TheArtOfService
Back to Frameworks

ISO 45001:2018

Self-Assess
International
v2018
12 domains
56 controls

ISO 45001:2018 Occupational Health and Safety Management Systems Requirements.

Verified

ISO 45001:2018 is a compliance framework from International with 12 domains and 56 controls that map to 79 other frameworks. The largest domains are Support – ISO 45001:2018 (11 controls), Performance evaluation – ISO 45001:2018 (7 controls), Operation (6 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykControl text last updated

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (12)

Clause 0 – ISO 45001:2018

5 controls
Controls in the Clause 0 – ISO 45001:2018 domain of ISO 45001:2018 — 5 controls
CodeTitle
iso-45001-2018::0.1Background
iso-45001-2018::0.2Aim of an OH&S management system
iso-45001-2018::0.3Success factors
iso-45001-2018::0.4Plan-Do-Check-Act cycle
iso-45001-2018::0.5Contents of this document

Context of the organization – ISO 45001:2018

4 controls
Controls in the Context of the organization – ISO 45001:2018 domain of ISO 45001:2018 — 4 controls
CodeTitle
iso-45001-2018::4.1Understanding the organization and its context
iso-45001-2018::4.2Understanding the needs and expectations of workers and other interested parties
iso-45001-2018::4.3Determining the scope of the OH&S management system
iso-45001-2018::4.4OH&S management system

Improvement – ISO 45001:2018

3 controls
Controls in the Improvement – ISO 45001:2018 domain of ISO 45001:2018 — 3 controls
CodeTitle
iso-45001-2018::10.1General
iso-45001-2018::10.2Incident, nonconformity and corrective action
iso-45001-2018::10.3Continual improvement

Leadership and worker participation

1 controls
Controls in the Leadership and worker participation domain of ISO 45001:2018 — 1 controls
CodeTitle
5.4Establishing Audit Programme

Leadership and worker participation – ISO 45001:2018

4 controls
Controls in the Leadership and worker participation – ISO 45001:2018 domain of ISO 45001:2018 — 4 controls
CodeTitle
iso-45001-2018::5.1Leadership and commitment
iso-45001-2018::5.2OH&S policy
iso-45001-2018::5.3Organizational roles, responsibilities and authorities
iso-45001-2018::5.4Consultation and participation of workers

Operation

6 controls
Controls in the Operation domain of ISO 45001:2018 — 6 controls
CodeTitle
8.1.1All security policies and operational procedures that are identified in Requirement 8 are: • Documented. • Kept up to date. • In use. • Known to all affected parties
8.1.2Roles and responsibilities for performing activities in Requirement 8 are documented, assigned, and understood
8.1.3Management of change
8.1.4.1Procurement, general
8.1.4.2Contractors
8.1.4.3Outsourcing

Operation – ISO 45001:2018

6 controls
Controls in the Operation – ISO 45001:2018 domain of ISO 45001:2018 — 6 controls
CodeTitle
iso-45001-2018::8.1Operational planning and control
iso-45001-2018::8.1.1General
iso-45001-2018::8.1.2Eliminating hazards and reducing OH&S risks
iso-45001-2018::8.1.3Management of change
iso-45001-2018::8.1.4Procurement
iso-45001-2018::8.2Emergency preparedness and response

Performance evaluation – ISO 45001:2018

7 controls
Controls in the Performance evaluation – ISO 45001:2018 domain of ISO 45001:2018 — 7 controls
CodeTitle
iso-45001-2018::9.1Monitoring, measurement, analysis and performance evaluation
iso-45001-2018::9.1.1General
iso-45001-2018::9.1.2Evaluation of compliance
iso-45001-2018::9.2Internal audit
iso-45001-2018::9.2.1General
iso-45001-2018::9.2.2Internal audit programme
iso-45001-2018::9.3Management review

Planning

3 controls
Controls in the Planning domain of ISO 45001:2018 — 3 controls
CodeTitle
6.1.2.1Hazard identification
6.1.2.2Assessment of OH&S risks and other risks to the OH&S MS
6.1.2.3Assessment of OH&S opportunities and other opportunities for the OH&S MS

Planning – ISO 45001:2018

5 controls
Controls in the Planning – ISO 45001:2018 domain of ISO 45001:2018 — 5 controls
CodeTitle
iso-45001-2018::6.1Actions to address risks and opportunities
iso-45001-2018::6.1.1General
iso-45001-2018::6.2OH&S objectives and planning to achieve them
iso-45001-2018::6.2.1OH&S objectives ISO 45001:2018
iso-45001-2018::6.2.2Planning to achieve OH&S

