Skip to main content
Explainer

WHS Management Systems and ISO 45001: When Do You Need Certification?

A WHS management system organises how your business manages safety. ISO 45001 provides an international framework for that system, while certification is a separate assessment by a certification body. Decide what you need from the work, applicable requirements and the exact wording of any customer or tender request.

7 min readUpdated 27 September 2026Awareness
Written by Blue Safe · WHS systems and implementation guides
In this guide

Separate legal duties, the system and certification

Start by asking three questions: what requirements apply to our work, how will we manage the work, and does a customer or other requirement call for independent certification? These questions are connected, but they lead to different evidence. Keep the exact requirement and the decision about how to meet it together.

WHS duties, ISO 45001 and certification compared
AreaWhat it addressesWhat to examine
Applicable WHS or OHS dutiesThe legal responsibilities relevant to the business, people and workThe jurisdiction, activities and requirements that apply
The working management systemHow responsibilities, controls, participation and review operateWhat people do and the records that show the process in use
ISO 45001An international OH&S management system frameworkHow the organisation’s system addresses the applicable standard
ISO 45001 certificationIndependent assessment of a defined system scopeThe certification body, scope, status and the requirement it is intended to satisfy

When should you consider certification?

An organisation can implement ISO 45001 without choosing certification. Certification may be relevant to a contract, tender, industry requirement or the organisation’s own assurance objectives. Read the applicable requirement carefully before deciding. A request for a WHS management system is not, by itself, the same wording as a request for an accredited ISO 45001 certificate.

  • Identify who is asking and the activities, sites or entities covered by the request.
  • Check whether the request asks for a system, evidence against the standard or a current certificate.
  • Ask the requesting party to clarify ambiguous wording and what evidence they will accept.
  • If a certificate is required, confirm its required scope, timing and accreditation expectations.

Build on the WHS work you already do

Review the system already operating in your business before adding another set of documents. The mapping below is a planning example: use the applicable standard for a full assessment. Look for how an activity is managed and improved, rather than assuming a matching document title demonstrates the requirement.

Examples of existing WHS work to examine
Existing activityEvidence to bring to a system reviewQuestion to investigate
Setting responsibilities and prioritiesActual decisions, assigned responsibilities and resourcesAre responsibilities understood and supported?
Planning work and controlsRisk decisions, instructions and responses to changed conditionsDo the controls reflect the actual work?
Involving workersConsultation arrangements and examples of participationHow did worker input affect the decisions?
Following up problemsFindings, investigations where relevant and completed actionsWas the outcome checked and the learning used?
Reviewing performanceRelevant reviews, internal audit findings and improvement decisionsDoes the organisation identify and address system weaknesses?

Worked example: clarify a tender requirement

Illustrative example: a contractor receives a tender asking for a “documented safety management system”, with a separate question about certification. The contractor records both questions, checks the scope and seeks clarification about acceptable evidence. It prepares relevant system documents and completed records for the first request, and gives an accurate certification status for the second.

  • Keep the original wording and any written clarification with the tender record.
  • Use an evidence index to show where each requested item is addressed.
  • Do not describe a document pack, software subscription or planned audit as an issued certificate.
  • If certification is required, discuss readiness and the assessment process with an appropriate certification body.

Prepare for an assessment of the system in use

If certification is the intended route, define the scope, review the system against the applicable standard, put the processes into use and address the gaps. Plan the relevant internal audit and management review work, then discuss the external assessment with the certification body. Scope, readiness and findings affect the work and timing involved.

  • Check that the evidence covers the activities and locations in the proposed scope.
  • Ask people to explain and demonstrate their part of the system.
  • Follow a sample of findings through to actions and effectiveness checks.
  • Keep improvements active after an assessment instead of treating the certificate as the end of the work.

Keep implementation support and certification roles clear

Blue Safe supports the documents, workflows and records used to run a WHS or integrated management system. A certification body carries out certification; ISO develops standards and does not issue certificates. When choosing a certification body, check its competence, relevant accreditation and fit with the specific requirement you are trying to meet.

  • Bring your existing system, the assessment scope and any customer requirements to the implementation discussion.
  • Confirm what work your team will complete and what support is needed.
  • Verify certificate details with the issuing body or an appropriate recognised directory when relying on certification evidence.

Use the applicable edition and amendments

At the September 2026 source check, ISO lists ISO 45001:2018 as the published standard with Amendment 1:2024. Use the current official standard and applicable amendments when planning an assessment, and confirm any relevant transition arrangements with the certification body. This guide explains the decision and evidence structure rather than reproducing the standard’s requirements.

Start with the system you use

Connect requirements to practical evidence

Review the WHS system elements and organise the records that support a tender, customer review or assessment.

Frequently asked questions

Is ISO 45001 certification automatically required to use a WHS system?

No. Organisations can implement a management system and use ISO 45001 without choosing certification. Check whether an applicable legal, industry, contractual or customer requirement calls for certification in your situation.

Does ISO 45001 replace Australian WHS or OHS duties?

No. The standard and certification do not replace the legal requirements applicable to your activities and jurisdiction. Your system needs to address those requirements in the way the business operates.

Does buying a document pack or software provide certification?

Documents and software support implementation. Certification involves assessment by a certification body against the relevant standard and scope; it is a separate process.

Can WHS and ISO systems share records?

Yes. Where an activity serves both purposes, the same useful records can support the relevant reviews. Check coverage against the applicable requirements and avoid duplicating records simply because the framework names differ.

Next step

Use this guide to check your current evidence, then move the work into a controlled system with documents, forms, registers, and review actions.

Explore WHS and integrated systems