Have hazard assessments and handovers been updated when equipment or shifts change? An OH&S management system should connect hazards, controls and reporting responsibilities so managers and workers can check whether risks are being properly addressed.
Discuss your OH&S management needs
1. Standard history and revision overview
ISO 45001:2018 specifies requirements and guidance for an occupational health and safety management system. It replaced OHSAS 18001:2007. Its Annex SL structure supports integration with quality and environmental management systems and emphasizes leadership accountability, worker consultation and participation, and systematic management of hazards, risks and opportunities. OHSAS 18001 also included prevention and hazard control; it should not be reduced to reactive, post-incident improvement.ISO overview
Current edition and next-edition status
| Item | Status checked as of 29 September 2026 |
|---|---|
| Current basis | ISO 45001:2018 and Amendment 1:2024 on climate action. |
| 2024 amendment | Clause 4.1 adds the need to determine whether climate change is a relevant issue; a note in 4.2 reminds organizations that relevant interested parties may have climate-related requirements. |
| Next edition | ISO/DIS 45001 remains under development. The official catalogue shows stage 40.60, indicating the DIS ballot closed on 9 September 2026. |
| Expected publication and transition | The next edition is planned for 2027, but publication timing and final content may change. A three-year transition period is not yet a formal requirement. |
Sources: ISO 2024 amendment, ISO revision project and DNV revision and transition update.
This page focuses on the current 2018 edition and 2024 amendment. Draft information is for forward planning. It is based on public information; the paid standard text was not obtained. This page does not replace the official standard or a clause-by-clause conformity assessment.
The OHSAS 18001 transition is a historical arrangement
The migration period from OHSAS 18001 to ISO 45001 was extended during the pandemic and ended on 30 September 2021. Organizations still using the old system should establish or complete their system against current ISO 45001 requirements and confirm the applicable initial certification process with a certification body. The expired transition arrangement cannot be reused.UKAS migration-extension notice
2. Key differences between OHSAS 18001 and ISO 45001:2018
The following describes the historical change between editions; these are not requirements newly added in 2026.
- Structure and organizational context: Clauses 4–10 connect organizational issues, worker and other relevant-party needs, and day-to-day management.
- Leadership accountability: The standard no longer requires a role specifically titled “management representative.” An organization may retain a coordinator or existing title, but top management cannot transfer its system accountability.
- Worker consultation and participation: Non-managerial workers’ views and involvement in decisions matter. Provide time, information and suitable mechanisms, and address barriers such as language, literacy or fear of adverse consequences.
- Risks and opportunities: In addition to OH&S hazards, consider risks and improvement opportunities that can affect the system’s intended results.
- Change, procurement and contractor interfaces: Manage risks from new equipment, work arrangements, procurement, contractors and outsourced activities.
- Documented information and performance: Documents should support actual control, evaluation and improvement. Document count or injury count alone does not establish system effectiveness.
The term “workers” is not limited to directly employed staff. Contractors, agency workers and others working under the organization’s control should be addressed in light of their work and the control relationship. Risks to visitors and other affected people also need consideration, but not every relevant party has the same worker status or participation arrangement.
3. Current Clauses 4–10 and practical interpretation
4. Context of the organization
Identify internal and external issues that affect the intended results of the OHSMS, understand the needs of workers and other relevant parties, determine which needs become legal or other requirements, and define the system’s boundaries and applicable activities.
2024 amendment: Determine whether climate change is relevant to OH&S. Outdoor heat, stormwater creating access hazards or a typhoon disrupting emergency evacuation can be starting points for context assessment. When relevant, connect the issue to hazard identification and risk controls. This does not mean every company must conduct a carbon inventory.
Practical advice: Retain the basis for decisions and resulting actions; a list of issue names alone is insufficient. The system scope should reflect work activities the organization controls or influences. Do not narrow the scope to avoid risks that should be included, or arbitrarily exclude applicable requirements when claiming conformity.
