ISO 45001 Certification in USA
Occupational health and safety management system certification for American workplaces
ISO 45001 sets requirements for an occupational health and safety (OH&S) management system that helps organizations prevent work-related injury and ill health, provide safe and healthy workplaces and continually improve OH&S performance. It relies on leadership, worker consultation, hazard identification, risk assessment and effective operational controls.
Independent certification evaluates your management system against ISO 45001 within a defined scope. It is not OSHA approval and does not guarantee that accidents will not happen.
Standard status
ISO 45001:2018 is the current standard
A revision is being drafted, but it is not published and no transition has been set. Existing ISO 45001:2018 certificates remain valid. We will add transition details only after ISO publishes the new edition and accreditation arrangements are confirmed.
- Current standard
- ISO 45001:2018Occupational health and safety management systems — Requirements with guidance for use.
- Amendment
- Amd 1:2024Climate action changes: decide whether climate change is a relevant issue (4.1); interested parties can have climate-related requirements (4.2).
- Under development
- ISO/DIS 45001A draft international standard. Its ballot closed September 2026; the outcome and next stage are pending.
- Expected edition
- ISO 45001:2027Expected name only, subject to official publication. Drafts can change before then.
A draft is a working document for comment and vote; only a published standard can be certified against. Follow updates on iso.org/standard/45001 (opens in a new tab). Amendment: ISO 45001:2018/Amd 1:2024 (opens in a new tab).
The basics
Understanding ISO 45001 occupational health and safety certification
Your OH&S management system is your work. Certification is an independent check of it.
An OH&S management system is how an organization manages work-related injury and ill health. Leadership sets direction and is accountable. Workers are consulted and take part. Hazards are identified, risks are assessed and controls are selected using the hierarchy of controls.
Incidents are investigated, emergencies are prepared for, internal audits and management reviews check performance, and the system is improved continually.
Third-party certification means a certification body audits the system and makes an independent decision for the scope on the certificate.
ISO 45001 certification concerns a management system. It is not a guarantee that accidents will not occur, not an OSHA permit, license or approval, and not a determination that you meet federal, state or local safety requirements. It does not guarantee lower insurance premiums, workers’ compensation costs or injury rates.
Requirements
Understanding ISO 45001 requirements
Clauses 4 to 10 in our own words. These summaries do not reproduce or replace the standard.
Hazard identification
Identify workplace hazards and understand occupational risks
Hazard categories include physical, chemical, biological, ergonomic, mechanical, electrical, psychosocial, vehicle and traffic, work at height, confined spaces, fire and explosion, and occupational health exposures. Choose an example below. This is education, not a risk assessment, a risk score or permission to start work. Hazardous operations need a competent, site-specific assessment and the applicable legal requirements.
Reference: OSHA hazard identification and assessment (opens in a new tab)
Hierarchy of controls
The hierarchy of controls — reducing workplace risk
Controls higher in the hierarchy are generally more effective. PPE is the least effective when used alone. One level rarely removes every risk, so several measures are often combined.
Reference: OSHA hazard prevention and control (opens in a new tab) (hierarchy model from NIOSH).
Worker participation
Building worker participation into occupational health and safety management
ISO 45001 requires consultation and participation of workers at all applicable levels, with specific emphasis on non-managerial workers. That includes removing barriers such as language, literacy, fear of reprisal and lack of time. Occasional toolbox talks alone do not meet this.
- Hazard reportingEasy channels and no retaliation.
- Safety committees and representativesA real role in decisions.
- Risk assessmentThe people who do the work help assess it.
- Incident investigationWorkers take part in finding causes.
- Changes and trainingConsulted before changes; feedback on training.
- Emergency preparednessInvolved in planning and exercises.
A five-stage participation cycle
Risk assessment
Understanding occupational health and safety risk assessment
Identify the hazard and who is exposed. Consider likelihood and severity of harm and the controls already in place, then evaluate the risk against your criteria. Select further controls using the hierarchy, and monitor the residual risk. The examples below are hypothetical: not a job safety analysis, not a risk rating and not permission to do a task.
ISO 45001 vs OSHA
ISO 45001 certification vs OSHA regulatory compliance
OSHA administers and enforces federal workplace safety and health requirements. OSHA-approved State Plans run their own programs, which must be at least as effective and may add requirements. ISO 45001 certification is not OSHA approval, OSHA does not issue ISO 45001 certificates, and a certificate does not prevent inspections or remove the legal duty to provide a safe workplace.
| ISO 45001 | OSHA | |
|---|---|---|
| Governing organization | ISO (international standards body); certification by accredited certification bodies | OSHA (US Department of Labor) or an OSHA-approved State Plan |
| Primary purpose | A management system to prevent work-related injury and ill health and improve OH&S performance | Set and enforce workplace safety and health standards |
| Voluntary or mandatory | Voluntary | Mandatory for covered employers |
| Applicable organizations | Any organization choosing to use it | Most private-sector employers; public employers where a State Plan covers them |
| Hazard management | Organization identifies hazards and selects controls through its system | Specific standards plus the General Duty Clause |
| Enforcement | None; certification can be suspended or withdrawn | Inspections, citations and penalties |
| Audits or inspections | Planned certification and surveillance audits | Inspections, including unannounced, complaint and incident-driven |
| Outcome | Certificate for a defined scope | Compliance, or citations requiring abatement |
| Legal compliance | Requires identifying legal requirements and evaluating compliance; does not certify compliance | Defines legal requirements |
| Worker rights and responsibilities | Consultation and participation; protection from reprisal for reporting | Rights to a safe workplace, to raise concerns and protection from retaliation under the law |
Contractors and procurement
Managing OH&S risks across contractors and suppliers
Your certificate does not certify your contractors. Who is responsible for what depends on regulations, including OSHA’s multi-employer worksite approach, and on contracts.
- Selection Safety performance and competence in contractor selection.
- Communication and coordination Shared work areas, permits and site rules.
- Procurement Hazards of purchased equipment and chemicals checked before buying.
- Outsourced activities Controlled within your system.
- Visitors Inductions and escorts.
| Example | Typical coordination |
|---|---|
| Construction subcontractors | Site induction, coordination meetings, permit systems |
| Maintenance contractors | Lockout coordination, work permits |
| Cleaning contractors | Chemical information, out-of-hours lone working |
| Warehouse logistics providers | Shared traffic rules, dock procedures |
| Plant equipment vendors | Installation hazards, commissioning checks |
| Temporary workers | Host and agency responsibilities, site training |
Management of change
Managing workplace safety during operational changes
Changes to machinery, materials, processes, locations, workforce, contractors, shifts, structure, technology or maintenance can introduce new hazards. Planned changes are assessed before they are made. This workflow is educational, not authorization for a real change.
- 1Proposed change
- 2Hazard review
- 3Worker consultation
- 4Control planning
- 5Implementation
- 6Effectiveness review
Incidents
From workplace incidents to continuous safety improvement
Hazard reports, near misses and injury or illness incidents are all opportunities to learn. Separately, OSHA requires reporting of a work-related fatality within 8 hours and of an in-patient hospitalization, amputation or loss of an eye within 24 hours. Certification does not replace these duties. Hypothetical example:
Reference: OSHA recordkeeping and reporting (opens in a new tab)
Emergencies
Preparing for occupational health and safety emergencies
Emergency plans must fit your actual hazards and legal requirements. This page does not give response instructions for real incidents, and a certificate does not guarantee emergency readiness.
- Identify emergencies Fire, chemical release, serious injury, equipment failure, natural hazards and site-specific events.
- Plan and communicate Roles, alarms, evacuation and coordination with emergency services.
- Competence and equipment First aid, responders and equipment.
- Exercise and evaluate Drills for each shift, reviewed afterwards.
Performance
Monitoring workplace health and safety performance
Leading indicators show activity that prevents harm; lagging indicators show harm that has happened. Low incident numbers alone do not prove effective safety management, and incentives that discourage reporting distort them. No single metric is mandatory.
Readiness check
Is your organization ready for ISO 45001 certification?
