OHS Compliance & Risk Management16 min readPublished 20 July 2026

ISO 45001 Implementation & Certification Roadmap for South African Businesses

The comprehensive corporate guide to implementing the ISO 45001:2018 Occupational Health and Safety Management System, aligning with South African OHS legislation, and passing Stage 1 and Stage 2 certification audits.

Corporate executive and lead auditor reviewing ISO 45001 management system documentationAligning enterprise operations with the international ISO 45001:2018 occupational health and safety standard.

1. What is ISO 45001:2018 and Why Is It Vital for SA Enterprises?

In today's competitive commercial landscape, South African enterprises are under intense scrutiny from corporate clients, multinational investors, and government procurement committees. Maintaining basic ad-hoc compliance with minimum safety laws is no longer enough to secure premium tier-1 tenders.

ISO 45001:2018 is the globally recognized international standard for Occupational Health and Safety Management Systems (OH&SMS). Replacing the older British standard OHSAS 18001, ISO 45001 provides a structured, risk-based framework that shifts safety management from reactive incident policing to proactive, leadership-driven risk elimination.

Achieving SANAS-accredited ISO 45001 certification delivers immediate measurable business returns: it reduces Lost Time Injury Frequency Rates (LTIFR), lowers Compensation Fund (COIDA) assessment premiums, eliminates operational downtime, and provides unmatched competitive advantage during enterprise procurement evaluations.

ISO 45001 Enterprise Impact Benchmarks

40% Drop
Workplace Incidents
Average reduction in lost-time disabling injuries within 18 months of ISO 45001 certification.
3 Years
Certification Cycle
Standard validity period supported by mandatory annual surveillance audits.
100% Alignment
Annex SL Synergy
Seamlessly integrates with ISO 9001 (Quality) and ISO 14001 (Environmental) systems.
12 to 16 Weeks
Average Implementation
Realistic timeline for mid-sized South African enterprises from gap analysis to Stage 1 audit.

2. The 10 Clauses of Annex SL: High-Level Structure Breakdown

ISO 45001 utilizes the Annex SL High-Level Structure, ensuring that health and safety governance shares the exact same terminology, core definitions, and clause numbering as ISO 9001 (Quality) and ISO 14001 (Environmental Management).

Clauses 1 through 3 provide introductory scope, normative references, and definitions. The operational engine of the standard is contained within Clauses 4 through 10, structured directly around the Deming Plan-Do-Check-Act (PDCA) continuous improvement cycle.

ISO 45001 Clause Architecture & Operational Requirements

PDCA CycleISO 45001 ClauseCore Standard RequirementPractical Workplace Deliverable
PLANClause 4: Context of the OrganizationDetermine internal and external issues, stakeholder expectations, and OH&S system scope.Stakeholder Matrix, PESTLE analysis, and OH&S Scope Document.
PLANClause 5: Leadership & Worker ParticipationDemonstrate top management accountability, establish OHS policy, and ensure worker consultation.Signed OHS Policy, Section 16(2) appointments, and active SHE Committee Charters.
PLANClause 6: PlanningIdentify hazards, evaluate risks and opportunities, and establish measurable OHS objectives.Baseline HIRA registers, OHS Legal Register, and measurable Safety KPI targets.
DOClause 7: SupportProvide resources, competence, awareness, communication, and documented information.Training matrices, tool calibration logs, and document control procedures.
DOClause 8: OperationImplement operational controls, hierarchy of controls, management of change, and emergency response.Safe Work Procedures, Lockout/Tagout protocols, and contractor Section 37(2) agreements.
CHECKClause 9: Performance EvaluationMonitor, measure, analyze performance, conduct internal audits, and hold management reviews.Internal audit reports, occupational hygiene surveys, and annual Executive Management Review minutes.
ACTClause 10: ImprovementInvestigate incidents, manage non-conformities, implement corrective actions, and continually improve.GAR 9 Annexure 1 reports, CAPA logs, and root cause analysis tracking.
Summary of mandatory requirements across the 10 core clauses of ISO 45001:2018.

3. Integrating ISO 45001 with the South African OHS Act (Act 85 of 1993)

A frequent question asked by managing directors is: *'If we implement ISO 45001, does it automatically satisfy the South African OHS Act?'*

The answer is that while ISO 45001 provides the global management framework, Clause 6.1.3 (Determination of Legal Requirements) strictly requires the organization to identify, maintain access to, and comply with all applicable national legislation.

