ISO 45001 by industry
ISO 45001 for construction: what clients, auditors and your site teams expect of a certified contractor
Clause by clause: ISO 45001:2018 requirements: every clause explained →
What changes when the organisation is a contractor or engineering firm: why clients ask at HSE pre-qualification, what belongs in a scope of moving sites and subcontractor tiers, where auditors sample working at height, lifting, excavation and permits to work, and how the system serves client HSE requirements.
Key points
- Main contractors, developers and EPC clients ask for ISO 45001 at HSE pre-qualification, so the certificate often decides whether a contractor makes the tender list.
- The scope must cover the head office, the yard and every temporary project site, and every subcontractor tier working under your control.
- Auditors test the fatality-risk activities on a live site: working at height, lifting, excavation and the permits to work behind them.
- Construction usually falls in the high OH&S risk category for audit time, and the certification body visits a sample of active projects, not only the office.
Why construction and engineering firms are asked for ISO 45001
The request usually arrives in a client's HSE pre-qualification questionnaire, a developer's vendor registration form or an EPC contractor's subcontractor approval pack, beside injury statistics and the HSE plan.
The same pressure runs down the chain. A main contractor that holds ISO 45001 has to control the subcontractors it brings to site and passes the expectation on to its civil, MEP, scaffolding and lifting trades. For the general case for and against certification, see Do you need ISO 45001? A decision guide for contractors, plants and boards.
Scope for a contractor with moving sites
A construction scope is not one address. It names the head office, plant yard and fabrication shop, and describes project work in a client's terms: civil and structural works, building construction, fit-out, MEP installation or EPC of industrial facilities. Temporary project sites sit inside the system for as long as work runs on them.
Every person working under your control is inside, whether employed, supplied by a labour agency or engaged through a subcontractor several tiers down. Leaving subcontracted trades out is the commonest scope mistake, because they often carry out most of the high-risk work. Another is describing the business as "general construction" while running demolition or heavy lifting the certification body has not planned for. The general rules are in ISO 45001 scope: sites, workers, contractors and the mistakes that cost you.
Where the requirements bite on a construction site
| Requirement area | What it means on a project | Evidence the auditor samples |
|---|---|---|
| Hazard identification and risk assessment | Task-level assessments for each work package and phase, reviewed when the method, crew or site conditions change, not a generic register copied between projects | Method statements and risk assessments for the activity seen on the tour, lift plans, excavation and temporary works assessments, records of review after a change |
| Eliminating hazards and reducing risks | The hierarchy of controls applied to fatality-risk work: designing out work at height, edge protection before harnesses, exclusion zones for lifting and plant movement | Permits to work for hot work, confined spaces, excavation and work at height, scaffold inspection tags, lifting equipment certificates, plant pre-use checks |
| Contractors and procurement | Selecting, inducting and supervising subcontractors at every tier, and buying plant, scaffolding and PPE that meet the specification | Subcontractor pre-qualification files, site induction registers, competence cards and operator certificates, subcontractor inspection records |
| Consultation and participation of workers | Giving crews, including subcontractor crews, a real channel to raise hazards and take part in decisions that affect them | Toolbox talk records with topics linked to current work, safety committee minutes, hazard observation reports and their follow-up, stop-work cases |
| Emergency preparedness and incident investigation | Site-specific emergency plans for falls, collapse, fire and rescue from height or confined spaces, and investigations that change the method | Emergency plan per site, drill reports, near-miss and incident reports, root cause analysis, revised risk assessments |
How to build the assessments themselves is covered in ISO 45001 hazard identification and risk assessment, and subcontractor control in ISO 45001 contractor management: prequalification to permits.
Client HSE requirements, national safety law and other systems
Each client adds its own layer: a contract HSE specification, a project HSE plan to be approved before mobilisation, monthly statistics, site audits by the client's HSE team. Recorded as "other requirements" in the legal register, they become ordinary work rather than paperwork rewritten for each client.
National occupational safety law and building regulations continue to apply site by site and country by country, and the certificate does not replace them. The legal register has to cover every jurisdiction where the company has an active project; see ISO 45001 legal register and evaluation of compliance. Most contractors that certify to ISO 45001 also run ISO 9001 for project quality and ISO 14001 for dust, noise, waste and spills, and one integrated system serves all three; see ISO 45001 in an integrated management system with ISO 9001 and ISO 14001.
What a construction engagement looks like
Duration depends on the number of active projects and countries, the range of high-risk activities, the state of existing method statements and permits, the subcontractor population, and how long sites must run to produce inspection, drill and incident records. Project managers, the HSE manager, site safety officers, foremen, procurement and the plant manager all take part. With Design™, Sterling guides your HSE team to build and own the system; with Drive™, Sterling carries more of the documentation, site inspections, internal audit and readiness work so projects keep moving.
The ISO manager reports that the company was very pleased with the implementation approach, and that the consultants guided it to a close integration of its existing systems with the additional requirements of ISO 9001, ISO 14001 and ISO 45001.
How Sterling works with construction and engineering firms
A safety system that holds up on a live site, not only in the office.
Our expert and experienced consultants build the system around your method statements, permits, lifting and excavation controls and subcontractor tiers, then test it with an internal audit across active projects before the certification body arrives. Records live in Effivity, included with the engagement, at no additional cost. Sterling does not certify; an independent, accredited certification body audits and decides. We ensure successful certification for our clients.
Book a free discovery callISO 45001 for construction: questions contractors ask
Do we need ISO 45001 certification to pass a client's HSE pre-qualification?
Not always. Many pre-qualification forms ask for it directly or award points for it, and a contractor without one must evidence each element of its safety system separately.
Does ISO 45001 cover our subcontractors' workers?
Yes, where the work is under your control. Subcontractor workers on your sites are workers under the standard, so their hazards, induction, competence and consultation fall inside your system, at every tier.
Will the ISO 45001 auditor visit our construction sites or only the office?
The auditor visits active sites. Accreditation rules for OH&S audits require the system to be evaluated during operational activities, and temporary sites are sampled on an assessment of risk.
Our projects end and new ones start every year: does the certificate still cover them?
Yes, if the scope describes the type of project work rather than listing individual sites. New projects come under the system as they mobilise, and the certification body samples the sites that are active at each surveillance audit.
ISO 45001 by industry
Every guide in the ISO 45001 series is written for one question and links back to the hub for the whole picture.
- ISO 45001 checklist
- Choosing an ISO 45001 certification body
- ISO 45001 common mistakes
- ISO 45001 for construction and engineering
- ISO 45001 contractor management
- ISO 45001 certification cost
- Do I need ISO 45001? A decision guide for contractors, plant operators and boards
- ISO 45001 for facilities management and security services
- ISO 45001 for healthcare
- ISO 45001 for logistics and warehousing
- ISO 45001 for manufacturing
- ISO 45001 for oil and gas and energy
- ISO 45001 for professional services and offices
Keep exploring
Explore more about ISO 45001
Watch a video on how to implement ISO 45001 here.
Watch a video on ISO 45001 requirements here.
ISO 45001 resources
Services for ISO 45001
Talk to a consultant
Plan an ISO 45001 system that works on every live site.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice