ISO 45001 certification is independent proof that your organization manages health and safety at work in a planned, controlled way. It tells your clients, your workers and tender committees that an accredited certification body has checked your occupational health and safety management system against the ISO 45001 standard, and found that it works. Guardian Assessment Private Limited is a certification body accredited by the United Accreditation Foundation (UAF) and the International Accreditation Service (IAS). We audit organizations across India against ISO 45001 and issue the certificate when the requirements are met. Below you’ll find what the standard asks for, how the audit works, what drives the cost, and how to check that a certificate is genuine.
Request Quotation
What Is ISO 45001 Certification?
ISO 45001 is the international standard for occupational health and safety (OH&S) management systems. In simple terms, it sets out how an organization should identify what can hurt people at work, control those risks, meet its legal duties, involve its workers and keep getting better at it. Certification involves three parties:
- ISO publishes the standard. It does not audit companies or issue certificates.
- Your organization builds and runs a health and safety management system that meets the standard.
- A certification body like Guardian audits that system and issues the ISO 45001 certificate if it meets the requirements.
ISO 45001 follows the same structure as ISO 9001 and ISO 14001, so many companies run all three as one system.
The Evolution of ISO 45001: From OHSAS 18001 to Today
ISO 45001 is a fairly young standard, but health and safety management systems were in use long before it. This is how it got to where it is today.
- OHSAS 18001 (1999 and 2007) – The forerunner: Before ISO 45001, most organizations used OHSAS 18001, first published in 1999 and revised in 2007. It was widely recognised for health and safety management, but it was a specification developed by a group of national standards and certification bodies, led by BSI. It was never an ISO standard.
- ISO 45001:2018 – The first edition: Published in March 2018, ISO 45001:2018 was the first international standard for occupational health and safety management systems. It used the same structure as ISO 9001 and ISO 14001, and put more weight on top management accountability, worker participation, risks and opportunities, and control of contractors.
- 2021 – The end of OHSAS 18001: Organizations certified to OHSAS 18001 were given time to move to ISO 45001. The migration period, extended because of the pandemic, ended on 11 September 2021. After that date, OHSAS 18001 certificates were no longer valid.
- 2024 – Climate Action Amendment: In February 2024, ISO added a short amendment asking organizations to consider whether climate change is a relevant issue for their OH&S management system, and noting that interested parties may have climate-related requirements. This was an amendment to ISO 45001:2018, not a new edition.
- Next edition – Expected in 2027: ISO is working on a revised edition, expected in 2027. Until it is published, certification continues to ISO 45001:2018, including its 2024 amendment.
For more on ISO 45001:2018 and how it compares with OHSAS 18001, see our ISO 45001:2018 page (/iso-45001-2018/).
Who Needs ISO 45001 Certification?
ISO 45001 applies to any organization where employees, contract workers or visitors can be exposed to hazards at work. The depth of the system, and the audit time, depend on how many people work there, how risky the work is and how many sites are involved. Audit time is calculated under IAF MD 5, the international rules for audit duration. In India, organizations usually seek accredited ISO 45001 certification for these reasons:
- Tenders and procurement: central and state government departments, PSUs, CPWD, Indian Railways, NHAI and some GeM categories often ask for accredited ISO 45001 certification as a pre-qualification requirement.
- Client and vendor requirements: multinationals, EPC contractors and large companies increasingly ask their suppliers and subcontractors for third-party proof that they manage worker safety.
- High-risk work: where people work with machinery, at height, in confined spaces or with chemicals, safety can’t depend on individuals alone. It needs a system.
- Legal compliance: ISO 45001 requires you to keep a register of the laws that apply to you, such as the Occupational Safety, Health and Working Conditions Code, 2020 (which consolidates earlier laws including the Factories Act, 1948) and state safety rules, and to check regularly that you comply.
Benefits of ISO 45001 Certification
The first benefit is the obvious one: fewer people get hurt or fall ill because of their work. Beyond that, companies usually see:
- Better chances in tenders and with large clients that list ISO 45001 as a requirement.
- Clearer control of legal obligations, because the standard makes you identify them and check compliance regularly.
- Fewer incidents and stoppages, which means less lost time and fewer unplanned costs.
- More involved workers. People take safety more seriously when they are consulted and their concerns are acted on.
- Stronger trust from clients, investors and insurers, based on an independent audit rather than your own claims.
- Steady improvement, through internal audits, incident investigations and management reviews.