Twenty-one questions, no personal details. Answers stay in your browser unless you choose to include them in a quote request. Educational only: not a workplace inspection or certification decision.
Scope builder
Define your occupational health and safety certification scope
A preliminary summary for technical review. It does not set OH&S risk category, audit days, multi-site sampling or legal compliance. The certification body approves the actual scope.
Certification process
How to get ISO 45001 certified in the USA
Steps 1 to 6 are your preparation; steps 7 to 14 are independent certification. IAS does not implement your system or run gap analyses for organizations it certifies, and certification is not guaranteed.
What happens during ISO 45001 certification audits?
| Stage | Purpose | Audit activities | Typical evidence | People involved | Outcome |
|---|---|---|---|---|---|
| Stage 1 | Confirm readiness and plan Stage 2 | Review of scope, context, documentation, hazard identification and risk processes, legal requirements, participation arrangements, internal audit and management review | Scope, policy, risk records, legal register, audit and review records | Top management, EHS lead, worker representatives | Areas of concern; Stage 2 plan |
| Stage 2 | Assess implementation and effectiveness | Workplace observation, worker interviews, operational controls, contractor activities, emergencies, incidents, compliance evaluation, monitoring, corrective action | Direct workplace evidence, records, interviews | Managers, supervisors, workers, contractors on site | Major and minor nonconformities; certification recommendation |
Stage 2 includes site visits and direct workplace evidence. Remote methods are used only where audit and accreditation requirements allow.
Audit evidence
What documents and records may be needed for ISO 45001 certification?
ISO 45001 requires certain documented information. Other records depend on your activities; organizations do not all need the same procedures or formats.
| Document or record | Type | Related clause |
|---|---|---|
| OH&S management system scope | Documented information required | 4.3 |
| OH&S policy | Documented information required | 5.2 |
| Responsibilities and authorities | Documented information required | 5.3 |
| Risks and opportunities, and the processes and actions to address them | Documented information required | 6.1.1 |
| Methods and criteria for assessing OH&S risks | Documented information required | 6.1.2.2 |
| Legal and other requirements | Documented information required | 6.1.3 |
| OH&S objectives and plans | Documented information required | 6.2.2 |
| Evidence of competence | Documented information required | 7.2 |
| Evidence of communications, as appropriate | Documented information required | 7.4.1 |
| Operational processes, to the extent necessary | Documented information required | 8.1.1 |
| Emergency preparedness processes and plans | Documented information required | 8.2 |
| Monitoring, measurement, analysis and evaluation results | Documented information required | 9.1.1 |
| Maintenance and calibration of measuring equipment, as applicable | Documented information required | 9.1.1 |
| Compliance evaluation results | Documented information required | 9.1.2 |
| Internal audit program and results | Documented information required | 9.2.2 |
| Management review results | Documented information required | 9.3 |
| Incidents, nonconformities and corrective actions, including effectiveness | Documented information required | 10.2 |
| Worker consultation and participation records | Illustrative; depends on activities | 5.4 |
| Contractor coordination records | Illustrative; depends on activities | 8.1.4 |
| Workplace inspection records | Illustrative; depends on activities | 9.1.1 |
| Emergency drill records | Illustrative; depends on activities | 8.2 |
| Maintenance and equipment inspection records | Illustrative; depends on activities | 8.1 |
| OSHA injury and illness records, where required | Illustrative; depends on activities | Legal requirement |
Clause references follow ISO 45001:2018.
