← Back to Blog
Health & SafetyMay 2026

ISO 45001 Health and Safety Certification for Canadian Businesses

A complete guide to ISO 45001 occupational health and safety management system certification for Canadian businesses: requirements, benefits, and how to get certified.

SR
Sarita Rana
Certified Lead Auditor · Founder, CertCanada
Key Takeaways
  • ISO 45001 is the world's leading occupational health and safety management standard, replacing OHSAS 18001
  • Any Canadian business in any industry can achieve ISO 45001 certification regardless of size
  • ISO 45001 goes beyond OHSA compliance and requires a systematic, proactive approach to eliminating workplace hazards
  • It shares the same High Level Structure as ISO 9001 and ISO 14001, making integrated management systems straightforward
  • Worker participation is a core and distinctive requirement of ISO 45001 not found in previous safety standards

What is ISO 45001?

ISO 45001 is the international standard for Occupational Health and Safety Management Systems (OHSMS), published in 2018 by the International Organization for Standardization. It replaced the previous OHSAS 18001 standard and is now the globally recognized benchmark for workplace health and safety management, used by over 85,000 organizations in more than 130 countries.

For Canadian businesses, ISO 45001 represents a significant step beyond simple compliance with the Ontario Occupational Health and Safety Act (OHSA), Alberta's Occupational Health and Safety Act, or other provincial legislation. While OHSA sets minimum legal requirements, ISO 45001 requires a systematic, risk-based approach to identifying and eliminating workplace hazards before incidents occur - a proactive rather than reactive safety philosophy that substantially reduces the likelihood of workplace injuries, illnesses, and fatalities.

One of the most distinctive features of ISO 45001 is its strong emphasis on worker participation. The standard requires that workers at all levels are actively consulted and involved in the development, implementation, and improvement of the OHS management system - not simply informed of safety procedures after decisions have been made. This collaborative approach reflects current best practice in occupational safety and is increasingly expected by major employers, insurers, and government procurement bodies across Canada.

ISO 45001 vs OHSA: What is the Difference?

A common question from Canadian businesses is how ISO 45001 differs from their existing obligations under provincial health and safety legislation. The key distinction is that OHSA and its provincial equivalents set minimum legal requirements - a floor that businesses must not fall below. ISO 45001 is a management systems standard that goes far beyond compliance, requiring organizations to systematically identify all hazards, assess risks, implement controls, and continually improve safety performance.

OHSA Compliance
Sets minimum legal requirements. Reactive in nature, focuses on responding to incidents and meeting prescribed standards. Non-compliance results in fines and prosecution.
ISO 45001 Certification
Goes beyond legal minimums. Proactive and systematic, focuses on eliminating hazards before incidents occur. Demonstrates best practice to customers, partners and insurers.
OHSA Inspections
Government inspectors verify that minimum requirements are met. Reactive to complaints and incidents. Findings are legally enforceable.
ISO 45001 Audits
Accredited certification body audits the entire OHS management system. Annual surveillance plus 3-year recertification. Findings drive continual improvement.

Importantly, ISO 45001 certification does not replace OHSA compliance. It includes it. The standard explicitly requires that organizations identify and comply with all applicable legal and regulatory requirements as a baseline. Certification therefore demonstrates both legal compliance and a commitment to safety management that goes substantially beyond what the law requires.

Transitioning from OHSAS 18001 to ISO 45001

OHSAS 18001 was the predecessor to ISO 45001 and was widely adopted by Canadian manufacturers, construction companies, mining operations, and oil and gas producers from its introduction in 1999. The transition deadline to ISO 45001 passed in March 2021, meaning OHSAS 18001 certificates are no longer valid. Any Canadian organization still referencing OHSAS 18001 in its documentation, marketing, or supplier qualification submissions should be aware that the certificate carries no current standing with accredited certification bodies or major buyers.

For organizations that made the transition, the move from OHSAS 18001 to ISO 45001 involved several genuinely new requirements beyond a structural reformatting. The most significant additions were the formal requirement for worker participation and consultation, the introduction of the concept of opportunities alongside risks, stronger leadership and top management accountability requirements, and the need to consider the context of the organization and the needs of interested parties in shaping the OHS management system. Organizations that treated the transition as a documentation update rather than a genuine system enhancement often found their first ISO 45001 audit exposed gaps in these areas.

