استشارات نظام الصحة والسلامة المهنية ISO 45001

What are the requirements of ISO 45001 for an Organisation?

ISO 45001 requires organizations to conduct risk assessments to determine the potential threats and safety hazards. Moreover, the Occupational Health and Safety methodology focuses on identifying and planning for hazard identification, risk assessment, and risk control. ISO 45001 consultants assist organizations in understanding the complexities and requirements of the certification. The following are the requirements of the ISO 45001 standard:

The first three are generic requirements that go the same for every standard. These are:

Clause 1: Scope

Clause 2: Normative References

Clause 3: Terms and definitions

Clause 4: Context of the Organization

This clause requires organizations to determine, analyze and understand the context of their activities, both internally and externally. It enables organizations to build an appropriate Occupational Health and Safety management (OHS) policy catering to organizational needs. Some significant requirements under clause 4 are:

Clause 4.1 : Issue Identification

Clause 4.2 : Interested Parties

Clause 4.3 : Scope of Work

Clause 4.4 : Process Interaction within the Organization

Clause 5: Leadership and Worker Participation

This clause encourages management commitment and employee participation to ensure a successful implementation of ISO 45001 Certification.

Clause 5.1 : Leadership

Clause 5.2 : OHSMS Policy

Clause 5.3 : Roles, Responsibilities and Authority

Clause 5.4 : Consultation and Participation of Workers

Clause 6: Planning

Planning helps organizations identify and eliminate all those methods and practices that can cause unintended outcomes. Hence, the ultimate goal of clause 6 of ISO 45001 is to reduce work-related injuries and accidents to ensure workers' safety and well-being. Employees are the heart of an organization, and assuring their safety and well-being is an organization's responsibility.

Clause 6.1 : Planning for Hazard Identification and Risk Assessment (HIRA) Assessment

Clause 6.2 : Objectives of HIRA Assessment

Clause 7: Support

Support includes communication, competence and awareness related to ISO 45001 certification. It also requires an organization to document and implement all standard requirements. Moreover, Documentation is as important as Implementation and vice-versa.

Clause 7.1 : Resources (It includes People, Infrastructure and Work Environment)

Clause 7.2 : Competence and Training

Clause 7.3 : Awareness

Clause 7.4 : Communication

Clause 7.5 : Document Control and Procedures

Clause 8: Operation

This clause is specific to ensuring the organization's responsibility to manage work-related risks and hazards. Hence, it creates a more responsible and positive image of the organization among clients, customers, and stakeholders.

Clause 8.1 : Operational Planning and Control

Clause 8.2 : Emergency Preparedness and Response

Clause 9: Performance Evaluation

Drafting policies is one aspect of the Occupational Health and Safety Management System (OHSMS), and implementing formulated policies is another. This clause mandates organizations to monitor and measure the effectiveness of OH&S management system performance by conducting an internal audit.

Clause 9.1 : Monitoring, Measurement, Analysis and Performance Evaluation

Clause 9.2 : Internal Audit

Clause 9.3 : Management Review Meeting

Clause 10: Improvement

Organizations must ensure continual improvement to enhance the effectiveness of the Occupational Health and Safety Management System (OHSMS).

Clause 10.1 : Improvement

Clause 10.2 : Incident, Non-conformity and Corrective Actions

Clause 10.3 : Continual Improvement

Working with a consultant near you

ISO 45001:2018 Certification for Occupational Health and Safety Management System (OHSMS) helps organizations create a safe and productive work environment for employees, stakeholders and clients. ISO 45001 Certification consultants in Gurgaon help businesses conduct Hazard Identification and Risk Assessment (HIRA) to identify potential work-related threats and hazards to enhance workplace safety and well-being.

ISO 45001 certification consultants in Gurgaon, Gurugram assist organizations across various industries to define their organizational needs and align them with the ISO 45001 requirements. Organizations searching for the best ISO 45001 consultant in Gurgaon can contact Management System Compliance Incorporated (MSCi) to understand the documentation requirements and implementation of the certification.

We work the same way wherever you are based. Our teams operate across Gurugram, New Delhi, Mumbai, Bengaluru, Chennai, Hyderabad, Noida, Jaipur, Punjab and Visakhapatnam, and internationally through the country offices listed under our global presence. Delivery is onsite, remote or hybrid, so location changes the logistics rather than the method.

