ISO 45001: A Practical Guide to Occupational health and safety management system certification

When I talk with manufacturers about ISO 45001, I do not start with the certificate. I start with the workplace.

I want to know what happens when a worker starts a machine at 8:00 a.m. I want to know how maintenance staff isolate equipment, how chemicals are stored, how contractors enter the site, how new employees are trained, and what happens when somebody reports a near miss.

That is because ISO 45001 is not simply a document exercise. It is an international standard for an occupational health and safety management system. It gives organizations a structured way to identify hazards, manage risks, protect workers, meet applicable requirements, and improve occupational health and safety performance.

The current published standard is ISO 45001:2018, with a 2024 amendment. ISO states that the standard applies to organizations of all sizes, industries, and geographic locations, and it can be integrated with other ISO management system standards. It replaced OHSAS 18001 as the international standard for this type of management system.

At GAIA Standard Technical Service Co., Ltd. (GAIA), I approach ISO 45001 from a practical manufacturing and supply-chain perspective. I look beyond whether a procedure exists. I want to see whether the procedure works, whether workers understand it, whether managers monitor it, and whether the company learns from problems.

In this page, I will walk through what ISO 45001 means, what I normally look for in an audit, how the system can help control workplace risks and improve business efficiency, how it can fit with ISO 9001 and ISO 14001, and how GAIA supports organizations working toward stronger occupational health and safety management.

1. What Is ISO 45001 and Why Do I Consider It Important?

In simple terms, ISO 45001 is a management framework for keeping people safe and healthy at work.

That sounds straightforward, but the real challenge is making safety part of normal business management.

A company may have safety signs everywhere, provide personal protective equipment, conduct annual training, and keep inspection records. Those things are useful. But they do not automatically mean the company's occupational health and safety system is effective.

I ask a different set of questions.

• Does management understand the organization's main safety risks?

• Are workers involved in identifying and controlling hazards?

• Does the company assess risks before changing a process?

• Are safety controls actually followed on the production floor?

• Are contractors and temporary workers included?

• Does the company know which legal and other requirements apply?

• Are incidents investigated properly?

• Does management check whether corrective actions really work?

• Is occupational health and safety performance improving?

These questions get much closer to the real purpose of ISO 45001.

The standard provides requirements covering organizational context, leadership and worker participation, planning, support, operation, performance evaluation, and improvement. It also uses the familiar Plan-Do-Check-Act approach, which gives companies a practical cycle for managing and improving their system.

For me, the biggest change from an old-fashioned safety approach is the move from isolated safety activities toward a connected management system.

Instead of saying, “We have a safety inspection every month,” I want to know what happens with the inspection results.

If an inspection finds a damaged machine guard, does somebody fix it? Is the responsible person clearly assigned? Is there a deadline? Is the repair verified? Is the same problem checked on similar machines?

That is where management systems become useful.

Data basis: ISO 45001:2018 management-system requirements and ISO's published explanation of the standard.

For organizations operating in international supply chains, this systematic approach can also make communication easier with customers, suppliers, workers, regulators, and other interested parties.

That is one reason I see ISO 45001 as more than a safety standard. It is a way to make occupational health and safety part of the company's normal management process.

2. What I Check During an ISO 45001 audit

When I conduct or prepare for an ISO 45001 audit, I try not to get trapped in paperwork.

Documents are important. But documents are evidence of a system, not the system itself.

I normally start by understanding the organization.

Understanding the business and its risks

A textile factory, electronics plant, metalworking company, logistics center, chemical manufacturer, and office have very different occupational health and safety risks.

So I first look at the company's activities, products, processes, employees, contractors, equipment, materials, workplace conditions, and external requirements.

This gives me the background I need to understand whether the company's risk assessment makes sense.

Leadership and responsibility

Next, I look at management involvement.

If the safety manager is the only person who cares about ISO 45001, there is a problem.

Senior management needs to understand the important OH&S risks and make sure the organization has suitable resources, responsibilities, and authority.

I also want to see whether safety objectives connect with business planning rather than being treated as a separate side project.

Worker participation

This is an area I pay close attention to.

The person doing a job every day may notice a hazard long before management does. Workers may know that a machine is difficult to clean, that a particular chemical creates discomfort, or that a certain traffic route is dangerous during a busy shift.

A good ISO 45001 system gives workers appropriate opportunities to raise these issues and participate in safety improvement.

Hazard identification and risk assessment

This is the heart of the system for many manufacturing companies.

I look at whether the organization identifies hazards from routine and non-routine activities. I may consider machinery, electricity, chemicals, noise, heat, manual handling, ergonomics, vehicles, lifting operations, maintenance, cleaning, emergency situations, contractors, visitors, and workplace changes.

