How to Get ISO 45001 Certification in UAE – Get Certified with Veritas Assurance
Veritas Contact: https://www.veritasassurance.com/contact.php
Organisations in the UAE operate in different working environments, including construction sites, manufacturing facilities, warehouses, logistics operations, engineering projects and commercial establishments. Each environment presents occupational health and safety risks that need to be properly identified and controlled.
ISO 45001:2018 provides an internationally recognised framework for establishing an Occupational Health and Safety Management System (OH&S MS). It helps organisations identify workplace hazards, manage occupational health and safety risks, involve employees in safety decisions and improve workplace safety performance.
Obtaining ISO 45001 certification requires more than preparing safety policies and procedures. An organisation must implement the management system across its relevant activities and demonstrate that its processes are working effectively.
This guide explains how to get ISO 45001 certification in UAE, from defining the management-system scope and conducting risk assessments to completing internal audits and external certification assessments.
What Is ISO 45001?
ISO 45001 is an international standard specifying requirements for an Occupational Health and Safety Management System. It helps organisations provide safe and healthy working conditions, prevent work-related injury and ill health, and continually improve occupational health and safety performance.
The standard follows a management-system approach that connects leadership, planning, risk management, operational controls, worker participation and performance evaluation.
Its main requirements are organised into the following clauses:
Clause 4 – Context of the organisation.
Clause 5 – Leadership and worker participation.
Clause 6 – Planning.
Clause 7 – Support.
Clause 8 – Operation.
Clause 9 – Performance evaluation.
Clause 10 – Improvement.
ISO 45001 certification is an independent assessment of an organisation's OH&S management system against the applicable requirements. It does not guarantee that workplace accidents will never occur or replace the organisation's responsibility to comply with applicable laws.
Which Organisations in UAE Can Implement ISO 45001?
ISO 45001 can be implemented by organisations of different sizes and across various industries. The management system should reflect the organisation's actual activities, workforce and occupational health and safety risks.
Examples include:
Construction and contracting: Managing work at height, excavation, lifting operations, temporary electrical installations, machinery and subcontractor activities.
Manufacturing and industrial operations: Controlling machinery hazards, production activities, maintenance, hazardous substances, noise exposure and material handling.
Logistics and transportation: Managing driver safety, vehicle movement, loading and unloading, warehouse activities, fatigue-related risks and vehicle maintenance.
Engineering and technical services: Addressing installation, commissioning, electrical work, equipment operation and maintenance-related hazards.
Healthcare facilities: Managing biological hazards, chemical exposure, manual handling, medical equipment and emergency situations.
Hotels and facilities management: Controlling cleaning chemicals, kitchen operations, electrical hazards, maintenance activities and workplace slips and falls.
The standard is not limited to high-risk industries. Any organisation can consider ISO 45001 where a structured approach to occupational health and safety management is relevant to its operations.
How to Get ISO 45001 Certification in UAE: 10 Implementation Steps
Step 1: Understand the Standard and Define the Scope
The organisation should first understand the requirements of ISO 45001:2018 and determine how they apply to its activities.
The next task is to define the boundaries and applicability of the OH&S management system. The scope should accurately identify the business activities, departments, locations and relevant operational arrangements covered by the system.
For example:
A construction company may include civil construction and project execution.
A manufacturing company may include production, assembly and warehousing.
A logistics company may include transportation, storage and delivery operations.
An engineering company may include installation, commissioning and maintenance activities.
The organisation should consider permanent and temporary workplaces, relevant contractors and outsourced processes. For businesses operating across multiple UAE locations, the intended certification scope should clearly identify the relevant sites and activities.
Step 2: Conduct an ISO 45001 Gap Assessment
A gap assessment compares the organisation's existing occupational health and safety arrangements with ISO 45001 requirements.
It helps identify established practices, missing processes and areas that require improvement.
The assessment should review:
Existing health and safety policies and responsibilities.
Hazard identification and risk assessment.
Applicable legal and other requirements.
Employee consultation and participation.
Training and competence arrangements.
Operational and contractor controls.
Emergency preparedness.
Incident reporting and corrective action.
Internal audits and management reviews.
For example, a warehouse may already conduct equipment inspections and employee inductions but lack a consistent process for evaluating workplace risks and monitoring contractor activities.
The assessment should produce an implementation action plan with responsibilities, resources and target dates.
Step 3: Establish Leadership and OH&S Responsibilities
Top management must demonstrate leadership and commitment to the OH&S management system.
The organisation should establish an occupational health and safety policy appropriate to its activities, operational context and risks.
The policy should include commitments to:
Provide safe and healthy working conditions.
Prevent work-related injury and ill health.
Eliminate hazards and reduce OH&S risks.
Meet applicable legal and other requirements.
Consult and involve workers and their representatives.
Continually improve the OH&S management system.
Management should also assign responsibilities and authorities for implementing the system.
Occupational health and safety should not be treated as the responsibility of the HSE department alone. Department managers, supervisors, employees, procurement teams and maintenance personnel may all have responsibilities relevant to their work.
