OHSAS 18001 to ISO 45001: what changed, what to do now

For nearly twenty years, the world reference for occupational health and safety management systems was called OHSAS 18001. That British-born scheme no longer exists: the publication of ISO 45001 in March 2018 triggered its withdrawal, at the end of a migration period completed in 2021. In 2026, the question is therefore no longer “should we migrate?” — that is settled — but “what to do with the OHSAS legacy, and what does the ISO standard actually change?”. Concrete answers below.

Why OHSAS 18001 disappeared

OHSAS 18001, published in the late 1990s under a consortium led by the British standards body BSI, long filled a gap: ISO had no occupational health and safety management standard. When ISO published ISO 45001 in March 2018, the logic of a single specification prevailed: the OHSAS scheme was withdrawn, and certified companies were given a three-year window to migrate to the ISO standard. Once that transition closed, OHSAS certificates ceased to be valid — which is why a supplier questionnaire still requiring one simply betrays an out-of-date document.

The body of research accumulated on OHSAS 18001 remains fully relevant: the mechanisms measured — fewer accidents, better organisation — are those of the management system, which the ISO standard takes over and strengthens. The study by Lo, Pagell and their co-authors published in 2014 in the Journal of Operations Management on 211 US manufacturers certified to OHSAS 18001 measured significant post-certification gains in safety, productivity and profitability (see the study) — an empirical legacy ISO 45001 benefits from directly.

What ISO 45001 actually changed

For an organisation versed in OHSAS 18001, the ISO standard did not upend the craft — risk assessment, operational control, emergency preparedness and event analysis remain. Four structural evolutions deserve attention, though:

• The common structure of management standards. ISO 45001 adopts the ten-clause structure shared with ISO 9001 and ISO 14001, making QSE integration native: one system, combinable audits, a unified vocabulary.
• The context of the organisation. The standard requires analysing internal and external issues and the expectations of interested parties, then deriving the system’s risks and opportunities — a strategic framing OHSAS did not formalise at that level.
• Leadership. Top management’s commitment becomes a direct, audited requirement: the OH&S policy and its trade-offs cannot be delegated to an isolated safety officer.
• Worker consultation and participation. This is the most visible change on the ground: the standard requires real arrangements for consultation and participation at every level — hazard identification, definition of measures, lessons learned — with evidence. Systematic reviews of OH&S management systems, such as the one published in 2023 by Kineber and co-authors on the construction sector, indeed rank staff involvement and safety culture among the key benefits and conditions of these systems (see the study).

In France, these requirements anchor naturally in the legal baseline: the DUERP (the single occupational-risk assessment document) remains the foundation of risk assessment — the standard brings it to life without replacing it, as our article on ISO 45001 and the DUERP explains.

Three typical situations in 2026

Your company was OHSAS-certified then let it lapse. The substance is not lost: the risk assessment, the instructions, the accident-analysis culture can be reactivated. But the auditor will assess a living system: you will need to rebuild a recent history — field reports, indicators, internal audit, management review — before going through a full two-stage initial audit again. Our guide to obtaining ISO 45001 certification walks that path.

You migrated in 2021 and have chained cycles since. Your challenge is no longer migration but the system’s vitality at each annual surveillance and each three-year renewal: participation arrangements that genuinely work, tracked objectives, closed action plans. It is also the right moment to purge habits inherited from OHSAS — a “risk analysis” frozen in a binder, a policy never rediscussed — and draw on what the ISO standard demands: context periodically reanalysed, top management on the front line, the shop floor genuinely consulted.

You are new to the subject with no OHSAS past. You have nothing to “catch up on”: start directly from the French legal baseline (DUERP, regulatory training — see our overview of French regulated safety training) and build to the current standard. The historical detour has one use only: understanding why your most senior counterparts still say “OHSAS”.

Update your documents and your reflexes

The terminology switch is no mere nicety: it touches documents that bind. A framework contract conditioning site access on “a valid OHSAS 18001 certificate” creates a requirement that is literally impossible to satisfy; a poorly drafted insurance clause or supplier-qualification form produces the same kind of dead end. The useful reflex: at every contract or questionnaire review, replace the mention of the withdrawn scheme with “ISO 45001 or equivalent”.

One last, often neglected task: purge the terminology. Check your sales materials, standard tender answers, policies and job descriptions — any mention of OHSAS 18001 as a certification you hold is now inaccurate and undermines your credibility. On the purchasing side, do the symmetrical clean-up: your own supplier questionnaires should no longer require a withdrawn scheme, but ISO 45001 — or its equivalent depending on context, MASE remaining widely requested by French industrial client organisations.

Take action

Whether you are reviving an OHSAS legacy or starting from a blank page, the full ISO 45001 certification page gathers status, steps, frequently asked questions and a free ebook to structure your journey to the certificate.