I also want to see whether the organization considers risks before making significant changes.

New equipment can create new hazards. A production expansion can change worker exposure. A new supplier can introduce unfamiliar chemicals. A factory renovation can change evacuation routes.

Risk assessment should move with the business.

Legal and other requirements

ISO 45001 also requires organizations to determine applicable legal and other requirements related to occupational health and safety.

This can be challenging for international manufacturers because the requirements may vary by country, region, industry, customer contract, and operating location.

I therefore recommend keeping this process practical. A company needs to know which requirements apply, who monitors changes, what actions are required, and how compliance is evaluated.

Operational control

Then I look at what is happening on the shop floor.

Are machine guards installed and maintained? Are hazardous chemicals properly controlled? Are emergency exits accessible? Are maintenance activities managed safely? Do workers understand operating procedures? Are contractors controlled? Is PPE used where required?

This is where the difference between a paper system and a working system becomes obvious.

3. How I Use ISO 45001 to Control Workplace Risk

For me, the most valuable part of ISO 45001 is its focus on preventing problems instead of simply reacting to them.

Imagine a factory where workers use a cutting machine. The company may provide gloves and safety training. That is a start, but I would not stop there.

I would ask:

• Can the hazardous task be removed?

• Can a safer method or material be used?

• Is the machine properly guarded?

• Can the worker be physically separated from the hazard?

• Are operating procedures clear?

• Are workers competent?

• Is maintenance controlled?

• What happens if the machine jams?

• Are contractors subject to the same safety controls?

This is a much stronger way to think about safety than simply telling people to be careful.

I often use the hierarchy of controls as a practical reference. The basic idea is simple: controls that deal with the hazard at its source are generally preferable to controls that rely heavily on individual behavior.

Data basis: ISO 45001 operational planning and control principles and the established hierarchy-of-controls approach used in occupational safety practice.

Let me give another simple example.

Suppose workers are exposed to excessive noise. A weak solution is to hand out earplugs and move on.

A stronger approach asks why the noise exists. Can equipment be replaced? Can the noisy machine be enclosed? Can maintenance reduce the noise? Can workers be separated from the source? Can exposure time be reduced? Can monitoring confirm that controls are working?

PPE may still be necessary. But it should not automatically become the first and only answer.

The same thinking works for chemicals, lifting operations, electrical hazards, vehicle movement, heat, dust, and ergonomics.

When I use an ISO 45001 risk assessment as part of an audit, I am therefore interested in both the identified hazard and the quality of the control.

4. How ISO 45001 Can Improve Efficiency and Reduce Hidden Costs

Some companies see ISO 45001 as a cost because they focus on certification fees, training, documentation, and audit preparation.

I understand that view.

But I also ask management to look at the cost of poor safety management.

A serious workplace incident can interrupt production, damage equipment, create investigation work, increase overtime, affect delivery schedules, require retraining, and put pressure on customer relationships.

Not every safety improvement will create a measurable financial saving, and I would never promise a fixed percentage of cost reduction simply because a company gets ISO 45001 certified.

What I can say is that a well-managed system can reduce confusion and help organizations identify problems earlier.

Take maintenance as an example.

If every technician follows a different approach to equipment isolation, work preparation can become slow and inconsistent. A standardized process can define authorization, isolation, verification, communication, and restoration steps.

Training is another example. If managers cannot easily determine who has the competence to perform a hazardous task, the company may either take unnecessary risks or waste time arranging repeated training.

Corrective action can also become more efficient. Instead of fixing the same issue three times, the company can investigate the underlying cause and address it properly.

Data basis: ISO 45001 requirements for competence, operational planning and control, performance evaluation, corrective action, and continual improvement.

So, when I talk about “cost reduction,” I prefer to talk about better control, fewer surprises, less rework, clearer responsibilities, and more stable operations.

Those benefits are easier for a production manager to understand because they connect safety with the way the factory actually operates.

5. Using ISO 45001 to Build a Standardized Company

One thing I have learned from working with manufacturers is that growth creates complexity.

A company with 20 employees can manage many things informally. A company with 500 employees across several departments and shifts cannot rely on everyone “knowing what to do.”

This is where ISO 45001 certification can help create a more standardized management structure.

The standard gives organizations a framework, but the company still needs to build processes that fit its own business.

I usually recommend starting with a simple flow:

1. Understand the organization's activities and context.

2. Identify workplace hazards.

3. Assess occupational health and safety risks and opportunities.

4. Determine applicable requirements.

5. Set practical safety objectives.

6. Define responsibilities and resources.

7. Train and communicate with workers.

8. Implement operational controls.

9. Prepare for emergencies.

10. Monitor and measure performance.

11. Conduct internal audits.

12. Review results with management.

13. Correct problems and improve the system.

This creates a repeatable cycle.