The organisation should establish measurable OH&S objectives and determine how progress will be monitored.
Step 4: Identify Hazards and Assess Occupational Health and Safety Risks
Hazard identification and risk assessment are central to ISO 45001 implementation.
The organisation should establish a process to identify hazards arising from routine and non-routine activities, workplace conditions, equipment, materials and relevant human factors.
The assessment may consider:
Machinery, tools and equipment.
Working at height and lifting operations.
Electrical and confined-space activities.
Hazardous substances and materials.
Manual handling and ergonomic risks.
Vehicle and pedestrian movement.
Maintenance and shutdown activities.
Contractor and subcontractor work.
Emergency situations.
Relevant physical and psychological factors.
For example, a construction company may identify falling objects, excavation collapse and mobile equipment movement as significant hazards. A logistics company may identify reversing vehicles, driver fatigue, loading operations and warehouse traffic.
After identifying hazards, the organisation should evaluate the associated risks and determine appropriate controls.
The hierarchy of controls should guide decisions, prioritising elimination of hazards where possible, followed by substitution and engineering controls. Administrative controls and personal protective equipment should be applied as appropriate.
Risk assessments should be reviewed when changes, incidents or new hazards affect workplace conditions.
Step 5: Identify Applicable UAE Legal and Other Requirements
Organisations must determine the legal and other requirements relevant to their occupational health and safety activities.
For UAE businesses, this may involve applicable federal and emirate-level requirements, as well as obligations imposed by competent authorities, free zones, clients, project owners and contractual arrangements.
The organisation should:
Identify relevant occupational health and safety obligations.
Determine how they apply to its activities.
Assign responsibility for monitoring requirements.
Communicate applicable obligations to relevant personnel.
Evaluate compliance at planned intervals.
Retain appropriate evidence of compliance evaluations.
For example, a company operating construction sites may need to consider relevant workplace safety requirements, project conditions, permit arrangements and client-specific obligations.
A manufacturing organisation may need to consider requirements relevant to its premises, equipment, employees and production activities.
ISO 45001 does not replace UAE legislation. It provides a management-system framework for identifying, managing and evaluating applicable obligations.
Step 6: Implement Operational and Emergency Controls
After assessing workplace risks, the organisation should establish operational controls to manage significant hazards.
Depending on its activities, these may include:
Permit-to-work arrangements.
Lockout and tagout procedures.
Working-at-height controls.
Machinery guarding and equipment safety.
Electrical safety procedures.
Lifting operation controls.
Confined-space entry arrangements.
Chemical handling and storage controls.
Vehicle and pedestrian movement arrangements.
Contractor and subcontractor safety controls.
Equipment inspection and maintenance schedules.
The organisation should also consider procurement, outsourced processes and contractor activities where they can affect OH&S performance.
Emergency preparedness must form part of these arrangements. The organisation should identify foreseeable emergency situations, such as fires, chemical spills, serious injuries, electrical emergencies and equipment failures.
Emergency procedures should identify responsibilities, communication methods, response resources and actions needed to protect workers and other relevant persons. Drills or exercises should be conducted where appropriate, and their results reviewed.
Step 7: Establish Competence and Worker Participation
The organisation should determine the competence required for activities that can affect occupational health and safety performance.
Depending on job responsibilities, this may include:
Employee safety induction.
Equipment operation training.
Emergency response training.
Working-at-height training.
Manual handling awareness.
Chemical handling instruction.
Contractor safety orientation.
Job-specific safety training.
Training should be suitable for each person's role and the risks associated with their work.
Employees should understand relevant workplace hazards, operational controls, emergency arrangements and their responsibilities.
ISO 45001 also requires worker consultation and participation. Organisations should provide suitable opportunities for employees to raise safety concerns, report hazards, contribute to risk assessments and participate in relevant OH&S decisions.
Worker participation should be meaningful rather than limited to obtaining signatures on attendance sheets.
Step 8: Prepare Required OH&S Documents and Records
The organisation should maintain and retain documented information required by ISO 45001 and necessary for effective system operation.
Typical documents and records include:
| Category | Examples |
|---|---|
| Management system | OH&S policy, scope, objectives, responsibilities |
| Risk management | Hazard identification, risk assessments, risk action plans |
| Legal compliance | Legal requirements register, compliance evaluation records |
| Operational controls | Procedures, work instructions, permit records, equipment inspections |
| Competence | Training records, induction records, competence evaluations |
| Worker participation | Consultation records, safety meeting minutes |
| Emergency preparedness | Emergency procedures, drill and exercise records |
| Performance evaluation | Monitoring results, incident reports, internal audit records |
| Management review | Review minutes, decisions and action records |
| Improvement | Nonconformity reports and corrective-action records |
The organisation should control its documented information so that relevant personnel can access it when required and records remain protected and retrievable.
Documentation should be appropriate to the organisation's size, activities, complexity and risks. Preparing unnecessary procedures does not improve the effectiveness of the management system.
