ISO 45001 is the international standard for healthy and safe working. The standard helps you to tackle occupational risks in a structured manner and to prevent accidents, absenteeism and occupational diseases.
In this guide you can read everything you need to know: from the basic principles to the costs, from the difference with VCA to choosing a certifier. No sales pitches, just clear information.
1. What is ISO 45001?
ISO 45001:2018 is the international standard for occupational health and safety management systems. In English: Occupational Health and Safety Management Systems (OH&S). The standard describes requirements for a systematic approach to healthy and safe working.
In short: ISO 45001 helps you create and ensure a safe working environment.
With an ISO 45001 certificate you demonstrate that your company manages occupational risks, actively works on safety and continuously improves.
1.1 Purpose of the standard
ISO 45001 focuses on preventing or limiting:
- Industrial accidents
- Absenteeism due to work-related causes
- Occupational diseases and health complaints
The standard gives you a framework to identify risks, take measures and improve performance.
1.2 The High Level Structure
The standard consists of ten clauses:
| Clause | Subject |
|---|---|
| 4 | Context of the organisation |
| 5 | Leadership and employee participation |
| 6 | Planning |
| 7 | Support |
| 8 | Execution |
| 9 | Performance evaluation |
| 10 | Improvement |
1.3 Current version and future update
The current version is ISO 45001:2018, published on March 12, 2018.
2. Why certify ISO 45001?
A certificate is not a goal in itself. The question is: does it help your business?
2.1 Five concrete benefits
In addition to fewer checks, there are more advantages:
- Fewer accidents and absenteeism - A systematic approach leads to fewer incidents. That saves costs and suffering.
- Confidence from clients - Clients ask for proof of safety care, especially in construction, industry and petrochemicals.
- Legal compliance - With ISO 45001 you systematically complete the RI&E obligation under the Working Conditions Act.
- Foundation for integration - Same structure as ISO 9001 and 14001 makes combined certification efficient.
- Better corporate culture - An emphasis on employee participation improves engagement and safety awareness.
2.2 For whom is it relevant?
ISO 45001 is universally applicable. Unlike VCA, it is not limited to specific industries.
| Type of organisation | Examples |
|---|---|
| Industry | Production, manufacturing industry, metal |
| Construction and infrastructure | Contractors, installers |
| Logistics | Transport, warehousing |
| Services | Facilities, cleaning |
| Care | Hospitals, nursing homes |
| Petrochemical | Refineries, chemical industry |
Good to know: ISO 45001 is suitable for organisations of all sizes, from self-employed to multinational.
2.3 When it may not be necessary
Honest advice: certification is not always the best choice.
ISO 45001 is less necessary if:
- You have an office environment without physical risks
- Clients do not ask for it
- You already have VCA and are satisfied with it
3. The ISO 45001 certification process
You go through six steps from decision to certificate. Count on three to six months.
3.1 The six steps to certification
Determine intake and scope - Which parts of your organisation? Which locations? The certifier makes a quotation based on this scope.
GAP analysis (optional) - A baseline measurement: where are you now? What still needs to be done? Not required, but helps with planning.
Implementation of management system - Drawing up documentation, setting up processes, training employees. Operational for at least three months before certification is possible.
Phase 1 audit (documentation check) - The auditor reviews your documentation. Are the required documents present and up to date?
Phase 2 Audit (Practical Testing) - On-site audit. The auditor speaks with employees, examines processes and checks whether theory and practice correspond.
Certificate and maintenance - Upon approval: three-year certificate. An annual surveillance audit, recertification after three years.
3.2 Timeline
| Situation | Lead time | Audit duration |
|---|---|---|
| Existing system (e.g. VCA) | 3-4 months | 1-2 days |
| Starting from scratch | 4-6 months | 1-2 days |
| Complex organisation | 6-9 months | 2-3 days |
3.3 Who does what?
| Party | Role |
|---|---|
| You | Setting up system, internal audits, preparing employees |
| Consultant (optional) | Guidance, templates, training |
| Certifier | Perform audit, issue certificate |
| Accreditation body | Checks the certifier (RvA, UKAS, DAkkS, etc.) |
4. What does ISO 45001 cost?
The costs vary. They depend on your company size, complexity and whether you engage guidance.
Rule of thumb for SMEs: Count on €2,900 - €3,900 in the first year, then €1,400 - €2,500 per year.
4.1 Cost items overview
| Cost item | Indication |
|---|---|
| Certification audit (year 1) | From €1,400 |
| Surveillance audit (per year) | €1,000 - €2,000 |
| Recertification (every three years) | €1,500 - €3,000 |
| Advice/implementation (optional) | €1,900 - €3,900 |
| Internal hours | Highly variable |
4.2 Price indication per company size
| Company size | First year | Annually thereafter |
|---|---|---|
| Small (up to 20 FTE) | €2,900 - €4,500 | €1,400 - €2,500 |
| Medium (20-100 FTE) | €4,500 - €8,000 | €2,000 - €4,000 |
| Large (100+ FTE) | €8,000 - €15,000+ | €4,000 - €8,000+ |
Prices indicative, excl. VAT.
4.3 What influences the price?
Five factors determine your costs:
- Number of employees - More people means more audit time
- Number of Locations - Each location is rated
- Risk profile - Construction and industry are more expensive than offices
- Existing systems - Already ISO 9001 or VCA? Then it goes faster
- Certifier’s Choice - Prices vary 20-40%
5. Preparation for ISO 45001
Good preparation is half the battle. Most of the time is spent setting up your management system, not auditing it.
