ISO 45001 is the international standard for managing health and safety at work. Here's what it actually means.
It sets out how an organisation should identify health and safety risks, control them, involve its workforce, and improve over time. Certification, awarded through an independent audit, proves you run a genuine safety management system rather than just holding a folder of policies. It replaced the older OHSAS 18001 standard, with the migration deadline passing in 2021.
A system you run, not paperwork you collect.
The standard is built around managing risk, not collecting documents. In practice, a working ISO 45001 system means you do five things, with continual improvement running through all of them.
You know the context your business operates in and who your safety duties extend to, including contractors and visitors on your sites.
You identify hazards and assess risk across your operations, then put controls in place and check they actually work.
You involve workers in safety, because the people doing the job often see the risk first and know where the controls fall short.
You set objectives, measure performance, and act on incidents and near misses rather than filing them away.
You review the system regularly and improve it, so it keeps pace with how the business changes year on year.
ISO 45001 isn't a one-off hurdle. It's a system you run, and an auditor checks each year that you're still running it.
No law requires it. The market increasingly does.
No UK law requires ISO 45001 specifically. The law requires you to manage health and safety; ISO 45001 is one recognised way to prove you do. In practice, the demand comes from the market rather than the statute book. Main contractors, public-sector bodies and large clients increasingly set it as a condition of bidding for work or joining an approved supplier list. It's most common in higher-risk sectors. If a client or tender has named ISO 45001, that's your answer: you need it to win or keep the work.
Not the same thing, and not interchangeable.
Contractors often assume their SSIP accreditation covers this. It doesn't, and the two work differently. Many contractors need both, and the work you do for one supports the other.
Safety Schemes in Procurement is a UK accreditation for buyers' pre-qualification. Schemes such as CHAS and SafeContractor check your safety paperwork against a set standard so a client can confirm you're a competent contractor.
ISO 45001 is an international management-system standard. It's deeper and ongoing: an active, audited system rather than an annual paperwork check.
SSIP clears the supplier gate on most UK jobs. ISO 45001 is what larger clients and major frameworks increasingly want on top. They overlap, so the work you do for one supports the other.
Build the system, pass a two-stage audit, get the certificate.
A consultant prepares you and supports you through the audit. The consultant does not award the certificate, and you should be cautious of any who claim to. Spectra runs the full journey, gap analysis through to certificate and the surveillance visits after, with one named consultant throughout.
The ISO specialist who runs the whole journey with you.
You get one named consultant for ISO certification, and you keep them from gap analysis through to the surveillance visits. We work with construction and industry firms in particular, and we know how ISO 45001 sits alongside CDM duties and SSIP.
“A consultant prepares you and supports you through the audit. We don't award the certificate, and you should be wary of anyone who says they can.”
Book a free readiness reviewCommon ISO 45001 questions
What is ISO 45001 in simple terms?
Is ISO 45001 a legal requirement?
What's the difference between ISO 45001 and OHSAS 18001?
Do I need ISO 45001 if I already have SSIP?
How long does ISO 45001 certification take?
Still not sure what applies to you?
Tell us about your business and a named consultant will give you a straight answer on the route to certification: whether you need ISO 45001, SSIP or both, and what it takes to get there. No script and no obligation.