Occupational Health & Safety Management Systems
How an international corporation can plan, implement, and sustain an ISO 45001 occupational health and safety management system — and how Qualia CIH Inc. supports the technical work behind it.
Prefer a document you can save or print? Download the full guide (.docx) →
Also read: ISO 14001 Summary & Adoption Guide (Environmental Management) →
ISO 45001:2018 is the international standard for occupational health and safety (OH&S) management systems. It gives organizations of any size, sector, or geography a structured, auditable framework for preventing work-related injury and ill health while continually improving safety performance. Since its 2018 publication, it has replaced the earlier OHSAS 18001 standard and become the global reference point for OH&S management — with over 400,000 certificates issued worldwide and the fastest adoption growth in construction, manufacturing, and services.
For an international corporation, ISO 45001 does three things at once: it satisfies a growing list of procurement and tender requirements from multinational clients and governments, it reduces recordable injury rates (certified organizations report roughly 32% average reductions, compared to 14–20% under the older OHSAS 18001), and it gives corporate leadership a single management-system language that works the same way in every country of operation, because it shares the same high-level structure as ISO 9001 (quality) and ISO 14001 (environment).
This guide summarizes what the standard requires, what a realistic adoption timeline looks like, and where a specialized industrial hygiene and ergonomics practice such as Qualia CIH Inc. fits into that timeline. ISO 45001 is a management-system standard — its overall rollout, documentation architecture, and certification audit are typically owned by corporate EHS/quality leadership, often with a management-systems consultant or the certification body itself. Qualia CIH Inc.'s role is narrower and technical: supplying the hazard identification, exposure assessment, ergonomics evaluation, and written program development that clauses 6.1, 7, 8, and 9 of the standard actually require in the field.
ISO 45001:2018, "Occupational health and safety management systems — Requirements with guidance for use," was published by the International Organization for Standardization in March 2018. It formally superseded OHSAS 18001 in March 2021, when the three-year transition period for existing OHSAS-certified organizations closed.
The standard is built on the Annex SL "High Level Structure" (HLS) that ISO now uses across all its management-system standards. That shared structure means a corporation already certified to ISO 9001 or ISO 14001 can integrate ISO 45001 into the same management system, the same internal audit program, and the same management review cycle, rather than running three separate, parallel systems.
Like other ISO management-system standards, ISO 45001 is organized around the Plan-Do-Check-Act (PDCA) cycle:
ISO 45001 does not certify a workplace as "safe" in absolute terms — no standard can. It certifies that an organization has a systematic, documented, and audited process for identifying hazards, controlling risk, involving workers, and improving over time.
ISO 45001 has 10 clauses. Clauses 1–3 cover scope, normative references, and terms/definitions and are not independently auditable. Clauses 4–10 contain the actual requirements an organization is assessed against:
| Clause | Title | What It Requires |
|---|---|---|
| 4 | Context of the Organization | Determine internal and external issues, the needs of workers and other interested parties, and the scope and boundaries of the OH&S management system. |
| 5 | Leadership & Worker Participation | Top management must demonstrate visible commitment, set the OH&S policy, assign roles and authorities, and establish real consultation and participation of workers at all levels. |
| 6 | Planning | Identify hazards and assess OH&S risks and opportunities; determine applicable legal and other requirements across every jurisdiction of operation; set measurable OH&S objectives and plans to achieve them. |
| 7 | Support | Provide the resources, competence, awareness, communication, and documented information the system needs, including training and multilingual communication for a multinational workforce. |
| 8 | Operation | Plan and control operations using the hierarchy of controls (elimination, substitution, engineering, administrative, PPE); manage change, procurement, contractors, and emergency preparedness and response. |
| 9 | Performance Evaluation | Monitor, measure, analyze, and evaluate OH&S performance; conduct internal audits; hold management reviews at planned intervals with documented outputs. |
| 10 | Improvement | Investigate incidents and nonconformities, take corrective action, and continually improve the suitability, adequacy, and effectiveness of the OH&S management system. |
For a corporation operating across borders, the case for ISO 45001 is not primarily about avoiding penalties — it's about three commercial realities:
Certified OH&S systems are increasingly a prerequisite for multinational supply chain participation and government tenders. Organizations without certification are being screened out of bidding processes before price or capability are even discussed.
Independent research comparing certified and non-certified organizations found ISO 45001-certified companies show meaningfully better productivity and profitability, alongside an average 32% reduction in workplace injuries — a stronger result than the 14–20% reductions historically associated with OHSAS 18001.
Because ISO 45001 shares its high-level structure with ISO 9001 and ISO 14001, a single global framework can flex across differing local regulatory regimes (OSHA in the U.S., EU-OSHA member-state law, and equivalent bodies elsewhere) while still reporting up through one corporate management review.
Adoption Context
Approximately 300,000–400,000+ ISO 45001 certificates have been issued globally since 2018, making it the third most widely adopted ISO standard after ISO 9001 and ISO 14001. Growth has been strongest in construction, manufacturing, and services, with Europe and Asia-Pacific leading regional adoption.