5.1 What do you need to arrange internally?
The most important preparation steps:
- Assign responsibilities - Who is ultimately responsible? Who coordinates?
- Update RI&E - Your Risk Inventory and Evaluation is the basis
- Describe processes - How do you work safely? What are the procedures?
- Employee Involvement - ISO 45001 requires employee participation
- Internal audit - Test whether everything works before the certifier arrives
- Management review - Management Review: discuss results with management
5.2 What documentation is needed?
The standard requires at least:
| Document | What it is |
|---|---|
| OH&S policy | Your vision on safety, signed by management |
| RI&E | Risk Inventory and Evaluation (legally required) |
| Objectives | Measurable safety goals |
| Process descriptions | How to work safely |
| Competency overview | Who is responsible for what |
| Emergency procedures | Emergency response, evacuation, emergency plan |
| Internal audit report | Evidence of internal control |
| Management assessment report | Management Review |
No need for a thick manual. The form is free. Many companies work digitally or with compact documents.
5.3 Three common mistakes
Error 2: RI&E not up to date
An outdated RI&E is a common deviation. Make sure your RI&E is recent and covers all current risks.
Mistake 3: Employees not involved
ISO 45001 requires employee participation. If employees do not know what the system entails, this will be noticed during the audit.
6. The ISO 45001 audit
The external audit is the moment of truth. With good preparation there is little to worry about.
6.1 Phases one and two
The audit consists of two parts:
Phase 1: Documentation check (often remotely)
The auditor reviews your documentation. Are all required documents present? Is the RI&E up to date? After phase 1 you will receive feedback and time to make adjustments.
Phase 2: On-site audit (on location)
The auditor visits, speaks to employees, inspects the workplace, checks registrations and checks whether paper and practice correspond.
The gist: The auditor is looking for evidence that safety is important in your organisation. Not just on paper.
6.2 Possible outcomes
| Outcome | What’s happening? |
|---|---|
| ✅ Certificate | You meet the requirements |
| ⚠️ Small deviations | Certificate, but resolve points for next audit |
| ❌ Major deviations | First solve, then reaudit |
6.3 Tips for a smooth audit
- Engage Employees - Tell them what to expect. They do not need to know the standard, but they do need to know how to work safely.
- Be honest - Don’t try to hide anything. Auditors appreciate openness.
- Show the workplace - Show that safety is alive, not just in documents.
- Have documents ready - Make sure you can quickly show what the auditor is asking.
7. Choosing an ISO 45001 certifier
There are more than fifteen certifiers active in the Netherlands for ISO 45001. They differ in price, approach and specialisation.
7.1 Five criteria to pay attention to
| Criterion | Why important |
|---|---|
| Accreditation | Non-accredited certificates are often not recognised |
| Industry experience | An auditor who knows your industry adds more value |
| Price | Differences of 20-40% are normal |
| Service | Permanent contact person? Quick responses? |
| Working relationship with the auditor | You will work together for at least three years |
7.2 What is accreditation?
Accreditation bodies audit certifiers. They check whether auditors are qualified, whether the certifier works independently and whether the ISO rules are applied correctly.
In the Netherlands, the RvA (Accreditation Council) is the national body. But certifiers with UKAS accreditation (UK) or DAkkS accreditation (Germany) are equally valid. All national bodies recognise each other’s certificates through the IAF (International Accreditation Forum).
7.3 Questions to ask
Before you choose, ask potential certifiers these questions:
- Are you accredited for ISO 45001? At which agency?
- What is your experience in my sector?
- Who will be my auditor? Can I speak to that person in advance?
- What is the lead time from quotation to certificate?
- What are the total costs for three years?
- How do you deal with deviations during the audit?
The right choice is not necessarily the cheapest. An auditor who understands your sector and provides constructive feedback is more valuable than saving a few hundred euros.
Ready to compare? View our overview of certification bodies in the Netherlands and find one that fits your company.
8. Frequently asked questions about ISO 45001
What is ISO 45001 certification?
ISO 45001 is the international standard for occupational health and safety management systems. With a certificate you show that your company has systematically arranged healthy and safe working. The standard helps prevent accidents, absenteeism and occupational diseases.
Is ISO 45001 mandatory?
No, it’s voluntary. However, an RI&E is mandatory under the Working Conditions Act. ISO 45001 helps to systematically fulfill this obligation. Commercially, it is often requested by clients in construction, industry and petrochemicals.
Who can certify ISO 45001?
Only accredited certification bodies. Accreditation can be from the RvA (Netherlands), UKAS (UK), DAkkS (Germany) or other IAF members. All these certificates are internationally recognised through the IAF Convention.
What is the difference with VCA?
ISO 45001 is an international management system for all industries. VCA is a regional checklist (NL, BE) for sectors with an increased risk. ISO 45001 describes “what” you need to arrange, VCA describes “how”. Many construction companies have both.
What is the difference with OHSAS 18001?
OHSAS 18001 was the predecessor and is no longer valid as of September 30, 2021. ISO 45001 follows the High Level Structure, has more focus on leadership and employee participation, and requires a broader context analysis.
How much does ISO 45001 cost?
For SMEs: €2,900 - €3,900 in the first year, then €1,400 - €2,500 per year. The exact price depends on company size, number of locations and risk profile.
How long does certification take?
On average three to six months. The system must be operational for at least three months. The audit itself takes one to two days.
Can I combine ISO 45001 with other standards?
Yes. ISO 45001 shares the same structure with ISO 9001, ISO 14001 and ISO 27001. Integrated audits save time and costs.
This guide is updated regularly. Last checked: December 2025.