ISO 45001 & Safety Management Systems

ISO 45001 is the international standard for occupational health and safety management systems. Rather than listing specific hazards, it describes how a company should run safety as a system that keeps improving.

• Employers

Plan-Do-Check-Act

1. Plan: identify hazards and risks, legal requirements, and set objectives.
2. Do: put controls, training and procedures in place.
3. Check: monitor, measure, audit and investigate incidents.
4. Act: fix problems and improve the system.

Key features

• Top management leadership and accountability
• Worker consultation and participation, including non-managers
• Managing contractors and procurement
• Planning for emergencies and change

OSHA’s version: Recommended Practices

OSHA’s free Recommended Practices for Safety and Health Programs cover the same ideas in plain terms, built around seven core elements:

1. Management leadership
2. Worker participation
3. Hazard identification and assessment
4. Hazard prevention and control
5. Education and training
6. Program evaluation and improvement
7. Communication and coordination among host employers, contractors and staffing agencies

See Safety & Health Programs.

Measuring safety

• Lagging indicators count what already happened: injuries, lost days, incident rates, workers’ comp costs.
• Leading indicators track what prevents injuries: near-miss reports, inspections done, hazards fixed, training completed, worker suggestions.

Good management systems watch both. A company that only celebrates “zero injuries” can end up discouraging reports.

What it means for workers

• You should be asked for input on hazards, procedures and PPE, not just told.
• Report hazards and near misses; that information drives improvement.
• Expect hazards to be fixed using the hierarchy of controls, not only with PPE.

Companies can be certified to ISO 45001 by an outside auditor. In the U.S., ANSI/ASSP Z10 is a similar standard. Certification doesn’t replace OSHA compliance; a good management system is how a company stays compliant.

Last updated: October 1, 2026