The documents ISO 45001 asks you to have

A standard does not ask for a library. It asks for evidence that you decide things deliberately and can show how. This is what an auditor will look for on a ISO 45001 system — specific to the standard first, then the records every management system needs.

• OH&S policy, and the arrangements for worker consultation and participation
• Hazard identification and risk assessment records for every activity, including non-routine work
• Register of legal and other requirements, with compliance evaluation
• OH&S objectives and plans
• Emergency preparedness and response procedures, with drill records
• Incident investigation records, including near misses
• Competence and training records for anybody whose work affects safety
• Roles, responsibilities and authorities, written down and known to the people holding them
• Competence and training records for anyone whose work affects the system
• Internal audit programme, audit reports and the findings raised
• Management review minutes, showing what was decided rather than that a meeting happened
• Nonconformity and corrective action records, with root cause and effectiveness checked
• Document and record control — what is current, who approved it, how long it is kept

Length is not compliance. A procedure nobody follows is worse than no procedure, because an auditor will find the gap between the two. Our test is whether the person who has to do the job recognises their own work in it.

How to start

Beginning well is mostly a matter of sequence. Almost everything that goes wrong in a ISO 45001 project can be traced to documentation written before anybody established what the organisation already does.

• Establish what is being asked, and by whom. A customer, a tender, a regulator and a parent company each want something slightly different, and the answer decides the scope.
• Fix the scope in writing — which sites, which activities, which products. Scope drives cost more than any other single decision, and a scope widened after the audit is booked is re-work.
• Have a gap assessment done against ISO 45001, on evidence rather than on a questionnaire. You can score yourself first with the free readiness checklist on this site; the expert assessment is what turns that score into a plan.
• Appoint somebody internally who owns it. Not necessarily full time, but named, and senior enough to get decisions made.
• Document only what the gap assessment showed is missing, in the words the people doing the work already use.
• Train, then run the system long enough to generate real records. Three months of genuine records cannot be produced in a fortnight, and this is the step organisations try hardest to skip.
• Audit yourself, hold a management review that actually decides something, then book the certification audit.

How to choose a certification body

Choosing the body is the one decision in a ISO 45001 project that you cannot delegate to us, and the one where the cheapest answer is most often the wrong one.

Four things decide it. Accreditation: the body should be accredited for your standard and your industry by a recognised accreditation body, and the certificate should carry that mark. Sector competence: an auditor who has audited your industry asks better questions and wastes less of your time. Recognition: ask the customer or tender that triggered this whether they name particular bodies. Cost and diary: audit days are set by your headcount and scope, so quotes should be comparable — and if one is far cheaper, look at the audit days before the price.

Among the bodies most widely recognised, in no particular order: BSI, TÜV, SGS, SIS Certifications, Intertek, DNV, BVQI.

MSCi works with a pool of accredited certification bodies rather than one. That is a commercial advantage to you, and worth being plain about why: bodies differ in audit-day rates, in travel cost to your location, in how quickly they can get an auditor to you, and in which sectors they are accredited for. Having several to approach means we can put your scope in front of the ones that fit it and bring you back comparable quotes, instead of you taking the first number offered.

What it does not change is the audit. We cannot influence a finding and would not try — the body's independence is the entire value of the certificate, and any consultancy offering otherwise is selling you something worthless. We prepare you so that the audit is uneventful, and the body decides.

Note also that whoever builds your management system must not be the body that certifies it. Accreditation rules prohibit it, which is why we prepare and never certify.

What ISO 45001 is usually taken with

Few organisations stop at one standard, and the second costs far less than the first — the clauses that take longest are the ones they share. Where ISO 45001 sits next to something else, this is what carries over.

• ISO 14001 consultancy — shares the legal register, the emergency response plans and the drill records.
• ISO 9001 consultancy — shares clauses 4 to 10 with this standard, so context, leadership, competence, internal audit and management review are built once and audited together.
• Mock Drills consultancy — is where the emergency preparedness clause stops being paperwork; the drill records are what an auditor samples.

Certified to more than one, you hold a single management system with one set of objectives, one internal audit programme and one management review — audited in one visit. Run as separate systems they cost roughly twice as much to keep, which is the usual reason a second certificate feels harder than it was.