ISO 45001 Consulting

ISO 45001 is ISO's first standard for occupational health and safety management systems. Inspired by OHSAS 18001, it is designed to help companies and organizations worldwide protect the health and safety of the people who work for them. Paradygm helps organizations across Canada and the United States build an OH&S management system and prepare for accredited certification, without rebuilding what already works.

• 25+ years of experience
• Over 200 clients
• Guaranteed Certification within the first attempt
• Thornhill, ON · Coral Springs, FL

ISO 45001 replaced OHSAS 18001

OHSAS 18001 has been withdrawn: accredited OHSAS 18001 certificates had to migrate to ISO 45001 by 30 September 2021. ISO 45001:2018 was published in March 2018 and is the current edition (with Amendment 1:2024). ISO is now revising ISO 45001; the draft (ISO/DIS 45001) is at the enquiry stage and ISO expects the new edition to replace ISO 45001:2018 in the first half of 2027. Keep working to the 2018 edition until the new edition and its transition rules are published.

What changed from OHSAS 18001

The overall aim of the standard remains the same and those familiar with OHSAS 18001 will recognize many of the themes in ISO 45001. However, there have been important developments related to the rules for developing International Management System Standards. There is now a much stronger focus on the “context” of an organization as well as a stronger role for top management and leadership.

• Context Look beyond immediate health and safety issues Organizations have to take into account what the wider society expects of them — contractors and suppliers, and how their work might affect neighbours in the surrounding area. This is much wider than focusing only on conditions for internal employees, and means organizations cannot just contract out risk.
• Leadership OH&S embodied in the overall management system ISO 45001 requires a much stronger buy-in from management and leadership. Health and safety aspects must be part of the overall management system, not just delegated to a safety manager as an added extra.
• Integration Built to sit alongside other ISO standards Many organizations already use ISO management system standards. An OH&S tool that integrates easily with existing ISO-based standards makes the process easier — especially with ISO 14001, where one person often looks after both safety and environmental concerns. The ISO name also gives the standard further credibility and drives wider adoption.

Benefits of ISO 45001

The implementation of the system and structure as prescribed can reduce the risk of causing harm to the people within the organization. Organizations also use ISO 45001 to:

• Identify hazards, control OH&S risks and meet applicable legal requirements
• Strengthen worker participation and top-management accountability for health and safety
• Integrate with ISO 9001 and ISO 14001 on one common management system structure
• Provide third-party-verified evidence that the OH&S management system works
• Support supply-chain and customer requirements for certified OH&S systems (including R2v3, which requires a certified EHSMS such as ISO 14001 + ISO 45001, or RIOS)

How Paradygm helps

Occupational health & safety systems, EHS audits, and legal registers — coaching from gap assessment through certification readiness.

1. Gap assessment We review your OH&S practices against ISO 45001:2018, clause by clause, and give you a prioritized action list so you know the size of the job before you commit.
2. Implementation and documentation Context, hazard identification, OH&S risk and opportunity planning, legal (compliance-obligation) registers built for your sites, operational controls, emergency preparedness and management review templates — kept lean and written in Harmonized Structure terms. First-time clients get a complete OH&S management system built to the 2018 edition.
3. Internal audits, including integrated audits An internal audit against ISO 45001 before your registrar arrives. Already running ISO 9001 or ISO 14001? One combined audit covers all of them. See Integrated Internal Audits.
4. Training Leadership briefings and staff awareness, plus internal auditor training for your team. Ask about training, including PPE and related safety topics.
5. Certification readiness Help choosing or scheduling your accredited certification body, readiness checks, and support during the audit. Follow-up on corrective actions after the audit may be quoted separately depending on scope.
6. OSHA / legal compliance built in (US sites) We build OSHA requirements into your ISO 45001 evaluation of legal compliance and can add OSHA checks to your integrated internal audit program. See OSHA Compliance.

Every project starts with a fixed quote. Your certification body remains the independent issuer of the certificate.

Working with us, step by step

1. Scoping callWe confirm your sites, activities and goal (first-time certification or system improvement), then send a fixed quote.
2. On-site gap assessmentWe visit your facility, review your current practices, hazard controls and records, and agree the action plan with you.
3. Implementation and documentationWe build a lean OH&S management system on what you already do, including hazard identification, legal register, objectives and operational controls.
4. Internal audit and management reviewWe carry out the internal audit, or coach your team through it, and help you prepare the management review.
5. Certification audit supportWe support you through the Stage 1 and Stage 2 audits by your accredited certification body.

Clauses 4–10 at a glance (Plan-Do-Check-Act)

ISO 45001:2018 follows ISO's Harmonized Structure (formerly Annex SL). The auditable requirements are in Clauses 4–10, organized around the Plan-Do-Check-Act cycle. The one-line summaries below are our paraphrase, not the text of the standard. Differences from other ISO standards sit mostly in planning and operation: hazard identification and worker participation for ISO 45001.