The company is no longer depending entirely on one experienced safety manager who remembers everything. Important activities become part of the organization's normal way of working.

That is especially valuable when people change jobs, production expands, new sites open, or the company enters a new market.

ISO 45001 also fits naturally with other ISO management systems. ISO states that ISO 45001 can be integrated with other management system standards, and its structure supports common processes across systems.

For example, a company may already have:

• ISO 9001 for quality management;

• ISO 14001 for environmental management;

• ISO 45001 for occupational health and safety.

Instead of creating three completely separate systems, I encourage companies to identify shared processes such as document control, internal audit, corrective action, competence, monitoring, management review, and continual improvement.

This can make the management system easier for employees to understand and easier for management to maintain.

6. Why I Choose GAIA for ISO 45001 Certification Services

At GAIA, I believe certification and audit services should be professional without becoming unnecessarily complicated.

GAIA Standard Technical Service Co., Ltd. was established in 2021. We are a third-party auditing organization approved by the Certification and Accreditation Administration of the People's Republic of China (CNCA), with approval number CNCA-R-2022-1132, based on the company information provided for this service.

GAIA also holds International Accreditation Service (IAS) accreditation, approval number MSCB-3712, and HIGG/FEM verification qualification, ID186793. We are also a member of the Social & Labor Convergence Program (SLCP).

Our service coverage extends across Asia and beyond, with work focused on certification, audit and certification, and innovative services. Our professional areas include international ISO systems, corporate social responsibility, environmental protection, green and low-carbon development, sustainability, supply-chain quality, worker-related social responsibility, safety, and ESG.

That wider background is important to me because occupational health and safety rarely sits alone in an international supply chain.

A customer may initially ask a supplier for ISO 45001. Later, the same supplier may face questions about ISO 9001, ISO 14001, social responsibility, environmental performance, HIGG/FEM verification, ESG, or supply-chain risk.

I prefer to understand that bigger picture.

Our team brings together professionals from different industries with experience in auditing, certification, verification, management, and technical work. We aim to provide objective, professional, standardized, and rigorous services while keeping communication practical.

Our service principles are fairness, impartiality, value transmission, efficient service, and integrity. We also follow the service philosophy of professionalism, standardization, thoughtfulness, and flexibility.

For me, impartiality is particularly important in third-party certification. The assessment needs to be based on objective evidence and applicable requirements. A certification service should not become a promise that a client will receive a particular result.

Instead, I want clients to know where they stand.

If a process is strong, we can recognize it. If a gap exists, we can explain it clearly. If corrective action is needed, the organization should understand what needs to be improved and why.

That approach is especially useful for manufacturers preparing for an ISO 45001 audit for the first time.

Many companies worry about the audit because they imagine hundreds of difficult questions. In reality, good preparation is about understanding your own business, knowing your risks, implementing suitable controls, maintaining reliable evidence, and making sure employees understand what they are doing.

That is where GAIA's practical certification and audit experience can add value.

7. ISO 45001 FAQ: Questions I Hear from Manufacturers

What is ISO 45001?

ISO 45001 is an international standard for an occupational health and safety management system. It provides a framework for organizations to manage workplace risks, protect workers, meet applicable requirements, evaluate performance, and continually improve their OH&S management system. It applies to organizations of different sizes and industries.

Why was ISO 45001 introduced?

ISO 45001 was developed as an international occupational health and safety management system standard and replaced OHSAS 18001. Compared with the previous approach, it puts greater emphasis on leadership, organizational context, worker participation, risk-based thinking, and integration with other ISO management systems.

Who needs ISO 45001 certification?

Any organization can implement ISO 45001 if it wants a structured occupational health and safety management system. It is particularly relevant to higher-risk sectors such as manufacturing, construction, mining, oil and gas, agriculture, logistics, and other businesses where workplace hazards can have significant consequences.

Is ISO 45001 mandatory?

ISO 45001 itself is generally a voluntary management system standard. However, a customer, tender, contract, industry program, or other business requirement may ask a supplier or contractor to demonstrate ISO 45001 certification. Applicable laws and regulations are separate matters and must be identified according to the organization's location and activities.

What is the difference between ISO 45001 and OHSAS 18001?

ISO 45001 replaced OHSAS 18001 and introduced a broader management-system approach. It places stronger emphasis on leadership, worker participation, organizational context, risks and opportunities, and integration with other ISO management systems.