A realistic ISO 45001 rollout for a single site typically spans 6–12 months; a multi-site, multinational rollout is usually phased by region or business unit over 12–24+ months, layering in local legal and cultural requirements at each location. The phases below outline the standard path from initial gap analysis through certification and ongoing surveillance, and show where a technical specialist like Qualia CIH Inc. plugs in.
| Phase | Focus | Qualia CIH Inc.'s Role |
|---|---|---|
| 1. Gap Analysis & Scoping | Clause-by-clause comparison of current H&S arrangements against ISO 45001 requirements; define system boundaries and site scope. | Site-level technical gap assessment: walkthroughs, records review, and baseline hazard identification feeding the corporate gap register. |
| 2. Risk Assessment & Legal Register | Hazard identification, OH&S risk and opportunity assessment (Clause 6.1); build the applicable legal/regulatory register per jurisdiction. | Quantitative exposure assessment (chemical, biological, physical, ergonomic); benchmarking against OSHA PELs, ACGIH TLVs, and equivalent international limits. |
| 3. Documentation & Written Programs | Draft OH&S policy, objectives, procedures, and required documented information (Clause 7). | Development of written programs: respiratory protection, HazCom/GHS, exposure monitoring plans, emergency action plans, and ergonomics programs. |
| 4. Operational Controls & Training | Implement the hierarchy of controls, contractor and change management, and emergency preparedness (Clause 8). | Recommend and validate engineering/administrative controls and PPE selection; deliver technical training on hazard recognition and control use. |
| 5. Internal Audit & Management Review | Conduct internal audits and a documented management review before external certification audit (Clause 9). | Provide independent technical verification of sampling data, control effectiveness, and program completeness ahead of the internal audit. |
| 6. Certification Audit | Stage 1 (documentation review) and Stage 2 (implementation audit) conducted by an accredited certification body. | Available to support sites during the audit as the subject-matter expert of record for IH sampling data and written OH&S programs. |
| 7. Surveillance & Continual Improvement | Annual surveillance audits and a three-year recertification cycle; corrective action on nonconformities (Clause 10). | Periodic re-assessment of exposures and controls as processes, equipment, or facilities change; updates to written programs. |
Qualia CIH Inc. is an independent industrial hygiene and ergonomics consulting practice led by Michael Chermak, a Certified Industrial Hygienist (CIH) and Certified Office Ergonomics Evaluator, based in Warwick, NY, with routine work across the Hudson Valley, NYC, and northern New Jersey, and consulting, remote evaluation, and travel engagements available nationally and internationally (recent international work has included Italy, France, and Ireland).
An enterprise-wide ISO 45001 rollout across an international corporation is a management-system project — it needs corporate sponsorship, a document-control structure, and typically a certification body or management-systems consultant to run the overall program and the certification audit itself. Qualia CIH Inc. does not replace that structure. What it provides is the technical backbone that the standard's field-facing clauses actually depend on:
Anticipation, recognition, evaluation, and quantification of chemical, biological, physical, and ergonomic hazards — air sampling, VOC and combustion byproduct analysis, mold and biological agent investigation, noise and non-ionizing radiation surveys, water quality testing, and workstation ergonomic evaluations.
Technical training on hazard recognition, exposure limits, and control use, delivered in a form that transfers across sites and, where needed, across language and regulatory context.
Drafting and review of written OH&S programs — respiratory protection, hazard communication/GHS, emergency action plans, IH exposure assessment plans, and ergonomics programs — built around the hierarchy of controls and mapped to OSHA, EPA, ACGIH, AIHA, and NFPA reference standards, adaptable to the equivalent regulatory frameworks of other jurisdictions.
Ongoing or periodic exposure monitoring and ergonomic reassessment that gives the corporate management review actual data to evaluate, rather than a compliance checklist.
How This Typically Works in Practice
A corporation runs its ISO 45001 program centrally, and engages Qualia CIH Inc. site-by-site or region-by-region for the technical exposure assessments, written program development, and ergonomics evaluations that feed clauses 6, 7, 8, and 9 — either as a direct engagement or in support of the corporation's management-systems consultant or certification body.
Scoping call — review current OH&S program maturity, site count and locations, and target certification timeline.
Site-level gap assessment — walkthrough, records review, and preliminary hazard identification at one representative site or region.
Exposure assessment & sampling — quantify priority exposures against applicable regulatory and consensus limits (OSHA, ACGIH, EU-OSHA, or local equivalents).
Written program development — draft or revise the specific programs identified as gaps, ready for internal review and sign-off.
Ergonomics evaluation — workstation, device, and posture assessments for office and hybrid workforces, with prioritized, cost-ranked recommendations.
Ongoing support — periodic reassessment aligned to the organization's internal audit and management review cycle, and availability during certification audits as the technical point of contact.
Get Started
Share your site count, industries, and target certification timeline, and I'll follow up with a project-specific proposal.