ISO 45001 Occupational Health & Safety Certification

ISO 45001 occupational health and safety management system certification in Dubai, Abu Dhabi and across the UAE — two-stage audit and three-year certification by an accredited body, covering hazard identification, worker consultation, OSHAD and municipal legal compliance obligations. Last reviewed: August 2026.

ISO 45001 specifies requirements for an occupational health and safety management system: identifying hazards, controlling risks, consulting workers, and demonstrating that the arrangements actually work. Certification is independent confirmation that the system exists and operates.

Why Indian organisations certify

ISO 45001 is a standing requirement in tenders from ADNOC, government entities and major contractors, and is frequently a condition of contractor pre-qualification. It also aligns with the obligations you already carry — OSHAD requirements in Abu Dhabi, municipality conditions in Dubai and the other emirates, and federal labour law — because the standard requires you to identify your legal obligations and evaluate compliance with them. For most organisations that register is the part that had never been consolidated in one place.

What the standard requires

• Hazard identificationSystematic identification of hazards across routine and non-routine activities, including those arising from work organisation, workload and psychosocial factors.
• Risk assessment and controlAssessment of OH&S risks, and controls applied following the hierarchy — elimination first, personal protective equipment last.
• Legal and other requirementsA maintained register of applicable obligations including OSHAD, municipality and federal requirements, with periodic evaluation of whether you meet them.
• Worker consultation and participationGenuine involvement of non-managerial workers in hazard identification, incident investigation and decisions affecting their safety. This is where audits most often find gaps.
• Leadership and safety cultureDemonstrated top management involvement and a culture where workers can report hazards without fear of reprisal.
• Contractor and procurement controlExtending the system to contractors, suppliers and outsourced activities under your control or influence.
• Emergency preparednessIdentified emergency scenarios, planned response, and testing that proves the plan rather than assuming it.
• Incident investigationReporting, investigation to root cause rather than immediate cause, corrective action and verification of effectiveness.
• Monitoring and measurementLeading and lagging indicators, health surveillance where required, and calibration of monitoring equipment.
• Internal audit and management reviewEvidence that the organisation checks itself and that senior management acts on findings.

Worker participation in practice

ISO 45001 goes further than earlier standards on consultation, and it is the clause that most often produces findings. Auditors do not assess it by reading a procedure — they ask workers whether they were consulted on the risk assessment covering their task, whether they can stop unsafe work, and what happened the last time someone raised a concern. Documented arrangements that workers cannot describe do not demonstrate conformity.

The certification process

Stage 1 reviews the documented system, confirms scope and boundaries, and examines your hazard identification and legal register, raising gaps early. Stage 2 assesses implementation on site: whether controls operate as documented, whether workers understand and participate, how incidents were actually investigated, and whether corrective actions closed the cause. The certificate runs three years with annual surveillance and recertification before expiry.

Scope and multi-site organisations

The certificate states the activities and locations covered, and a client checking it will look at whether the scope covers the work they are buying — a certificate covering head office administration does not cover site operations. Where operations span several sites sharing a common system, multi-site certification with sampling is usually more economical than certifying each separately.

Working with other standards

ISO 45001 shares its high-level structure with ISO 9001 and ISO 14001. Where more than one is held or sought, integrated auditing covers the common clauses once rather than repeating them, shortening audit duration and site disruption.

Our role and its limits

ITMAD is an accredited certification body. Under ISO/IEC 17021-1 we cannot design, implement or consult on the management system we certify, and we do not. We provide the audit and the certification decision, plus optional pre-assessment that identifies gaps against the standard without prescribing how you close them. That separation is what makes the certificate meaningful to the client who asked you for it.

What you receive

• Stage 1 report identifying readiness gaps before the main audit
• Stage 2 audit report with findings supported by objective evidence
• Non-conformities classified by severity with defined response timescales
• Certificate of registration stating your certified scope and locations
• Certification mark for use under our mark and seal policy
• Annual surveillance audits and reports through the three-year cycle