Your cart is empty.
Keep shopping
Teach on Udemy
Turn what you know into an opportunity and reach millions around the world.
Learn MoreOHSAS 18001 Occupational Health & Safety Mastery
OHSAS 18001 Occupational Health & Safety Mastery
Master the legacy OH&S management system standard and its transition to ISO 45001 with clause-by-clause expertise
Role Play
Created byISO Horizon
Last updated 6/2026
English
What you'll learn
- Trace the full history of OHSAS 18001 from BS 8800 through the 2007 revision to its withdrawal in 2021
- Interpret every requirement in Clauses 4.1 through 4.6 of OHSAS 18001:2007 with audit-grade precision
- Conduct hazard identification, risk assessment, and determine controls using the prescribed hierarchy of controls
- Build legal registers and compliance evaluation programmes that satisfy Clauses 4.3.2 and 4.5.2
- Design competence, training, communication, and consultation systems aligned with Clause 4.4
- Apply operational control and emergency preparedness frameworks to real workplace scenarios
- Conduct incident investigations and root cause analyses that drive effective corrective and preventive action
- Plan and execute internal audits and management reviews that close the PDCA loop
- Map every OHSAS 18001 requirement to its ISO 45001:2018 counterpart under the Annex SL structure
- Lead a credible transition from a legacy OHSAS 18001 system to a compliant ISO 45001 management system
Explore related topics
Course content
14 sections • 30 lectures
- What Is OHSAS 18001 and Why It Mattered10:14OHSAS 18001 was the Occupational Health and Safety Assessment Series specification published in 1999 and revised in 2007 by a consortium of national standards bodies and certification organizations led by the British Standards Institution. This lecture introduces the standard as a voluntary, certifiable framework that organizations adopted to systematically control occupational health and safety risks, demonstrate due diligence to regulators, and reduce workplace injuries and illnesses. You will learn that OHSAS 18001:2007 is built around the Plan-Do-Check-Act cycle and contains a single requirements clause, Clause 4, that defines every element a compliant OH&S management system must include. The lecture explains why OHSAS 18001 became the dominant OH&S standard adopted by over 90,000 organizations across 127 countries, and how it positioned health and safety as a strategic management discipline rather than a purely regulatory checklist. You will also see how OHSAS 18001 sits in relation to BS 8800, ILO-OSH 2001, and the national standards it eventually superseded, giving you a clear picture of why this specification remains essential context for any health and safety professional today.
- The History and Birth of OHSAS 1800110:06OHSAS 18001 did not appear in a vacuum. This lecture traces the standard from the early 1990s, when organizations and certification bodies recognized a growing demand for a globally recognized OH&S management system standard that could parallel ISO 9001 for quality and ISO 14001 for environment. You will learn how ISO twice declined to develop an occupational health and safety standard in the mid-1990s due to opposition from the International Labour Organization and concerns about regulatory overlap, prompting BSI and thirteen partner organizations including DNV, Lloyd's Register Quality Assurance, SGS, and Bureau Veritas to publish OHSAS 18001:1999 as a private specification. The lecture then walks through the 2007 revision, which aligned OHSAS 18001 more closely with ISO 14001:2004, introduced the term "incident" to replace "accident," strengthened risk assessment requirements, and added a stronger emphasis on health alongside safety. By the end of this lecture you will understand the political, commercial, and technical forces that shaped the specification and why its eventual withdrawal in March 2021 was both inevitable and significant.
- How OHSAS 18001 Differed from National OH&S Standards9:13Before OHSAS 18001, organizations operating internationally faced a patchwork of national OH&S management standards including BS 8800 in the United Kingdom, AS/NZS 4801 in Australia and New Zealand, ANSI Z10 in the United States, and CSA Z1000 in Canada. This lecture compares OHSAS 18001 to these national frameworks, showing how it consolidated common requirements into a single auditable specification that certification bodies could assess consistently across borders. You will see how OHSAS 18001 took an auditable, requirements-driven approach similar to ISO 9001, while BS 8800 was a guidance document and ILO-OSH 2001 was a tripartite guideline emphasizing worker participation. The lecture explains how OHSAS 18001's structure of "shall" statements, third-party certification, and recognition by procurement teams gave it commercial weight that purely national standards lacked. You will also learn why countries like Spain, Singapore, and Poland developed their own near-identical national adoptions, and how the OHSAS Project Group balanced regional needs with the goal of a single global benchmark that would later inform the development of ISO 45001.
