Home / Insights / OHSAS 18001 and ISO 45001: what changed, and what to do if you still hold the old certificate

Health & safetyGuide

OHSAS 18001 and ISO 45001: what changed, and what to do if you still hold the old certificate

OHSAS 18001 was a British Standard. ISO 45001 replaced it. The difference is not cosmetic: the newer standard asks the organisation questions the old one did not, and an OHSAS-era system usually satisfies only part of it.

Published 7 August 2026Reviewed 7 August 20264 minute read

In brief

ISO 45001 is the international standard for occupational health and safety management systems. It replaces OHSAS 18001, which was a British Standard rather than an international one.¹

If your certificate, tender library or quality manual still says OHSAS 18001, it is describing a superseded framework. That matters most in procurement, where a prequalification document written years ago may still ask for a standard that no longer exists.

What actually changed

ISO identifies four substantive differences between the two standards.¹ Each has a practical consequence.

Stronger emphasis on leadership engagement

Under the older framework, health and safety could sit with an HSE manager and a set of procedures. ISO 45001 places accountability with top management and expects it to be evidenced: through resourcing, through visible participation, and through decisions that trade off safety against other objectives being made at the level where that trade-off actually belongs.

Context analysis and risk-based thinking

The standard asks what the organisation is, who its interested parties are, and what could affect its ability to deliver safe outcomes, before it asks what controls exist. This is the largest gap in most OHSAS-era systems, because a hazard register is not a context analysis. One asks what could hurt someone on site; the other asks what could cause the system itself to fail.

Alignment with other ISO management system standards

ISO 45001 uses the same high-level structure as ISO 9001, ISO 14001 and ISO 27001. Clause numbering, terminology and the management review cycle are common across them. For an organisation running more than one system, this is the change with the most operational value: one context analysis, one internal audit programme, one management review, not three.

Increased focus on improving performance

The emphasis moves from having controls to demonstrating that health and safety performance improves. An audit that once tested whether procedures existed now tests whether they change anything.

What this means for your organisation

An OHSAS-era system rarely fails ISO 45001 on hazard control. It fails on context, leadership evidence, worker participation and performance demonstration: the parts that were not asked for before. A gap assessment against those four areas will usually predict the outcome of a certification audit more accurately than a review of the safety procedures themselves.

Worker participation is a requirement, not a principle

Among the key elements ISO names in the standard are leadership commitment, worker participation, hazard identification and risk assessment, legal and regulatory compliance, emergency planning, incident investigation and continual improvement.¹

Worker participation is the one most often treated as a statement of intent. It is a requirement, and it is auditable: consultation arrangements, how workers raise hazards without disincentive, and whether their input demonstrably reaches decisions. A committee that meets and minutes nothing does not evidence it.

If your documentation still says OHSAS

Three situations come up repeatedly, and they need different responses.

Your certificate says OHSAS 18001. It refers to a superseded standard. Certification against ISO 45001 is a fresh assessment by an accredited certification body, not an administrative reissue, and it will test the areas listed above.

A tender asks for OHSAS 18001. This is common and usually reflects a prequalification document that has not been updated. ISO 45001 is the successor standard, and stating that plainly in a bid is normally sufficient. Where a client insists on the exact wording, the question is for the client, not the certification body.

Your internal documentation references OHSAS clauses. Clause numbering differs, because ISO 45001 follows the structure shared across ISO management system standards. Cross-references in procedures, audit checklists and training material will not map across directly.

Where ExSolution fits

We provide occupational health and safety management system consultancy and certification-readiness support, including gap assessment against ISO 45001 for organisations moving from an OHSAS-era system. We do not issue certificates and we do not guarantee the outcome of an independent audit. See ISO 45001 consultancy, or Integrated Management Systems where health and safety runs alongside quality, environment or information security.

Sources

International Organization for Standardization, ISO 45001 — Occupational health and safety management systems, standard record and accompanying notes on the difference between ISO 45001 and OHSAS 18001. iso.org · accessed 7 August 2026.

Last reviewed 8 August 2026.