Guide · ISO 45001 · 1 September 2026
ISO 45001 Explained: the Clauses, the Logic, the System
ISO 45001 is the international occupational health and safety management system — the logic, not the document. The clauses 4 to 10 are the structure: the context, the leadership, the planning, the support, the operation, the performance evaluation, and the improvement. This guide is ISO 45001 in working form: the standard, the clauses, the risk and the opportunity, the worker consultation, and the difference from the 18001.
The system, and the standard behind it
ISO 45001 is the international standard for the occupational health and safety management system, published in 2018 by the International Organization for Standardization. It replaced the OHSAS 18001, and the replacement is not a re-label: the 2018 version works from the Annex SL structure that the ISO 9001 and the ISO 14001 share, and it adds the two elements the 18001 did not have — the worker consultation and the hazard identification as a process.
The standard is the logic, not the document. The organisation that holds the standard holds the system: the clause that is the requirement, the evidence that is the practice, and the audit that is the check. The 45001 is the system, and the system is the certificate.
The clauses: 4 to 10, the structure
The clauses 4 to 10 are the auditable structure — clauses 1 to 3 are the scope, the references, and the terms. Clause 4 is the context: the organisation, the stakeholders, the requirements, the scope of the system. Clause 5 is the leadership: the commitment, the policy, the roles, and the worker consultation (the 5.4). Clause 6 is the planning: the risk and the opportunity, the hazard identification, the legal requirement, the objective.
Clause 7 is the support: the resource, the competence (the 7.2), the awareness (the 7.3), the communication, and the documented information. Clause 8 is the operation: the operational planning, the hierarchy of controls (the 8.1.2), the emergency preparedness (the 8.2). Clause 9 is the performance evaluation: the monitoring, the internal audit (the 9.2), the management review (the 9.3). Clause 10 is the improvement: the nonconformity, the corrective action, the continual improvement.
The risk and the opportunity: the 6.1
The 6.1 is the planning — the risk and the opportunity. The risk is the hazard: the hazard identification as the process, the risk assessment as the method, and the control as the hierarchy (the elimination first, the PPE last). The opportunity is the improvement — the system that gets better, the objective that is the measurable.
The risk and the opportunity are the pair: the risk is the not-happen, and the opportunity is the happen. The 18001 held the risk; the 45001 holds the pair. That is the difference the auditor checks, and the difference the interview asks.
The worker consultation: the 18001 difference
The 2018 standard added the worker consultation — the clause 5.4 and the 7.4. The worker, and the worker representative, are consulted on the risk assessment, the objective, the competence, and the emergency. The consultation is the asked, not the told — and the consultation is the evidence.
The consultation is the 18001 difference, and the difference is the law in the UK (the HSWA 1974, the safety representative) and the standard in the rest. The organisation that consults holds the 5.4, and the 5.4 is the one the auditor opens first.
The difference from OHSAS 18001, and the law
The ISO 45001 is the successor of the OHSAS 18001, and the successor is the difference. The 18001 was the management-system standard; the 45001 is the management-system standard on the Annex SL — the structure that the 9001 and the 14001 share. The difference is the structure (the Annex SL), the worker consultation (the 5.4), the hazard identification (the process), and the risk and the opportunity (the pair).
The 18001 certificate expired in 2021, and the transition is complete: the 45001 is the certificate now. The law in the UK is the HSWA 1974 and the regulation — the 45001 is the standard the organisation certifies to, and the standard is the client, the tender, and the international market.
How Many Clauses in ISO 45001? (the Full List: 4 to 10)
ISO 45001 has 10 clauses, and the auditable structure runs from clause 4 to clause 10 (clauses 1 to 3 are the scope, the references and the terms). The list: clause 4 the context of the organisation (the issues, the interested parties, the scope, the system); clause 5 the leadership (the commitment, the policy, the roles and the responsibilities); clause 6 the planning (the risks and the opportunities, the objectives); clause 7 the support (the resources, the competence, the awareness, the communication, the documented information); clause 8 the operation (the hazard identification and the risk assessment, the elimination and the hierarchy, the emergency preparedness); clause 9 the performance evaluation (the monitoring, the internal audit, the management review); clause 10 the improvement (the nonconformity, the corrective action, the continual improvement). The structure is the Annex SL, the same skeleton as the 14001 and the 9001 — which is why the integrated audit runs the three on one calendar.
