From OHSAS 18001 to ISO 45001: A Practical Transition Guide for Compliance Teams

OHSAS 18001 served as the global benchmark for occupational health and safety management systems for nearly two decades. When ISO 45001 replaced it in March 2018, with a formal transition period ending in September 2021, it was not merely a rebranding exercise. The new standard introduced substantive changes in philosophy, scope, and requirements that have reshaped what effective OHS management looks like in practice.

For organisations that transitioned from OHSAS 18001 to ISO 45001, many found that achieving the letter of compliance was relatively straightforward, while achieving the spirit of the new standard required genuine changes in how leadership engaged with safety, how workers participated in risk management, and how the safety system connected to the broader organisational context. This guide explains exactly what changed, why each change matters, and what organisations that are still operating on OHSAS 18001 thinking need to do differently.

---

Key Takeaways

March 2018 ISO 45001 published. The September 2021 deadline for transitioning from OHSAS 18001 has now passed; all certifications must be to ISO 45001

10 clauses ISO 45001 follows the ISO High Level Structure (HLS) shared by ISO 9001 and ISO 14001, making it significantly easier to integrate with other management systems

Leadership Is the most significant new emphasis in ISO 45001. Top management has specific, non-delegable obligations that OHSAS 18001 did not impose in the same way

Workers Participation is a central pillar of ISO 45001, not an optional good practice. Workers must be consulted on and involved in hazard identification, risk assessment, and corrective action

• OHSAS 18001 was withdrawn in September 2021 and is no longer a valid certification standard. All occupational health and safety management system certifications must now be to ISO 45001:2018.
• ISO 45001 introduces a fundamentally different framing: where OHSAS 18001 was primarily a risk control standard focused on identifying and mitigating hazards, ISO 45001 is a strategic management standard that integrates OHS into the organisation’s overall management framework.
• The five most significant changes are: mandatory leadership accountability, enhanced worker participation, the organisational context requirement, the shift from risk control to risk and opportunity management, and the High Level Structure that enables integration with ISO 9001 and ISO 14001.
• Organisations that treated the transition as a documentation update rather than a genuine management system review are likely to be non-conformant in the areas of leadership commitment, worker participation, and context analysis even if their certification was renewed.

---

Why OHSAS 18001 Was Replaced

OHSAS 18001 was a British Standards Institution (BSI) specification, not a full ISO standard, which meant it lacked the global authority and integration framework that organisations managing multiple management systems needed. It was developed in 1999 and updated in 2007, and by the mid-2010s several significant gaps had become apparent.

First, OHSAS 18001 was primarily a technical hazard management standard. Its focus on identifying and controlling workplace hazards was sound but narrow: it said relatively little about leadership, organisational culture, worker voice, or the strategic integration of safety with business management. Second, its structure was incompatible with the High Level Structure that ISO had introduced for all its management system standards, making integration with ISO 9001 (quality) and ISO 14001 (environment) unnecessarily complex. Third, international recognition of OHSAS 18001 was uneven: some jurisdictions regarded it as authoritative, others gave it limited weight.

ISO 45001 addressed all three gaps: it is a full international standard with the authority of ISO behind it, it uses the High Level Structure that enables seamless integration, and it substantially broadens the management system concept beyond hazard control to encompass leadership, worker participation, and strategic context.

The ISO maintains full documentation on the ISO 45001 standard and implementation guidance at iso.org, including annex guidance and country-specific certification body information.

---

---

The Key Differences: A Detailed Comparison

Area	OHSAS 18001	ISO 45001:2018
Standard status	BSI specification; not a full ISO standard; withdrawn September 2021	Full ISO international standard; globally recognised; current and valid
Leadership requirements	Management commitment referenced; largely delegable to safety manager	Dedicated Clause 5: top management has specific, named, non-delegable obligations including demonstrating personal leadership, not just oversight
Worker participation	Mentioned; no specific requirements for how or when workers are consulted	Clause 5.4 dedicated to consultation and participation; workers must be involved in hazard identification, risk assessment, incident investigation, and continual improvement
Organisational context	Not required; no explicit need to understand external/internal factors affecting OHS	Clause 4 requires understanding of internal and external context, identification of interested parties and their requirements, and defining system scope in relation to context
Risk and opportunity	Risk-only: focused on identifying and controlling hazards and risks	Risk and opportunity: Clause 6.1 requires identification of opportunities to improve OHS performance alongside risks to be controlled
Structure	Own structure; not compatible with ISO management system standards	ISO High Level Structure (Annex SL); compatible and integrable with ISO 9001, ISO 14001, and other ISO management systems
Contractor and outsourcing	Addressed but limited; focus mainly on direct workforce	Clause 8.1.4 explicitly requires management of outsourced processes, contractors, and procurement; OHS requirements must flow through the supply chain
Performance evaluation	Monitoring and measurement required; limited guidance on what to measure	Clause 9 requires both lagging and leading indicators, criteria for evaluation, and a formal process for internal audit and management review with specific input and output requirements

The Five Changes That Matter Most in Practice

1. Leadership Accountability That Cannot Be Delegated

The single most consequential change in ISO 45001 is the requirement for top management to demonstrate personal leadership accountability for OHS, not merely to ensure that a safety management system exists. Under OHSAS 18001, it was entirely acceptable for the CEO to sign the safety policy and delegate everything else to the health and safety manager. Under ISO 45001, Clause 5 specifies that top management must take overall accountability for preventing work-related injury and ill health, ensure that OHS objectives align with the strategic direction of the organisation, and integrate OHS into organisational processes.

This is not a paperwork change. It requires evidence that safety is genuinely on the boardroom agenda: that leaders participate in safety walkabouts, that safety performance is reviewed in board meetings with the same rigour as financial performance, and that leaders are visibly accountable for safety outcomes. Our article on creating psychological safety in teams explores the leadership behaviours that make this visible commitment genuine rather than performative, which is equally important in a safety culture context.

