ISO 45001 is the international standard for occupational health and safety management systems. It was first published in 2018 and replaced the earlier OHSAS 18001. This section of the Knowledge Base covers every clause of the standard in plain language, explaining what each requirement means in practice and what you need to do to comply.
The standard provides a framework for an organisation to manage its occupational health and safety responsibilities in a systematic way. It applies to any organisation regardless of size, sector or location, and it covers the health and safety of workers, visitors, contractors and anyone else who could be affected by the work carried out under the organisation's control or influence.
The intended outcomes of an OH&S management system include continual improvement of OH&S performance, fulfilment of legal requirements and other requirements, and achievement of OH&S objectives. The structure follows the same Annex SL high-level layout used by ISO 9001 for quality and ISO 14001 for environment, which makes integration practical for organisations seeking single, double or triple certification.
ISO 45001:2018 replaced OHSAS 18001:2007. Organisations that held OHSAS 18001 certification had a three-year transition window which closed in 2021. The new standard introduced a stronger focus on top management leadership, the active participation of workers, and a risk-based approach that integrates OH&S with the wider management of the business. Hazard identification, the hierarchy of controls and emergency preparedness all carried over from OHSAS 18001 with sharper definitions.
The alphaZ documents are designed around an integrated management system approach. The IMS1 Manual structure covers the requirements of ISO 45001:2018 alongside ISO 9001 and ISO 14001 in one set of documents, so organisations seeking single, double or triple certification do not need parallel documentation. The ISO 9001/14001/45001 IMS Toolkit provides the full set of documents needed to build an integrated system. For organisations focused only on health and safety, the standalone ISO 45001 Toolkit covers ISO 45001 on its own.
People worry ISO 45001 is going to bury them in new paperwork. It does not. If you have decent risk assessments, a working policy, training records, accident reporting that gets used, and management who care about the place being safe, you are most of the way there. The standard just asks you to join the dots.
The first things I look at when auditing against ISO 45001 are the hazard identification process and the worker consultation arrangements. Both are central to the standard and both are where weak systems show up. I want to see a clear method for identifying hazards across routine and non-routine activities, and evidence that workers at all levels have been involved in shaping the system, not just told about it after the fact.
Leadership commitment matters too. I expect to talk to top management about how they own OH&S performance, not just where the policy is filed.
Most of the heavy lifting in ISO 45001 sits in clause 6.1.2, hazard identification and assessment of risks and opportunities. Get that right and the rest of the system follows from it.
The new ground compared to OHSAS 18001 is mostly around worker participation under clause 5.4 and management of change under 8.1.3. If you already run a sensible H&S committee and review changes properly when you bring in new equipment or change a process, those clauses describe what you already do. The hierarchy of controls in 8.1.2 has not changed but it is now more visibly required to be applied.
For us, ISO 45001 working in practice means accident stats trending down, toolbox talks happening on schedule, and people flagging hazards before they become incidents. We track near misses as carefully as accidents.