Request Quotation
Other Standards
Recognition
Sample Certificate
Sample Certificate
ISO 45001 Requirements
The requirements sit in clauses 4 to 10 of ISO 45001. Clauses 1 to 3 cover scope, references and definitions.
| Clause | What it covers | What auditors look for |
|---|---|---|
| 4 – Context of the organization | Your business, the issues that affect health and safety, the needs of workers and other interested parties, and the scope of the system | A defined scope and a clear understanding of what affects your OH&S performance |
| 5 – Leadership and worker participation | Top management commitment, the OH&S policy, roles, and consultation and participation of workers | Visible management involvement, and real worker consultation, not just signatures |
| 6 – Planning | Hazard identification, risk assessment, legal requirements and OH&S objectives | A working hazard and risk register, a legal register and measurable objectives |
| 7 – Support | Resources, competence, awareness, communication and documented information | Trained, competent people who know the hazards of their work |
| 8 – Operation | Risk controls, management of change, contractors, outsourcing and emergency preparedness | Controls applied on the shop floor or site, contractor control and tested emergency plans |
| 9 – Performance evaluation | Monitoring, compliance evaluation, internal audit and management review | Evidence that you measure performance and check legal compliance |
| 10 – Improvement | Incident investigation, nonconformities, corrective action and continual improvement | Incidents investigated to root cause, and actions closed |
Three things set ISO 45001 apart from other ISO standards, and we spend time on them during audits:
- Worker participation. Non-managerial workers must be consulted on things like hazard identification, risk controls and incident investigations. Auditors will speak to them directly.
- The hierarchy of controls. Risks have to be controlled in a set order: remove the hazard if you can, substitute it, use engineering controls, then administrative controls, and use PPE as the last line of defence.
- Contractors and outsourced work. Your system has to cover the risks from contractors and outsourced activities, not only your own employees.
How to Get ISO 45001 Certified
Are you ready to apply?
You’re usually ready for the certification audit when:
- your OH&S management system is set up and in use, with a defined scope, a policy and clear responsibilities
- hazards and risks have been identified for all your activities and sites, including work done by contractors
- you have a register of the laws that apply to you, and you’ve checked whether you comply
- controls, training and emergency arrangements are in place, and workers have been consulted along the way
- you’ve completed at least one internal audit and one management review
If a few of these are still in progress, it’s better to finish them first. It makes the audit quicker and avoids findings that could have been fixed in advance. Guardian is an impartial certification body. We audit and certify management systems; we don’t build or document them for clients.
The ISO 45001 certification process at Guardian
- Application Review: We assess your submitted application, operational facilities, shift patterns, workforce headcount, and sector classification to verify our accredited competence and scope alignment.
- Audit Planning: Audit duration is formally calculated in strict accordance with IAF MD 5 guidelines based on risk category and effective personnel count. We assign a technically qualified audit team with industry experience and provide a detailed audit plan.
- Stage 1 Audit: The audit team reviews your documented framework, HIRA methodology, legal register, and internal audit/management review evidence to determine operational readiness for Stage 2.
- Stage 2 Audit: Auditors conduct comprehensive on-site assessments across your operational areas, evaluating operational controls, interviewing managerial and non-managerial staff, observing ongoing work activities, and validating safety records.
- Technical Review: To ensure total objectivity, the complete audit file, findings, and evidence are evaluated by an independent Technical Review committee member who had no participation in the audit.
- Certification Decision: Upon satisfactory technical review and closure of any nonconformities, Guardian Assessment officially issues your accredited ISO 45001 certificate.
Surveillance and Recertification: Accredited certification operates on a three-year cycle. Annual surveillance audits are conducted at the end of Year 1 and Year 2 to verify system maintenance, followed by an in-depth recertification audit in Year 3 prior to certificate expiration.
How Long Does It Take to Get ISO 45001 Certified?
It depends mostly on how ready you are. A company with a working hazard register, a legal register, training records and a few months of records behind it can move from application to certificate quite quickly. A company still setting up its system will take longer. The number of sites and any nonconformities raised also affect the timeline. Once issued, an ISO 45001 certificate is valid for three years, as long as the annual surveillance audits go well.
What Is the Cost of ISO 45001 Certification?
There is no fixed price for ISO 45001 certification. Every organization is different, so the cost is worked out for each one based on its own situation. The main things that affect it are the size of the organization, its location and number of sites, the nature and complexity of its operations, how its processes link together, and how well the OH&S management system has already been implemented. As a general rule, a small organization doing low-risk work will pay less than a large organization with high-risk operations across several sites.
In practice, the cost comes down to three things: how ready your system is, how many audit days are needed, and the certification fee (also called the registration fee). Audit days are calculated under accreditation rules, based on the number of workers (including contractors working under your control), the risk level of your work, and the number of sites and shifts. The quotation covers the full three-year cycle: the initial certification audit, two surveillance audits and recertification. Guardian prepares your quotation after considering all of these factors. To request one, fill in application form F-01, available on our Downloads page , and send it to us. You can also email us at info@guardiancertification.com or use the Contact Us page to submit your enquiry. If you need more than one standard, you can apply for ISO 45001, ISO 9001 and ISO 14001 together in the same application.
How to Check an ISO 45001 Certificate Is Genuine
A certificate is only as good as the body that issued it. A certification body audits companies. An accreditation body checks that the certification body is competent and impartial. When that accreditation body is a signatory of the International Accreditation Forum (IAF) agreement, the certificates are recognised across IAF member countries. Tender committees check ISO 45001 certifications more and more, so it’s worth confirming before you choose a certification body. To check a certificate:
- Check it with the certification body. Guardian certificates can be checked on our client search (https://search.guardiancertification.com/).
- Check the certification body’s accreditation in the accreditation body’s directory. Guardian is listed by UAF and IAS.
- Check IAF CertSearch (www.iafcertsearch.org), the global database of accredited management system certifications.
Why Choose Guardian as Your ISO 45001 Certification Body
- Accredited by UAF and IAS. UAF accredits Guardian for its applicable certification activities, and IAS accredits Guardian as a management system certification body under ISO/IEC 17021-1. [Confirm that ISO 45001 is within both scopes and for which sectors.]
- Auditors who know your sector. We assign auditors based on your industry and risk level.
- Impartial. We audit and certify. We don’t consult on the systems we certify, and every decision is reviewed independently.
- Combined audits. Certify ISO 45001 with ISO 9001 and ISO 14001 and cut down on audit days.
- Based in India. Our head office is in Lucknow, Uttar Pradesh, and we certify companies across India.
- Easy transfer. If you hold an accredited ISO 45001 certificate from another body, you can transfer it to us without restarting your cycle.
Integrating ISO 45001 With ISO 9001 and ISO 14001 (IMS)
Many organizations bring health and safety, quality and environmental management together into one Integrated Management System (IMS). Instead of running three separate systems, you work with one set of procedures and less duplicate paperwork. Under IAF MD 11, the international rules for auditing integrated systems, the total number of on-site audit days can also be reduced. Guardian Assessment provides accredited IMS audits combining ISO 45001 with:
- ISO 9001 (Quality Management System)
- ISO 14001 (Environmental Management System)
- ISO/IEC 27001 (Information Security Management System)
- ISO 37001 (Anti-Bribery Management System)
- ISO 21001 (Educational Organizations Management System)
Note: Guardian Assessment also provides compliance assessments for specialized frameworks, including ISO 22000 (Food Safety), ISO 13485 (Medical Devices), ISO 50001 (Energy), ISO/IEC 27701 (Privacy), ISO/IEC 20000-1 (IT Service Management), ISO 41001 (Facility Management), ISO 55001 (Asset Management), and ISO/IEC 42001 (Artificial Intelligence).
Apply for ISO 45001 Certification
Tell us about your company, your sites and the work you do, and we’ll take you through the application, audit planning and certification. You can apply for ISO 45001 alone or together with ISO 9001 and ISO 14001.
Frequently Asked Questions (FAQ)
Here are the answers to the questions we hear most often about ISO 45001 certification.
Ans) ISO 45001 is a modern, international standard launched in 2018. It updates and improves on the old OHSAS 18001 by making top management responsible, including every type of work risk (from machines to stress), and by using a design that fits other standards. It puts more focus on leadership, worker consultation, and using information from incidents to prevent repeats.
Ans) Not usually, but many big customers and government projects require it for contracts. It also helps you show government inspectors that you’re doing everything the law requires for health and safety.
Ans) Absolutely! Whether you make jam in a small kitchen or have an auto repair shop, you can adapt the standard just for your risks and resources. Many small companies start with a focused, simple version and expand as they grow.
Ans) This means the 2018 version of the standard—the newest edition with improvements fitting today’s workplaces. It’s the only valid version for businesses starting certification now.
Ans) They review and revise all policies and systems, update risk registers, add leadership participation, train everyone, and go through a new external audit.
Ans) You’ll have to keep the system active: record incidents, run audits, make improvements, and pass “surveillance” audits every year. Every three years, a more thorough review is required.
Ans) Yes. You can extend your OHSMS to include safety checks and controls for logistics partners, maintenance contractors, or anyone else working at your site.
Ans) Healthcare firms need infection logs, equipment checks, and extra training for emergencies. Equipment renters should keep test records on cranes, checklists for handovers, and operator licenses as part of their OHSMS.