- Key Terms and Definitions in Occupational Health and Safety10:28OHSAS 18001:2007 Clause 3 defines twenty-three terms that form the vocabulary of any compliant OH&S management system. This lecture unpacks the most important definitions including hazard, risk, acceptable risk, OH&S management system, incident, nonconformity, preventive action, corrective action, workplace, and continual improvement. You will learn the precise distinction OHSAS 18001 draws between a hazard as a source with the potential to cause harm and risk as the combination of likelihood and severity, and why this distinction matters when designing risk assessment methodologies. The lecture also explains the 2007 revision's deliberate replacement of "accident" with "incident" to capture both events that caused harm and events that could have caused harm, and how this terminology shift influenced incident investigation practices worldwide. You will see how each defined term connects to specific requirements in Clause 4, giving you a working vocabulary that auditors, consultants, and certification bodies still use today even as organizations migrate to ISO 45001.
- The Plan-Do-Check-Act Cycle as the Backbone10:28Every requirement in OHSAS 18001:2007 maps to one of the four phases of the Plan-Do-Check-Act cycle, the management methodology popularized by Walter Shewhart and W. Edwards Deming. This lecture explains how Plan corresponds to OH&S policy and planning in Clause 4.2 and 4.3, Do corresponds to implementation and operation in Clause 4.4, Check corresponds to performance measurement, audit, and corrective action in Clause 4.5, and Act corresponds to management review in Clause 4.6. You will learn why the PDCA cycle proved so durable as the organizing logic for OH&S management, how it forces organizations to treat safety as an iterative discipline rather than a one-time project, and how it creates feedback loops that drive continual improvement in injury rates, near-miss reporting, and regulatory compliance. The lecture grounds these abstract phases in concrete examples drawn from manufacturing, construction, and service industries, showing how a clear PDCA mental model helps practitioners design, audit, and improve any OH&S management system regardless of sector.
- The Scope and Structure of the OHSAS 18001 Specification9:20This lecture walks you through the architecture of the OHSAS 18001:2007 document itself, from the foreword and introduction through Clauses 1, 2, and 3 and into the requirements concentrated entirely in Clause 4. You will learn that OHSAS 18001 is intentionally generic and applicable to any organization regardless of size, type, or geographic location, and that its scope explicitly excludes product safety, environmental impacts beyond worker exposure, and asset damage. The lecture explains how the specification was paired with OHSAS 18002:2008, a separate guidance document providing implementation advice for each requirement, and why this two-document structure allowed certification bodies to audit against unambiguous "shall" statements while still giving organizations practical guidance. You will see how the eight-page core of Clause 4 contains every auditable requirement and how its hierarchical numbering, with 4.1 through 4.6 representing the major elements, gives both implementers and auditors a clear roadmap that ISO 45001 would later restructure under the ten-clause Annex SL format.
- Section 1 Quiz: Foundations and Context of OHSAS 18001
- Roleplay: Foundations and Context of OHSAS 18001
- General Requirements and Establishing the OH&S Management System8:16Clause 4.1 of OHSAS 18001:2007 requires the organization to establish, document, implement, maintain, and continually improve an OH&S management system and to define and document its scope. This lecture examines what "establish" means in audit practice, including the demonstrable evidence certification bodies expect such as system documentation, role assignments, and operational deployment across the defined scope. You will learn how to determine the appropriate scope boundary by considering physical locations, business units, contracted operations, and shared workplaces, and why scope decisions made at this stage ripple through every other clause of the standard. The lecture covers common scope-setting mistakes including artificially narrow scopes designed to exclude high-risk operations, inconsistent scope statements between policy documents and certificates, and failure to account for activities controlled by the organization but performed off-site. You will see how Clause 4.1 sets the stage for everything that follows and why a poorly scoped management system is the single most common reason organizations fail their initial OHSAS 18001 certification audit.
