ISO 45001 Certification: Scope, Process and Evidence

By EQRM · Editorial policy and sources

Updated October 1, 2026

An ISO 45001 certification enquiry should explain how the organization manages occupational health and safety within its proposed scope. The subject is the management system; a certificate should not be used to promise that no accident or illness can occur.

The ISO 45001 catalogue identifies the standard and related publication information. Check the applicable edition and amendments when planning an assessment.

Describe where the work happens

Workplaces can include permanent facilities, temporary sites, customer premises and remote activities. A head-office address is not a sufficient description if significant work occurs elsewhere. Explain the people and activities included, how responsibilities are allocated and the interfaces with clients or contractors.

A scope that is too narrow can create a misleading public impression. A scope that is broader than the applicant’s actual responsibilities can create a different problem. The purpose is an accurate description, not an impressive label.

Connect risk decisions with operational arrangements

An organization should be able to explain how it understands work-related hazards and how decisions influence the way work is carried out. Consider changes, unusual tasks and interfaces between teams rather than looking only at routine activities.

For example, maintenance work may take place under conditions different from normal production. The useful preparation question is how that difference is recognized and addressed by the organization, not whether the same form is used in every situation.

Make participation meaningful

Where people carry out the work, their understanding can reveal differences between planned arrangements and actual conditions. Explain how relevant concerns reach decision-makers and how the organization responds. A signed attendance sheet alone may not show whether a concern was understood or acted on.

This is practical preparation advice, not a replacement for the detailed requirements of the standard.

Evidence should be understandable

Examples may include records of decisions, communication, competence, monitoring, incident response and evaluation, depending on the system. Explain what each record relates to and how it was used. Avoid constructing a large evidence pack with no clear relationship to the activities being assessed.

If a process has changed after an incident or other learning, describe the change and how it was introduced. Do not hide unresolved issues merely to make a presentation look complete.

Audit arrangements and certification claims

Tell the certification body about sites, shifts, contractors and activities requiring special access or planning. Do not assume an entirely remote assessment is suitable for all operations. The programme and proposed scope determine the arrangements.

Certification does not transfer the organization’s safety responsibilities to the certification body. Nor should it be presented as a substitute for permits, professional competence or other activity-specific requirements.

Read ISO 45001 certification and the certification process. Contact EQRM with your actual operating scope and planning questions.

Use an operational change as a preparation example

Consider a recent change in equipment, work location, shift pattern or contractor activity. Explain how the organization considered the safety implications, involved relevant people, communicated the arrangement and checked its use. Keep the example tied to actual responsibilities. A current example can reveal gaps that a general policy presentation leaves difficult to see.

Quick answers

Does certification promise that no accident will occur?

No. It concerns a management system within scope and should not be presented as a guarantee that all incidents are impossible.

Should contractors be considered when describing the scope?

Explain contractor activities and the responsibilities or interfaces relevant to the organization’s system. Confirm assessment arrangements for the actual work involved.

Related reading

More from EQRM Insights

Guides

Evaluate a certification body’s competence, accreditation scope, proposal, decision process and certificate verification before choosing a provider.

Guides

Consider ISO certification for a small business: relevant scope, practical evidence, shared responsibilities and questions before requesting a quote.

Certification Insights

Learn how documents, records, interviews and observations can support a certification audit, and why templates alone cannot prove conformity.