Occupational Health and Safety Management Systems — Requirements with Guidance for Use
Specifies requirements for an occupational health and safety management system, built on the same high-level structure as ISO 9001 and ISO 14001 — context, leadership, planning, support, operation, performance evaluation and improvement — with worker participation and consultation as distinctive requirements.
What this does not cover
stated in the document's own scope- It addresses the health and safety of workers and others affected by the organisation’s activities, not the quality of the product; GMP gowning and containment that protect the product are a separate obligation.
- It does not set occupational exposure limits or product-specific safety requirements; those come from national occupational-safety law and specialised standards.
- Conformity does not establish compliance with national OH&S legislation, which remains the binding requirement in each jurisdiction.
Always verify against the current published text before relying on it for a submission or inspection.
Overview
ISO 45001 specifies the requirements for an occupational health and safety (OH&S) management system, so that an organisation can provide safe and healthy workplaces by preventing work-related injury and ill health and continually improving its OH&S performance. It establishes criteria for an OH&S policy, objectives, planning, implementation, operation, auditing and review. Its key elements include leadership commitment, worker participation, hazard identification and risk assessment, legal and other requirements, emergency planning, incident investigation and continual improvement. It applies to organisations of all sizes and sectors, regardless of their level of risk.
Scope & applicability
Occupational health and safety for workers and others affected by an organisation’s activities. In a regulated site it shares rooms, people and procedures with the quality system without sharing its objectives: gowning that protects the operator and gowning that protects the product are the same act performed for opposite reasons, and where they conflict the conflict is real.
Legal basis & how it acquires force
It is a voluntary International Standard, first edition ISO 45001:2018, published in March 2018. It replaced the earlier British standard OHSAS 18001 as the recognised reference for OH&S management systems. ISO confirmed it at systematic review in 2024 and it carries one published amendment; ISO states that a revision is planned for publication as ISO 45001:2027, with a draft international standard in progress. Certification is voluntary and is carried out by independent certification bodies, not by ISO; the binding obligations for workplace safety remain those of national occupational-safety law.
Document structure
| Part | Covers |
|---|---|
| Clauses 4–5 — Context and leadership | The organisation’s context, interested parties and scope, top-management commitment, the OH&S policy and the participation of workers |
| Clause 6 — Planning | Identifying hazards, assessing OH&S risks and opportunities, determining legal and other requirements, and setting objectives |
| Clause 7 — Support | Resources, competence, awareness, communication and documented information |
| Clause 8 — Operation | Operational planning and control, including eliminating hazards and reducing risks, and emergency preparedness and response |
| Clauses 9–10 — Performance evaluation and improvement | Monitoring, measurement and performance evaluation, internal audit and management review, incident investigation, corrective action and continual improvement |
Key requirements
- Clause 4.1 — determination of external and internal issues, including whether climate change is relevant (Amendment 1:2024)
- Clause 5.4 — consultation and participation of workers, including non-managerial workers
- Clause 6.1.2 — hazard identification and assessment of OH&S risks and opportunities
- Clause 8.1.2 — elimination of hazards and reduction of risks following the hierarchy of controls
- Amendment 1:2024 adds climate-action considerations; a revision is at Draft International Standard stage
Implementation tips
- Integrate the risk assessment with the GMP one rather than running two: the same operation is being assessed and the controls interact, most obviously in containment and gowning
- The hierarchy of controls is the part that transfers directly into quality thinking — eliminating a hazard by design beats a procedure, for the same reason it does in contamination control
Where this control fails
live FDA enforcementLive FDA recalls SPEQ maps to this standard’s topics — a SPEQ interpretation, not an FDA classification.
International alignment
ISO 45001 follows ISO’s high-level, now harmonized, structure for management system standards, which ISO notes makes it easier to integrate with other management systems. It is commonly paired with ISO 9001 for quality and ISO 14001 for environmental management, and it uses the Plan-Do-Check-Act cycle. ISO 45003:2021 adds guidelines on managing psychosocial risks within an OH&S management system.
ISO 45001:2018: frequently asked questions
Quick answers to common questions about ISO 45001:2018.
What did ISO 45001 replace?
It replaced the British standard OHSAS 18001 as the recognised reference for occupational health and safety management systems. ISO 45001:2018 was the first edition.
Is ISO 45001 certification mandatory?
No. Certification is voluntary and is performed by independent certification bodies, which may be accredited by national accreditation bodies. ISO itself does not certify organisations.
Is a new edition of ISO 45001 coming?
Yes. ISO confirmed the 2018 edition in 2024, and states that a revision is planned for publication as ISO 45001:2027, with a draft international standard in progress.
This standard in practice
Recall domain is a SPEQ mapping of this standard’s topics, not an FDA classification.