- Crafting an Effective OH&S Policy7:41Clause 4.2 requires top management to define and authorize an OH&S policy that is appropriate to the nature and scale of the organization's OH&S risks, includes commitments to injury and ill health prevention and continual improvement, commits to comply with applicable legal and other requirements, provides the framework for setting and reviewing objectives, is documented, implemented, and maintained, is communicated to all persons working under the organization's control, is available to interested parties, and is reviewed periodically. This lecture dissects each of these seven mandatory elements and shows you how to translate them into a one-page policy statement that satisfies auditors while genuinely guiding daily decision-making. You will learn why a policy that copies generic language from other organizations fails audits, how to anchor the policy in the specific hazard profile of your operations, and how to design a communication and review cadence that keeps the policy alive rather than treating it as a wall poster. The lecture closes with annotated examples of policies from manufacturing, healthcare, and construction sectors.
- Hazard Identification, Risk Assessment, and Determining Controls9:36Clause 4.3.1 is widely considered the heart of OHSAS 18001 because it requires the organization to establish, implement, and maintain procedures for the ongoing identification of hazards, assessment of risks, and determination of necessary controls. This lecture walks you through each step of the HIRA process, beginning with routine and non-routine activities, activities of all persons having access to the workplace including contractors and visitors, human behaviour and capabilities, hazards originating outside the workplace, infrastructure and equipment, changes to the organization, and modifications to the OH&S management system itself. You will learn how to apply the hierarchy of controls in the prescribed order of elimination, substitution, engineering controls, signage and warnings, administrative controls, and personal protective equipment, and why deviating from this hierarchy is a frequent audit finding. The lecture also covers common risk assessment methodologies including qualitative matrices, semi-quantitative scoring, and quantitative techniques, helping you choose the approach that matches your operational complexity and risk profile.
- Legal and Other Requirements7:07Clause 4.3.2 requires the organization to establish, implement, and maintain a procedure for identifying and accessing the applicable legal and other OH&S requirements, to ensure these requirements are taken into account in establishing, implementing, and maintaining the OH&S management system, and to keep this information up to date. This lecture explains how to build a legal register that captures statutes such as the Occupational Safety and Health Act of 1970 and the regulations promulgated under 29 CFR Parts 1910, 1915, 1917, 1918, and 1926 by the United States Occupational Safety and Health Administration, the Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999 in the United Kingdom, and equivalent frameworks in other jurisdictions. You will learn how "other requirements" extends to corporate standards, customer specifications, industry codes of practice, and voluntary commitments, and how to design a monitoring process that flags regulatory changes before they trigger compliance gaps. The lecture also covers the critical link between Clause 4.3.2 and the evaluation of compliance required by Clause 4.5.2.
- Objectives and OH&S Programmes7:30Clause 4.3.3 requires the organization to establish, implement, and maintain documented OH&S objectives at relevant functions and levels, and to establish and maintain programmes for achieving those objectives. This lecture explains how to translate the high-level commitments in the OH&S policy into measurable objectives that are consistent with the policy, take account of legal and other requirements and OH&S risks, and consider technological options, financial, operational, and business requirements, and the views of relevant interested parties. You will learn how to apply SMART criteria so that objectives are specific, measurable, achievable, relevant, and time-bound, and why vague targets like "improve safety" fail both audits and practical implementation. The lecture walks through how to design a programme that designates responsibility and authority for achieving objectives at relevant functions and levels, identifies the means and timeframe, and is reviewed at regular and planned intervals. You will see worked examples of objectives covering injury rate reduction, training completion, near-miss reporting, and contractor performance.