• Clause 4 · Context Understand your organization and its context Internal and external issues, interested parties, the OH&S management system scope — including contractors, suppliers and neighbours, not only employees.
• Clause 5 · Leadership Leadership and worker participation Top management accountability, the OH&S policy, roles and responsibilities, and meaningful worker consultation and participation.
• Clause 6 · Planning Hazards, risks, opportunities and legal requirements Hazard identification, assessment of OH&S risks and opportunities, determination of legal and other requirements, and OH&S objectives with plans to achieve them.
• Clause 7 · Support Resources, competence and communication Resources, competence, awareness, communication and documented information that keeps the system running.
• Clause 8 · Operation Operational control and emergencies Operational planning and control (including contractors and outsourcing), management of change, procurement, and emergency preparedness and response.
• Clause 9 · Performance evaluation Monitor, audit and review Monitoring and measurement, evaluation of compliance (clause 9.1.2), internal audit and management review.
• Clause 10 · Improvement Act on what you find Incident, nonconformity and corrective action, and continual improvement of OH&S performance.

Who it's for

• Organizations seeking first-time ISO 45001:2018 certification
• Companies that migrated from OHSAS 18001 and want a stronger, integrated system
• Manufacturers, warehouses, industrial employers and multi-site operations in Canada, the US or both
• Organizations already certified (or certifying) to ISO 9001 and/or ISO 14001 that want one integrated management system
• US employers that want OSHA legal compliance built into their ISO 45001 system
• Recyclers and ITAD facilities working toward R2v3 (which requires a certified EHSMS such as ISO 14001 + ISO 45001, or RIOS)

One system: ISO 45001 with ISO 9001 and ISO 14001

ISO 45001:2018 shares ISO's Harmonized Structure with ISO 9001 and ISO 14001. That means context, leadership, risk, competence, documents, internal audit, management review and corrective action can be run once for all three. ISO 14001:2026 and ISO 9001:2026 already use the updated structure, and ISO 45001 is being revised on the same structure (new edition expected in 2027). Common combinations include ISO 14001 + ISO 45001 and ISO 9001 + 14001 + 45001. See Integrated Internal Audits.

Related: ISO 14001 · ISO 9001 · R2v3

ISO 45001 and legal compliance

ISO 45001 requires you to know your legal requirements and evaluate whether you meet them (including clause 9.1.2). Paradygm builds legal (compliance-obligation) registers that list what applies to each site, who owns it and how compliance is shown. Certification shows you have a working system; it isn't a regulatory inspection.

For US sites, OSHA 29 CFR 1910 and 1904 are core legal requirements we can fold into your ISO 45001 compliance evaluation and integrated audits. For a detailed check of your sites against US EPA and OSHA rules, or Canadian federal and provincial requirements, see Regulatory Compliance Audits and OSHA Compliance.

OSHA compliance vs. ISO 45001

Why Paradygm

• 25+ years of ISO consulting, auditing and training
• Over 200 clients across Canada and the United States
• Guaranteed Certification within the first attempt
• Offices in Thornhill, Ontario and Coral Springs, Florida
• Quality, environmental and health & safety expertise: ISO 9001, ISO 14001, ISO 45001, the AS9100 family and R2
• Fixed quote for a defined scope

The certification process

Gap assessment → implementation → internal audit and management review → Stage 1 audit → Stage 2 audit → surveillance. Your accredited certification body carries out the Stage 1 and Stage 2 audits and issues the certificate, which is valid for three years with surveillance audits at least annually. First-time certification often takes about 6 to 12 months, depending on size, sites and existing systems.

Frequently asked questions

• 1. What is ISO 45001? ISO 45001 is ISO's first standard for occupational health and safety management systems. It sets requirements designed to help organizations protect the health and safety of people who work for them, and it can be certified by an accredited third party.
• 2. How is ISO 45001 different from OHSAS 18001? The overall aim remains the same, but ISO 45001 puts a stronger focus on the context of the organization and on top management and leadership. OH&S must be part of the overall management system, not an add-on delegated only to a safety manager. Organizations must also consider contractors, suppliers and neighbours — they cannot simply contract out risk.
• 3. Is OHSAS 18001 still valid? No. OHSAS 18001 has been withdrawn. Accredited OHSAS 18001 certificates had to migrate to ISO 45001 by 30 September 2021. The current edition is ISO 45001:2018 (with Amendment 1:2024).
• 4. When is the next edition of ISO 45001 expected? ISO is revising ISO 45001. The draft (ISO/DIS 45001) is at the enquiry stage, and ISO expects the new edition to replace ISO 45001:2018 in the first half of 2027. Keep working to the 2018 edition until the new edition and its transition rules are published.
• 5. What does "Guaranteed Certification within the first attempt" mean? When you engage Paradygm under an agreed scope and complete the actions we identify before the certification audit, we guarantee certification within the first attempt. The specific terms are set out in your proposal. Your accredited certification body issues the certificate independently.
• 6. Can we become "OSHA certified" instead? No. OSHA sets and enforces workplace safety standards but doesn't certify companies. If you want independent certification that your safety management system works, look at ISO 45001 certification. OSHA compliance can still be part of your ISO 45001 legal-compliance evaluation.
• 7. Can OSHA compliance be part of our ISO 45001 system or internal audits? Yes. ISO 45001 requires you to identify your legal requirements and evaluate your compliance with them, and OSHA 1910 and 1904 are core legal requirements for US sites. We can add OSHA checks to your integrated internal audits.
• 8. Can we combine ISO 45001 with ISO 9001 and ISO 14001? Yes. They share the Harmonized Structure, so context, leadership, competence, documents, internal audit, management review and corrective action can be run once. Common combinations include ISO 14001 + ISO 45001 and ISO 9001 + 14001 + 45001. See Integrated Internal Audits.
• 9. Does ISO 45001 certification prove we comply with health & safety law? No. It shows you have a system to identify and meet your legal requirements. For a site-by-site legal check, see our Regulatory Compliance Audits and, for US general industry, OSHA Compliance.
• 10. How long does it take and what does it cost? It depends on your size, sites and existing system. First-time certification often takes about 6 to 12 months. We provide a fixed quote after a short scoping call.
• 11. Do you work on site at our facilities? Yes. Gap assessments, implementation support and internal audits are done on site at your facilities across Canada, and we also work on site across the US. Training can be delivered on-site or remotely.
• 12. How do we choose a certification body (registrar)? Choose one whose accreditation covers ISO 45001 and your type of operations, such as a certification body accredited by the Standards Council of Canada (SCC) or by ANAB in the US. Check that it can audit all of your sites and schedule your Stage 1 and Stage 2 audits before your customer deadline. We help you compare registrars and prepare your team for their audits.

