ISO 45001 replaced OHSAS 18001 in 2018 as the international standard for occupational health and safety management systems. The transition is now well behind us, and most organisations that were going to certify have done so. The remaining question is operational: are these certified OH&S management systems actually reducing harm, or are they producing certificates that survive audits without changing the conditions employees and contractors actually work in?
What ISO 45001 Adds Over Its Predecessor
The most significant change from OHSAS 18001 is the High-Level Structure that ISO 45001 shares with ISO 9001, ISO 14001, and ISO 27001 — context, leadership, planning, support, operation, performance evaluation, improvement. This makes integrated management systems substantially more achievable. Beyond structure, ISO 45001 strengthens leadership accountability, expands worker participation requirements, requires explicit consideration of the broader organisational context, and adopts a more risk-based approach.
Worker Participation Is Not Optional
Clause 5.4 — Consultation and participation of workers — is one of the most distinctive elements of ISO 45001. The standard requires organisations to provide mechanisms, time, training, and resources to enable workers (and their representatives) to participate meaningfully in OH&S management. This is not a check-the-box requirement. The auditor will look for evidence that workers contribute to hazard identification, incident investigation, OH&S policy development, and improvement decisions. Programmes that operate without genuine worker participation tend to miss the hazards employees know about and management does not.
The Hazard Identification That Actually Catches Hazards
A formal hazard identification process exists in most OH&S programmes. The quality varies substantially. Strong implementations operate hazard identification continuously rather than as an annual exercise — incident reports, near-miss reports, employee observations, and routine workplace inspections feed a living hazard register. Weak implementations produce the hazard register once, file it, and update it when an audit is approaching. The difference shows up in incident rates over time.
A useful diagnostic for an OH&S programme: how does a frontline worker who notices a hazard get it into the system, and what happens next? If the path is clear (defined channel, acknowledged within hours, action assigned within days, feedback to the reporter), the programme is functional. If the path involves emailing a generic safety inbox that nobody monitors actively, the formal programme exists in the document and not in the workplace.
Leadership Commitment as a Tested Requirement
ISO 45001 requires top management to demonstrate leadership and commitment to the OH&S management system explicitly — taking accountability, ensuring the policy is communicated, integrating OH&S into the organisation's broader processes, providing resources, supporting the OH&S management system. Auditors interview leadership and ask for evidence. Programmes where the OH&S manager carries the system without genuine top management involvement reliably produce findings on this requirement.
Integration With Other Management Systems
The shared High-Level Structure makes integrated management systems much more practical than they were under OHSAS 18001. Organisations with ISO 9001 and ISO 14001 typically integrate ISO 45001 alongside — single internal audit programme, shared management review, integrated risk register where appropriate, common document control. The integration is not just operational efficiency. It also tends to produce stronger systems because the connections between quality, environmental, and safety performance are visible rather than siloed.
The Outcome That Matters
A certified ISO 45001 programme should produce measurable reductions in incident rates, lost-time injuries, and severity over time. Programmes that hold certification for years without trending improvement in these metrics are running a documentation regime, not a management system. The standard is a tool. The outcome is fewer people harmed at work. Implementations that keep that outcome in view stay useful; implementations that treat the certificate as the goal drift toward irrelevance.