In South Africa, this means your ISO 45001 system must incorporate a live, site-specific OHS Legal Register covering the OHS Act (Act 85 of 1993), General Safety Regulations, Environmental Regulations, Hazardous Chemical Agents Regulations, COIDA, and relevant SANS engineering codes. ISO certification audits will instantly issue a Major Non-Conformance if statutory legal requirements are violated.

4. Navigating the Stage 1 & Stage 2 SANAS Certification Audits

Achieving formal ISO 45001 certification involves a two-stage audit process conducted by a SANAS-accredited certification body (such as BSI, TÜV, DQS, or SABS).

Stage 1 Audit (Documentary & Readiness Review): The lead auditor evaluates your documentation, policies, legal register, internal audit records, and management review minutes to confirm your organization is ready for full on-site evaluation.

Stage 2 Audit (On-Site Operational Audit): Auditors conduct extensive physical walkthroughs of your factories, construction sites, and office floors, interviewing frontline operators, testing emergency equipment, and verifying that documented procedures are actively followed in daily practice.

5. 6-Phase Turnkey Implementation Roadmap (12-Week Blueprint)

01
Phase 1: Baseline Gap Analysis & Scope Definition

Audit current workplace operations against all 10 clauses of ISO 45001:2018 to identify administrative, procedural, and physical compliance gaps.

02
Phase 2: Leadership Commitment & Policy Formulation

Secure executive sign-off on the corporate OH&S Policy Statement, establish organizational roles, and draft committee consultation charters.

03
Phase 3: Risk Assessment & Legal Register Development

Execute comprehensive baseline HIRAs across all operational zones and build a customized South African OHS Legal Register.

04
Phase 4: Operational Control & Workforce Training

Roll out visual Safe Work Procedures, Lockout/Tagout protocols, contractor vetting systems, and deliver accredited Workforce Safety Training.

05
Phase 5: Internal Audits & Executive Management Review

Conduct a full internal audit across all clauses using certified lead auditors, close out all corrective action requests (CARs), and convene the formal Management Review.

06
Phase 6: Stage 1 & Stage 2 External Certification Audits

Undergo formal certification audits with your chosen SANAS-accredited certification body to achieve your official ISO 45001 certificate.

Frequently Asked Questions

What is the difference between OHSAS 18001 and ISO 45001?

OHSAS 18001 was a British standard focused primarily on managing internal workplace hazards. ISO 45001 is a global standard utilizing the Annex SL framework, placing far greater emphasis on top management leadership, organizational context, stakeholder needs, and proactive risk opportunities.

How long does ISO 45001 certification remain valid?

ISO 45001 certificates are valid for a three-year cycle. To maintain certification, the organization must undergo mandatory annual Surveillance Audits in Year 1 and Year 2, followed by a full Recertification Audit at the end of Year 3.

Can small and medium-sized businesses (SMEs) achieve ISO 45001 certification?

Yes. ISO 45001 is designed to scale to organizations of all sizes, from 10-person specialist contractors to multi-thousand employee industrial conglomerates. The complexity of documentation is tailored to the organization's actual operational risks.

What is the role of an Internal Audit prior to certification?

Clause 9.2 mandates that an organization must conduct a comprehensive internal audit of all ISO 45001 clauses before the external certification body arrives. Failure to complete and document an internal audit will result in an immediate cancellation of the Stage 1 audit.

How can Diba BES help our company achieve ISO 45001 certification?

Diba BES provides turnkey ISO 45001 consulting, conducting gap analyses, drafting custom procedures, developing legal registers, training internal auditors, and facilitating certification with SANAS-accredited bodies. Book an [ISO 45001 Consultation](/services/occupational-health-safety-consulting).

DO
Written by Diba OHS Advisory TeamVerified by Orlinda Pieterson
Senior Occupational Health & Safety ConsultantsPr.CHSA (SACPCMP), Saiosh Tech Member

Diba BES is a 100% Black Women-Owned, Level 1 B-BBEE provider delivering occupational health & safety consulting, accredited workplace training, and commercial workplace services across South Africa since 2003.