ISO 45001:2018 Vs. OHSAS 18001:2007 - Advisera

ISO 45001:2018 vs.OHSAS 18001:2007Copyright 2020 Advisera Expert Solutions Ltd. All rights reserved.Copyright 2020 Advisera Expert Solutions Ltd. All rights reserved.1

ISO 45001:2018Introduction0.1 Background0.2 Aim of an OH&S managementsystem0.3 Success factors0.4 Plan-Do-Check-Act cycleOHSAS 18001:2007Introduction0.5 Contents of this documentOccupational health and safetymanagement systems Requirements with guidance for use1 Scope2 Normative references3 Terms and definitions4 Context of the organizationOccupational health and safetymanagement systems Requirements1 Scope2 Reference publications3 Terms and definitions4.1 Understanding the organizationand its context4.2 Understanding the needs andexpectations of workers and otherinterested parties4.3 Determining the scope of theOH&S management system4.1 General requirements4.4 OH&S management system4.1 General requirementsExplanationThe point of both sections is the same: explaining the purpose of thestandard and emphasizing the PDCA cycle.ISO 45001 provides more information on the purpose and benefits of anOH&S management system and defines success factors for an effectiveOH&S management system.The last sub clause of this section provides clarification of the structureand terms of the standard.These clauses are almost the same for both standards.ISO 45001 has no normative references.Both standards provide definitions for terms used in the text.This is a completely new requirement; the organization will need todetermine the external and internal context that affects the organizationand its OH&S management system.Interested parties are mentioned several times in OHSAS 18001, but therewere no explicit requirements for their identification and identification oftheir needs and expectations. Furthermore, ISO 45001 distinguishesworkers from other interested parties in order to emphasize theirimportance.Both standards require definition of OH&S management system scope;only ISO 45001 elaborates requirements for the scope in more detail.Documenting the scope of the OH&S management system is required byboth standards. For more information, see How to determine scope of theOH&SMS.The requirements are the same for both standards.Copyright 2020 Advisera Expert Solutions Ltd. All rights reserved.2

ISO 45001:2018OHSAS 18001:2007Explanation5.1 Leadership and commitment4.4.1 Resources, roles, responsibility,accountability andauthority5.2 OH&S policy4.2 OH&S policyBoth standards have similar requirements regarding top management. ISO45001 does not require the organization to appoint a member of the topmanagement to be responsible for the OH&S management system.The requirements for the OH&S Policy are the same in both standards, onlybetter elaborated in ISO 45001.5 Leadership and workerparticipation5.3 Organizational roles,responsibilities and authorities5.4 Consultation and participation ofworkers6 Planning6.1 Actions to address risks andopportunities4.4.1 Resources, roles, responsibility,accountability andauthority4.4.3.2 Participation andconsultationThe main difference is that the new standard does not require appointing amanagement representative.The requirements of both standards are almost the same; only ISO 45001defines them in more detail.This is a completely new requirement compared to OHSAS 18001. Whenplanning the OH&SMS, the organization will need to determine the risksand opportunities affecting the organization.6.1.1 General6.1.2 Hazard identification andassessment of risks andopportunities6.1.2.1 Hazard identification6.1.2.2 Assessment of OH&S risksand other risks to the OH&Smanagement system4.3.1 Hazard identification, riskassessment anddetermining controlsThe requirements regarding identification and assessment of OH&Shazards are the same in both standards; only ISO 45001 provides moredetails.Risks related to the OH&S management system are a new requirementcompared to OHSAS 18001; this clause covers not only hazard-related risksbut also risks regarding legal and other requirements and overall contextof the organization.Copyright 2020 Advisera Expert Solutions Ltd. All rights reserved.3

ISO 45001:20186.1.2.3 Identification of OH&Sopportunities and otheropportunities for the OH&Smanagement system6.1.3 Determination of legalrequirements and otherrequirementsOHSAS 18001:2007ExplanationOpportunities are only mentioned in ISO 45001, and this sub clause defineswhat kind of opportunities must be addressed.4.3.2 Legal and other requirements6.1.4 Planning actionBoth standards require the organization to establish a process foridentification of legal and other requirements, and also to document legaland other requirements.The organization will have to plan actions to address the determined risksrelated to threats and opportunities and evaluate their effectiveness.6.2 OH&S objectives and planning toachieve them6.2.1 OH&S objectives4.3.3 Objectives and programsThe requirements remain the same, but are further elaborated in the newversion. See the sample document here: OH&S Objectives.6.2.2 Planning to achieve OH&Sobjectives7 Support7.1 Resources7.2 Competence7.3 Awareness7.4 Communication7.4.1 General7.4.2 Internal communication7.4.3 External communication7.5 Documented information7.5.1 General7.5.2 Creating and updating4.4.1 Resources, roles, responsibility,accountability andauthority4.4.2 Competence, training andawareness4.4.3.1 Communication4.4.4 Documentation4.4.5 Control of documents4.5.4 Control of recordsThe requirements regarding resource provision for both standards are thesame, but the new standard emphasizes resource provision by dividingthem into separate clauses.The requirements are the same, only further outlined in ISO 45001 bydivision into separate clauses. See the sample document here:Competence, Training and Awareness Procedure.The requirements of both standards are pretty much the same, onlyelaborated in more detail in ISO 45001.Documents and records now belong to the same category – documentedinformation. The requirements of both standards are equivalent.Copyright 2020 Advisera Expert Solutions Ltd. All rights reserved.4

