Introduction

Maintaining a safe workplace requires systematic planning, employee involvement, risk control and continuous monitoring.

For organisations preparing for occupational health and safety certification, understanding ISO 45001 requirements is an essential first step.

ISO 45001:2018 provides an internationally recognised framework for developing an Occupational Health and Safety (OH&S) Management System.

The standard helps organisations manage workplace hazards, improve safety performance and prevent work-related injuries and ill health.

However, successful implementation requires more than preparing policies and collecting documents.

Businesses must demonstrate that their safety management processes are practical, effective and consistently followed.

This ISO 45001 requirements checklist explains the main clauses, important records, audit preparations and common implementation mistakes.

What Are ISO 45001:2018 Requirements?

ISO 45001:2018 specifies requirements for establishing, implementing, maintaining and continually improving an OH&S management system.

It applies to organisations across construction, manufacturing, healthcare, logistics, engineering and other industries.

Unlike a prescriptive safety manual, ISO 45001 does not establish identical operating procedures for every business.

Each organisation must determine the controls appropriate to its workplace hazards, activities, workforce and legal obligations.

Businesses can learn more about the formal assessment process through ISO 45001:2018 certification.

The requirements are organised into clauses, with Clauses 4 through 10 containing the main management-system requirements.

Clause 4: Context of the Organisation

The first major requirement involves understanding the organisation and its operating environment.

Businesses must identify relevant internal and external issues that could affect their OH&S management system.

These could include workforce characteristics, operating conditions, contractor activities, regulatory requirements or changes in technology.

Organisations must also understand relevant interested parties and determine the scope of their management system.

Checklist:

• Identify relevant internal and external issues.

• Determine the needs of workers and other interested parties.

• Define the OH&S management-system scope.

• Establish the processes necessary for the management system.

• Consider whether climate change is a relevant issue under the 2024 amendment.

A manufacturing company, for example, might assess machinery hazards, contractor arrangements and changing workplace conditions when defining its scope.

Clause 5: Leadership and Worker Participation

ISO 45001 requires top management to demonstrate leadership and commitment to occupational health and safety.

This includes ensuring that safety objectives align with organisational direction and that appropriate resources are available.

Management should establish an OH&S policy, assign responsibilities and support worker consultation.

Workers must have meaningful opportunities to participate in relevant safety decisions.

Checklist:

• Establish and communicate an OH&S policy.

• Define responsibilities and authority.

• Demonstrate management involvement.

• Create processes for worker consultation.

• Encourage reporting of hazards and incidents.

• Address barriers that prevent workers from participating.

An organisation should not treat safety participation as a paperwork exercise. Workers need accessible ways to raise concerns and contribute to improvements.

Clause 6: Planning

Planning is one of the most important elements of ISO 45001 implementation.

Organisations must identify hazards, assess OH&S risks and opportunities, determine relevant legal requirements and establish suitable objectives.

Risk assessments should reflect routine activities, non-routine tasks, emergencies and relevant workplace changes.

Checklist:

• Establish a hazard identification process.

• Assess relevant OH&S risks.

• Consider opportunities to improve performance.

• Identify applicable legal and other requirements.

• Plan actions to address risks and opportunities.

• Establish measurable OH&S objectives.

• Assign responsibility for achieving those objectives.

For example, a warehouse may identify pedestrian and forklift interactions as a significant risk.

Its response could include segregated routes, revised operating procedures, worker training and routine monitoring.

The organisation should assess whether these controls actually reduce the risk.

Clause 7: Support

An effective OH&S management system depends on suitable resources, competent workers, communication and controlled information.

Businesses must determine the resources needed to operate their system.

Workers should understand relevant hazards and have the competence necessary to perform assigned tasks safely.

Checklist:

• Provide sufficient people, equipment and resources.

• Identify competence and training needs.

• Maintain appropriate evidence of competence.

• Communicate relevant OH&S information.

• Establish internal and external communication arrangements.

• Control required documented information.

Training records alone do not establish competence. Organisations should evaluate whether workers can perform their tasks safely.

Clause 8: Operation

Operational planning and control translate safety policies into practical workplace arrangements.

Organisations must establish processes to eliminate hazards and reduce OH&S risks.

ISO 45001 uses the hierarchy of controls, prioritising more effective measures before relying on personal protective equipment.

Checklist:

• Establish operational risk controls.

• Apply the hierarchy of controls.

• Manage relevant organisational changes.

• Establish appropriate procurement controls.

• Coordinate activities involving contractors.

• Address outsourced functions where applicable.

• Prepare for potential emergencies.

• Test emergency arrangements where appropriate.

For instance, installing machine guarding is generally a stronger risk-reduction measure than relying solely on written warnings.

Businesses with complex contractor arrangements may benefit from the industry-specific guidance on ISO certification for construction companies.

Clause 9: Performance Evaluation

An OH&S management system must be evaluated regularly to determine whether it works as intended.

Organisations should monitor relevant safety performance indicators and assess compliance with applicable obligations.

Internal audits and management reviews are essential parts of this process.

Checklist:

• Identify relevant OH&S performance measures.

• Monitor and evaluate performance.

• Evaluate compliance with applicable requirements.

• Conduct planned internal audits.

• Report findings to relevant management.

• Complete management reviews.

• Retain evidence of decisions and actions.

Possible performance indicators include completed safety inspections, corrective-action closure, training effectiveness and reported near misses.

Metrics should support real improvements rather than encourage underreporting of incidents.

Clause 10: Improvement

The final main clause focuses on learning from incidents, addressing nonconformities and continually improving performance.

Organisations must establish processes for investigating incidents and correcting problems.

This should include identifying underlying causes and evaluating whether corrective action is effective.

Checklist:

• Establish incident-reporting processes.

• Investigate incidents and nonconformities.

• Determine causes and necessary actions.

• Implement corrective actions.

• Review whether actions were effective.

• Identify further opportunities for improvement.

For example, repeated slips in a production area should prompt an investigation into workplace conditions, maintenance, drainage and cleaning arrangements.

Simply reminding workers to be careful may not address the underlying cause.

ISO 45001 Documentation Checklist

Although ISO 45001 does not prescribe a single mandatory manual or fixed set of templates, certain documented information is required by its clauses.

Additional records may be necessary to demonstrate effective implementation.

This table is a practical preparation guide, not a complete reproduction of every documented-information requirement in the standard.

Organisations should consult the official ISO 45001 text to establish which records are specifically required for their system.

ISO 45001 Internal Audit Checklist

Before requesting external certification, organisations should conduct an internal audit against the applicable requirements.

A useful internal audit should examine whether processes exist, whether employees follow them and whether evidence demonstrates effective operation.

Auditors may review documents, interview workers and inspect relevant workplace activities.

Important questions include:

1. Are significant workplace hazards identified?

2. Are risk controls appropriate and implemented?

3. Are workers consulted on safety matters?

4. Are applicable legal requirements identified and evaluated?

5. Are employees competent for assigned work?

6. Are contractor arrangements controlled?

7. Are incidents investigated effectively?

8. Are corrective actions completed and evaluated?

9. Does management review safety performance?

10. Is the organisation improving its OH&S system?

Audits should identify genuine weaknesses rather than simply confirm that forms have been completed.

Common ISO 45001 Implementation Mistakes

Several issues can reduce the effectiveness of an OH&S management system.

One common problem is using generic risk assessments that do not reflect actual workplace conditions.

Another is treating worker consultation as a formal requirement without allowing employees to influence decisions.

Some organisations focus heavily on document preparation while overlooking operational evidence.

Other weaknesses include incomplete contractor controls, ineffective incident investigations and corrective actions that do not address underlying causes.

Businesses can avoid these mistakes by implementing processes early and evaluating how they work in practice.

Where quality, environmental and safety systems are maintained separately, an Integrated Management System may help coordinate shared management processes.

Preparing for ISO 45001 Certification

A typical preparation sequence begins with defining the certification scope and reviewing current safety arrangements.

The organisation then identifies gaps, establishes necessary processes and implements controls.

After retaining suitable operating evidence, it should conduct an internal audit and management review.

An external certification assessment normally includes Stage 1 and Stage 2 activities, followed by corrective-action review and an independent certification decision.

Certification timelines vary according to organisational complexity and readiness.

Frequently Asked Questions

What is the latest published ISO 45001 edition?

As of October 2026, ISO 45001:2018 remains the published edition, with a climate-action amendment issued in 2024. A further revision is under development.

Is an ISO 45001 manual mandatory?

The standard does not require one universal document called an OH&S manual. It requires specified documented information and other evidence needed for an effective management system.

How often should ISO 45001 internal audits be conducted?

Audits must take place at planned intervals. Frequency should reflect the organisation's risks, processes, changes and audit-programme requirements.

Can ISO 45001 integrate with ISO 14001?

Yes. Common management-system processes can be integrated, while each standard's specific requirements must still be addressed.

Conclusion

This ISO 45001 requirements checklist provides a practical starting point for OH&S managers preparing for implementation or certification.

The strongest systems combine leadership commitment, worker participation, effective risk control, reliable records and ongoing performance evaluation.

Organisations should focus on demonstrating safe working practices rather than merely collecting documents.

Preparing for an ISO 45001 audit?

London Cert provides information about assessment scope, certification stages and readiness requirements. Explore the ISO 45001 certification process to plan your next steps.