ISO 45001 History and Development: From OHSAS 18001 to International Standard

Understanding how ISO 45001 came to exist reveals why it differs from its predecessor OHSAS 18001. History isn’t merely academic; it explains the philosophy embedded in the standard today.

The journey from OHSAS 18001 to ISO 45001 spans two decades and reflects evolving thinking about occupational health and safety management. This article walks through that evolution chronologically, explaining the key inflection points that shaped ISO 45001.

The Pre-OHSAS Era: Occupational Health and Safety Before Standards (Pre-1999)

Before 1999, occupational health and safety management was largely unstructured. Organisations complied with statutory requirements (laws, regulations) but had no systematic framework for managing hazards, assessing risks, or driving continuous improvement.

Compliance was reactive: meet minimum legal requirements, respond to incidents, avoid prosecution. Most organisations had no formal OH&S management system. Those with OH&S functions often operated in silos, separate from operational management.

In the 1980s and 1990s, quality management evolved dramatically. ISO 9001 (quality management) was published in 1987, revolutionising how organisations thought about quality. It demonstrated that systematic management of quality could be both standardised and effective. Organisations using ISO 9001 achieved remarkable quality improvements.

This success prompted thinking: could the same systematic approach work for environmental management? For occupational health and safety?

OHSAS 18001: 1999 and the First International-Like Standard

In 1999, the British Standards Institution (BSI) and a consortium of national standards bodies published OHSAS 18001 (Occupational Health and Safety Assessment Series 18001).

OHSAS 18001 wasn’t an ISO standard (it was a BSI-led initiative), but it was positioned as an international standard. It applied the quality management system approach to occupational health and safety: plan, implement, check, act. Document your OH&S policy, identify hazards, assess risks, implement controls, measure effectiveness, improve.

OHSAS 18001 transformed OH&S management globally. Within years, thousands of organisations pursued certification. It became the de facto international benchmark for OH&S management systems.

Key characteristics of OHSAS 18001 (1999):

• Procedure-based (detailed procedures required)
• Reactive hazard management (identify known hazards, control them)
• Document-heavy (extensive procedures and records)
• Focused on compliance with minimum standards
• Limited worker participation emphasis
• Four-clause structure (Planning, Implementation/Operation, Checking, Management Review and Improvement)

OHSAS 18001 succeeded because it provided a structured, auditable framework for OH&S management. It made OH&S systematic and measurable. But it had limitations.

OHSAS 18001:2007 Revision

In 2007, OHSAS 18001 was revised. The revision was minor—primarily clarifications and minor improvements—but it signalled the standard’s maturity and maintained its relevance.

By 2007, OHSAS 18001 was deeply entrenched globally. Most major organisations in high-risk sectors (construction, mining, manufacturing) were certified. The standard had become the default framework for OH&S management.

Yet thinking about management systems was evolving. ISO was developing new standards for environmental management (ISO 14001) and energy management (ISO 50001). Each had a different structure. Organisations pursuing multiple standards faced fragmentation—different frameworks, different requirements, different audit cycles.

ISO recognised this was inefficient. It began developing a common framework (High Level Structure, or HLS) for all management system standards. But OHSAS 18001 couldn’t be part of this evolution; it was BSI’s standard, not ISO’s.

ISO Technical Committee 283 Formation: 2013

In 2013, ISO formally established Technical Committee 283 (ISO/TC 283) to develop an international standard for occupational health and safety management systems. This was the inflection point.

Why form a new committee? Because ISO wanted an OH&S standard that:

• Was an ISO (not BSI) standard, developed through ISO’s rigorous international consensus process
• Used the new High Level Structure (HLS), enabling integration with ISO 9001, ISO 14001, and other standards
• Reflected modern risk management thinking: proactive, opportunity-focused, not just reactive compliance
• Mandated worker participation more explicitly
• Shifted from procedure-based to process-based approach
• Emphasised systems thinking over documentation

ISO/TC 283 wasn’t starting from zero. OHSAS 18001 was well-established; most ISO 45001 requirements map to OHSAS 18001 requirements. But TC 283’s mandate was to modernise, systematise internationally, and enable integration across standards.

Development Phase: 2013-2017 (5-Year Process)

Developing ISO 45001 took five years. TC 283 worked through an intensive, multi-stage process.

Stage 1: Working Group Formation (2013-2014)

TC 283 established working groups focusing on different areas: context and planning; support and operation; performance evaluation and improvement; definitions and terminology. Each working group included experts from multiple countries—employers, workers’ representatives, academics, government bodies, certification bodies.

The international composition ensured the standard reflected diverse perspectives and practices globally. An approach suitable for Scandinavian industries might not fit Asian practices; the standard needed flexibility.

Stage 2: Requirements Development (2014-2016)

Working groups drafted requirements aligned to the HLS structure. They debated intensely: Should the standard mandate specific hazard identification methods, or allow flexibility? Should worker participation be required or recommended? Should the standard address psychological hazards? Should it address interested parties beyond employees?

These debates revealed fundamental shifts in OH&S thinking. The consensus was: flexibility is better than prescription (organisations know their context; they should design appropriate processes). Participation is mandatory, not optional. Psychological hazards must be addressed. Interested parties extend beyond employees to contractors, suppliers, customers, regulators, and community.

Stage 3: Consultation Rounds (2016-2017)

Once working groups developed draft requirements, they went through formal consultation rounds. National standards bodies from each ISO member country reviewed drafts and provided feedback. This ensured the standard reflected global input.

Early drafts faced significant feedback. Some countries thought it was too prescriptive; others thought it was too flexible. ISO moderated these tensions, iterating toward consensus.

Stage 4: Voting and Approval (Late 2017)

Once drafts reached stability, TC 283 put the final version to vote. Members had to approve the standard. In late 2017, the vote passed (a broad majority; no standard passes unanimously). ISO 45001 was approved for publication.

Publication and Launch: March 12, 2018

ISO 45001:2018 was published on March 12, 2018. This was a significant moment in occupational health and safety globally.

The standard was immediately available for adoption. Organisations began transitioning from OHSAS 18001 to ISO 45001. Certification bodies (notified bodies) registered auditors to assess conformity to the new standard.

Key improvements in ISO 45001 vs OHSAS 18001:

• International standard (ISO) rather than private standard (BSI)
• 10-clause HLS structure enabling integration with other ISO standards
• Process-based approach rather than procedure-based
• Addresses risks AND opportunities, not just risks
• Mandates explicit worker participation, not just consultation
• Requires understanding organisational context and interested parties
• Emphasises leadership accountability more explicitly
• Covers psychological hazards alongside physical hazards
• Reduces documentation burden if processes are effective
• Aligns with modern risk management thinking

Transition Period: 2018-2021

ISO announced a 3-year transition period. Organisations certified to OHSAS 18001 could continue operating under that standard until March 12, 2021. This gave them time to migrate to ISO 45001.

Certification bodies stopped accepting new OHSAS 18001 certifications immediately (organizations wanting new certification had to pursue ISO 45001). But existing OHSAS 18001 certificates remained valid until expiry during the transition period.

Many organisations delayed migration, thinking they had time. Those who migrated early (2018-2019) had time to refine systems and achieve stable certification. Those who delayed until 2020-2021 faced rushed timelines and external pressure.

The transition period gave consultants time to develop expertise, certification bodies time to train auditors, and organisations time to plan implementation. Without this period, migration would have been chaotic.

OHSAS 18001 Withdrawal: March 12, 2021

On March 12, 2021, OHSAS 18001 was officially withdrawn. It no longer exists as an active standard. Certification bodies stopped recognising OHSAS 18001 certificates (unless they were within their validity period and hadn’t yet expired, in which case they remained valid until expiry). No new certifications were issued.