Need the sign-off, not just the guide?
The guide is the preparation; the sign-off is the professional. For the ISO 45001 implementation and audits, the RIDDOR and CDM work, the statutory assessments and the training that comes with them, ask Muhammad Umer — 8+ years across Iraq, KSA and Pakistan, and the programme runs through umer-hse.pro. One message gets the written scope.
Common questions
ISO 45001 Explained — answered
What is ISO 45001?
The international standard for the occupational health and safety management system, published in 2018 by ISO. It works from the Annex SL structure (the 9001 and the 14001 share it), and it adds the worker consultation and the hazard identification as a process. The 45001 is the system, and the system is the certificate.
What are the clauses of ISO 45001?
Clause 4 (the context of the organisation), clause 5 (the leadership), clause 6 (the planning — the risk and the opportunity), clause 7 (the support — the competence, the awareness), clause 8 (the operation — the hierarchy of controls, the emergency), clause 9 (the performance evaluation — the internal audit, the management review), clause 10 (the improvement — the nonconformity, the corrective action). Clauses 1 to 3 are the scope, the references, and the terms.
What is the difference between ISO 45001 and OHSAS 18001?
The structure and the two additions. The 45001 works on the Annex SL (the 9001 and the 14001 share it); the 18001 did not. The 45001 adds the worker consultation (the 5.4) and the hazard identification as a process (the 6.1.2), plus the risk and the opportunity as the pair. The 18001 certificate expired in 2021; the 45001 is the certificate now.
What is the risk and opportunity in ISO 45001?
The clause 6.1 — the planning. The risk is the hazard: the hazard identification, the risk assessment, and the control (the hierarchy, the elimination first). The opportunity is the improvement: the system that gets better, the objective that is the measurable. The 18001 held the risk; the 45001 holds the pair.
What is the worker consultation in ISO 45001?
The clause 5.4 (and the 7.4): the worker, and the worker representative, are consulted on the risk assessment, the objective, the competence, and the emergency. The consultation is the asked, not the told — and the consultation record is the evidence the auditor checks. It is the 18001 difference, and it matches the UK law (the HSWA 1974, the safety representative).
Is ISO 45001 a legal requirement?
The standard itself is not the law — the law in the UK is the HSWA 1974 and the regulation. But the client, the tender, and the contract make the 45001 the requirement, and the international market treats the certificate as the baseline. The organisation that holds the 45001 holds the system the client checks.
How long does ISO 45001 certification take?
Typically 9 to 18 months, from the decision to the certificate: the gap analysis, the system design, the implementation, the internal audit, the management review, the stage 1, and the stage 2. The site that already runs a working system is the 9 months; the site that starts from zero is the 12 to 18.
Keep reading
Related guides
The ISO 45001 Audit: Stage 1, Stage 2, and the Surveillance
The ISO 45001 audit, explained: the stage 1 (the document review), the stage 2 (the on-site), the surveillance
ISO 45001 · 7 September 2026ISO 45001 Certification: the Process, Step by Step
The ISO 45001 certification process, step by step: the gap analysis, the system, the internal audit, the stage
Blog · 1 September 2026uk-hse-osha-iso45001-differences
uk-hse-osha-iso45001-differences
THE HEALTH AND SAFETY is an education and knowledge network. The guides are free and open; the professional assessments and the training run through umer-hse.pro.
Safety disclaimer
The guides on this site are practical guidance, built to the UK baseline with the US equivalents named in the text. They do not replace a competent person assessment for high-risk work, a statutory assessment, or the advice of your insurer. Where a duty has legal force — the RIDDOR report, the CDM plan, the ISO 45001 system — the responsible person or the responsible owner carries it. Read the guide as the preparation, and take the sign-off from the competent person.