- Section 2 Quiz: OH&S Policy and Planning
- Roleplay: OH&S Policy and Planning
- Resources, Roles, Responsibility, Accountability, and Authority8:04Clause 4.4.1 requires top management to take ultimate responsibility for OH&S and the OH&S management system, demonstrate commitment by ensuring the availability of resources essential to establish, implement, maintain, and improve the system, define roles, allocate responsibilities and accountabilities, and delegate authorities to facilitate effective OH&S management. This lecture explains how to translate this requirement into an organization chart that names a management appointee with defined OH&S responsibility and authority, identifies safety committee members, line managers, supervisors, and individual workers, and clarifies the boundaries between OH&S advisory roles and operational accountability. You will learn why the 2007 revision added the word "accountability" alongside responsibility and how this terminology shift forced organizations to identify a single accountable person for each OH&S outcome. The lecture also covers resource adequacy assessments including human resources, specialized skills, organizational infrastructure, technology, and financial resources, showing how auditors test whether stated commitments translate into actual budget allocations and headcount.
- Competence, Training, and Awareness9:26Clause 4.4.2 requires the organization to ensure that any persons under its control performing tasks that can impact OH&S are competent on the basis of appropriate education, training, or experience, and to retain associated records. This lecture explains how to conduct a training needs analysis that identifies competence requirements for each role, evaluates current competence against those requirements, and triggers targeted training to close gaps. You will learn how to differentiate between competence which is demonstrated capability and awareness which is knowledge of OH&S consequences, and why the standard requires both. The lecture covers the four mandatory awareness topics required by Clause 4.4.2 including the OH&S consequences of work activities and behaviour, the OH&S benefits of improved personal performance, individual roles in achieving conformity with the OH&S policy and procedures, and the potential consequences of departure from specified procedures. You will see how training records, competence matrices, and refresher schedules combine to create the audit trail certification bodies expect.
- Communication, Participation, and Consultation9:31Clause 4.4.3 splits into two parts. Clause 4.4.3.1 requires procedures for internal communication among the various levels and functions of the organization, communication with contractors and other visitors to the workplace, and receiving, documenting, and responding to relevant communications from external interested parties. Clause 4.4.3.2 requires procedures for the participation of workers through their appropriate involvement in hazard identification, risk assessments, and determination of controls, incident investigation, the development and review of OH&S policies and objectives, and consultation where there are any changes that affect their OH&S, and for consultation with contractors where there are changes that affect their OH&S. This lecture explains how to design communication channels that flow upward, downward, and laterally, and how worker participation differs from mere communication. You will learn why the 2007 revision strengthened consultation requirements and how this set the stage for the much stronger worker participation requirements in ISO 45001.
- Documentation and Control of Documents9:33Clauses 4.4.4 and 4.4.5 govern the OH&S management system's documentation. Clause 4.4.4 specifies the minimum required documentation including the OH&S policy and objectives, description of the scope, description of the main elements of the system and their interaction, references to related documents, documents and records required by the standard, and documents and records determined by the organization as necessary to ensure effective planning, operation, and control of processes related to its OH&S risks. Clause 4.4.5 requires procedures to approve documents for adequacy before issue, review and update as necessary, ensure changes and current revision status are identified, ensure relevant versions are available at points of use, ensure documents remain legible and readily identifiable, ensure documents of external origin determined to be necessary are identified and their distribution controlled, and prevent the unintended use of obsolete documents. This lecture shows you how to build a documentation hierarchy that satisfies these requirements without drowning the organization in paperwork.