This withdrawal was significant: organisations with valid OHSAS 18001 certificates lost them on expiry (no renewal possible). Those without current certification couldn’t claim OHSAS 18001 compliance. The market had completely transitioned to ISO 45001.

Some organisations delayed migration beyond the withdrawal date, leaving themselves non-certified until they completed ISO 45001 certification. This was disruptive, particularly for those with procurement requirements from major customers (who demanded certification).

Current State and Future Evolution: 2021-2026

Since March 2021, ISO 45001 has been the global standard for OH&S management systems. Thousands of organisations worldwide are certified. It’s become the baseline expectation in high-risk sectors.

ISO/TC 283 continues meeting and refining the standard. They’re monitoring implementation, collecting feedback, and identifying areas for improvement. While minor clarifications have been issued (via technical corrigenda), no major revision has occurred.

What’s expected in future revisions?

Typically, ISO standards are comprehensively reviewed every 5 years. The next opportunity for a major ISO 45001 revision would be around 2023 (5 years after publication). However, if implementation is proceeding smoothly and the standard is meeting needs, ISO might wait longer.

Potential areas for future refinement might include:

• Digital and remote work: As organisations adapt to hybrid and remote work, new hazards emerge (digital security, isolation, ergonomics of home offices). Future versions might address these explicitly.
• Psychological and mental health hazards: ISO 45001 covers these, but guidance could deepen as understanding evolves.
• Supply chain complexity: As supply chains become more complex and distributed, management of contractor and supplier OH&S becomes more challenging. Future versions might provide deeper guidance.
• Environmental-occupational health intersection: Climate change, heat stress, air quality—the intersection of environmental and occupational health is becoming more relevant. ISO might deepen this area.
• AI and automation: Robots and AI systems change workplace hazards. Future versions might address management of these emerging risks.

Lessons from ISO 45001’s History

What can we learn from the journey from OHSAS 18001 to ISO 45001?

1. Standards evolve in response to practitioner feedback and broader management thinking. OHSAS 18001 was adequate for 20 years, but practitioners and ISO recognised it needed modernisation. Standards aren’t static; they reflect contemporary understanding.

2. International consensus takes time. Developing ISO 45001 required 5 years because achieving consensus across 50+ countries with diverse practices is complex. The result is robust and globally applicable because it reflects input from many perspectives.

3. Integration across management systems is valuable. The shift from OHSAS 18001’s unique structure to ISO 45001’s aligned HLS reflects recognition that organisations benefit from integrated governance. Subsequent standards (ISO 50001, ISO 55001) adopted the same approach.

4. Transition periods matter. The 3-year transition period from OHSAS 18001 to ISO 45001 was crucial. It allowed organisations time to plan, develop expertise, and migrate thoughtfully. Without it, the transition would have been chaotic.

5. Modern thinking emphasises systems and proactivity over procedures and reactivity. The shift from OHSAS 18001’s procedure-focus to ISO 45001’s process-focus reflects broader management evolution. Today’s standards expect organisations to think systemically about risk, not just execute procedures.

Conclusion: Understanding Context Enables Better Implementation

Understanding ISO 45001’s history—where it came from, why it was developed, how it differs from OHSAS 18001—helps you implement it more effectively.

ISO 45001 isn’t arbitrary. It reflects hard-won consensus about what effective OH&S management looks like globally. The 10 clauses, the process-based approach, the emphasis on worker participation and leadership accountability—all emerged from deliberate design, consultation, and refinement.

When you implement ISO 45001, you’re not following a bureaucratic checklist. You’re adopting a framework developed by hundreds of international experts, refined through extensive consultation, and proven effective in thousands of organisations globally.

This understanding should give you confidence as you navigate implementation challenges. The standard’s structure and requirements weren’t designed to be burdensome; they were designed to drive meaningful improvement in occupational health and safety outcomes.

Frequently Asked Questions