ISO 45001 specifies requirements for an occupational health and safety (OH&S) management system. It connects everyday decisions with preventing work-related injury and ill health. This article explains how organizations identify hazards, choose controls, involve workers and check effectiveness. It also clarifies the current edition and certification limits, using a hypothetical example to connect the steps.
What does the standard cover, and which edition applies?
A management system connects responsibilities, processes, resources and reviews. Organizations of different sizes can use it. However, arrangements depend on activities, locations, workers and contractors. Start by defining the scope and the organization’s control and influence, instead of copying another organization’s procedures.
As checked on 6 October 2026, ISO lists the 2018 edition as current, with ISO 45001:2018/Amd 1:2024 addressing climate change. A successor is under development. A draft is not a final standard and does not itself establish a certification transition deadline. Monitor ISO and your certification body’s official communications.
The 2024 amendment adds consideration of whether climate change is relevant to the organization’s context. It also highlights climate-related requirements of interested parties. Editorial examples include reviewing extreme heat during outdoor work or disruption to ventilation. Assess relevance using evidence, then address the OH&S implications. This does not turn the system into a general emissions-accounting programme.
Leadership, consultation and worker participation
Top management remains accountable for the system and its resources. Consultation means seeking workers’ views before making decisions. Participation means involving them in decision-making. For example, a supervisor can first gather views about handling equipment, then involve workers in evaluating options and checking suitability.
Workers need time, understandable information and a way to report concerns without fear of retaliation. They should know how to report a hazard, who follows it up and what action results. Remove language and access barriers. Attendance at a meeting does not prove that workers influenced the decision.
From hazards to risk assessment
A hazard has the potential to cause injury or ill health. OH&S risk combines the likelihood of harm with its severity. A moving forklift is a hazard. The possibility of hitting a worker and the severity of injury inform the risk assessment.
Examine actual work with those who perform it, including cleaning, maintenance, emergencies and unusual tasks. Identify exposed people, existing controls and how controls might fail. Use the assessment to prioritize action. A score in a register cannot replace necessary protection or justify continuing work with unacceptable risk.
Occupational health also includes exposure to noise, dust, chemicals, physical strain and work-related psychosocial factors. Harm may emerge slowly, so an absence of accidents is insufficient evidence. Competent specialists should determine exposure monitoring and health surveillance needs while protecting confidential health information.
Choose controls in a clear order
The hierarchy of controls prioritizes addressing hazards at their source. The following sequence follows NIOSH guidance, with editorial examples. Select controls for the assessed task; several levels may be needed together.
This is an order of preference, not a reason to delay protection while studying options. Use effective interim controls where permanent solutions take time. Protective equipment should not become the only measure simply because it is easier to purchase.
Obligations, change, contractors and emergencies
Identify legal requirements and other obligations relevant to the activities and locations. In practice, connect each obligation to an action, owner, evidence and evaluation date. Collecting legal texts does not demonstrate compliance. OSHA references here provide technical guidance; they are not presented as UAE legislation.
Before buying equipment, changing materials or outsourcing work, assess new hazards and effects on existing operations. In the editorial approach suggested here, purchasing specifies safety conditions, specialists check equipment suitability, and supervisors verify user competence. Coordinate with contractors about hazards created by both parties, supervision and permits where applicable.
Base emergency arrangements on credible site scenarios. Establish who raises the alarm, contacts assistance, manages evacuation and accounts for people. Drills should test communications and assistance needs. Record weaknesses, correct them and verify the correction. An attendance sheet alone is insufficient.
Worked example: separate pedestrians and forklifts
Hypothetical example for illustration, not an ATMACSS or client result. A warehouse worker reports a forklift passing close by at a loading door. Inspection finds that pedestrian and forklift routes intersect. Vehicle movement is the hazard. Exposed people include workers, visitors and contractor personnel.
The operations manager immediately secures the area and prevents uncontrolled interaction. Workers, the supervisor and a competent specialist then examine moving the pedestrian entrance to eliminate the crossing. If that is impracticable, they assess barriers and a controlled crossing. They check visibility, stopping distances and escape routes before approving the design. Traffic instructions, training, supervision and high-visibility clothing support the assessed arrangements. Clothing does not replace separation.
Assume the verification plan includes 20 field observations over 2 weeks and different shifts. In 18 observations, all specified separation conditions are met. In 2, uncontrolled interaction occurs. The observed conformance rate is 18 ÷ 20 × 100 = 90%. This hypothetical sample does not measure injury probability or demonstrate a 90% reduction in risk.
The team does not use the overall percentage to conceal the 2 failures. It secures the affected area, investigates why separation failed, adjusts the arrangements and repeats verification. Maintenance schedules barrier checks, and the supervisor checks performance during peak loading. The example explains decision-making; it is not an engineering design suitable for every warehouse.
Learn from incidents and check effectiveness
First protect people, provide assistance and secure the area. Then collect evidence and investigate contributing causes, including design, maintenance, workload and instructions. Corrective action addresses causes to prevent recurrence. Retraining alone is insufficient when the problem lies in a barrier or work arrangement.
Combine outcome measures, such as injuries and exposures, with prevention measures, such as control inspections and timely hazard correction. More reports do not automatically mean deteriorating safety; reporting may have improved. Examine the concerns and evidence rather than rewarding silence.
Plan–Do–Check–Act (PDCA) organizes the cycle: assess risks and set objectives, implement controls, check their effects and address weaknesses. Internal audits assess implementation against requirements. Management uses audit results and performance information to decide on resources and improvements.
Certification and a practical next step
An independent certification body assesses system conformity within the certificate’s scope. Certification does not guarantee zero injuries or replace compliance obligations. Reading this article is also insufficient to establish conformity with every requirement.
Start with an actual task. Identify hazards with its workers, review obligations, select controls and assign implementation responsibility and evidence of effectiveness. Read more about learning from near misses. An organization’s plan can also connect with ISO implementation and certification readiness support.
Frequently asked questions
Can a small office use the system?
Yes, with controls matching its hazards, such as workstation conditions, evacuation and contractor activities. Do not copy factory procedures simply to produce more documents.
Does a manager’s signature make a risk acceptable?
A signature does not remove a hazard or applicable obligations. Assess control adequacy and evidence of effectiveness before deciding whether work can continue.
Should we wait for the next edition?
Do not delay protecting workers. Continue applying the published edition and its amendment, then follow official arrangements when a final update is released.