How to Get ISO 45001 Certified: The Process

The ISO 45001 certification process follows a well-defined path from a gap analysis to a two-stage external audit and your certificate. Knowing the ISO 45001 certification process in advance lets you plan resources and avoid common delays. This guide walks through each stage and how to prepare efficiently for your occupational health and safety audit.

The ISO 45001 certification process

1. Gap analysis. Compare your current safety arrangements against the standard to see how far you have to go.
2. Define scope & context. Decide which sites, activities, and workers the system covers, and identify interested parties (workers, regulators, contractors).
3. Hazard identification & risk assessment. Systematically identify hazards and assess and control the associated OH&S risks.
4. Build the system. Write the OH&S policy and required processes, establish your legal register, and set objectives.
5. Consult your workers. ISO 45001 requires genuine worker participation — build it in from the start, not as an afterthought.
6. Implement & operate. Put controls into practice and run the system so it generates records.
7. Internal audit & management review. Check the system yourself and have leadership formally review it — both required before certification.
8. Stage 1 audit. The certification body reviews your documentation for readiness.
9. Stage 2 audit. The auditor tests whether your system is genuinely implemented and effective.
10. Certification. Pass, and you receive a certificate typically valid for three years, with annual surveillance audits.

How long does it take?

Most organizations reach certification in roughly three to twelve months, depending on the number of sites, the complexity of your hazards, and how much safety management you already have in place. Organizations already certified to ISO 9001 or ISO 14001 often move faster, because the shared management-system machinery is already there.

How to prepare efficiently

• Start from a complete document set rather than authoring the policy, risk methodology, and procedures from a blank page — see the documentation checklist.
• Involve workers early — it’s both a requirement and the fastest way to surface real hazards.
• Keep your legal register current and evidence your compliance evaluations.
• Book your certification body early — audit slots are often weeks out.

Common pitfalls in the ISO 45001 certification process

Most delays are avoidable. Teams underestimate the worker consultation the standard demands, leave hazard registers incomplete, or treat documentation as a last-minute task. Another frequent stumble is weak evidence of the internal audit and management review that must happen before certification. Involve workers genuinely, keep your risk assessments current, run a full internal audit cycle before Stage 2, and book your assessor early. The standard is published by ISO, and an accredited certification body — not ISO — issues the certificate after a successful audit.

Frequently asked questions

Is ISO 45001 certification mandatory?

No — it’s voluntary. But it’s frequently required in tenders and supply chains, and it demonstrates due diligence on worker safety.

Can we integrate it with ISO 9001 or ISO 14001?

Yes. All three share the Harmonized Structure, so they integrate neatly and many bodies offer combined audits.

For the full background, read our complete guide to ISO 45001.

Approached methodically, the ISO 45001 certification process is predictable: manage safety genuinely, evidence it well, and the audit becomes a confirmation of what you already do rather than a test you might fail.

Timeline expectations help too: a prepared organisation can reach certification in three to six months, while larger or less mature ones need six to twelve. The fixed points you cannot rush are the gap between Stage 1 and Stage 2 and your certification body’s availability, so booking early keeps the ISO 45001 certification process on schedule.