Common issues
Common challenges in occupational health and safety management
General educational examples, not findings from IAS clients.
| Potential issue | Why it matters | Illustrative evidence | OH&S consideration (clause) |
|---|---|---|---|
| Incomplete hazard identification | Unidentified hazards are not controlled | Maintenance and cleaning tasks missing from assessments | 6.1.2 |
| Outdated risk assessments | Controls no longer match the work | Assessment predates a new line | 6.1.2, 8.1.3 |
| Weak worker consultation | Workers’ knowledge of hazards is lost | No non-managerial input recorded | 5.4 |
| Inadequate contractor controls | Contractor and employee hazards interact | No coordination for shared work areas | 8.1.4 |
| Missing legal requirement evaluation | Compliance gaps go unnoticed | Legal register never evaluated | 9.1.2 |
| Ineffective management of change | New hazards introduced | Layout change without hazard review | 8.1.3 |
| Weak incident investigation | Causes recur | Investigations end at “worker error” | 10.2 |
| Poor corrective action follow-up | Problems remain | Actions open well past due dates | 10.2 |
| Incomplete emergency exercises | Response untested | No drill for night shift | 8.2 |
| Insufficient training evidence | Competence not shown | No evaluation of forklift operators | 7.2 |
| Ineffective internal audits | Problems found late | Audit skips the shop floor | 9.2 |
| Incomplete management review | Leadership not informed | Consultation results missing from inputs | 9.3 |
Industries
Industry-specific ISO 45001 applications
Examples only. Not every hazard applies to every employer.
Small businesses
ISO 45001 certification for small and growing US businesses
There is no minimum number of employees. Small businesses are not exempt from relevant OH&S requirements, and being small does not guarantee a shorter audit.
- Single-site certification Common for small organizations.
- Proportionate scope Covers your real activities and workers.
- Worker responsibilities Consultation still applies, even in small teams.
- Hazards and legal requirements Identified for your work.
- Controls and competence Proportionate to your risks.
- Internal audit and review Required, at a fitting scale.
- Cost Audit time reflects people, risk and sites.
Multiple workplaces
ISO 45001 certification for multiple workplaces
Sampling is not guaranteed, and not every site can be audited remotely. Audit planning reflects workplace hazards, certification requirements and technical review.
Request Multi-Site ISO 45001 Certification Proposal- Factories, warehouses and offices Each with its own hazards.
- Construction projects and temporary sites Planned around project timing.
- Central OH&S management Common processes audited centrally.
- Contractor activities Considered at each site.
- Different legal requirements State Plans differ from federal OSHA.
- Scope boundaries Clear sites and activities on the certificate.
OHSAS 18001
ISO 45001 and the former OHSAS 18001 standard
ISO 45001 superseded OHSAS 18001, and the migration period has ended. OHSAS 18001 is not a current equivalent.
- Organizational context New in ISO 45001.
- Leadership Top management accountability strengthened.
- Worker participation Consultation and participation, including non-managerial workers.
- Risks and opportunities For the system as well as OH&S risks.
- Integration Same high-level structure as ISO 9001 and ISO 14001.
Integrated systems
Combine ISO 45001 with ISO 9001 and ISO 14001
Shared elements include context, leadership, policy and objectives, risk and opportunity planning, competence, documented information, internal audit, management review and corrective action. Each standard keeps its own requirements, and ISO 9001 or ISO 14001 certification does not show ISO 45001 conformity. Audit time and cost are set after technical review; no reduction is guaranteed.
Request Integrated Management System Certification Quote- ISO 45001 + ISO 9001
- Shared process approach, competence and audit program. ISO 9001 certification
- ISO 45001 + ISO 14001
- Shared emergency preparedness, contractors and legal requirements. ISO 14001 certification
- ISO 9001 + ISO 14001 + ISO 45001
- One integrated program with standard-specific requirements.
Cost
How much does ISO 45001 certification cost in the USA?
Fees depend on audit time and travel. Audit time depends on effective personnel, sites, OH&S risk complexity, contractors, temporary sites, shifts and processes. No prices, audit days or discounts are published; a quotation follows technical and pricing review.
Timeline
How long does ISO 45001 certification take?
Your preparation and the certification audits are separate periods. We do not promise certification in three to six months or any set time. Tick what is in place.
Certification cycle
The three-year certification cycle
Certification is maintained through surveillance, not issued once for good.
- 1
Initial certification
Stage 1, Stage 2 and an independent decision.
- 2
Surveillance
At least once a calendar year; the first within 12 months of the decision.
- 3
Surveillance
Performance, new hazards, site and contractor changes, incident trends.
- 4
Recertification
Audit and decision before expiry.
Report significant changes in scope, sites or activities. Certificates can be suspended or withdrawn if requirements are not met.
Accreditation
Understanding IAS ISO 45001 accreditation
Accreditation is an assessment of a certification body’s competence for a defined scope. One body’s accreditation does not transfer to another, and no certificate is automatically accepted by every regulator, customer or country.
- Who issues the certificate
- For US clients, either Empowering Assurance Systems (EAS) under its JAS-ANZ accreditation, or Integrated Assessment Services LLC under its UQAS accreditation. Your proposal names the issuer.
- Recognition
- Recognition arrangements apply to accreditation bodies. IAS is not itself “IAF-accredited”, and UQAS accreditation does not by itself mean IAF MLA recognition. Ask us which applies to your issuer.
- Auditor competence
- OH&S auditor and decision-maker competence follows ISO/IEC 17021-1 and ISO/IEC TS 17021-10 (opens in a new tab).
- Checking a certificate
- Certificate number, legal entity, scope, sites, standard, current status, issuer, accreditation information and expiry date. IAS certificates: IAS certificate search. EAS certificates are verified through EAS.
Impartiality
Independent occupational health and safety management system certification
A certification body must stay independent of what it certifies.
- No consultancy IAS does not implement OH&S systems, write risk assessments or run gap analyses for organizations it certifies.
- Competence Auditors are assigned by technical sector.
- Evidence-based Conclusions rest on audit evidence.
- Confidentiality Client information is protected.
- Conflicts of interest Identified and managed.
- Independent decisions Made by people not involved in the audit.
- Complaints and appeals A documented process.
- Training is separate Training through EAS does not make certification more likely.
IAS USA
Why organizations consider IAS USA
A certification coordination team serving organizations across the US.
- Certification coordination One contact from application to certificate.
- Technical scope review Your scope reviewed against your activities and sites.
- Structured audits Stage 1, Stage 2 and surveillance planned ahead.
- Clear quotation requirements Factors explained before you agree.
- Client communication Clear reports and timelines for findings.
- Ongoing coordination Surveillance and recertification planning.
Quotation
Request your ISO 45001 certification proposal
Eight short steps. Scope builder answers are carried in only if you choose.
- A certification coordinator and an OH&S technical reviewer review your scope.
- Audit time and price are set after technical and pricing review.
- Nothing is agreed until you accept the proposal.
- Phone
- +1 (888) 493-0916
FAQ
ISO 45001 certification questions
42 answers for US organizations.
What is ISO 45001 certification?
Independent confirmation by a certification body that an organization’s occupational health and safety management system meets ISO 45001 for a defined scope.
What is the latest published ISO 45001 edition?
ISO 45001:2018, including Amendment 1:2024.
Is ISO 45001:2026 published?
No. There is no ISO 45001:2026. The current standard is ISO 45001:2018.
When is the next ISO 45001 revision expected?
A revision (ISO/DIS 45001) is under development; ISO indicates publication in 2027, but that is not confirmed. No transition period has been set.
What is the 2024 climate amendment?
It adds that organizations decide whether climate change is a relevant issue, and that interested parties can have climate-related requirements. It does not require a climate program.
Is ISO 45001 mandatory in the USA?
No. It is voluntary. OSHA requirements apply regardless.
Does ISO 45001 certification replace OSHA compliance?
No. You must still meet all applicable OSHA or State Plan requirements.
Does OSHA issue ISO 45001 certificates?
No. Certification bodies issue them. OSHA does not approve or endorse ISO 45001 certificates.
What businesses can obtain ISO 45001 certification?
Any organization, of any size or sector, that operates an OH&S management system meeting the standard.
Can a small company obtain certification?
Yes. There is no minimum number of employees, and all requirements apply.
What are the ISO 45001 requirements?
Clauses 4 to 10: context, leadership and worker participation, planning, support, operation, performance evaluation and improvement.
What is occupational hazard identification?
An ongoing, proactive process to find sources of potential injury and ill health in routine and non-routine work, emergencies and changes.
What is an OH&S risk assessment?
Evaluating the risks from identified hazards, considering existing controls, using a method the organization defines.
What is the hierarchy of controls?
An order for choosing controls: elimination, substitution, engineering controls, administrative controls, then PPE.
Why is worker consultation important?
Workers know the hazards of their jobs. ISO 45001 requires consultation and participation, including non-managerial workers, and removing barriers to it.
How are contractors addressed?
Through procurement and contractor controls that coordinate hazards and requirements between you and the contractor.
How are temporary worksite activities included?
They can be in scope. Audit planning then considers sampling of temporary sites under accreditation rules.
What is an OH&S policy?
Top management’s statement of commitments, including safe and healthy working conditions, legal requirements, eliminating hazards and worker consultation.
What documents are required?
Certain documented information, such as the scope, policy, legal requirements, objectives, competence evidence, emergency plans, monitoring results and audit and review results. Formats are your choice.
Is a safety manual mandatory?
No. ISO 45001 does not require a manual.
Is an external consultant necessary?
No. Many organizations build their system themselves. A certification body cannot act as your consultant.
What happens during Stage 1?
A readiness review of scope, context, hazard and risk processes, legal requirements, participation arrangements, internal audit and management review.
What happens during Stage 2?
An on-site audit of implementation: workplaces, controls, worker interviews, contractors, emergencies, incidents and compliance evaluation.
Can audits be conducted remotely?
Some activities may use remote techniques where accreditation rules allow. Workplace observation usually needs a site visit.
What happens when nonconformities are found?
You correct them and take corrective action. Major nonconformities must be resolved before certification.
How much does certification cost?
It depends on audit time and travel, which depend on people, sites, OH&S risk and complexity. We quote after technical review.
How long does certification take?
It depends on your system’s maturity and how quickly findings are closed. We do not promise a fixed timeline.
How long is a certificate valid?
Usually three years, subject to successful surveillance audits.
What is a surveillance audit?
An audit at least once a calendar year between certification and recertification.
What is recertification?
A full audit and decision before the certificate expires, to renew it for another cycle.
Does ISO 45001 guarantee fewer accidents?
No. Results depend on how the system is implemented.
Does certification reduce insurance premiums?
Not necessarily. Insurers make their own decisions; no reduction is guaranteed.
Does certification guarantee OSHA compliance?
No. Certification is not a compliance determination.
What is the difference between ISO 45001 and OHSAS 18001?
ISO 45001 replaced OHSAS 18001. It adds organizational context, stronger leadership and worker participation, and a risk-and-opportunity approach aligned with other ISO standards. The migration period has ended.
Can ISO 45001 be combined with ISO 9001?
Yes. Integrated audits are common; each standard keeps its own requirements.
Can ISO 45001 be combined with ISO 14001?
Yes. Shared areas include emergency preparedness, contractors and legal requirements.
Can multiple sites be certified?
Yes. Sampling depends on accreditation rules, site risks and central control, and is not guaranteed.
How is certification scope determined?
You propose it based on activities, sites and workers; the certification body reviews and accepts the final scope.
Who issues the certificate?
For US clients, either Empowering Assurance Systems (EAS) under its JAS-ANZ accreditation or Integrated Assessment Services under its UQAS accreditation. Your proposal names the issuer.
How can accreditation be verified?
Check the IAS certificate search for IAS certificates and ask for the accreditation certificate and scope. EAS certificates are verified through EAS.
Can we transfer our existing certificate?
Transfers depend on the current certificate’s status, accreditation and audit history, and are reviewed case by case.
How do we request a quotation?
Use the quotation form on this page. A certification coordinator and an OH&S technical reviewer review your details before a proposal is issued.
Related certification and training
Training is delivered by EAS and is separate from certification.
- ISO 45001 Lead Auditor training
- ISO 45001 Internal Auditor training
- ISO 9001 certification
- ISO 14001 certification
- ISO 27001 certification
- System certification
- Certification process
- Training schedule
- Contact us
- ISO lead auditor training
- Application form (DOC)
- Course or service brochure (PDF)
- Frequently asked questions