2. Worker Participation as a Non-Negotiable Requirement

OHSAS 18001 acknowledged the value of worker involvement. ISO 45001 mandates it. Clause 5.4 requires that workers at all levels and functions are consulted on and participate in the development, planning, implementation, performance evaluation, and improvement of the OHS management system. This includes non-managerial workers, and it extends to contractor workers where relevant.

In practice, this means organisations need formal, documented mechanisms for worker consultation: safety committees with genuine representation, toolbox talk processes that capture worker hazard observations, incident investigation procedures that include frontline workers rather than only managers, and improvement processes where worker suggestions are genuinely evaluated and acted upon. Organisations that consult workers only in induction training are not meeting the ISO 45001 requirement.

3. Understanding Organisational Context

Clause 4 of ISO 45001 requires every organisation to understand its internal and external context: the factors that affect its ability to achieve its OHS objectives. Internal context includes organisational culture, existing processes, the nature of the work and workforce, and the physical work environment. External context includes regulatory requirements, industry standards, community expectations, climate factors, and the supply chain.

This context analysis is not a one-off exercise. It must be reviewed periodically and whenever significant changes occur. For organisations that have implemented this well, it has become the foundation for their annual OHS planning cycle, ensuring that objectives and resources are allocated in response to what the organisation’s actual risk landscape looks like rather than what it looked like when the system was first implemented. Our companion article on what is a safety management system covers how context analysis integrates with the broader SMS framework.

4. Opportunities Alongside Risks

OHSAS 18001 was a risk control standard: identify hazards, assess risk, implement controls. ISO 45001 introduces the concept of OHS opportunities: positive changes in processes, practices, or conditions that could improve OHS performance beyond the current baseline. These might include adopting new working methods that eliminate a hazard entirely, implementing health promotion programmes that address wellbeing risks, or redesigning a workspace to reduce ergonomic strain.

The opportunities framework shifts the OHS function from a purely defensive posture to one that actively seeks performance improvement, which aligns the safety management system with the continuous improvement philosophy that underpins ISO management standards generally.

5. Contractor and Supply Chain Obligations

Clause 8.1.4 of ISO 45001 introduces explicit requirements for managing the OHS implications of outsourcing, procurement, and contractor management. Organisations must ensure that contractors working on their premises or on their behalf are subject to OHS requirements consistent with the organisation’s own system, and must verify that these requirements are being met.

For industries with significant contractor workforces (construction, oil and gas, facilities management, manufacturing), this clause has substantial practical implications. Pre-qualification of contractors on OHS criteria, induction and ongoing supervision of contractors, and monitoring of contractor OHS performance all become system requirements rather than optional best practice. Our article on supply chain risk management covers the broader framework of managing third-party risk that this requirement sits within.

---

---

What Organisations Still Need to Do

Despite the September 2021 transition deadline having passed, audit evidence consistently shows that a significant proportion of ISO 45001-certified organisations are non-conformant in practice in one or more of the following areas. If your organisation achieved certification through a documentation-focused transition, these are the areas to review honestly.

Common Gap Area	What Genuine Conformance Looks Like
Leadership engagement documented but not evidenced	Records of executive safety walkabouts, board-level safety performance reviews, and leadership participation in incident investigations rather than simply a signed policy
Worker consultation tick-box rather than genuine	Minutes of safety committee meetings showing worker input on risk assessments and improvements, evidence of worker-raised hazards being investigated and resolved, worker involvement in incident root cause analysis
Context analysis completed once and never reviewed	Dated context analysis reviews in management review records, updates following significant operational changes, explicit linkage between context analysis outputs and OHS objectives
No OHS opportunities identified	Annual OHS planning documentation that includes opportunity identification alongside risk assessment; improvement projects that arise from opportunity analysis rather than only incident response
Contractor management not in the SMS scope	Contractor OHS pre-qualification criteria, documented induction records, contractor OHS performance KPIs reviewed in management reviews, integration of contractor incidents into the organisation’s incident investigation process

Integrating ISO 45001 with ISO 9001 and ISO 14001

One of the most practical benefits of ISO 45001’s High Level Structure is the ability to build an integrated management system (IMS) that covers quality, environment, and occupational health and safety within a single documented framework. The shared structure means that common elements (context, leadership, planning, support, performance evaluation, and improvement) can be addressed once and applied across all three standards, reducing duplication significantly.

For organisations already certified to ISO 9001 or ISO 14001, the transition to and integration of ISO 45001 is substantially simpler than implementing it as a standalone system. The same management review process, the same internal audit programme, the same documentation framework, and the same objectives-setting process can all serve multiple standards simultaneously when the structure is shared.

Conclusion: A Better Standard for a More Complex World

ISO 45001 is a genuinely better standard than OHSAS 18001, not because OHSAS 18001 was inadequate for its time but because the operating environment for occupational health and safety has become substantially more complex. Contractor workforces, global supply chains, psychosocial risks, climate-related hazards, and the expectation of genuine leadership accountability rather than delegated compliance management all require a more sophisticated framework than OHSAS 18001 provided.

Organisations that have implemented ISO 45001 in its spirit rather than just its letter are seeing the benefits: stronger safety cultures, higher worker confidence in raising concerns, better contractor management, and more strategically integrated OHS objectives. The standard is working as intended for those organisations. For those that treated it as a certification transition exercise, the substantive work is still ahead of them.

Related reading: Understanding ISO 45001 is one step; embedding it as a genuine management system requires cultural change and leadership capability. Our article on what is a safety management system and how do you implement one covers the implementation disciplines that make the difference between certification and genuine improvement.

---