IAF ConsultancyISO 45001 is the international standard for an occupational health and safety management system. It is not required by law in Canada or most other countries. So the real question is not whether you are allowed to skip it. It is whether the businesses you want to work for will let you.
What ISO 45001 Actually Is
ISO 45001 replaced OHSAS 18001 as the recognised benchmark for workplace safety management. It gives a business a structured way to identify hazards, control risk, and protect workers from injury and illness.
It is a management system standard, not a rulebook. It does not tell you what your fall protection procedure must say. It tells you that you need a process for finding hazards, deciding what to do about them, and checking whether what you did worked.
Who Actually Needs It
No law forces you to certify. The pressure comes from somewhere else, and it is usually one of these:
- Tenders and prequalification. Government contracts and large private buyers frequently list ISO 45001 alongside ISO 9001 as a condition of bidding. If it is on the prequalification form, the business case is already decided for you.
- Supply chain requirements. Large organisations increasingly require their suppliers and subcontractors to hold certification. When your biggest client asks, the answer is usually yes.
- High-risk work. Construction, manufacturing, logistics, utilities, and transport are sectors where injuries are more common and where clients and regulators look closely at how safety is managed.
- International clients. ISO 45001 is recognised globally. If you work with clients in the UK, Europe, the Middle East, or Asia, certification is often a prerequisite for doing business in those markets.
Who Benefits Without Being Forced
There is a second group: businesses nobody is pressuring, but who would genuinely benefit. These are usually companies that have had a serious near miss, a costly workers compensation claim, or a regulatory investigation. That is often the moment a structured safety system starts to look less like paperwork and more like insurance.
Growing businesses with multiple sites or a large subcontractor base also tend to benefit, because the informal approach that worked with ten people stops working with fifty.
When It Is Probably Not Worth It
An honest answer has to include the cases where certification is the wrong investment right now.
- Very small, low-risk operations. A two-person consulting practice or a solo professional services firm does not need a certified OH&S system. The standard is designed to scale, but the certification process still requires documented systems, internal audits, and management reviews that are disproportionate at that size.
- No client or tender requirement. If nobody is asking and your work is low-risk, meeting your provincial or federal health and safety obligations is the baseline. ISO 45001 builds on top of that. It is not a substitute for it.
- Early in your safety journey. If you do not yet have basic hazard identification, incident reporting, or a consistent process for corrective action, jumping straight to certification tends to produce a documented system that does not match how the work is actually done. That is the worst outcome, because the audit will find it.
Legal Compliance Is Not the Same Thing
This is the question that comes up most: we already comply with health and safety legislation, so why certify?
Legislation sets minimum legal requirements. ISO 45001 provides a framework that helps you meet those requirements consistently, and then go beyond them. Think of compliance as the floor and the management system as the structure you build on it.
Many businesses that believe they are compliant discover real gaps when they go through a formal gap analysis. Worker consultation, contractor management, and emergency preparedness are the usual places where practice and documentation have drifted apart.
What the Audit Actually Samples
A certification audit is not a document review. It follows real work and checks whether the system is operating.
- One recent incident or near miss, from report through investigation to corrective action.
- A hazard assessment for a real task, and whether the controls in place match what was written.
- How a worker was consulted on a safety decision, and whether there is a record of it.
- Whether the legal requirements you identified are current and actually being met.
How to Decide
Work through these in order:
- Is certification listed on a tender, contract, or client requirement you are pursuing? If yes, the decision is made.
- Have you had an incident, claim, or investigation that a structured system would have prevented? If yes, the case is strong.
- Do you have basic safety processes working today? If no, fix that first. Certification can follow.
- Is your work low-risk and your client base unbothered? Then it may genuinely not be worth it yet.
How Certification Works
Certification with IAF Consultancy begins with an application. The offer names the scope, the days, and the price. Stage 1 reviews the documented system. Stage 2 samples the system in operation. When the audit supports certification, an accredited certification body issues the certificate. IAF Consultancy does not issue it. The full sequence is described in how certification works.
The same standard looks different in construction, manufacturing, logistics, healthcare, and professional services. If you are weighing it against other standards, start with how ISO certification helps businesses.