We accept Apple Pay Google Pay & 3 interest-free instalments via Klarna · 0330 124 2165
Workplace Safety & Risk

ISO 45001 Explained: What It Is, What It Requires and How to Get Certified

ISO 45001 is the international standard for health and safety management systems. Here is what it requires, clause by clause, and how certification works.

Published 6 October 2026 3 min read
Auditor with a laptop and a health and safety manager reviewing records at a desk

ISO 45001 is the international standard for occupational health and safety management systems. It sets out what an organisation needs in place to manage health and safety systematically and improve over time. It is voluntary, but many clients, particularly in construction and the public sector, ask suppliers for certification.

The structure of ISO 45001

ISO 45001 follows the same high-level structure as ISO 9001 (quality) and ISO 14001 (environment), which makes it easier to run an integrated management system.

ClauseTitleWhat it covers
4Context of the organisationInternal and external issues, the needs of workers and other interested parties, and the scope of the system.
5Leadership and worker participationTop management commitment, the health and safety policy, roles and responsibilities, and consultation and participation of workers.
6PlanningHazard identification, assessing risks and opportunities, legal requirements and objectives.
7SupportResources, competence, awareness, communication and documented information.
8OperationOperational controls, the hierarchy of controls, management of change, procurement and contractors, and emergency preparedness.
9Performance evaluationMonitoring and measurement, evaluating legal compliance, internal audit and management review.
10ImprovementIncidents, nonconformities, corrective action and continual improvement.

ISO 45001 and Plan, Do, Check, Act

The standard is built on the Plan, Do, Check, Act cycle, the same model HSE uses in HSG65. Clauses 4 to 6 are mostly Plan, 7 and 8 Do, 9 Check and 10 Act. An organisation already following HSG65 will find much of ISO 45001 familiar.

What changed from OHSAS 18001?

  • A stronger emphasis on leadership and top management accountability
  • Worker consultation and participation built in throughout
  • Understanding the organisation’s context and interested parties
  • Risks and opportunities, not only hazards
  • Stronger requirements for contractors and procurement

OHSAS 18001 has been withdrawn, and organisations certified to it had to migrate to ISO 45001.

The 2024 climate change amendment

In 2024, ISO amended ISO 45001 and other management system standards to require organisations to consider whether climate change is a relevant issue in their context, and whether interested parties have climate-related requirements.

How certification works

  1. Build and run your management system, with records showing it works.
  2. Carry out internal audits and a management review.
  3. Choose a certification body, ideally one accredited by UKAS.
  4. Stage 1 audit: a review of your documentation and readiness.
  5. Stage 2 audit: an assessment of how the system works in practice.
  6. Certification, followed by surveillance audits, usually each year, and recertification every three years.

No. The law requires employers to manage health and safety effectively, and certification is one way to demonstrate it. Certification does not replace legal compliance, and a certified organisation can still breach the law. We hold three UKAS-accredited ISO certifications ourselves, and explain why that matters.

Training that helps

The NEBOSH National General Certificate covers health and safety management systems, including ISO 45001 and HSG65, and the NEBOSH HSE Certificate in Health and Safety Leadership Excellence helps leaders drive the commitment the standard requires. Our Level 6 NVQ in Occupational Health and Safety suits experienced practitioners who manage systems day to day.

Frequently asked questions

What is ISO 45001?

The international standard for occupational health and safety management systems, published in 2018.

Is ISO 45001 mandatory in the UK?

No. It is voluntary, but many clients ask suppliers for it as evidence of good health and safety management.

What replaced OHSAS 18001?

ISO 45001. OHSAS 18001 has been withdrawn.

How long does ISO 45001 certification last?

Certificates usually run for three years, with surveillance audits in between, typically every year.

Read the source

ISO 45001:2018, Occupational health and safety management systems, and its 2024 amendment on climate action; HSE guidance HSG65, Managing for health and safety; and UKAS information on accredited certification. Facts checked on 6 October 2026.

When can we do it

Find a date that works

Every course, every centre, with live availability and prices.

On your site or ours, and group rates on request.

Tell us what the job is and who is doing it, and we will point you at the right thing rather than the dearest thing.
Skip to main content