Support

1 controls
Controls in the Support domain of ISO 45001:2018 — 1 controls
CodeTitle
7.5Threat assessment

Support – ISO 45001:2018

11 controls
Controls in the Support – ISO 45001:2018 domain of ISO 45001:2018 — 11 controls
CodeTitle
iso-45001-2018::7.1Resources
iso-45001-2018::7.2Competence
iso-45001-2018::7.3Awareness
iso-45001-2018::7.4Communication
iso-45001-2018::7.4.1General
iso-45001-2018::7.4.2Internal communication
iso-45001-2018::7.4.3External communication
iso-45001-2018::7.5Documented information
iso-45001-2018::7.5.1General
iso-45001-2018::7.5.2Creating and updating
iso-45001-2018::7.5.3Control of documented information

Your Compliance Coverage

If you comply with ISO 45001:2018, you already cover:

ISO 14001:2015

73%

41 controls mapped

Compare →

ISO 22000:2018

57%

32 controls mapped

Compare →

ISO 37301:2021

54%

30 controls mapped

Compare →

+ 76 more: ISO 9001:2015 (52%), ISO 50001:2018 - Energy Management Systems (50%)

See all 79 mapped frameworks ↓

Maps to 79 other frameworks

56 total controls
ISO 14001:2015
41 source controls mapped|40 target controls covered
73%
ISO 22000:2018
32 source controls mapped|33 target controls covered
57%
ISO 37301:2021
30 source controls mapped|30 target controls covered
54%
ISO 9001:2015
29 source controls mapped|29 target controls covered
52%
ISO 50001:2018 - Energy Management Systems
28 source controls mapped|36 target controls covered
50%
ISO 22301:2019
28 source controls mapped|25 target controls covered
50%
ISO 37001:2016
26 source controls mapped|23 target controls covered
46%
ISO 14004:2016
25 source controls mapped|17 target controls covered
45%
ISO 55001:2014
24 source controls mapped|20 target controls covered
43%
ISO 27701:2019
21 source controls mapped|21 target controls covered
38%
ISO 45001
20 source controls mapped|19 target controls covered
36%
ISO 39001:2012 - Road Traffic Safety Management
18 source controls mapped|26 target controls covered
32%
ISO 19011:2018
18 source controls mapped|39 target controls covered
32%
ISO 41001:2018 - Facility Management Systems
16 source controls mapped|25 target controls covered
29%
ISO 55001
16 source controls mapped|15 target controls covered
29%
ISO 56002
15 source controls mapped|26 target controls covered
27%
ISO/IEC 27003:2017
14 source controls mapped|23 target controls covered
25%
AS9100D - Aerospace Quality Management System
14 source controls mapped|12 target controls covered
25%
ISO 22313:2020 - Guidance on Business Continuity Management Systems
14 source controls mapped|13 target controls covered
25%
ISO 9001
13 source controls mapped|13 target controls covered
23%
ISO 37301
13 source controls mapped|13 target controls covered
23%
ISO 22000
13 source controls mapped|13 target controls covered
23%
ISO 37002:2021 - Whistleblowing Management Systems
13 source controls mapped|20 target controls covered
23%
ISO 30401
12 source controls mapped|13 target controls covered
21%
ISO 27001:2022
10 source controls mapped|10 target controls covered
18%
ISO/IEC TR 24028:2020
7 source controls mapped|1 target controls covered
13%
AS9100D:2016 - Quality Management Systems for Aviation, Space, and Defence
7 source controls mapped|6 target controls covered
13%
ISO 37001
7 source controls mapped|7 target controls covered
13%
ISO 31000:2018
6 source controls mapped|6 target controls covered
11%
ISO 28001:2007 Supply Chain Security Management
6 source controls mapped|5 target controls covered
11%
ASIS SPC.1-2009 - Organizational Resilience Standard
6 source controls mapped|8 target controls covered
11%
ISO 27005:2022
5 source controls mapped|7 target controls covered
9%
ISO 13485:2016
5 source controls mapped|4 target controls covered
9%
ISO/IEC 23894:2023
5 source controls mapped|11 target controls covered
9%
ISO/IEC 27031:2011
5 source controls mapped|4 target controls covered
9%
ISO 19011
4 source controls mapped|3 target controls covered
7%
ISO/IEC 38500:2024
4 source controls mapped|15 target controls covered
7%
ISO 27018:2019
3 source controls mapped|2 target controls covered
5%
PCI SSF
3 source controls mapped|2 target controls covered
5%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
3 source controls mapped|3 target controls covered
5%
ISO 31000
3 source controls mapped|3 target controls covered
