ISO 45001 — OH&S Management

What does ISO 45001:2018 require?

ISO 45001:2018 asks for more than a binder of safe work procedures. It requires leadership that takes accountability for worker health and safety, a process that keeps finding hazards before they cause harm, and controls chosen in a set order of preference. The requirements below are the ones a certification auditor tests most closely.

Who needs ISO 45001 certification in Canada?

ISO 45001 certification is voluntary, but it is often a condition of doing business. Construction contractors and fabricators meet it in prequalification for large projects, and oil, gas and energy operators often expect it from contractors working on high-consequence sites. Manufacturers supplying industrial customers may also find OH&S management questions in supplier assessments.

The standard also fits organizations whose incident investigations stop at the worker, or whose safety program depends on one coordinator's memory.

In Ontario, the Occupational Health and Safety Act generally requires a joint health and safety committee in workplaces where 20 or more workers are regularly employed, and a health and safety representative in most workplaces with six to 19 workers. An existing committee or representative is a natural channel for the worker participation ISO 45001 requires, but the standard expects input to reach decisions on hazards and controls, not only to be recorded in meeting minutes.

How long does ISO 45001 certification take in Canada?

A first ISO 45001 certification typically takes four to eight months for a single-site operation. The time goes into hazard identification and risk assessment for each task and area, the legal register, training and competence records, and enough operating history to show the system working.

Several factors move the timeline and the cost. A site with high-risk work, such as confined spaces, working at heights, energized equipment or hazardous substances, needs more detailed risk assessments and controls. Multiple sites, shift work and heavy use of contractors add to the work, because each must be covered by the system and visible to the auditor.

Existing programs shorten the project. An employer that already maintains a written health and safety policy, job hazard analyses, a working committee and an incident investigation process is often formalizing and connecting what exists rather than writing new material.

Certification body fees are quoted in audit days, which depend on headcount and the risk level of the work. A free readiness check gives you a scored view of your gaps before you set a target date.

Preparing for the ISO 45001 certification audit

The certification audit runs in two stages. Stage 1 reviews the documented system, the scope, the hazard and legal registers and your readiness. Stage 2 tests the system where the work happens: the auditor walks the floor, watches tasks, checks guarding and lockout practice against your procedures, and talks to workers.

Workers should be able to explain the hazards of their own job, how to report a concern or near-miss, and what changed after the last incident. If the answers do not match the paperwork, the auditor will follow the gap.

Incident investigations should reach root cause and show controls chosen through the hierarchy, not only retraining or a reminder to be careful. Before Stage 1, complete an internal audit and a management review, and close the corrective actions they raise.

Choose a certification body accredited for ISO 45001, either by the Standards Council of Canada or by another signatory to the International Accreditation Forum (IAF) Multilateral Recognition Arrangement. After certification, expect annual surveillance audits and a recertification audit in the third year. The six-stage certification process shows how ISO Certification Consultants plan the work from gap analysis to certificate.