ISO 45001 vs ISO 14001: differences, audits and running both

ISO 45001 vs ISO 14001: the short answer

The two standards look at the same workplace from opposite directions. ISO 45001 requires what the work can do to the people doing it: employees, agency staff and contractors under your control. ISO 14001 requires what the work can do to everything outside those people: the drain, the stack, the landfill, the neighbours and the climate. A solvent store is an exposure hazard under the first and a spill aspect under the second.

Both are requirements standards, both follow the common structure ISO uses for management systems, and both are certified by an independent certification body accredited by a body recognised through the Global ACI arrangement, on a three-year cycle with annual surveillance. Sterling does not certify either.

ISO 45001 and ISO 14001 side by side

Both typically take four to eight months to implement for the first time, on Sterling's estimate.

What ISO 45001 requires that ISO 14001 does not

Worker participation, not just awareness

ISO 45001 puts workers into the title of clause 5, Leadership and worker participation. Clause 5.4 requires the organisation to establish consultation and participation of workers, including non-managerial workers. ISO 14001 expects people to be competent and aware; it has no equivalent duty to involve them in deciding how the system works.

A hierarchy of controls you cannot skip

Clause 8.1.2 sets the order: eliminate the hazard, substitute, use engineering controls and reorganise work, use administrative controls including training, and only then protective equipment. The method is covered in the hazard identification and risk assessment guide.

Contractors and outsourcing as a named requirement

Clause 8.1.4 splits procurement into general purchasing, contractors and outsourcing, and ISO 45001 defines a worker as anyone performing work under the organisation's control. Contractor prequalification, inductions and permits therefore sit at the centre of the system; the detail is in the contractor management guide.

Incidents, near misses and the right to stop

ISO 45001 treats an incident as any work-related event that could or does result in injury or ill health, so near misses count, and 10.2 expects investigation with worker participation. Clause 7.3 also requires workers to be aware that they can remove themselves from imminent and serious danger. ISO 14001 has no counterpart to either.

What ISO 14001 requires that ISO 45001 does not

A strong safety system can still let a drum of waste oil leave site with an unlicensed carrier. ISO 14001 covers that ground.

• Significance, with a life cycle perspective. Aspects are identified across what you do, make and source, then rated against criteria to decide which are significant (6.1.2). See building the aspects and impacts register.
• Compliance obligations, including voluntary ones. Permits, licences, environmental law and commitments you choose to adopt are identified by site (6.1.3) and their fulfilment is evaluated (9.1.2). ISO 45001 has the same two clause numbers for its legal and other requirements, but the content of the two registers rarely overlaps. See compliance obligations and the legal register, site by site.
• Wider environmental conditions. The 2026 edition requires you to consider climate change and conditions such as natural resources, pollution and biodiversity when you set the context, and adds a clause on planning of changes (6.3).

ISO 14001 also has a live transition: new accredited certificates are issued only to the 2026 edition from 31 October 2027, as the ISO 14001:2026 transition guide explains. ISO 45001's revision is not yet published, and its transition period will be set after publication.

How the certification audits differ

The Stage 1 readiness review and the Stage 2 audit follow the same certification rules for both standards, but what the auditor does on the day is not the same.

An ISO 45001 audit must include evaluation of the system during operational activities, usually a tour of workplaces and work sites while the work is under way. Where sites do not share the same activities and OH&S risks, the rules say sampling is not appropriate, so every such site is visited. A serious incident or serious breach of regulation can prompt a special audit.

An ISO 14001 audit spends more of its time on records and trends: the scoring behind the significance decisions, permit conditions against monitoring results, calibration, waste transfer documents, contractor licences and the compliance evaluation.

Audit time is calculated differently too. For OH&S, effective headcount includes contractor personnel under your control, and activities fall into high, medium or low risk categories. For environment, the driver is the environmental complexity of the activities. The ISO 45001 Stage 1 and Stage 2 guide covers the on-site sequence in detail.

Which one, or both? A decision table

Start from who is asking and where your largest exposure lies.

If you are not sure whether you need either, begin with the ISO 45001 decision guide.

Running ISO 45001 and ISO 14001 together

Once you hold both, most of the system can be written once: context, policy, roles, competence, documented information, internal audit, management review and corrective action. Hazards and aspects can share a register format with separate scoring, legal requirements and compliance obligations can share a register with a column for each standard, and one emergency plan can cover a spill that injures a worker and pollutes a drain.

Two cautions. The clause numbers no longer match everywhere: ISO 14001:2026 numbers continual improvement 10.1 and nonconformity 10.2, while ISO 45001:2018 keeps 10.1 General, 10.2 Incident, nonconformity and corrective action, and 10.3 Continual improvement, so keep a cross-reference. The revised ISO 45001 will also arrive mid-way through the ISO 14001 transition, so plan one review for both. The mapping table, the combined audit and the shared records are set out in ISO 14001 and ISO 45001: one HSE system and ISO 45001 in an integrated management system.

ISO 45001 vs ISO 14001: questions buyers ask