ISO 45001 Certification Readiness Consulting and Internal Auditing | My ISO Consultants
Updated: Sep 18
ISO 45001 certification readiness means more than having safety procedures on file. An organization needs an occupational health and safety management system (OH&S management system) that is implemented, understood, supported by objective evidence, and capable of demonstrating conformity during an independent certification audit.
Certification-readiness consulting and internal auditing can help organizations identify gaps before the certification body arrives, strengthen implementation, and verify whether the management system is working in daily operations.
2026 ISO 45001 Status
ISO 45001:2018 remains the current published edition and was confirmed by ISO in 2024. The 2024 climate-action amendment also remains applicable. At the same time, ISO is developing the second edition of ISO 45001, and the revision has progressed to the Draft International Standard (DIS) stage.
Organizations should continue implementing and maintaining the current published requirements rather than rebuilding their systems around draft language. The most useful preparation for a future revision is to keep the existing OH&S management system accurate, effective, and well supported by evidence.
What ISO 45001 Certification Readiness Actually Requires
A certification-ready organization should be able to show that its safety management system is not just documented, but functioning across the workplace.
The OH&S management system scope and responsibilities are clearly defined.
Hazards are identified and OH&S risks and opportunities are evaluated.
Applicable legal and other requirements are identified and kept current.
Workers are consulted and participate in the management system as required.
Operational controls reflect actual workplace activities and risks.
Emergency preparedness and response arrangements are established where applicable.
Competence, awareness, and communication processes are functioning.
Internal audits have evaluated the implemented system.
Management review has assessed OH&S performance and system effectiveness.
Nonconformities and corrective actions are being managed effectively.
Why Internal Auditing Matters Before Certification
Internal auditing is one of the strongest indicators of whether an ISO 45001 system is ready for external evaluation. A useful internal audit tests actual implementation, not just whether required documents exist.
Do employees understand the safety procedures that apply to their work?
Do documented controls match current workplace practices?
Are hazards and risk controls being reviewed when conditions change?
Are legal and other requirements being evaluated appropriately?
Are worker consultation and participation processes functioning?
Are incidents, nonconformities, and corrective actions being addressed effectively?
Can the organization produce records that support what employees and managers say is happening?
Internal audits should be performed by competent auditors with enough objectivity to evaluate the system fairly. An organization can use qualified internal personnel or outsource audit activities, but management remains responsible for the audit program and for acting on the results.
Organizations that need additional audit capacity or a more independent review can use My ISO Consultants' internal auditing services as part of ISO 45001 certification readiness or ongoing system maintenance.
What ISO 45001 Readiness Consulting Should Include
A useful readiness project should focus on the organization's real workplace risks, operations, and existing management practices rather than forcing a generic safety template into the business.
Initial review of the existing OH&S management system.
Gap analysis against applicable ISO 45001 requirements.
Review of the management-system scope and organizational context.
Hazard identification and risk-process review.
Review of applicable legal and other requirements.
Documentation and record-control improvements where needed.
Worker consultation and participation review.
Operational-control and emergency-preparedness review.
Internal audit and management-review readiness.
Corrective-action follow-up.
Certification-audit preparation.
Organizations that need structured implementation or readiness support can use My ISO Consultants' ISO 45001 consulting services to identify practical gaps, strengthen implementation, and prepare for certification.
Consulting and Certification Are Separate
An ISO consultant can help an organization interpret requirements, improve its OH&S management system, perform readiness reviews, support internal auditing, and prepare for certification. The certification decision itself is made by an independent certification body.
Consulting support should therefore be presented as preparation and implementation assistance, not as a guarantee of certification.
ISO 45001 Does Not Replace Legal Compliance
ISO 45001 provides a structured management-system framework, but certification does not automatically prove compliance with every occupational health and safety law or regulation that applies to the organization.
The management system should include a process for identifying applicable legal and other requirements, evaluating compliance, and responding when obligations change or gaps are identified.
The 2024 Climate-Action Amendment
ISO 45001:2018 was amended in 2024 as part of ISO's climate-action changes to management-system standards. Organizations are required to determine whether climate change is a relevant issue in the context of the organization, and relevant interested parties may have climate-related requirements.
This does not mean every organization needs a separate climate program. The organization should determine whether climate-related conditions can affect its OH&S management system, workforce, operations, legal obligations, or interested-party requirements.
For a broader explanation of the climate amendment across multiple management-system standards, see Has Your ISO Standard been amended? How To Implement the Climate Change Amendment in AS9100 ISO 9001 ISO 14001 & ISO 45001.
Common ISO 45001 Readiness Gaps
Safety procedures do not match how work is actually performed.
Hazard identification is incomplete or not updated when operations change.
Worker consultation and participation are treated as informal rather than part of the management system.
Legal and other requirements are not kept current or evaluated consistently.
Objectives exist but are not supported by meaningful performance monitoring.
Incident investigations focus on symptoms without addressing underlying causes.
Corrective actions are closed without verifying effectiveness.
Internal audits are too narrow or are completed too late in the certification schedule.
Management review is treated as a meeting requirement instead of a system-performance review.
Training records exist, but competence for safety-critical responsibilities is not demonstrated.
How to Know When the Organization Is Ready
No consultant can guarantee the outcome of an independent certification audit, but several signs indicate that the management system is approaching genuine readiness.
The OH&S management system has been implemented long enough to generate meaningful records.
Employees and process owners understand their responsibilities.
Internal audits have covered the applicable system and significant findings have been addressed.
Management review has evaluated performance and required actions.
Hazard and risk controls are operating in practice.
Corrective actions are being verified for effectiveness.
Required records can be retrieved efficiently and support actual workplace practices.
Frequently Asked Questions
Is ISO 45001:2018 still current in 2026?
Yes. ISO 45001:2018 remains the current published edition. A second edition is under development, but organizations should continue using the current published requirements until the revised standard is officially issued and transition guidance is available.
Do we need an internal audit before ISO 45001 certification?
Yes. Internal auditing is a required part of the management system and is an important certification-readiness activity. The audit should evaluate whether the system conforms to applicable requirements and is effectively implemented.
Can we outsource our ISO 45001 internal audit?
Yes. A qualified outside auditor can perform internal audit activities. The organization still remains responsible for the audit program, reviewing findings, and taking appropriate corrective action.
Does ISO 45001 certification guarantee OSHA or regulatory compliance?
No. ISO 45001 certification does not replace applicable occupational health and safety laws or government oversight. The management system should include processes for identifying legal requirements, evaluating compliance, and addressing gaps.
Should we wait for the next ISO 45001 edition before pursuing certification?
Generally, no. ISO 45001:2018 remains the current published standard. Organizations can continue implementation and certification work now while monitoring official ISO updates about the next edition and any future transition period.
Conclusion
ISO 45001 certification readiness is strongest when the OH&S management system reflects real workplace conditions, employees understand their responsibilities, risks are actively managed, and internal audits provide an objective test of implementation.
If your organization is preparing for certification and needs help identifying gaps before the external audit, My ISO Consultants provides ISO 45001 consulting services for gap analysis, OH&S management-system improvement, internal auditing support, corrective-action guidance, and certification readiness.
