ISO 45001 Occupational Health and Safety Certification in Sri Lanka

itmad provides ISO 45001 occupational health and safety management system certification in Sri Lanka, conducted in accordance with the principles of ISO/IEC 17021-1. itmad audits organisations in Sri Lanka with both Sri Lanka-based auditors and a travelling team, and has worked in Sri Lanka for more than 5 years. ISO 45001 certification from itmad follows a two-stage audit and produces a certificate valid for three years, with annual surveillance audits. Last reviewed: October 2026.

What ISO 45001 is

ISO 45001 specifies requirements for an occupational health and safety management system: identifying hazards, controlling risks, consulting workers, and demonstrating that the arrangements actually work. ISO 45001 certification is independent confirmation that the occupational health and safety management system exists and operates.

Who needs ISO 45001 in Sri Lanka

An organisation in Sri Lanka needs ISO 45001 certification when a customer or supplier programme asks for independent proof of its occupational health and safety management system. ISO 45001 applies to organisations of any size, type and activity, and itmad certifies organisations in all industries in Sri Lanka. ISO 45001 also requires the organisation to identify the legal and other requirements that apply to the organisation and to evaluate compliance with those requirements.

What ISO 45001 requires

• Hazard identificationSystematic identification of hazards across routine and non-routine activities, including those arising from work organisation, workload and psychosocial factors.
• Risk assessment and controlAssessment of occupational health and safety risks, and controls applied following the hierarchy: elimination first, personal protective equipment last.
• Legal and other requirementsA maintained register of the legal and other requirements that apply to the organisation, with periodic evaluation of whether the organisation is meeting those requirements.
• Worker consultation and participationGenuine involvement of non-managerial workers in hazard identification, incident investigation and decisions affecting their safety. Worker consultation is where ISO 45001 audits most often find gaps.
• Leadership and safety cultureDemonstrated top management involvement and a culture where workers can report hazards without fear of reprisal.
• Contractor and procurement controlExtending the system to contractors, suppliers and outsourced activities under the organisation's control or influence.
• Emergency preparednessIdentified emergency scenarios, planned response, and testing that proves the plan rather than assuming the plan works.
• Incident investigationReporting, investigation to root cause rather than immediate cause, corrective action and verification of effectiveness.
• Monitoring and measurementLeading and lagging indicators, health surveillance where required, and calibration of monitoring equipment.
• Internal audit and management reviewEvidence that the organisation checks itself and that senior management acts on findings.

Worker participation in practice

ISO 45001 goes further than earlier standards on consultation, and worker consultation is the clause that most often produces findings. ISO 45001 auditors do not assess consultation by reading a procedure. Auditors ask workers whether the workers were consulted on the risk assessment covering their task, whether the workers can stop unsafe work, and what happened the last time someone raised a concern. Documented arrangements that workers cannot describe do not demonstrate conformity.

Certification coverage in Sri Lanka

itmad issues ISO 45001 certificates in Sri Lanka in accordance with the principles of ISO/IEC 17021-1. During an itmad ISO 45001 audit, Stage 1 examines the hazard identification and the register of legal and other requirements. Each Sri Lankan buyer or supplier programme sets acceptance conditions for ISO 45001 certificates.

How itmad delivers ISO 45001 in Sri Lanka

itmad delivers ISO 45001 audits in Sri Lanka through Sri Lanka-based auditors and a travelling team, and certifies organisations in all industries. Under ISO/IEC 17021-1, itmad cannot design, implement or consult on the management system that itmad certifies, and itmad does not. itmad provides the audit, the certification decision, and optional pre-assessment that identifies gaps against ISO 45001 without prescribing how an organisation closes those gaps.

The ISO 45001 certification process

Stage 1 of an itmad ISO 45001 audit reviews the documented system, confirms scope and boundaries, examines the hazard identification and the register of legal and other requirements, and raises gaps early. Stage 2 of an itmad ISO 45001 audit assesses implementation on site: whether controls operate as documented, whether workers understand and participate, how incidents were actually investigated, and whether corrective actions closed the cause.

ISO 45001 timeline

An ISO 45001 certificate issued by itmad is valid for three years. Surveillance audits take place in each of the two intervening years, and recertification takes place before the certificate expires.

Scope and multi-site organisations

The ISO 45001 certificate states the activities and locations covered, and a client checking the certificate looks at whether the scope covers the work being bought. A certificate covering head office administration does not cover site operations. Where operations span several sites sharing a common system, multi-site certification with sampling is usually more economical than certifying each site separately.

ISO 45001 with other management system standards

ISO 45001 shares its high-level structure with ISO 9001 and ISO 14001. Where more than one management system standard is held or sought, integrated auditing covers the common clauses once rather than repeatedly, which shortens audit duration and site disruption.

What itmad provides

• Stage 1 report identifying readiness gaps before the main audit
• Stage 2 audit report with findings supported by objective evidence
• Nonconformities classified by severity with defined response timescales
• Certificate of registration stating the certified scope and locations
• Certification mark for use under the terms of itmad's mark and seal policy
• Annual surveillance audits and reports through the three-year cycle

Frequently asked questions

Can itmad certify ISO 45001 in Sri Lanka?

Yes. itmad issues ISO 45001 certificates in Sri Lanka in accordance with the principles of ISO/IEC 17021-1.

How does ISO 45001 certification work with itmad in Sri Lanka?

itmad audits in two stages. Stage 1 reviews the documented system, the hazard identification and the register of legal and other requirements, and confirms readiness. Stage 2 assesses on site whether controls operate as documented, whether workers participate, and whether corrective actions closed the cause. After a successful Stage 2, itmad issues the ISO 45001 certificate.

Does itmad use auditors based in Sri Lanka?

itmad uses both Sri Lanka-based auditors and a travelling team for ISO 45001 audits in Sri Lanka. itmad has worked in Sri Lanka for more than 5 years.

Which industries does itmad certify for ISO 45001 in Sri Lanka?

itmad certifies ISO 45001 for organisations in all industries in Sri Lanka. ISO 45001 applies to organisations of any size, type and activity.

How do auditors assess worker participation under ISO 45001?

ISO 45001 auditors assess worker consultation by asking workers, not by reading a procedure. Auditors ask whether workers were consulted on the risk assessment covering their task, whether workers can stop unsafe work, and what happened the last time someone raised a concern.

How long is an ISO 45001 certificate from itmad valid?

An ISO 45001 certificate from itmad is valid for three years. Surveillance audits take place in each of the intervening years, and recertification takes place before the ISO 45001 certificate expires.