- Operational Control9:12Clause 4.4.6 requires the organization to determine those operations and activities that are associated with the identified hazards where the implementation of controls is necessary to manage the OH&S risks, and to implement and maintain operational controls applicable to the organization and its activities, integrate those operational controls into its overall OH&S management system, and use controls related to purchased goods, equipment, and services, controls related to contractors and other visitors to the workplace, and documented procedures to cover situations where their absence could lead to deviations from the OH&S policy and the objectives. This lecture explains how operational control bridges the gap between risk assessment and frontline execution by translating identified controls into safe work procedures, permit-to-work systems, equipment inspection regimes, contractor management protocols, and procurement specifications. You will learn how to apply the hierarchy of controls in operational settings and how to validate that operational controls remain effective through periodic verification activities.
- Emergency Preparedness and Response7:54Clause 4.4.7 requires the organization to establish, implement, and maintain procedures to identify the potential for emergency situations, respond to such emergency situations, and prevent or mitigate adverse OH&S consequences associated with them. The organization must also periodically test its emergency response procedures where practicable, involving relevant interested parties where appropriate, and periodically review and revise emergency procedures, particularly after periodic testing and after the occurrence of emergency situations. This lecture explains how to identify credible emergency scenarios specific to your operations including fires, chemical releases, medical emergencies, natural disasters, workplace violence, and pandemic outbreaks, and how to design tiered response procedures that match the scale and complexity of each scenario. You will learn how to plan, execute, and document tabletop exercises and full-scale drills, how to coordinate with external emergency responders such as fire departments and hazardous materials teams, and how lessons learned from drills and actual incidents drive revisions to emergency plans and supporting equipment such as alarms, evacuation routes, and first aid resources.
- Section 3 Quiz: Implementation and Operation
- Roleplay: Implementation and Operation
- Performance Measurement and Monitoring8:25Clause 4.5.1 requires the organization to establish, implement, and maintain procedures to monitor and measure OH&S performance on a regular basis using both qualitative and quantitative measures appropriate to the needs of the organization, monitoring of the extent to which the organization's OH&S objectives are met, monitoring of the effectiveness of controls for both health and safety, proactive measures of performance that monitor conformance with OH&S programmes, controls, and operational criteria, reactive measures of performance that monitor ill health, incidents including accidents and near-misses, and other historical evidence of deficient OH&S performance, and recording of data and results of monitoring and measurement sufficient to facilitate subsequent corrective action and preventive action analysis. This lecture explains the critical distinction between leading indicators that predict future performance and lagging indicators that report past performance, and shows you how to design a balanced indicator set. You will also learn how to calibrate and maintain monitoring equipment when such equipment is used.
- Evaluation of Compliance8:32Clause 4.5.2 requires the organization to evaluate compliance with applicable legal requirements consistent with its commitment to compliance, and to evaluate compliance with other requirements to which it subscribes. The organization must keep records of the results of these periodic evaluations. This lecture explains how compliance evaluation differs from internal audit by focusing specifically on legal and other requirements identified under Clause 4.3.2 rather than on overall management system conformity. You will learn how to design a compliance evaluation programme that assigns frequency based on regulatory criticality and risk, how to combine self-assessment by trained personnel with periodic external compliance reviews, and how to document evaluation findings in a register that supports management review. The lecture covers common pitfalls including stale legal registers, evaluations that confirm process completion rather than actual regulatory compliance, and failure to extend compliance evaluation to other requirements such as corporate standards and customer specifications.
- Incident Investigation, Nonconformity, Corrective and Preventive Action9:42Clause 4.5.3 splits into 4.5.3.1 on incident investigation and 4.5.3.2 on nonconformity, corrective action, and preventive action. The organization must establish procedures to record, investigate, and analyse incidents to determine underlying OH&S deficiencies and other factors that might be causing or contributing to their occurrence, identify the need for corrective action and opportunities for preventive action and continual improvement, and communicate the results of such investigations. The organization must also establish procedures for dealing with actual and potential nonconformities and for taking corrective and preventive action that includes identifying and correcting nonconformities and taking action to mitigate their OH&S consequences, investigating nonconformities, evaluating the need for action, recording and communicating results, and reviewing effectiveness. This lecture explains root cause analysis techniques including the five whys, fishbone diagrams, and tree analysis, and shows you how to distinguish corrective action that addresses identified nonconformities from preventive action that addresses potential nonconformities.
