Start with context and stakeholders
Every ISO management standard starts with the question of the environment your organisation works in. Think of the nature of the work, the locations, the sector, legislation and the expectations of employees, clients and regulators.
Then define the scope: which parts, locations and activities fall under the system. A clear scope prevents discussion during the audit. A baseline assessment shows which requirements you already meet and where the gaps are.
Involve the people who do the work as well. They know the practice best and see hazards that stay hidden on paper. A short session with a few colleagues often yields more than an extensive analysis behind a desk.
Leadership and worker participation
The standard places responsibility firmly with top management. Management sets a safety policy, assigns roles and responsibilities and provides adequate resources. Visible leadership is not a formality: people watch what management does, not what is written on paper.
Worker participation is also a core element. Let people contribute to hazards, measures and procedures, and make sure they can report what they see without negative consequences.
Hazards, risks and legal requirements
Planning revolves around identifying hazards and assessing risks and opportunities. Look at routine and non-routine work, at contractors and subcontractors, and at situations such as maintenance or working at a client site.
Also record which legal and other requirements apply and how you comply. For measures the well-known hierarchy applies: eliminate the hazard first, then substitute, then engineering controls, then administrative controls and personal protective equipment last.
Repeat the assessment when things change, such as a new machine, a new way of working or a new project. A risk that was under control last year may need attention again after a change.
Objectives, competence and communication
Translate the policy into measurable objectives with an owner, a deadline and a way of measuring. A goal such as reducing accidents only becomes manageable once you define how to measure it and which actions belong to it.
Support covers competence, awareness, communication and documented information. Know per job role which training and certificates are mandatory, and monitor their validity.
Start small: choose a few objectives that really matter and make them visible to the team. Ten objectives nobody follows help less than three that are discussed every month.
- Measurable objective with an owner and deadline
- Overview of mandatory training per job role
- Clear agreements on who communicates what
- Documents controlled and up to date
Operation: control, inspect and report
In operation you put the measures into practice. Think of work instructions, work permits for high-risk work, agreements with contractors, change management and emergency preparedness. Practise emergency scenarios, because a plan that has never been tested is rarely complete.
Incidents, near misses and unsafe situations provide the best learning information. Investigate them, determine the cause and make sure every measure has an owner and a deadline.
Evaluate and improve
Evaluation consists of monitoring, measurement, internal audits and management review. Plan the internal audit programme so that every part of the system is covered within the cycle, and record findings with follow-up. Management periodically reviews whether the system remains suitable and effective.
Improvement closes the loop: corrective actions for nonconformities and structural improvements where the figures call for it.
Common mistakes with ISO 45001
A classic mistake is treating the system as a paper project owned by one person. Safety only works when managers and employees carry it together. A second mistake is a risk assessment that disappears into a drawer after certification while the work keeps changing.
You also often see reports that are not followed up. Someone who reports and then hears nothing will not report next time.
- Too many documents nobody reads
- Risks assessed only at the start
- No owner or deadline on measures
- Emergency plans that are never practised
- Subcontractors forgotten in the scope
A practical approach
Work in short steps and plan them one after another. For example, an installation company with dozens of technicians starts with a baseline, picks two or three high-risk activities as a first focus and expands from there. This shows results quickly and keeps support high.
- Carry out a baseline and define the scope
- Have management set the policy and roles
- Map hazards and risks, together with employees
- Arrange objectives, training and work instructions
- Plan the first internal audit and management review
- Request the certification audit
How BrydgeOne supports implementation
In BrydgeOne you record context and stakeholders, assess risks in a heat map and manage objectives and KPIs. A gap analysis gives a baseline per requirement and turns shortfalls into actions with one click. The audit readiness check shows per standard what is still missing.
Certification is done through an accredited certification body, usually with a first review of the system and a second audit in practice, followed by periodic surveillance visits. Well-documented evidence makes those audits much calmer.
© 2026 BrydgeOne. General information, not legal or other professional advice. No rights can be derived from this article.