplete Hazard Register The most common major finding. Organizations identify obvious hazards but miss significant ones — particularly those associated with non-routine tasks, maintenance activities, contractor operations, and emergency situations. Your hazard identification process must be comprehensive and systematic, not a one-time exercise.

2. Risk Assessment Not Following Hierarchy of Controls Organizations that jump straight to PPE requirements without demonstrating that elimination, substitution, and engineering controls were considered will receive findings. The hierarchy of controls is a process requirement — not just a concept.

3. Worker Participation Not Demonstrated ISO 45001’s most distinctive requirement is also its most common finding. Saying workers are consulted is not enough — you need records demonstrating genuine participation in hazard identification, risk assessment, and incident investigation. A suggestion box doesn’t satisfy this requirement.

4. Legal Requirements Register Not Current OSHA regulations, state plans, local requirements — a register built during implementation but never maintained is a finding. Legal requirements change and your register must reflect current obligations.

5. Emergency Procedures Not Tested Having documented emergency response procedures without drill records to demonstrate they’ve been tested is a consistent finding. Drills must be conducted at planned intervals and documented.

6. Contractor Controls Missing Organizations that control hazards for their own employees but fail to extend controls to contractors and visitors operating on their premises regularly generate findings. ISO 45001 explicitly requires controls for anyone under your organization’s control or influence.

7. Incident Investigation Without Root Cause Analysis Recording that an incident occurred is not enough. ISO 45001 requires investigation to determine root causes and implementation of corrective actions that address those causes — not just the immediate symptom.

8. Management of Change Not Documented When new equipment, processes, materials, or organizational changes are introduced, the OH&S impact must be evaluated before implementation. Organizations that change without documenting the safety review generate findings.

9. Near Miss Reporting System Not Functioning ISO 45001 requires that near misses be reported, investigated, and used as improvement opportunities. Organizations with no near miss reports in their records — which suggests the reporting system isn’t functioning — raise immediate auditor concern.

For context on what non-compliance costs when these findings accumulate, see Cost of Non-Compliance in Manufacturing.

---

Maintaining Certification After Your Initial Audit

ISO 45001 certification is valid for three years — subject to annual surveillance audits in years one and two. A full recertification audit is required in year three.

Surveillance Audits (Years 1 and 2)

Annual surveillance audits verify your OH&S management system continues to operate effectively. These typically cover a subset of your system — focusing on areas of prior concern, incident trends, and corrective action status.

Recertification Audit (Year 3)

A full recertification audit at the end of your three-year certification cycle. Similar in scope to your original Stage 2 audit.

What Keeps Certification on Track

• Active hazard register maintenance as operations change
• Ongoing internal audit program covering all clauses
• Annual management review with all required inputs
• OH&S objectives monitored and updated
• Near miss and incident investigation system functioning
• Training records maintained for new and changed roles
• Emergency procedures tested at planned intervals
• Legal requirements register actively maintained

---

📥 Free Resources

• 👉 ISO 9001 Roadmap (Step-by-Step Implementation Guide)
• 👉 Manufacturing Compliance Checklist
• 👉 Supplier Quality Checklist

---

Frequently Asked Questions

---

Not Sure What to Do Next?

🔹 You’re ready to pursue ISO 45001 certification → ISOQAR ISO 45001 Certification — accredited ISO 45001 certification from an experienced certification body

🔹 You need ISO 45001 training for your team → BSI Group ISO 45001 Training — foundation through lead implementer level → ISOQAR ISO 45001 Training — accredited training from a certification body

🔹 You need the official ISO 45001:2018 standard → ISO 45001:2018 — ANSI Webstore → ISO 45001 Standards Collection — ANSI Webstore → Use coupon CC2026 for 5% off → Apply at ANSI

🔹 You need ISO 45002 implementation guidance alongside the standard → ISO 45002:2023 — ANSI Webstore

🔹 You want to save by purchasing multiple ISO standards together → Save up to 50% on ISO Standards Packages — ANSI Webstore

🔹 You need a documentation system to support your OH&S implementation → 9001Simplified Documentation Kits — documentation frameworks used by manufacturers pursuing ISO certification

🔹 You want to understand how ISO 45001 compares to other standards → ISO 9001 vs ISO 45001 → ISO 14001 vs ISO 45001 → Integrated Management Systems

🔹 You want to understand the full cost of certification → How Much Does ISO 45001 Cost? → How Much Does ISO Certification Cost? → ISO Certification Cost Calculator

---

The Bottom Line on ISO 45001

ISO 45001 certification is not just a safety credential. It is a business asset that demonstrates to customers, supply chain partners, insurers, and regulators that your organization manages workplace safety with the same rigor it applies to quality and environmental performance.

The organizations that pursue ISO 45001 proactively — before an incident forces the issue — are the ones that retain contracts, control insurance costs, and build the kind of safety culture that attracts and keeps skilled workers.

At The Standards Navigator, complex standards are translated into practical, real-world guidance you can act on.

👉 Get updates on new standards, implementation strategies, and compliance insights 👉 Be first to access new guides, tools, and checklists

Subscribe below to stay ahead.