For Canadian businesses that are now pursuing ISO 45001 for the first time without having held OHSAS 18001, the absence of legacy OHSAS documentation is often an advantage. Starting fresh with ISO 45001's framework means the system is built correctly from the outset rather than adapted from an older structure that predates the current standard's requirements. Organizations in Alberta, Ontario, and British Columbia that build ISO 45001 systems from scratch alongside existing ISO 9001 or ISO 14001 systems typically achieve more integrated, functional results than those carrying forward OHSAS-era documentation habits.

One practical area where the OHSAS to ISO 45001 transition consistently required real work was hazard identification. OHSAS 18001 used the concept of hazard identification, risk assessment, and determining controls (HIRADC). ISO 45001 replaces this with a more rigorous approach that explicitly includes opportunities for improving OHS performance alongside risk assessment, and that requires consideration of hazards across a broader scope including work organization, psychosocial factors, and work performed by contractors and visitors. Canadian organizations in construction in Winnipeg or Saskatoon, manufacturing in Hamilton or Mississauga, or resource extraction in northern Alberta found that their existing HIRADC processes required genuine expansion rather than just renaming to meet ISO 45001 requirements.

Which Canadian Industries Benefit Most?

While ISO 45001 applies to all industries regardless of size, Canadian businesses in the following sectors see the strongest business case for certification:

  • Construction: Federal and provincial infrastructure contracts increasingly require ISO 45001 or equivalent OHS management systems from contractors and subcontractors
  • Manufacturing: Canadian manufacturers supplying to automotive, aerospace, and industrial sectors face OHS management system requirements from major customers
  • Oil, Gas and Mining: High-hazard industries in Alberta, BC, and Saskatchewan where robust safety management systems are both commercially and regulatory expectations
  • Transportation and Logistics: Canadian carriers and logistics providers use ISO 45001 to manage driver safety, warehouse risks, and fleet operation hazards systematically
  • Healthcare: Hospitals and healthcare facilities implementing ISO 45001 to manage worker exposure to biological hazards, violence, and ergonomic risks in clinical environments
  • Food Processing: Canadian food manufacturers use ISO 45001 alongside food safety systems to manage the combined health, safety, and hygiene risks in food production environments

The ISO 45001 Certification Process in Canada

01

Gap Analysis

Week 1 - 2

A comprehensive gap analysis compares your current occupational health and safety practices against the full requirements of ISO 45001:2018. This includes reviewing existing safety policies, procedures, hazard identification processes, incident records, legal compliance status, and worker consultation mechanisms. The gap analysis produces a prioritized action plan that forms the roadmap for your certification journey.

02

Hazard Identification and Risk Assessment

Week 2 - 6

ISO 45001 requires a systematic identification of all workplace hazards and an assessment of the risks they present. This is more comprehensive than many Canadian businesses expect - covering physical, chemical, biological, ergonomic, and psychosocial hazards across all activities, facilities, and locations. The output feeds directly into the selection of appropriate controls using the hierarchy of controls framework.

03

OHS Policy, Objectives and Legal Register

Week 3 - 6

A documented OHS policy is developed that reflects top management commitment to worker safety, compliance with applicable laws, and continual improvement. A legal register is established capturing all applicable federal and provincial OHS legislation, regulations, and permit conditions. Specific, measurable safety objectives are then set with action plans, responsibilities, and timelines assigned.

04

OHSMS Implementation

Month 2 - 4

The full OHS management system is implemented across the organization. This includes operational procedures for controlling significant hazards, emergency response plans, incident investigation processes, worker health surveillance where required, contractor and visitor safety management, and competency training for all workers performing activities that affect OHS. Worker participation mechanisms are established to involve employees in ongoing hazard identification and safety decisions.

05

Internal Audit

Month 4 - 5

A thorough internal audit verifies that the OHSMS is correctly implemented and effective across all relevant functions. Internal auditors must be competent in ISO 45001 requirements and objective with respect to the areas audited. All findings are documented, corrective actions assigned, and evidence of closure gathered before the certification audit is scheduled.

06

Certification Audit

Month 5 - 6

An accredited certification body conducts the two-stage external audit. Stage 1 reviews OHS documentation and system readiness. Stage 2 is the full on-site assessment including physical workplace inspections, worker interviews, review of incident records, and verification that controls are genuinely implemented and effective. Successful completion results in ISO 45001 certification valid for three years subject to annual surveillance audits.