- Control of Records11:24Clause 4.5.4 requires the organization to establish and maintain records as necessary to demonstrate conformity to the requirements of its OH&S management system and the OHSAS 18001 specification, and the results achieved, and to establish, implement, and maintain procedures for the identification, storage, protection, retrieval, retention, and disposal of records. Records shall be and remain legible, identifiable, and traceable. This lecture distinguishes between documents which provide information and can be revised, and records which provide evidence of activities performed and cannot be altered after the fact. You will learn how to design a records retention schedule that satisfies regulatory minimums such as the OSHA 30-year retention requirement for certain employee exposure records under 29 CFR 1910.1020, supports defence against legal claims, and avoids the indefinite accumulation of obsolete records. The lecture also covers electronic records management considerations including access controls, backup, version integrity, and long-term readability of legacy file formats.
- Internal Audit9:22Clause 4.5.5 requires the organization to ensure that internal audits of the OH&S management system are conducted at planned intervals to determine whether the system conforms to planned arrangements for OH&S management including the requirements of OHSAS 18001 and has been properly implemented and is maintained, and to provide information on the results of audits to management. Audit programmes must be planned, established, implemented, and maintained based on the results of risk assessments and the results of previous audits, and audit procedures must address responsibilities, competencies, and requirements for planning and conducting audits, reporting results, and retaining records along with the determination of audit criteria, scope, frequency, and methods. This lecture walks you through the audit cycle from programme design through individual audit planning, opening meetings, evidence gathering, finding classification, closing meetings, and follow-up. You will learn auditor competence requirements, objectivity and impartiality safeguards, and the link between internal audit and management review.
- Section 4 Quiz: Checking and Corrective Action
- Roleplay: Checking and Corrective Action
- The Management Review Process8:44Clause 4.6 requires top management to review the organization's OH&S management system at planned intervals to ensure its continuing suitability, adequacy, and effectiveness. Reviews must include assessing opportunities for improvement and the need for changes to the OH&S management system including the OH&S policy and OH&S objectives. Records of management reviews must be retained. This lecture explains how to design a management review cadence appropriate to organizational complexity, typically annual at the corporate level with quarterly site-level reviews feeding into it, and how to position the review as a strategic decision-making forum rather than a ceremonial sign-off. You will learn who must attend including top management with authority to commit resources, what evidence the review must consider, and how to document outputs that close the PDCA cycle and feed the next year's planning. The lecture covers common failure modes including reviews that summarize past performance without making forward-looking decisions and reviews that fail to address changing internal or external circumstances.
- Inputs and Outputs of Management Review7:50Clause 4.6 specifies eight mandatory inputs to management review including results of internal audits and evaluations of compliance with applicable legal requirements and with other requirements to which the organization subscribes, results of participation and consultation, relevant communications from external interested parties including complaints, the OH&S performance of the organization, the extent to which objectives have been met, status of incident investigations and corrective and preventive actions, follow-up actions from previous management reviews, changing circumstances including developments in legal and other requirements related to OH&S, and recommendations for improvement. Outputs must be consistent with the organization's commitment to continual improvement and include any decisions and actions related to possible changes to OH&S performance, OH&S policy and objectives, resources, and other elements of the OH&S management system. This lecture shows you how to structure review agendas, dashboards, and minutes to satisfy these requirements while delivering genuine value to executive decision-makers.
- Continual Improvement and the Certification Audit Process11:54OHSAS 18001 weaves continual improvement through every clause from the policy commitment in 4.2 to the closing loop in 4.6, but the standard never defines a single mechanism for delivering it. This lecture explains how continual improvement emerges from the integration of objective-setting, performance monitoring, incident investigation, internal audit, and management review, and how to demonstrate genuine improvement to certification body auditors rather than cosmetic activity. You will also walk through the OHSAS 18001 certification audit process including the Stage 1 documentation review, the Stage 2 on-site assessment, the three-year certification cycle with annual surveillance audits, and the recertification audit at year three. The lecture covers how nonconformities are classified as major or minor, how corrective action plans must be submitted and verified, and what triggered unscheduled audits looked like. You will leave with a clear picture of what a successful OHSAS 18001 certification programme looked like and what auditors prioritized during site visits.
- Section 5 Quiz: Management Review and Continual Improvement
- Roleplay: Management Review and Continual Improvement
- Why OHSAS 18001 Was Withdrawn10:15In June 2013, the International Organization for Standardization reversed its earlier reluctance and approved the development of ISO 45001, with the new International Organization for Standardization technical committee ISO/PC 283 leading the work. ISO 45001:2018 was published on 12 March 2018, and OHSAS 18001:2007 was officially withdrawn on 30 March 2021 after a three-year migration window during which certified organizations were expected to transition. This lecture explains the strategic reasons behind the withdrawal including ISO's desire to align all management system standards under a common high-level structure, growing international consensus that occupational health and safety deserved a full ISO standard rather than a private specification, and pressure from organizations that wanted a single integrated management system covering quality, environment, and OH&S. You will learn how the OHSAS Project Group voluntarily disbanded once ISO 45001 reached publication, and how the migration was managed by certification bodies including the International Accreditation Forum's coordinated communication to certified clients.
- The Annex SL High-Level Structure10:24The single most visible difference between OHSAS 18001 and ISO 45001 is structural. OHSAS 18001:2007 concentrated all requirements in Clause 4 with subclauses numbered 4.1 through 4.6. ISO 45001:2018 follows Annex SL, the harmonized high-level structure that ISO adopted in 2012 to ensure all management system standards share a common ten-clause framework. This lecture walks you through each of the ten Annex SL clauses including scope, normative references, terms and definitions, context of the organization, leadership, planning, support, operation, performance evaluation, and improvement, and maps each one back to the OHSAS 18001 clauses it replaced or expanded. You will see how Annex SL enables organizations to integrate ISO 9001, ISO 14001, ISO 27001, and ISO 45001 into a single management system with shared procedures for documented information, internal audit, management review, and continual improvement, and why this structural alignment was the primary commercial driver behind ISO's decision to develop the standard.
- Worker Consultation, Participation, and Leadership10:32Beyond structure, ISO 45001 introduced substantive new requirements that distinguish it from OHSAS 18001. Clause 5.4 of ISO 45001 requires consultation and participation of workers and, where they exist, workers' representatives at all applicable levels and functions of the organization in the development, planning, implementation, performance evaluation, and actions for improvement of the OH&S management system, and specifies particular topics on which workers must be consulted and on which workers must participate. This goes substantially beyond Clause 4.4.3.2 of OHSAS 18001. Clause 5 of ISO 45001 also imposes much stronger leadership obligations on top management, including taking overall responsibility and accountability for protection of workers' work-related health and safety, and explicitly forbids delegation of this accountability. This lecture explains the practical implications of these changes for governance, committee structures, board oversight, and the role of senior executives in OH&S management.
- Context of the Organization, Risk-Based Thinking, and Other Key Differences8:21ISO 45001 Clause 4 introduces context of the organization, a concept absent from OHSAS 18001 that requires the organization to determine external and internal issues relevant to its purpose and that affect its ability to achieve the intended outcomes of its OH&S management system, and to determine the needs and expectations of workers and other interested parties. ISO 45001 also embeds risk-based thinking throughout, treating both OH&S risks to workers and risks to the management system itself, and introduces explicit requirements for opportunities including OH&S opportunities and other opportunities. This lecture covers these and other notable differences including the elevation of documented information as a unified concept replacing the OHSAS 18001 distinction between documents and records, expanded requirements for procurement and contractor management, explicit attention to outsourcing, and the integration of change management as a stand-alone requirement. You will leave understanding the substantive as well as structural distance between the two standards.