Step 9: Monitor Performance, Conduct Internal Audit and Management Review
Before proceeding to external certification, the organisation should evaluate whether the OH&S management system is working effectively.
OH&S performance monitoring
The organisation should establish appropriate indicators to evaluate performance. Examples include workplace incident trends, near-miss reporting, completion of inspections, training performance, corrective-action closure and progress towards OH&S objectives.
When an incident or nonconformity occurs, the organisation should respond, identify contributing factors and determine whether corrective action is necessary.
Internal audit
Internal audits should be conducted at planned intervals to determine whether the management system conforms to ISO 45001 and the organisation's own requirements.
Auditors should be competent and objective. The audit should examine both documented arrangements and actual implementation, including relevant workplace conditions, employee awareness and operational controls.
Audit findings should be recorded, communicated and followed up.
Management review
Top management should review the OH&S management system at planned intervals. The review should consider relevant changes, OH&S performance, compliance evaluation results, audit findings, worker participation, resource requirements and opportunities for improvement.
Management should record its decisions and ensure that assigned actions are followed up.
Step 10: Complete the External Certification Audit
After implementing the OH&S management system and reviewing its readiness, the organisation can apply to a suitable certification body.
The application generally requires information such as:
Legal company name and business activities.
Proposed certification scope.
Workforce details.
Operating locations.
Shift arrangements.
Outsourced activities and contractor arrangements.
Relevant operational risks and complexity.
The external certification process normally involves two audit stages.
Stage 1 Audit – Readiness Assessment
The auditor reviews relevant management-system information, scope, organisational context, risk assessment arrangements, applicable legal requirements and readiness for the next audit stage.
The findings help determine whether the organisation is prepared for the Stage 2 assessment.
Stage 2 Audit – Implementation Assessment
The auditor evaluates whether the management system has been implemented and is operating effectively.
The assessment may include workplace observations, employee interviews, document reviews and examination of operational records.
The auditor may examine hazard controls, employee competence, contractor arrangements, emergency preparedness, performance monitoring and corrective-action processes.
Audit findings and certification decision
If nonconformities are identified, the organisation must respond according to the certification body's process. This may involve correction, cause analysis, corrective action and submission of supporting evidence.
The certification body completes the required assessment and independent review before making the certification decision. Successful completion of an audit does not automatically mean that a certificate is issued immediately.
Maintaining ISO 45001 Certification
ISO 45001 certification requires the organisation to maintain its OH&S management system after initial certification.
The organisation should continue to:
Review and update workplace risk assessments.
Monitor occupational health and safety performance.
Maintain worker consultation arrangements.
Evaluate applicable legal compliance.
Review operational and contractor controls.
Address incidents and corrective actions.
Conduct internal audits and management reviews.
Surveillance audits take place during the certification cycle to evaluate continued conformity. Recertification is required at the end of the certification cycle if the organisation intends to maintain its certification.
Common ISO 45001 Implementation Mistakes
Using generic risk assessments: Risk assessments should reflect the organisation's actual activities, equipment, locations and operating conditions.
Ignoring contractors: Contractor activities can introduce significant risks. Appropriate coordination, communication and control arrangements are necessary.
Treating training as the only safety control: Training does not replace engineering controls, equipment safeguards, maintenance or other suitable risk-control measures.
Preparing documents only for the audit: Policies and procedures must be implemented in daily operations and supported by objective evidence.
Get ISO 45001 Certified with Veritas Assurance
Veritas Assurance provides ISO certification services for organisations operating in the UAE.
Businesses planning to obtain ISO 45001 certification should establish their business activities, proposed certification scope, workforce information, operating locations and existing OH&S management arrangements.
Veritas Assurance can discuss the applicable certification requirements and assessment process with organisations considering certification.
When selecting a certification body, organisations should review its legal certification entity, competence, impartiality, current accreditation status and relevant scope. Accreditation applies to specified certification activities and should be verified through the relevant official records.
To discuss your organisation's ISO 45001 certification requirements, contact Veritas Assurance.
Contact Veritas Assurance: https://www.veritasassurance.com/contact.php
Disclaimer: ISO 45001 certification is subject to successful assessment and an independent certification decision. Certification scope, audit arrangements and accreditation applicability should be confirmed with the certification body before proceeding.
Frequently Asked Questions
Can small businesses obtain ISO 45001 certification in UAE?
Does ISO 45001 apply to service companies and office-based organisations?
Can an organisation use its existing health and safety procedures for ISO 45001?
Can ISO 45001 be integrated with ISO 9001 and ISO 14001?
How long does ISO 45001 implementation take?
What happens if nonconformities are identified during the certification audit?
Can a company with multiple branches obtain one ISO 45001 certificate?
Does ISO 45001 certification guarantee that workplace accidents will not occur?
How should an organisation choose an ISO 45001 certification body in UAE?
How can I request ISO 45001 certification from Veritas Assurance?
Ready to Start Your ISO 45001 Certification Process?
Discuss your business activities, certification scope and operational locations with Veritas Assurance to understand the applicable ISO 45001 certification assessment process.
