What ISO 45001 actually is

ISO 45001 is the international standard for Occupational Health and Safety (OH&S) management systems. It replaced the older AS/NZS 4801 and OHSAS 18001 frameworks, and it sets out the requirements for a structured system that identifies workplace hazards, controls risk, and actively prevents injury and ill health — rather than simply responding to incidents after they happen.

Like ISO 9001, ISO 45001 certifies a management system, not a workplace itself. A certified organisation has demonstrated it has a genuine, functioning process for managing safety risk — not just a safety policy pinned to a noticeboard.

Why it matters in Australia specifically

ISO 45001 sits alongside, not instead of, your legal WHS obligations under Australian state and federal work health and safety legislation. Certification doesn’t replace your duty of care or your regulator’s expectations — but a well-built ISO 45001 system gives you a structured, auditable way to demonstrate you’re actively managing that duty, which matters both for regulatory defensibility and for commercial reasons: many principal contractors, government panels, and enterprise clients now require ISO 45001 certification (or an equivalent) as a pre-condition of engagement, particularly in construction, manufacturing, logistics, and resources.

What ISO 45001 requires, without the jargon

ISO 45001 shares the same Annex SL backbone as ISO 9001, which is precisely why the two integrate so well into one combined management system. The core requirements, in plain terms:

• Worker participation — safety systems built with input from the people actually doing the work, not designed in isolation by management.
• Hazard identification and risk assessment — a genuine, ongoing process for spotting what could cause harm, not a one-off checklist done at induction.
• Legal compliance tracking — a live register of which WHS laws and regulations actually apply to your operations, kept current.
• Operational controls — the specific measures (toolbox talks, permits, PPE requirements, inspection schedules) that reduce identified risks in practice.
• Incident investigation — root-cause analysis when something does go wrong, feeding back into the system so it doesn’t repeat.
• Management review and continual improvement — leadership actively reviewing safety performance, not delegating it entirely and checking in once a year.

A frequent gap we see in businesses attempting this alone: under-specifying the frequency of toolbox talks and workplace inspections. A safety system that only names these activities without committing to a real cadence tends not to hold up under audit scrutiny, and more importantly, doesn’t actually reduce risk in practice.

Who needs ISO 45001

It’s most urgent for organisations in physically hazardous industries — construction, manufacturing, warehousing/logistics, resources, and field services — and for any business bidding on principal-contractor or government work where certification is a stated tender requirement. It’s also increasingly expected as standard due diligence by insurers and enterprise clients assessing supplier risk, even outside those industries.

How certification works

The path mirrors ISO 9001: build or strengthen your OH&S management system against the standard’s clauses, operate it long enough to generate real evidence (incident records, inspection logs, toolbox talk minutes, corrective actions), then go through a two-stage external audit with a JAS-ANZ accredited certification body, followed by annual surveillance audits.

PSMG-run engagements typically move from kick-off to certification audit in around 4–8 weeks for a well-prepared small-to-mid business.

The PSMG difference

PSMG brings over 20 years of experience building WHS management systems specifically for Australian regulatory and commercial conditions — not generic templates adapted after the fact. Systems are built to be genuinely used by site teams, not just presented at audit, and every certification runs through JAS-ANZ accredited partners so the outcome holds up wherever it’s checked.