OHSMS means occupational health and safety management system. It is the set of rules, roles and records a company uses to prevent injury and illness at work, and it is audited by checking that hazards are identified, controlled and reviewed, and that workers take part. ISO 45001 is the international standard most companies use to build one.
Last reviewed: 17 October 2026. Facts checked. We searched for BSI and other material on ISO 45001 and opened the Wikipedia page on ISO 45001. The BSI pages appeared in search results, but we did not open them. For the revision status we relied on search summaries of certification-body news (DNV, NQA, Nemko) and did not open ISO's project page. We have not read the standard, which is a paid document.
What an OHSMS is, in plain words
An OHSMS is how a company manages the safety and health of the people who work for it or on its sites. It is not a list of safety rules. It is a cycle: find the hazards, decide what to do, do it, check it, improve it.
It covers employees, contractors and, depending on scope, visitors. Per Wikipedia, ISO 45001 aims to reduce work-related injuries and illnesses and to protect both physical and mental health.
ISO 45001 in brief
Wikipedia gives ISO 45001:2018, published on 12 March 2018, prepared by ISO project committee ISO/PC 283. It follows the high level structure used by ISO 9001:2015 and ISO 14001:2015, so it fits into an integrated management system.
It replaced OHSAS 18001. Per Wikipedia, the migration period ran from 2018 to 2021, with a COVID-related extension to 11 September 2021, and OHSAS 18001 was formally withdrawn in September 2021. A search summary of BSI material says BSI helped develop the early guide that became OHSAS 18001, which led to ISO 45001.
A revision is in progress
Search summaries of certification-body news report that ISO 45001 is being revised, with publication expected in 2027. They say the draft is at the Draft International Standard stage and that existing 2018 certificates remain valid. One report says a three-year transition is likely but not defined. Reported themes include well-being and psychosocial risk. We have not opened ISO's own project page, so confirm the stage with your certification body before you plan.
How an OHSMS is audited
| Audit | By whom | Purpose |
|---|---|---|
| Internal audit | The company's trained, impartial staff | Check the system against the standard and the company's own rules |
| Certification audit | An accredited certification body | Decide whether to issue or keep a certificate |
| Regulator or customer inspection | Authorities or customers | Check legal and contract requirements |
Wikipedia notes that ISO/IEC TS 17021-10:2018 sets competence requirements for auditing and certifying ISO 45001. For the general stages of certification, see Stage 1, Stage 2, surveillance and recertification.
What auditors look for
These are typical areas for an OHSMS audit. They reflect the standard's purpose and our own published checklist, not the standard's wording.
- Hazard identification. A method, applied to routine and non-routine work, and kept up to date.
- Worker participation. Do workers help identify hazards and shape controls? Ask the shop floor.
- Legal requirements. Does the company know which health and safety laws apply and can it show compliance?
- Controls. Are hazards removed or reduced in a sensible order, with protective equipment as a last step?
- Contractors. Are contractors briefed and controlled on site?
- Emergency readiness. Are plans written and drills recorded?
- Incidents. Are injuries and near misses reported, investigated and the cause fixed?
- Leadership. Does top management show that it is accountable?
Our ISO 45001 audit checklist goes through these in detail. This article is the explainer. That one is the working list.
Common weak spots
- The hazard register was written once and never updated.
- Near misses go unreported because workers fear blame.
- Contractor controls exist on paper only.
- Management review happens, but does not reach safety decisions.
Next steps
If you manage several systems, our guide to integrated management system audits shows how to combine them. For a first view of readiness, try the ISO management system readiness scorecard.
Frequently Asked Questions
What does OHSMS stand for?
Occupational health and safety management system. It is also written OH&S management system.
Is OHSMS the same as ISO 45001?
No. OHSMS is the system. ISO 45001 is the standard a company can use to build it and prove it.
What happened to OHSAS 18001?
Per Wikipedia, ISO 45001 replaced it, with a migration period to 2021, and it was formally withdrawn in September 2021.
Is a new ISO 45001 edition coming?
Certification-body news suggests a revision with publication expected in 2027. We have not confirmed this on ISO's own page.
Is an OHSMS required by law in India?
We did not check Indian law for this article. Some customers ask for ISO 45001. Check what applies to your sector.
Related Articles
Statutory facts on this page are checked against their sources, and the page says where it relied on secondary reporting. How we verify · Report an error