Can ISO 45001 be integrated with ISO 9001?

Yes. ISO 45001 has a structure that can work alongside ISO 9001. Companies can often integrate shared processes such as internal auditing, document control, corrective action, competence management, management review, and continual improvement.

Can ISO 45001 be integrated with ISO 14001?

Yes. ISO 45001 and ISO 14001 can be integrated because both use management-system principles and include processes related to planning, operational controls, compliance, monitoring, auditing, management review, and improvement.

What does an ISO 45001 auditor check?

An auditor may examine organizational context, leadership, worker participation, hazard identification, risk assessment, legal requirements, objectives, competence, communication, documented information, operational controls, emergency preparedness, monitoring, internal audits, management review, incidents, corrective actions, and continual improvement.

What documents do I need for ISO 45001 certification?

The exact documented information depends on the organization. Common evidence can include an OH&S policy, risk assessments, legal and other requirements, training and competence records, operational controls, emergency preparedness records, inspection and maintenance records, incident investigations, performance monitoring, internal audit results, management review records, and corrective action information.

How long does ISO 45001 certification take?

There is no fixed timeline for every company. The duration depends on company size, workforce, number of sites, operational complexity, risk level, existing management systems, and readiness. A company with mature ISO 9001 or ISO 14001 processes may be able to integrate ISO 45001 more efficiently than a company starting without a formal management system.

Does ISO 45001 guarantee zero accidents?

No. ISO 45001 provides a systematic approach to managing occupational health and safety risks; it cannot honestly guarantee that every workplace incident will be prevented. The objective is to improve the organization's ability to identify hazards, control risks, prevent work-related injury and ill health, evaluate performance, and continually improve.

Does ISO 45001 require worker participation?

Worker participation is an important part of ISO 45001. The standard gives attention to consultation and participation because workers often have direct knowledge of workplace conditions and practical risks.

Is ISO 45001 suitable for small businesses?

Yes. ISO 45001 applies to organizations of all sizes. The management system should be appropriate to the organization's activities, context, workforce, and risks. A small company does not need to create a system as complicated as that of a large multinational manufacturer.

Can GAIA support my ISO 45001 project?

GAIA provides certification, audit, verification, and related technical services within applicable scopes and arrangements. We can discuss your organization's industry, sites, workforce, existing management systems, customer requirements, and certification objectives to determine an appropriate service approach.

8. My Final Advice: Make ISO 45001 Part of the Way You Work

When I speak with a company that is considering ISO 45001 certification, I often hear, “We need the certificate because our customer requires it.”

That is a perfectly reasonable business reason.

But I always encourage management to look beyond the certificate.

The real value comes when the management system changes how the company works.

Workers know how to report hazards. Managers understand the main risks in their areas. Maintenance teams follow consistent safety controls. Contractors are properly managed. Emergency drills lead to improvements. Incident investigations look for causes instead of simply assigning blame. Internal audits identify real weaknesses. Management reviews actual performance instead of just signing paperwork.

That is when ISO 45001 starts to make sense.

I also recommend that companies avoid trying to build the perfect system on day one. Start with the real risks. Understand the requirements. Put practical controls in place. Train people. Check whether the controls work. Correct problems. Then improve.

The standard itself supports this continuous cycle. ISO describes ISO 45001 as a framework for systematically managing OH&S risks and improving performance, with leadership, worker participation, hazard identification, legal compliance, emergency planning, incident investigation, auditing, review, and continual improvement as important elements.

For manufacturers and international supply-chain companies, this approach can also support broader business goals. Better risk control can contribute to more stable operations. Clearer responsibilities can reduce confusion. Better worker communication can reveal problems earlier. Standardized processes can make it easier to manage multiple departments or sites.

At GAIA, I see our role as more than helping a company prepare for an audit. We aim to provide professional certification, audit, and verification services that help organizations understand requirements and strengthen their management practices.

Our experience covers ISO management systems, social responsibility, environmental protection, green and low-carbon development, sustainability, supply-chain quality, workplace safety, and ESG-related areas. This gives us a broader view of the challenges facing today's manufacturers and suppliers.

So if you are searching for ISO 45001, ISO 45001 certification, ISO 45001 certification services, occupational health and safety management system certification, or an ISO 45001 certification body, I recommend starting with one simple question:

What can this system do for my business beyond putting a certificate on the wall?

If the answer includes safer work, better risk control, clearer processes, stronger worker participation, improved compliance, more consistent operations, and continual improvement, then you are looking at ISO 45001 in the right way.

At GAIA, I am committed to making that process professional, practical, objective, and useful for the long-term development of your organization and your global supply chain.