Road Traffic Safety Management System Consultants in Dubai, Abu Dhabi & Saudi Arabia
Nathan ISO Consulting implements and certifies ISO 39001:2012 Road Traffic Safety Management Systems for logistics operators, contractors, industrial services companies and public bodies across the UAE, Saudi Arabia and the wider GCC.
For any organisation running a fleet in the Gulf, the vehicle is usually the most dangerous piece of equipment the business operates and the one least likely to have a formal management system around it. Most companies have a driving policy, fleet insurance and a defensive driving course new hires attend once. What they lack is a system connecting road risk to how the business is actually managed — measured against data, reviewed by leadership, tied to objectives and improved on a cycle.
What Is ISO 39001?
ISO 39001 is the international standard for Road Traffic Safety Management Systems. It is built specifically for organisations that interact with the road network as part of their operations — as a fleet operator, a road authority, a contractor moving people and materials, or a business whose staff drive as a routine part of the job.
The standard follows the Annex SL structure familiar from ISO 9001 and ISO 45001, with its technical substance concentrated in requirements that ask you to treat road safety the way a mature organisation treats any other significant operational risk. Its central mechanism is a set of road traffic safety performance factors, which you assess for relevance to your operation and then set measurable targets against.
| Performance factor | What good looks like in practice | Typical data source |
|---|---|---|
| Speed management | Compliance rate against posted limits, tracked by route and driver | Telematics or GPS fleet system |
| Fatigue management | Maximum driving hours with rest breaks enforced, not merely written | Duty rosters, tachograph or logbook records |
| Distraction | Mobile phone and in-cab device policy enforced with monitoring | Telematics phone-use alerts, in-cab observation |
| Seatbelt and restraint use | Verified compliance rather than assumed compliance | In-cab camera or periodic observation audit |
| Impairment | Alcohol, drug and medication policy with defined testing arrangements | Testing records and fitness-to-drive declarations |
| Vehicle safety standards | Defined minimum specification and maintenance interval by vehicle class | Maintenance and inspection records |
| Journey planning | Higher-risk routes, times and weather conditions identified before departure | Dispatch and route planning system |
| Post-crash response | Trained first response, defined reporting chain, investigation within a set window | Incident register and investigation reports |
If one requirement delivers most of the actual safety improvement, it is that driver competence must be determined, verified and maintained — not checked once at hiring. A valid licence proves someone is legally permitted to drive. It says nothing about how they handle a fully loaded truck in Sharjah traffic during a sandstorm, or whether years of accident-free driving elsewhere translates to unfamiliar roads and driving norms — a genuinely common scenario given how much of the Gulf’s driving workforce relocated from other countries.
A properly built competence framework defines what competent means for each driving role, assesses it on hire through more than a licence check, and re-assesses periodically or after a trigger event such as a collision or a pattern of harsh-driving alerts.
Why ISO 39001 Certification Matters in the UAE and GCC
Road traffic injury remains one of the leading causes of workplace fatality across the GCC. For any organisation whose staff spend significant hours on the road — driving company vehicles or being transported as part of a workforce arrangement — that risk sits inside occupational health and safety obligations whether or not it has ever been formally assessed as such. Long summer hours, high-speed highway corridors between cities, and a workforce drawn from dozens of driving cultures compound a risk most fleet policies were never designed to manage.
Dubai’s Roads and Transport Authority operates one of the region’s most active road safety strategies, with targets for reducing fatalities and increasing scrutiny of commercial fleet operators through licensing and safety programmes. Abu Dhabi’s Integrated Transport Centre and the Department of Municipalities and Transport apply similar oversight. Traffic departments across the emirates enforce black-point systems, and repeat violations against company-registered vehicles increasingly attract scrutiny of the operator, not just the driver. In Saudi Arabia, the Ministry of Interior traffic authority and the Saher automated enforcement system have driven the same shift toward operator accountability.
Fewer at-fault collisions mean lower premiums, fewer vehicles off the road for repair, and fewer client delivery windows missed. Several UAE logistics operators we have worked with saw insurance renewal terms improve within a single policy cycle once a documented, data-backed safety programme was in place — underwriters respond to evidence rather than intentions.
Oil and gas operators, major contractors and government clients increasingly assess contractor driving safety directly, particularly where work involves highway travel to remote sites. A certified RTSMS answers that assessment with auditable evidence rather than a policy document.
