As of September 2026, ISO 45001:2018 remains the current published edition, with a revision under development for expected publication in 2027.

A safety professional does not need to reproduce the standard from memory. They need to understand how management-system elements connect to real work.

Management-system purpose

ISO describes the standard as a framework for managing OH&S risks and improving performance.

A management system helps turn safety from isolated activities into repeatable processes.

Context and leadership

Safety performance depends on:

  • organizational context;
  • leadership commitment;
  • worker participation;
  • responsibilities;
  • resources.

A safety team cannot compensate indefinitely for weak operational ownership.

Hazard and risk processes

The system should connect:

  • hazard identification;
  • risk assessment;
  • opportunities for improvement;
  • controls;
  • legal/other requirements.

Objectives

Useful objectives should be connected to risk and business reality.

Examples:

  • improve closure of high-risk actions;
  • reduce repeated exposure condition;
  • strengthen contractor control.

Avoid choosing a target only because it is easy to count.

Competence and communication

A system should help ensure people:

  • understand hazards;
  • have required competence;
  • know responsibilities;
  • receive relevant information.

Training attendance alone does not prove competence.

Operational controls

Operational controls can include:

  • procedures;
  • engineering controls;
  • maintenance;
  • procurement;
  • contractor controls;
  • change management;
  • emergency arrangements.

Auditing

Internal audits evaluate whether the system:

  • conforms to defined requirements;
  • is implemented;
  • is effective enough to support intended outcomes.

Corrective action

After a nonconformity or incident:

  • address immediate issue;
  • evaluate cause;
  • implement corrective action;
  • review effectiveness.

Continual improvement

Improvement should use:

  • incidents;
  • audits;
  • worker feedback;
  • performance data;
  • change;
  • management review.

Resume evidence

Weak:

ISO 45001 knowledge.

Stronger:

Supported an ISO 45001 internal-audit cycle, tracked corrective actions by owner/risk and verified closure evidence before review.

The valuable skill is using the system to improve control—not quoting clause numbers.

Sources