Joint Health & Safety Committee (JHSC)

Worker consultation and participation are core to an ISO 45001 occupational health and safety (OH&S) management system. In Ontario, a Joint Health & Safety Committee (JHSC) — or, in smaller workplaces, a health and safety representative — is a primary way employers and workers share responsibility for identifying hazards, recommending controls, and supporting the workplace internal responsibility system. Aligning JHSC practice with your OH&S management system helps meet both legal duties and ISO 45001 expectations around consultation and participation.

• What is a joint health and safety committee? A JHSC is composed of worker and employer representatives who work together to improve health and safety conditions. Committees identify potential issues, bring them to the employer’s attention, and must be kept informed of health and safety developments. A designated worker member inspects the workplace at least once a month.
• What is the committee’s role? The committee is an advisory body. It raises awareness of health and safety issues, recognizes and identifies workplace risks, holds regular meetings, conducts workplace inspections, and makes written recommendations to the employer for improving worker health and safety.
• Why do JHSCs matter? JHSCs help protect against workplace injury, illness, and death by involving both workers and employers. That co-operative involvement is a key element of a well-functioning internal responsibility system — and it supports the consultation and participation expected under ISO 45001.

When is a JHSC required in Ontario?

Under Ontario’s Occupational Health and Safety Act (OHSA), whether you need a JHSC or a health and safety representative depends largely on how many workers are regularly employed. Thresholds below follow the Ontario Ministry of Labour guide (see OHSA section 9 and related clauses cited):

Other workplaces that may require a committee include construction projects with 20 or more workers expected to last three months or more [clauses 9(2)(a) and 9(1)(a)]; workplaces subject to a designated substances regulation [clause 9(2)(c)]; workplaces under a Director’s order [clause 9(2)(b)]; or where the Minister of Labour has ordered a committee [subsection 9(3)]. Confirm applicability for your sites against the Act and current Ministry guidance.

Members and certification highlights

• Composition Minimum size & balance Fewer than 50 workers: at least two members [clause 9(6)(a)]. Fifty or more: at least four members [clause 9(6)(b)]. At least half the members must be workers who do not exercise managerial functions [subsection 9(7)]; the employer selects the remaining members from persons who exercise managerial functions [subsection 9(9)].
• Certification Certified members Unless otherwise prescribed, at least two members must be certified — one representing workers and one representing managerial functions [OHSA certification provisions; Chief Prevention Officer under clause 7.6(1)(b)]. Certification requires Part 1 (Basic Certification) and Part 2 (Workplace-Specific Hazard Training), with refresher training every three years. Certified members are generally not required for committees at workplaces with fewer than 20 workers, or certain smaller / short construction projects [O. Reg. 385/96, s. 4; subsection 9(13)].
• Cadence Meetings & inspections The committee must meet at the workplace at least once every three months [subsection 9(33)]. A designated worker member inspects the workplace at least monthly [subsection 9(26)]. Names and work locations of members must be posted [subsection 9(32)].

This summary is educational and is not legal advice. Thresholds and duties are based on Ontario’s OHSA and the Ministry of Labour’s guide for health and safety committees and representatives. Always verify current requirements for your workplace.

Read the full Joint Health & Safety Committee guide →

Related

• OSHA Compliance · Regulatory Compliance Audits · JHSC guide
• ISO 14001 · ISO 9001 · Internal Auditing
• R2v3 · Training hub · PPE Introduction
• All solutions · Request a quote

Sources: ISO; Ontario OHSA and Ministry of Labour guide for health and safety committees and representatives. Clause summaries are Paradygm's paraphrase, not the text of ISO 45001 or the OHSA. Confirm audit timing with your accredited certification body and legal thresholds with current legislation. This page is educational consulting guidance, not legal advice.