5. Leadership and worker participation
- 5.1 Leadership and commitment: Top management retains overall responsibility and accountability, provides resources, supports a safety culture and protects good-faith reporting.
- 5.2 OH&S policy: Set commitments suited to the organization’s context, including safe and healthy work, eliminating hazards and reducing risks, meeting applicable requirements, continual improvement, and worker consultation and participation.
- 5.3 Roles, responsibilities and authorities: Define and communicate responsibilities. Tasks can be assigned, but top management remains accountable.
- 5.4 Consultation and participation: Enable workers to express views before relevant decisions and participate in hazard identification, controls and incident improvement. Distinguish consultation from participation; neither should be reduced to meeting attendance.
Practical advice: Track a workplace suggestion: who responds, how it informs a decision, when improvements are made, and whether different shifts and contractors have suitable channels to raise issues.
6. Planning
6.1 Risks and opportunities: Consider routine and non-routine work, people, equipment, work organization, past incidents and potential emergencies. Identify hazards, assess risks and opportunities, and plan actions.
6.2 OH&S objectives: Where practicable, objectives should be measurable or otherwise capable of performance evaluation. Plan resources, responsibilities, timing and evaluation of results. Do not force every objective into a number or use “zero reporting” to discourage disclosure.
Change management is in Clause 8.1.3 of the current 2018 edition. Do not describe draft clause 6.3 numbering as a current requirement.DNV explanation of current and draft numbering
7. Support
Provide resources, competence, awareness, communication and necessary documented information in line with the work and its risks. Training and information should account for language, literacy, shifts and the work needs of relevant external personnel.
Practical advice: When new equipment arrives, check not only operating instruction but also maintenance, abnormal-condition response, incident reporting and emergency information. Verify competence by whether people can perform the work, not just by training hours. Risk assessments, training, change and improvement records should be traceable.
8. Operation
8.1.1 Operational planning and control
Establish and implement operational controls suited to workers. Coordinate activities in shared workplaces. Controls should reflect actual hazards and risks, with necessary evidence retained.
8.1.2 Eliminating hazards and reducing OH&S risks
Apply the hierarchy of controls: elimination, substitution, engineering controls and reorganization of work, administrative controls (including training), and suitable personal protective equipment. Measures can be combined; awareness campaigns or PPE alone should not automatically close an issue.
8.1.3 Management of change
Plan temporary or permanent changes that may affect OH&S performance, such as changes to equipment, processes, sites, personnel or working conditions. Consider unintended consequences and reduce adverse effects where necessary.
Practical advice: Before modifying equipment, have operations, maintenance, OH&S and relevant contractors review hazards and controls together. After start-up, check whether the controls are effective.
8.1.4 Procurement, contractors and outsourcing
Clause 8.1.4.1 addresses procurement, 8.1.4.2 contractors and 8.1.4.3 outsourcing. Coordinate hazard controls, establish contractor selection and OH&S requirements, and manage outsourced work according to the work and the organization’s degree of control.
Practical advice: Include site-entry conditions, simultaneous operations, contact points and stop-work reporting in the arrangements. Confirm management requirements and each party’s legal responsibilities separately; statements such as “the contractor is fully responsible” or “the client is fully responsible” do not replace clear task allocation.
8.2 Emergency preparedness and response
Prepare responses for identified potential emergency situations, provide training, test and exercise the arrangements periodically, and review them after exercises or incidents. Whether fire, spills or extreme weather are included depends on actual work and risks.
For clause-number mapping, see the BSI ISO 45001 and OHSAS 18001 mapping guide.
9. Performance evaluation
- 9.1 Monitoring and evaluation: Plan monitoring methods and timing; evaluate OH&S performance and compliance with legal and other requirements.
- 9.2 Internal audit: Plan audits according to process importance, changes and previous results. Ensure auditor competence and objectivity, and follow up findings.
- 9.3 Management review: Top management reviews the system, connecting performance, incidents, nonconformities, worker consultation and participation, relevant changes and resource needs to decisions and follow-up.