5%
ISO 22320:2018
3 source controls mapped|4 target controls covered
5%
ISO 27002:2022
2 source controls mapped|1 target controls covered
4%
Australian Energy Sector Cyber Security Framework (AESCSF)
2 source controls mapped|1 target controls covered
4%
IEC 62443
2 source controls mapped|1 target controls covered
4%
AICPA SOC 3
2 source controls mapped|1 target controls covered
4%
ISO 26262:2018 - Functional Safety for Road Vehicles
2 source controls mapped|1 target controls covered
4%
ISO 14001
2 source controls mapped|2 target controls covered
4%
ISO 10006:2003
2 source controls mapped|2 target controls covered
4%
ISO/IEC 27701:2019
2 source controls mapped|2 target controls covered
4%
BS 65000:2014 - Guidance on Organizational Resilience
2 source controls mapped|2 target controls covered
4%
APRA CPS 220 Risk Management
2 source controls mapped|1 target controls covered
4%
ISO 20400:2017 - Sustainable Procurement
2 source controls mapped|2 target controls covered
4%
ISO 10007:2017
1 source controls mapped|1 target controls covered
2%
ISO/IEC 42001:2023
1 source controls mapped|1 target controls covered
2%
FFIEC IT Examination Handbook
1 source controls mapped|1 target controls covered
2%
ISAE 3402 - Assurance Reports on Controls at a Service Organisation
1 source controls mapped|1 target controls covered
2%
ISO 22318
1 source controls mapped|2 target controls covered
2%
PCI PIN Security
1 source controls mapped|1 target controls covered
2%
PCI P2PE
1 source controls mapped|1 target controls covered
2%
ISO 26000:2010
1 source controls mapped|1 target controls covered
2%
NIST SP 800-183
1 source controls mapped|2 target controls covered
2%
ISO/IEC 29147:2018
1 source controls mapped|2 target controls covered
2%
ISO 22317
1 source controls mapped|1 target controls covered
2%
OWASP ASVS
1 source controls mapped|1 target controls covered
2%
UK Bribery Act 2010
1 source controls mapped|1 target controls covered
2%
NSA Guidance for Transition to Quantum-Resistant Cryptography
1 source controls mapped|1 target controls covered
2%
ISO 22316
1 source controls mapped|1 target controls covered
2%
ISO/IEC 27004:2016
1 source controls mapped|1 target controls covered
2%
Brazil AI Framework
1 source controls mapped|1 target controls covered
2%
ISO/IEC 30111:2019
1 source controls mapped|1 target controls covered
2%
NIST SP 1800-32
1 source controls mapped|1 target controls covered
2%
ITIL 4
1 source controls mapped|1 target controls covered
2%
NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management
1 source controls mapped|1 target controls covered
2%
NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements
1 source controls mapped|1 target controls covered
2%
ISO/IEC 17025:2017 - General Requirements for Testing and Calibration
1 source controls mapped|2 target controls covered
2%
ISO/IEC 17025:2017 - General Requirements for Testing and Calibration Laboratories
1 source controls mapped|1 target controls covered
2%
UNECE WP.29 R155
1 source controls mapped|1 target controls covered
2%
ISO/IEC 27007:2020
1 source controls mapped|1 target controls covered
2%
Compare ISO 45001:2018 with ISO 14001:2015

What is ISO 45001:2018 and who does it apply to?

ISO 45001:2018 is a compliance framework from International with 12 domains and 56 controls. ISO 45001:2018 Occupational Health and Safety Management Systems Requirements. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does ISO 45001:2018 actually require?

ISO 45001:2018 has 56 controls organised across 12 domains. The largest domains are Support – ISO 45001:2018 (11 controls), Performance evaluation – ISO 45001:2018 (7 controls), Operation (6 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of ISO 45001:2018 do I already cover?

ISO 45001:2018 maps to 79 other compliance frameworks. The top mapping partners are ISO 14001:2015 (73% coverage), ISO 22000:2018 (57% coverage), ISO 37301:2021 (54% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement ISO 45001:2018?

Start your ISO 45001:2018 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 45001:2018 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 56 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.

Get Started Free →

Free forever — no credit card required