ISO 45001:2018 — OH&S Management

Yes. ISO 45001 explicitly requires organisations to manage OH&S risks from contractors and subcontractors performing work under the organisation's control.

Partially. Per IAF MD 5:2023, process control and OH&S risk control cannot be audited remotely — on-site auditing remains mandatory for these elements.

ISO 45001:2018 fully replaces OHSAS 18001. All OHSAS 18001 certificates have expired. CAS supports transition and upgrade audits.

The audit checks that your occupational health and safety management system meets the requirements of ISO 45001:2018, clauses 4 to 10: context, leadership and worker participation, planning (hazard identification, risk assessment and legal requirements), support, operation, performance evaluation and improvement, including incident investigation. Auditors look for evidence that controls work on the shop floor, not only in documents.

No. ISO 45001 is a voluntary international standard. It does, however, require the organisation to determine the legal and other requirements that apply to its OH&S hazards and to evaluate compliance with them. Certification confirms conformity with the standard; it does not replace your legal duties as an employer or any inspection by a regulator.

Yes. ISO 45001 audits include mandatory on-site shift coverage. Per IAF MD 5:2023, at least one shift inside and one outside regular hours must be audited in the first certification cycle, so where you operate shifts the audit also covers work outside regular hours.

Stage 1 reviews your documentation, confirms the scope of certification and checks whether your management system is ready for Stage 2. Stage 2 is the full on-site audit that evaluates whether the system is effectively implemented and meets all requirements of the standard. Nonconformities identified must be corrected before the certificate is issued.

Audit time is calculated per IAF MD 5:2023 based on the effective number of personnel in scope, the complexity/risk category of your activities and the number of sites. OH&S complexity is assessed per Table OHSMS2 — High risk includes mining, construction, chemicals, healthcare; Medium includes food processing and manufacturing; Low includes retail and office services. CAS provides the full audit time calculation with your formal proposal.

Yes. CAS conducts integrated audits covering multiple ISO management system standards simultaneously, in accordance with IAF MD 11:2023. Combined audits reduce total audit time by up to 20% and suit organisations running ISO 9001 + ISO 14001 + ISO 45001 as an Integrated Management System. You receive separate certificates for each standard.

Yes. ISO 45001:2018 places consultation and participation of workers under the leadership clause (5.4). The organisation must establish processes for consulting workers, and their representatives where they exist, on OH&S matters, and for their participation in hazard identification, risk assessment and incident investigation. Certification checks that these processes exist and are used.