ISO 45001 by industry
ISO 45001 for offices and professional services: hybrid work, workload, travel and the shared building
Clause by clause: ISO 45001:2018 requirements: every clause explained →
What changes when the organisation is a consultancy, professional firm or back office: why clients ask in supplier questionnaires and tenders, a scope that follows people home, abroad and onto client sites, and where auditors look at display screen work, workload, travel and evacuation from a shared building.
Key points
- For consultancies, law and accounting firms, agencies and back offices, ISO 45001 is usually requested in a client's supplier questionnaire or a tender, not by a regulator.
- The scope has to follow the people, not the lease: head office, branch floors, home workers, business travel and time spent on client premises.
- The hazards that carry weight are display screen work, workload and working hours, travel, lone and home working, and fire evacuation from a building you share.
- Office work usually falls in the low OH&S risk category for audit time, but the auditor still expects risk assessments that reflect how your people actually work.
Why professional firms and offices are asked for ISO 45001
The question tends to come from the client side. A client's vendor questionnaire asks how the supplier manages health and safety, and a certificate answers that section in one line. Some corporate and public tenders ask for it outright, especially where your people will work on the client's premises.
Firms with a hybrid workforce also want a defensible answer to who checks the home workstation, who tracks hours in peak season and who knows where travelling staff are. For the general case for and against certification, see Do you need ISO 45001? A decision guide for contractors, plants and boards.
Scope for an office-based firm
An office scope reads as services, not premises: management consulting, legal services, accounting and advisory, design, or shared-service operations, delivered from named offices, from home and at client locations. Each office floor or building the firm occupies sits inside, even where the landlord runs the fire systems.
Every person working under your control counts, including interns, secondees, agency temps and freelancers on engagement teams. Three scope mistakes recur in this sector. Home working is left out as "not our premises"; client-site work is left out although your firm decides who goes and with what briefing; and cleaners, guards and fit-out contractors in your space are ignored because someone else employs them. The general rules are in ISO 45001 scope: sites, workers, contractors and the mistakes that cost you.
Where the requirements bite in an office
| Requirement area | What it means for an office-based firm | Evidence the auditor samples |
|---|---|---|
| Hazard identification and risk assessment | Assessments of display screen work, manual handling of files and equipment, lone working, home working, driving and air travel, and the social factors the standard names, such as workload, working hours, harassment and bullying | Workstation assessments for office and home desks, a travel risk procedure, lone-working arrangements, a hazard register that names workload and hours by team or role |
| Eliminating hazards and reducing risks | Controls chosen in the standard's order: redesign the work and the workstation first, then schedules, breaks and training, rather than relying on advice sheets | Equipment issued for home working, adjusted desks and screens, resourcing decisions during peak periods, working-hours monitoring, travel approvals |
| Consultation and participation of workers | A channel that reaches juniors, remote staff and people on client assignments, not only the partners and the office manager | Safety committee or representative minutes, staff survey results acted on, hazard reports from home workers, follow-up records |
| Emergency preparedness and response | Evacuation from a multi-tenant building coordinated with the landlord, plus arrangements for staff abroad or at a client site when something goes wrong | Fire warden roster by floor, drill reports that include your staff, the building's evacuation plan on file, a travel emergency contact route |
| Procurement, contractors and management of change | Cleaning, security, maintenance and fit-out contractors working in your space, and changes such as an office move, a new hybrid policy or a restructure assessed before they happen | Contractor inductions and permits for fit-out work, a change assessment for the move or policy, records that the risk assessment was updated |
How to build the assessments themselves is covered in ISO 45001 hazard identification and risk assessment, and contractor control in ISO 45001 contractor management: prequalification to permits.
Psychosocial risk, safety law and your other systems
For most professional firms the heaviest hazards are not physical. Deadline peaks, long hours, travel fatigue, isolation in remote roles and conduct between colleagues sit inside ISO 45001's hazard identification. ISO 45003 gives guidance on managing them within the same system; it is not certifiable on its own, and the certification body looks at psychosocial risk as part of the ISO 45001 audit.
National workplace safety and fire safety law applies in each country where the firm has an office, and the certificate does not replace it. Lease obligations and the landlord's building rules belong in the legal register as "other requirements", beside client codes of conduct for staff working on their premises; see ISO 45001 legal register and evaluation of compliance. Where the firm already runs ISO 9001, ISO 14001 or ISO/IEC 27001, one set of document control, internal audit and management review can serve them all; see ISO 45001 in an integrated management system with ISO 9001 and ISO 14001.
What an office engagement looks like
Duration depends on the number of offices and countries, how much of the workforce is hybrid or travelling, how often staff are placed at client sites, and how long the system must run to produce drill, consultation and incident records. The managing partner or country head, HR, the office or facilities manager, IT for home-working equipment, and team leads who set workloads all take part. With Design™, Sterling guides your HR and facilities team to build and own the system; with Drive™, Sterling carries more of the documentation, assessments, internal audit and readiness work so fee earners stay on client work.
How Sterling works with professional services firms
A safety system that covers the desk at home as well as the office floor.
Our expert and experienced consultants build the system around your hybrid policy, travel arrangements, client-site placements and building evacuation plan. Records live in Effivity, included with the engagement, at no additional cost. Sterling does not certify; an independent, accredited certification body audits and decides. We ensure successful certification for our clients.
Book a free discovery callISO 45001 for offices: questions professional firms ask
Is ISO 45001 worth it for a low-risk office-based firm?
It is worth it when clients or tenders ask for it, or when hybrid work and travel have outgrown informal arrangements.
Do employees working from home fall under our ISO 45001 system?
Yes. People working from home are still working under your control, so their workstation, working hours, isolation and way of raising concerns belong in your hazard identification and controls.
Who is responsible under ISO 45001 when our staff work at a client's office or site?
Both parties have a role. The client controls its premises, but your firm decides the assignment, the briefing and the check-in arrangements, and records the client's site rules as requirements your people must follow.
How long is the ISO 45001 certification audit for an office?
It is usually at the shorter end, because office work is typically placed in the low OH&S risk category when certification bodies calculate audit time. Headcount, including contractors under your control, and the number of offices still drive the total.
ISO 45001 by industry
Every guide in the ISO 45001 series is written for one question and links back to the hub for the whole picture.
- ISO 45001 for construction and engineering
- ISO 45001 for facilities management and security services
- ISO 45001 for healthcare
- ISO 45001 for logistics and warehousing
- ISO 45001 for manufacturing
- ISO 45001 certification in the Netherlands and Europe
- ISO 45001 nonconformities
- ISO 45001 for oil and gas and energy
- ISO 45001 for professional services and offices
- ISO 45001 requirements explained
- ISO 45001 revision
- ISO 45001 scope
Keep exploring
Explore more about ISO 45001
Watch a video on how to implement ISO 45001 here.
Watch a video on ISO 45001 requirements here.
ISO 45001 resources
Services for ISO 45001
Talk to a consultant
Plan an ISO 45001 system that covers every desk, trip and client site.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice