What is ISO 45001 certification?
- What it managesWorkplace hazards, worker participation and the incidents you are trying not to repeat.
- Who certifies to itManufacturing plants, construction and infrastructure contractors, oil and gas, logistics, mining and any site with contract labour.
- Why it matters in IndiaEvidences the safety systems the Factories Act, 1948, the BOCW Act and the OSH Code already expect of you.
ISO 45001 is the international standard for an occupational health and safety management system. It replaced OHSAS 18001, whose certificates expired on 30 September 2021, and it goes further in two places: top management cannot delegate safety accountability, and workers, including contract workers, must genuinely participate in hazard identification.
Edition status. The revision is at Committee Draft stage with ISO/TC 283 and publication is expected in 2027. The 2018 edition is the certifiable version until then.
Climate action amendment. Amendment 1:2024 added climate change to the clause 4.1 context requirement.
OHSAS 18001 no longer exists, and neither do its certificates
ISO 45001:2018 replaced it, and the migration period ended on 30 September 2021. Any certificate still citing OHSAS 18001 is expired, regardless of the date printed on it. If a client pre-qualification form still asks for OHSAS 18001, what they need today is ISO 45001, and saying so in the bid is usually treated as competence rather than pedantry.
Who needs ISO 45001?
Certification is almost always triggered by a specific buyer requirement rather than an internal decision. These are the segments where it comes up.
| Segment | What usually triggers it |
|---|---|
| Manufacturing plants and foundries | Machinery, thermal and chemical hazards, and buyer safety pre-qualification |
| Construction and infrastructure contractors | Client pre-qualification and BOCW obligations across multi-agency sites |
| Oil, gas, chemicals and power | High-consequence hazards and contractor-heavy operations |
| Logistics, warehousing and ports | Material handling and vehicle interaction risk |
| Facility management and housekeeping services | Deployed workforce on client premises |
| Mining and heavy engineering | Statutory safety regimes and client audit programmes |
The auditable clauses of ISO 45001:2018
What each clause actually demands, and what an auditor will ask to see against it.
| Clause | Title | What it requires |
|---|---|---|
| 4 | Context of the organisation | Internal and external issues, interested parties and their requirements, and the certification scope in writing. Since the 2024 climate amendment you must also determine whether climate change is a relevant issue. |
| 5 | Leadership | Top management accountability, a signed policy, and roles and responsibilities assigned and communicated. Auditors interview leadership directly, and delegation to a quality manager is a finding. |
| 6 | Planning | Risks and opportunities, measurable objectives, and documented plans setting out what will be done, by whom, with what resources and how results are evaluated. |
| 7 | Support | Resources, competence, awareness, communication, and control of documented information including version control, access and retention. |
| 8 | Operation | Eliminating hazards and reducing risk through the hierarchy of controls, management of change, procurement and contractor control, outsourcing, and documented emergency preparedness and response tested through drills. Contractor management is where multi-agency Indian sites are most often found wanting. |
| 9 | Performance evaluation | Monitoring and measurement, internal audit covering every clause by independent auditors, and a management review with all required inputs. |
| 10 | Improvement | Nonconformity handling with root cause analysis, corrective action, verification of effectiveness, and continual improvement of the system. |
What ISO 45001 actually gets you
Client pre-qualification
Site safety pre-qualification is a standing requirement on infrastructure, oil and gas and large industrial contracts.
Fewer incidents, evidenced
Hierarchy of controls and management of change move you upstream of the incidents you keep investigating.
Contract labour comes inside the system
Clause 8.1.4 pulls contractors into your controls, which is where multi-agency Indian sites carry most of their exposure.
Statutory obligations get mapped
The legal requirements register turns the Factories Act, BOCW and state rules into a tracked list with owners.
Workers report near misses
Clause 5.4 participation plus protection from reprisal is what makes near-miss reporting real rather than nominal.
Completes the QHSE set
Integrates with ISO 9001 and ISO 14001 into one system with one audit programme.
Documented information ISO 45001 requires
The records an auditor will ask for, and the clause behind each one.
| Document or record | Why the auditor wants it |
|---|---|
| OH&S policy and scope | Clause 5.2, including a commitment to consultation and participation of workers, which auditors verify with workers. |
| Worker consultation and participation records | Clause 5.4. Safety committee minutes, toolbox talks and evidence that non-managerial workers were involved in hazard identification. |
| Hazard identification and risk assessment records | Clause 6.1.2, covering routine and non-routine activities, emergency situations, human factors and changes. |
| Legal and other requirements register | Clause 6.1.3, mapping the Factories Act, BOCW Act, state rules and licence conditions that bind your site. |
| OH&S objectives and plans | Clause 6.2, measurable and resourced, with leading indicators, not only accident counts. |
| Competence, training and awareness records | Clause 7.2, including induction for contract workers and job-specific competence. |
| Hierarchy of controls evidence | Clause 8.1.2, showing elimination and substitution were considered before personal protective equipment. |
| Management of change records | Clause 8.1.3, for new processes, equipment, layouts and workforce changes. |
| Contractor and procurement control records | Clause 8.1.4, including contractor selection criteria and site induction records. |
| Emergency preparedness plans and drill records | Clause 8.2, tested and reviewed, with participation records. |
| Incident investigation and corrective action records | Clause 10.2, with root cause analysis, not attribution to worker carelessness. |
| Internal audit reports and management review minutes | Clauses 9.2 and 9.3, mandatory before stage 2. |
How to get ISO 45001 certified
Nine stages. The last two are set by ISO/IEC 17021-1 and are the same for every standard, which is why a second certification costs far less than the first.
Gap analysis against the standard
We audit what you already do against every auditable clause of ISO 45001 and hand back a gap register, not a sales document. Most organisations are already meeting 40 to 60 percent of the requirements without having written them down.
Scope, context and risk
Fix the certification scope in writing, the sites, processes and exclusions it covers, then build the clause 4 context, interested parties and the risk register that the auditor will trace everything else back to.
Documented information
Policy, objectives, process maps, procedures and the records each clause requires. We supply working templates and adapt them to how you actually operate, because an auditor tests the system you run, not the one you filed.
Implementation and training
Roll the system out across the departments in scope and run awareness training, plus competence training for the people who will hold specific responsibilities. Keep attendance and competence records; they are audited.
Internal audit
A full internal audit covering every clause and every process in scope, by someone independent of the work being audited. Findings are logged as nonconformities and closed with corrective action, and this evidence is mandatory before a certification body will proceed.
Management review
Top management formally reviews performance against the standard's required inputs: audit results, objectives, nonconformities, feedback and improvement opportunities. Minutes are a stage 1 audit deliverable.
Stage 1 audit (readiness)
The certification body reviews your documentation, confirms the scope, checks your internal audit and management review are real, and identifies what it will focus on in stage 2. Findings here are usually fixable in days.
Stage 2 audit (implementation)
An on-site or remote audit of the system in operation: interviews, records and evidence sampled against each clause. Major nonconformities must be closed before a recommendation for certification; minors are closed within an agreed window.
Certificate issued, then maintained
The certification body issues a certificate with a three-year cycle. Surveillance audits follow in years one and two, and a recertification audit before the third anniversary. Miss a surveillance audit and the certificate can be suspended or withdrawn.
Check accreditation before you buy a certificate
ISO writes standards. It does not audit anyone, does not issue certificates and does not permit its logo to be used on one, so any certificate that presents itself as issued by ISO is wrong on its face. A certificate is worth what its accreditation is worth. In India the accreditation body is the National Accreditation Board for Certification Bodies (NABCB), which operates under the Quality Council of India, accredits certification bodies against ISO/IEC 17021-1, and is a signatory to the IAF Multilateral Recognition Arrangement, which is what makes an Indian certificate acceptable abroad. Before signing, ask for the certification body's accreditation number, confirm the standard and scope are inside its accredited scope, and verify the certificate on the accreditation body's directory or on IAF CertSearch. A certificate issued in 24 hours with no audit is not a certificate a tender committee, an OEM or an enterprise security review will accept.
Start with a ISO 45001 gap analysis
A free consultation with an IncorpX certification specialist: what you already meet, what is missing, an honest timeline, and what the audit will cost.
What ISO 45001 costs
Two separate costs, paid to two different parties. Anyone quoting a single all-in number for an accredited certificate is quoting one of them and hoping you do not ask about the other.
| Cost | Paid to | What drives it |
|---|---|---|
| IncorpX professional fee | IncorpX | Fixed and quoted upfront. From ₹8,999 for ISO 45001, depending on scope, sites and how much of the system already exists. |
| Certification audit fee | The certification body | Audit days, calculated from effective headcount, number of sites and sector risk category under the IAF mandatory documents. |
| Surveillance audit fees | The certification body | Years 1 and 2 of the cycle. Typically a fraction of the initial certification audit. |
| Recertification audit fee | The certification body | Before the third anniversary, to issue a new three-year certificate. |
| Auditor travel and expenses | The certification body | At actuals, where the audit is conducted on site. |
The cheapest quote is usually the unaccredited one
If one quotation is dramatically below the others, the difference is almost never efficiency. It is the audit days. An accredited certification body cannot reduce audit duration below what the IAF mandatory documents require for your headcount and risk category, so a quote that undercuts that arithmetic is either not accredited for ISO 45001, or is not planning to conduct the audit it is quoting for.
Other ISO standards for your sector
Ordered by how often they are held alongside ISO 45001. Because clauses 4 to 10 are shared, a second standard is largely new operational content rather than a new system.
ISO 45001 guides and reference reading
Longer reference reading on ISO 45001 and on ISO certification generally.
Frequently asked questions about ISO 45001
12 questions answered against ISO 45001:2018 and the ISO/IEC 17021-1 certification rules as they stand in August 2026.
Get ISO 45001 certified without the guesswork
Talk to an IncorpX certification specialist for free. Accredited certification bodies, an honest timeline, and a gap analysis before you commit.
Nebin Binoy 
