OHSAS 18001 is an internationally recognised specification for an occupational health and safety (OH&S) management system. Organisations of every size use it to control workplace risks, reduce injuries and demonstrate legal compliance. If your clients, insurers or tender documents ask for "OHSAS 18001 certification", this guide explains what that means in practice.
What is OHSAS 18001?
OHSAS 18001 follows the well-known Plan–Do–Check–Act cycle. Rather than telling you exactly which machine guards or signs to install, it asks you to build a management system that finds hazards, decides what to do about them, checks that the controls work and keeps improving. That makes it suitable for a small workshop as much as for a multinational contractor.
The main requirements
1. OH&S policy
Top management must write and sign a policy that commits the organisation to preventing injury and ill health, complying with legislation and continually improving. The policy must be communicated to everyone working under the organisation's control.
2. Planning: hazards, risks and legal requirements
You must have procedures for hazard identification, risk assessment and determining controls, and a way to track the legal and other requirements that apply to you. Objectives and programmes then turn the risk assessment into concrete actions with owners and deadlines.
3. Implementation and operation
- Defined roles, responsibilities and authority
- Competence, training and awareness for every worker
- Communication, participation and consultation
- Controlled documents and records
- Operational controls and emergency preparedness
4. Checking
Performance must be measured and monitored. This includes accident and incident investigation, internal audits, evaluation of legal compliance, and corrective and preventive action when something goes wrong.
5. Management review
At planned intervals, top management reviews the whole system — audit results, incident trends, objectives and resources — and decides what must change.
Benefits of OHSAS 18001 certification
- Fewer accidents, lost-time injuries and insurance claims
- Evidence of legal compliance for regulators and clients
- Eligibility for tenders that require a certified safety system
- A safety culture that workers can see and trust
How to prepare for certification
- Run a gap analysis against the specification.
- Document the policy, procedures and risk register.
- Train managers and internal auditors.
- Operate the system for a few months to build records.
- Complete an internal audit and management review.
- Invite an accredited certification body for the stage 1 and stage 2 audits.
Key takeaway: OHSAS 18001 is about managing risk systematically — policy, planning, doing, checking and reviewing — not about paperwork for its own sake.
Frequently asked questions
Is OHSAS 18001 mandatory?
No. It is voluntary, although many clients and public tenders require it as proof of a working safety system.
How long does certification take?
Most organisations need six to twelve months to build and operate the system before the certification audit.
Who should be trained?
Managers need awareness training, and your internal auditors should complete a recognised auditor course. See our occupational health and safety courses and the full Program Catalog.