- Why Legacy Knowledge of OHSAS 18001 Still Matters9:03OHSAS 18001 has been withdrawn, but its legacy persists in three important ways. First, many organizations especially in supply chains and smaller enterprises still maintain management systems built around the OHSAS 18001 framework even after the formal withdrawal, and auditors, consultants, and new hires routinely encounter these systems and must understand them to upgrade them. Second, ISO 45001 inherited the conceptual DNA of OHSAS 18001 including the hierarchy of controls, the distinction between hazards and risks, the emphasis on legal compliance, and the PDCA backbone, so understanding OHSAS 18001 makes ISO 45001 more intelligible. Third, regulators, courts, and insurance carriers continue to reference OHSAS 18001 in historical compliance reviews, incident investigations, and policy negotiations. This lecture closes the course by showing you how to leverage OHSAS 18001 knowledge during ISO 45001 transitions, how to communicate the relationship between the two standards to executives and workers, and why every OH&S professional benefits from understanding the predecessor that shaped modern occupational health and safety management.
- Section 6 Quiz: From OHSAS 18001 to ISO 45001
- Roleplay: From OHSAS 18001 to ISO 45001
Requirements
- Basic familiarity with workplace health and safety concepts and terminology
- Working knowledge of management system principles or experience with ISO 9001 or ISO 14001 is helpful but not required
- Exposure to a regulated industrial, commercial, or service workplace where OH&S applies
- No prior experience auditing or implementing OHSAS 18001 is required, though it will accelerate comprehension
Description
This course contains the use of artificial intelligence.
OHSAS 18001 shaped occupational health and safety management for two decades, was adopted by more than 90,000 organizations across 127 countries, and laid the conceptual groundwork for ISO 45001:2018. Although OHSAS 18001 was officially withdrawn on 30 March 2021, the standard remains essential knowledge for health and safety professionals navigating legacy systems, supplier audits, regulatory reviews, and ISO 45001 transitions. This course gives you the complete picture so you can read, audit, implement, and upgrade an OHSAS 18001 management system with confidence.
You will work through every clause of OHSAS 18001:2007 in order, starting with the history of the standard and the political, commercial, and technical forces that produced it. You will then build mastery of Clause 4.1 general requirements, Clause 4.2 OH&S policy, Clause 4.3 planning including hazard identification, risk assessment, determining controls, legal and other requirements, and objectives and programmes, Clause 4.4 implementation and operation including resources, competence, communication, documentation, operational control, and emergency preparedness, Clause 4.5 checking including performance measurement, evaluation of compliance, incident investigation, corrective and preventive action, records, and internal audit, and Clause 4.6 management review. You will also learn the hierarchy of controls, the PDCA cycle, leading and lagging indicators, root cause analysis, and the certification audit process.
The course closes with a deep dive into ISO 45001:2018 covering the Annex SL high-level structure, strengthened worker consultation and participation, expanded leadership accountability, context of the organization, risk-based thinking, and the practical differences that matter when transitioning a legacy OHSAS 18001 management system to the newer standard. The material is designed for health and safety professionals, OH&S auditors, safety managers, compliance officers, and consultants who need a trustworthy, accurate, and clause-by-clause grounding in OHSAS 18001 and its relationship to ISO 45001.
Whether you are upgrading a legacy management system, preparing for a supplier audit, training new safety staff, or simply rounding out your professional knowledge, this course delivers complete coverage with the regulatory precision compliance work demands. Enroll today and gain the historical context, technical mastery, and transition roadmap that the modern OH&S professional cannot afford to miss.
Who this course is for:
- Health and safety professionals transitioning legacy OHSAS 18001 systems to ISO 45001
- Internal and external OH&S auditors who still encounter OHSAS 18001-based management systems
- Safety managers, supervisors, and coordinators responsible for OH&S programme implementation
- Compliance officers, consultants, and certification body personnel needing a clause-by-clause reference
- Quality and environmental managers integrating OH&S into existing ISO 9001 or ISO 14001 systems