hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

Standards & frameworks

Health and safety: standards and frameworks

Health and safety standards set out how an organisation prevents work-related injury and ill health. This family runs from ISO 45001, the certifiable occupational health and safety management system, to guidance on psychosocial and travel risk, road traffic safety and process safety for high-hazard sites.

About this family

What do health and safety standards cover, and how do they fit together?

This family covers the standards and regulations an organisation uses to keep people safe while they work: on the shop floor, at a client’s site, on the road, travelling abroad and under pressure at a desk. ISO 45001 is the anchor. It is the requirements standard for an occupational health and safety management system and the one an accredited certification body audits. Most of the others are written to work inside it rather than beside it: ISO 45002 gives general guidance on implementing ISO 45001, ISO 45003 gives guidance on managing psychosocial risk within it, and ISO 31030 gives guidance on managing the risk of work-related travel. ISO 39001 stands on its own as a certifiable management system for road traffic safety, which fleets, logistics providers and passenger transport operators often run alongside ISO 45001. Process safety management is different again: under the OSHA PSM standard in the United States or the Seveso Directive in the European Union, it is a legal duty for sites that hold hazardous substances above set thresholds, inspected by the authorities rather than certified. The request usually comes from outside the organisation: a main contractor’s prequalification, a client’s HSE questionnaire, a tender condition, an insurer or a regulator after an incident.

Sterling starts from the system you need to show, usually ISO 45001, and builds the rest into it instead of writing parallel manuals: one hazard register that includes driving, travel and psychosocial hazards, one legal register, and one set of worker consultation, incident investigation, internal audit and management review. For a road fleet, ISO 39001 adds its own road traffic safety objectives, targets and action plans; for a high-hazard site, process hazard analysis and management of change sit inside the same operational controls. You choose the support level: Design™, where Sterling develops the system and your team implements it under our expert advice and supervision, or Drive™, where Sterling designs and builds it under your approval, fully managed. Either way, Effivity is included at no additional cost to hold the registers, inspections, incidents and actions, with internal auditor training for your audit team, as applicable to your standard. Sterling does not certify; for ISO 45001 and ISO 39001 an accredited certification body audits and decides.

  • 60+countries where Sterling has delivered certification
  • 21countries with a Sterling office, eight regions, one coordinated team
  • 2003the year the group began implementing ISO management systems; the same method, refined, since
  • 8,100+client engagements across the group, from single-site SMEs to multinationals

FAQs

Questions buyers ask about health and safety standards

Which standard to start with, how two combine and who checks the result.

Which health and safety standard should we start with?

For most organisations, ISO 45001, because it is the requirements standard a certification body can audit and the one clients and main contractors ask for. ISO 45002 and ISO 45003 are guidance for implementing it and for managing psychosocial risk within it, and ISO 31030 is guidance on travel risk. Start with ISO 39001 when road risk is your main exposure, as for a fleet operator, and with process safety where the law already requires it at your site.

Can ISO 45001 and ISO 39001 be certified together?

Yes. The two share the common elements of ISO management system standards, from context and leadership to internal audit, management review and improvement, so one system can carry both with a single policy framework, risk assessment and set of records. A certification body can audit them in a combined visit when both standards are within its accredited scope; confirm the audit plan, the audit days and the accreditation for each standard with the body itself. ISO 9001 and ISO 14001 are often added to the same integrated system.

What does a certification body or regulator check?

It depends on the route. For ISO 45001 and ISO 39001, an accredited certification body carries out a Stage 1 review and a Stage 2 audit, examines hazard and risk records, legal compliance, worker participation, incidents and internal audit, and decides on certification, with surveillance audits each year. ISO 45002, ISO 45003 and ISO 31030 are guidance with no accredited certificate of their own; psychosocial risk is examined within the ISO 45001 audit. Process safety is a legal duty: the regulator or competent authority inspects compliance, and no certificate replaces that.

Talk to a consultant

Talk to us about your health and safety system

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice