ISO 45001 – Occupational Health and Safety Management
Systematic, preventive management of worker-related risks — from operational safety to leadership responsibility.
This page is Regcytech’s own plain-language explanatory material. It is not the official text of the ISO standard, not legal advice, not a certification or audit opinion, and it does not replace buying the official standard or consulting an accredited certification body.
Executive summary
ISO 45001 is the international framework for occupational health and safety (OHS). It is about how an organisation can reduce, at system level and preventively, the risks affecting its workers and people connected to the work.
Companies engage with it because a safe workplace directly affects people and the stability of operations, and because OHS practice is increasingly a foundation of the social part of sustainability and supplier assessments.
In business terms, OHS helps organise safety so it is not post-incident reaction but deliberate prevention: clear responsibilities, risk management and regular attention from leadership.
What does this standard help organise?
In plain terms: an OHS system typically helps clarify and keep in order questions like these.
- Where the actual workplace risks are, and which are most important.
- How we keep daily operations safely in hand.
- How we bring contractors and visitors on site into the safety regime.
- How we prevent incidents instead of reacting after an accident.
- How training and worker consultation run.
- How we prepare for emergencies.
- How leadership keeps safety on the agenda.
Typical documents and evidence
In a readiness project, documents and evidence like these typically come up. This is not an official requirement list.
- OHS policy
- Scope and sites / roles
- OHS risk assessment
- OHS objectives
- Responsibilities and roles
- Training and awareness records
- Operational and emergency controls
- Contractor and visitor records
- An accident / near-miss log
- Internal audit evidence
- Management review material
- An improvement plan and OHS indicators
Practical readiness questions
- Do we know where worker risk is greatest?
- Is there an owner for OHS, and does everyone know their role?
- Is our risk assessment up to date for actual work?
- Do workers get real, understandable training — and is there a trace of it?
- Do we bring contractors and visitors into the safety regime?
- Do we prevent, or only react after an accident?
- Do we keep an accident and near-miss log even when there is no event?
- Are we prepared for emergencies — do we have drills?
- Do we consult workers about safety?
- Does leadership keep OHS on the agenda?
- Do we learn from events, or do they recur?
- Could we answer the OHS part of an ESG or supplier questionnaire with evidence?
Common misunderstandings
- They confuse the OHS policy with actual operation.
- They treat OHS as paperwork only, not preventive practice.
- They do not maintain evidence (training, inspection, accident log).
- They use generic templates without company-specific adaptation.
- Leadership is not meaningfully involved.
- Contractor and visitor risk is not managed.
- Risk, objective and action are not connected.
Connection to other frameworks
A well-ordered OHS practice can often be useful evidence for other assessments too. These can connect, but do not guarantee compliance.
- ESG social pillar: OHS indicators, training and actions can support demonstrating the social part.
- Worker safety and wellbeing: preventive practice can also connect to operational stability.
- Contractor risk: on-site safety coordination can often be useful evidence in questionnaires.
- Supplier and customer due diligence: demonstrable OHS practice can strengthen trust.
Recent and upcoming changes
The current basis of ISO 45001 is the 2018 edition, complemented by the 2024 climate-change amendment, which at a high level extends the examination of operating context and interested parties with this perspective. In OHS this can, for example, draw attention to worker impacts such as heat stress or extreme weather.
According to official ISO pages, the next revision of the standard is under development. Exact publication and transition questions should be confirmed only from official ISO/IAF sources.
Certifier transition and application deadlines must always be agreed with the given certification body and confirmed against official ISO/IAF communication. This page provides a readiness perspective, not a legal or certification guarantee.
How can Regcytech support you?
We work in an advisory, system-building role — not as a certifier. Typical support at the readiness level:
- a gap review between current practice and a working OHS system
- building a documentation and evidence system
- organising the risk-assessment and action logic
- support in drafting training and emergency practice
- a management summary of key gaps and priorities
- a readiness roadmap
- support for the OHS part of ESG and supplier questionnaires
- preparation for later discussion with an accredited certification body
What Regcytech does not provide
Regcytech works in an advisory, system-building role. The compliance and certification boundaries are clear:
- We do not issue ISO certificates.
- We do not perform accredited certification audits.
- We do not provide a legal compliance guarantee.
- We do not replace the official standard.
- We do not replace the position of a certification body or a legal advisor.
Let’s see where your system stands
A short preliminary gap review maps what is already in place and where it is worth building a reusable evidence system — with no obligation.