ISO 45001:2018OHSAS 18001:2007Explanation7.5.3 Control of documentedinformation8 Operation8.1 Operational planning and control4.4 Implementation and operation4.4.6 Operational control8.1.1 General8.1.2 Eliminating hazards andreducing OH&S risks4.3.1 Hazard identification, riskassessment anddetermining controls8.1.3 Management of change8.1.4 Procurement8.1.4.1 GeneralRequirements of both standards are pretty much the same; only ISO 45001has separate sub clauses for change management and outsourcedprocesses.The hierarchy is much better defined in ISO 45001 and slightly modified.While OHSAS 18001 puts it inside the clause with other requirements, ISO45001 has it separately to emphasize its importance.The requirements of both standards are almost the same, only elaboratedin more detail in ISO 45001 and kept as a separate clause.The requirements of both standards are almost the same, only elaboratedin more detail in ISO 45001 and kept as a separate clause.4.4.6 Operational control8.1.4.2 Contractors8.1.4.3 Outsourcing8.2 Emergency preparedness andresponse4.4.7 Emergency preparedness andresponse9 Performance evaluation9.1 Monitoring, measurement,analysis and evaluation9.1.1 General4.5 Checking4.5.1 Performance measurementand monitoringThe requirements of both standards are almost the same, only elaboratedin more detail in ISO 45001 and kept as a separate clause.The requirements of both standards are almost the same, only elaboratedin more detail in ISO 45001 and kept as a separate clause.The requirements are almost the same, but are further elaborated in thenew standard. See the sample document here: Procedure for EmergencyPreparedness and Response.The new clause sublimates all requirements monitoring and measuring,including legal and other requirements, OH&S performances, operationalcontrols, etc.Copyright 2020 Advisera Expert Solutions Ltd. All rights reserved.5

ISO 45001:2018OHSAS 18001:2007Explanation9.1.2 Evaluation of compliance4.5.2 Evaluation of complianceThe requirements are the same. See the sample document here:Compliance Evaluation Record.9.2 Internal audit4.5.5 Internal audit9.3 Management review10 Improvement5.6 Management reviewThe new standard points out the need to use all available information forcontinually improving the OH&S Management System.10.1 General10.2 Incident, nonconformity andcorrective action10.3 Continual improvementAnnex A – Guidance on the use ofthis documentThe requirements are equivalent, but the new standard has divided theclause into two sub clauses to emphasize some elements of the internalaudit, such as the audit objective and the audit process. The maindifference is that the new standard does not require a documentedprocedure. See the sample document here: Procedure for Internal Audit.The requirements are equivalent.4.5.3 Incident investigation,nonconformity, correctiveaction and preventive action4.5.3.1 Incident investigation4.5.3.2 Nonconformity, correctiveaction and preventive actionISO 45001 does not have preventive actions, which aligns it with newversions of other management system standards. Also, incidentinvestigation is merged with nonconformities and corrective actionsbecause the same process can be used for investigation of incidents andnonconformities, and they are both resolved with corrective actions.The new standard points out the need to use all available information forcontinually improving OH&S performance and the OH&S ManagementSystem.Annex A explains the new structure of the ISO 45001 standard, togetherwith explanations of each clause and its requirements.Copyright 2020 Advisera Expert Solutions Ltd. All rights reserved.6

Useful resourcesThese online materials will help you with your transition from OHSAS 18001 to ISO 45001: Here you can download a free preview of the ISO 45001 Transition Toolkit – in this free preview, you will be able to see the Table of Contents of eachof the mentioned documented procedures, as well as a few sections from each document.This white paper will outline the Twelve-step transition process from OHSAS 18001 to ISO 45001.Copyright 2020 Advisera Expert Solutions Ltd. All rights reserved.7

Advisera Expert Solutions Ltdfor electronic business and business consultingZavizanska 12, 10000 ZagrebCroatia, European UnionEmail: support@advisera.comU.S. (international): 1 (646) 759 9933United Kingdom (international): 44 1502 449001Toll-Free (U.S. and Canada): 1-888-553-2256Toll-Free (United Kingdom): 0800 808 5485Australia: 61 3 4000 0020Copyright 2020 Advisera Expert Solutions Ltd. All rights reserved.8

ISO 45001:2018 OHSAS 18001:2007 Explanation Introduction Introduction 0.1 Background The point of both sections is the same: explaining the purpose of the standard and emphasizing the PDCA cycle. ISO 45001 pr