The Triple Standard: ISO 9001, ISO 14001 and ISO 45001

ISO 45001 shares the same High Level Structure as ISO 9001 and ISO 14001. This means that Canadian businesses holding or pursuing all three standards can implement them as a single Integrated Management System covering quality, environment, and occupational health and safety simultaneously.

An Integrated Management System covering all three standards is widely regarded as the gold standard of organizational management by major international buyers, government procurement bodies, and ESG-focused investors. Rather than maintaining three separate systems with duplicate documentation, internal audit programmes, and management reviews, integration creates a single cohesive framework that is more efficient to operate and more powerful as a commercial credential.

For Canadian businesses already certified to ISO 9001, adding ISO 14001 and ISO 45001 is significantly less resource-intensive than standalone implementation. The management system infrastructure, documentation framework, and internal audit programme are already established. The incremental work of adding environmental and safety management layers is substantially less than building from scratch, making the triple standard a highly cost-effective investment for certified Canadian organizations.

Common Mistakes in ISO 45001 Implementation

  • Treating ISO 45001 as a documentation project rather than a genuine cultural change in how the organization thinks about and manages safety risks
  • Conducting hazard identification as a desk exercise rather than a genuine physical walkthrough involving workers from each area
  • Failing to establish meaningful worker participation mechanisms, as auditors verify that workers are genuinely consulted, not just informed
  • Building an OHSMS that mirrors existing OHSA compliance documentation without adding the proactive risk management elements ISO 45001 requires
  • Not maintaining a current legal register that captures all applicable federal, provincial, and municipal OHS obligations
  • Underestimating the importance of incident investigation, as ISO 45001 requires systematic root cause analysis, not just incident recording
  • Neglecting contractor and visitor safety management, as certification auditors assess whether controls extend to all persons under the organization's OHS influence

Frequently Asked Questions

Does ISO 45001 replace OHSAS 18001?
Yes. ISO 45001 fully replaced OHSAS 18001 in 2021. Organizations previously certified to OHSAS 18001 must have transitioned to ISO 45001 by that deadline. New certifications are issued exclusively under ISO 45001.
How does ISO 45001 relate to COR certification?
The Certificate of Recognition (COR) is a Canadian OHS programme administered provincially. ISO 45001 and COR cover similar territory but ISO 45001 is internationally recognized. Some provinces accept ISO 45001 as equivalent to COR for procurement purposes - check with your provincial authority.
Can small businesses get ISO 45001 certified?
Yes. ISO 45001 is designed for any size organization. The scope and complexity of the OHSMS scales to the size and risk profile of the business. Small businesses in high-hazard sectors particularly benefit from the structured approach ISO 45001 provides.
How long does ISO 45001 certification take?
Most Canadian businesses achieve ISO 45001 certification within 4 to 6 months. Organizations that already hold ISO 9001 or ISO 14001 can often complete the process faster due to existing management system infrastructure and internal audit capability.
Is ISO 45001 required for government contracts in Canada?
Not universally mandated, but federal infrastructure, defence, and construction procurement increasingly includes OHS management system requirements. ISO 45001 certification strengthens bid evaluations and satisfies these requirements across all Canadian provinces.
What is the role of top management in ISO 45001?
ISO 45001 has strong leadership requirements. Top management must demonstrate visible commitment to OHS, allocate resources, participate in management reviews, and set the OHS policy direction. Auditors verify genuine leadership involvement, not just paper endorsement.
The Business Case

Every workplace incident costs a Canadian business far more than the cost of preventing it, through lost productivity, workers compensation claims, regulatory penalties, reputational damage, and recruitment costs to replace injured workers. ISO 45001 certification is not an overhead. It is a systematic investment in eliminating the conditions that lead to incidents before they occur. Combined with ISO 9001 and ISO 14001, it forms a world-class integrated management system that opens doors to global markets and demonstrates to every stakeholder that your organization takes its responsibilities seriously.

SR
Sarita Rana
Founder and CEO, CertCanada · Certified Lead Auditor · Occupational Health and Safety Systems Specialist

Sarita has guided Canadian workplaces through the transition from OHSAS 18001 to ISO 45001 and supported first-time implementations across manufacturing, construction, and industrial sectors. Her focus on worker participation and practical hazard control gives Canadian businesses health and safety systems that satisfy auditors and genuinely protect people.

Ready to Get ISO 45001 Certified?

Book a free consultation with CertCanada and get a tailored ISO 45001 implementation roadmap for your business.