Practical advice: Use lagging indicators such as injuries alongside leading indicators such as completion of hazard improvements and control checks. Interpret report counts together with severity, exposure and reporting culture; an increase alone does not prove that management has worsened.
10. Improvement
When an incident or nonconformity occurs, respond promptly, assess causes and similar issues, involve appropriate workers, take action and evaluate effectiveness. Continually improve the system and OH&S performance.
Practical advice: Record immediate correction, cause, control changes and follow-up verification separately. “Zero accidents” can be an organizational aspiration, but it does not guarantee ISO 45001 certification and should not be used to suppress or punish reporting.
4. Six steps to implement or update the system
These steps apply to a new implementation, improvement of a legacy system or an update to an existing ISO 45001 system. They do not reopen the expired OHSAS 18001 transition period.
Step 1: Gap assessment
Use ISO 45001:2018 and Amendment 1:2024 to review leadership accountability, worker participation, change, contractors, risk controls and climate relevance. Record gaps, owners and due dates. Track the next-edition draft separately until its final requirements are published.
Step 2: Form a cross-functional team
Include management, environment and safety, production, procurement, line supervisors and appropriate worker representatives. Plan resources, training, document updates, implementation, internal audits and management reviews.
Step 3: Provide role-based training
- Top management: accountability, resources, worker participation and safety culture.
- Internal auditors: current requirements, climate amendment, audit methods and evidence evaluation.
- Site workers and relevant contractors: hazards, controls, reporting, changes and emergency arrangements related to their work.
Step 4: Update necessary documented information
Update existing procedures, work instructions and forms according to the gaps. If the organization uses an OH&S manual, revise it as needed. Worker participation, change and contractor management can be integrated into existing processes; each topic does not need a separate document by default.
Step 5: Implement, audit and review
Build enough operating records to evaluate effectiveness, confirm that documents match workplace practice, and complete internal audits, improvements and management review. Set the implementation period according to the process and certification arrangements rather than a universal number of months.
Step 6: Confirm the certification route and undergo audit
New applicants follow the certification body’s initial-certification process. Existing ISO 45001 organizations are assessed through their surveillance or recertification arrangements. When a new edition is published, plan transition according to formal rules. A certificate is issued only after the certification body completes its review and decision; consultancy does not guarantee a pass.
5. Common misconceptions
Is changing the OHSAS 18001 document title enough?
Check actual processes, responsibilities, participation and evidence. The historical migration period has ended; confirm the applicable certification route now.
If there is an OH&S officer, do managers need to participate?
Specialists can coordinate implementation, but top management remains accountable and must provide resources. Removing the required “management representative” role does not prohibit a coordination contact.
Is contractor safety entirely the contractor’s responsibility?
The organization still manages procurement, contractor and outsourcing interfaces under the standard, especially shared sites and simultaneous operations, while clarifying each party’s responsibilities under applicable law.
Do more incident reports mean worse management?
More reports may also mean workers feel safer raising concerns. Review incident type, recurrence and improvement outcomes, and protect workers from adverse treatment for reporting.
Is the 2024 amendment too minor to address?
Determine whether climate change is relevant and connect it to risk and management actions when it is. Adding a sentence to a policy is not enough, but the amendment also does not require every organization to conduct a carbon inventory.
Are the 2027 edition and a three-year transition period confirmed?
The next edition is still a draft in development. Content, publication and transition rules must be confirmed through later official notices. Maintain the current system and monitor the project status.
Service scope and consultation
Captain International can discuss system implementation, hazard and control process reviews, worker training, internal audits and external-audit preparation. The actual scope, timing, fees and professional responsibilities are agreed after requirements are understood. Certification is decided by the independent certification body handling the application.
You may prepare a summary of sites, shifts, contractor interfaces, current certificates and recent operational changes, along with de-identified incident, hazard-assessment and improvement records. System certification does not replace statutory inspections, required qualified personnel or necessary workplace protections.