A driver fatality does not stay contained to an insurance claim. It affects a family, workforce morale and the organisation’s standing with the road authority and its clients. A certified system means that when something goes wrong, the organisation can demonstrate it took the risk seriously, managed it systematically and responded properly.
Nathan ISO Consulting’s ISO 39001 Services
We start with your actual fleet data — incident history, telematics output if available, vehicle types, routes and driver profiles — rather than a generic risk framework, and issue a findings report against every clause of the standard.
We determine which of the standard’s performance factors apply to your operation and at what weight, then set measurable targets against data you already collect or can start collecting inexpensively.
Role-based competence definitions, assessment methods beyond licence verification, re-assessment triggers, and targeted refresher training driven by your own incident and telematics data rather than an annual box-ticking session.
Structured identification of higher-risk routes, times of day, weather conditions and load types, with planning controls applied before departure rather than left entirely to driver judgement.
Maximum driving hour limits, rest break requirements and roster design that route planning can actually accommodate — the gap between fatigue policy and delivery pressure is one of the most common findings we identify.
Most fleets already run GPS or telematics for insurance purposes and never analyse the output. We build the reporting that turns speed, harsh braking, idling and phone-use data into trend analysis, driver feedback and measurable objectives.
Minimum vehicle specification by class and route risk, maintenance intervals, pre-use inspection routines, and connection of maintenance records into the safety management system rather than leaving them with the workshop.
First response training, defined reporting chains, scene management, and investigation processes reaching genuine root cause rather than stopping at the insurance claim.
Driver awareness and defensive driving programme design, supervisor training, and internal auditor qualification delivered in the languages your driving workforce speaks.
Certification body selection, Stage 1 and Stage 2 attendance, nonconformity closure, and integration with ISO 45001 where road risk already sits inside your occupational safety register.
Our ISO 39001 Certification Process
Consultation and fixed proposal. Discussion of your fleet, routes, incident history and deadlines, followed by a fixed written quotation.
Fleet risk review. Analysis of incident data, telematics output, vehicle profile and driver demographics with a written findings report.
Scope and context definition. Which operations, vehicles and drivers the system covers, plus interested party requirements.
Performance factor assessment. Relevant factors determined and weighted against your actual road risk exposure.
Objective setting. Measurable targets established against data you can genuinely collect and verify.
System documentation. Policy, journey planning, fatigue management, vehicle standards, competence and post-crash response procedures.
Telematics and reporting configuration. Data structured into trend analysis and driver feedback loops.
Training rollout. Driver awareness, supervisor training and internal auditor qualification.
Internal audit. Full RTSMS audit with genuine findings and verified corrective action.
Management review. Structured review of road safety performance data and objective progress, properly minuted.
Stage 1 and Stage 2 audits. Documentation review then full implementation audit, with our consultant present.
Certification and surveillance support. Nonconformity closure, certificate issue and ongoing support across the three-year cycle.
Why Choose Nathan ISO Consulting
We start with your fleet data, not a template. Incident history and telematics output tell us where your actual risk sits before we design a single control.
Ownership question resolved early. Road risk is usually scattered across procurement, HR, operations and HSE with nobody owning the whole picture. Settling this is the single biggest predictor of whether implementation succeeds.
Realistic fatigue and journey controls. Designed to work with your delivery schedules rather than a policy operations will quietly override under pressure.
Telematics made useful. We turn data you already pay for into trend analysis, driver coaching and auditable objectives.
Multi-language driver training. Awareness and defensive driving content delivered in the languages your drivers actually speak.
Integration with ISO 45001. Where an occupational safety system exists, we extend it rather than building a parallel structure — which is faster and considerably cheaper.
Honest advice on fit. For very low road exposure, a road safety programme inside an existing ISO 45001 system may suit better than standalone ISO 39001. We will tell you if that is the case.
One dedicated lead consultant throughout. Continuity from fleet review through surveillance audits.
Fixed written pricing. Agreed upfront with audit attendance included.
Independent of certification bodies. Certification is issued independently under ISO/IEC 17021, which is what gives the certificate credibility with clients and insurers.
Industries We Serve
Logistics, freight and distribution. Owned and leased fleets operating across the Emirates and into Saudi Arabia, with long-haul highway exposure and tight delivery windows.
Construction and contracting. Staff and material movement between multiple sites daily, plus heavy vehicle and plant transport.
Oil field and industrial services. Significant highway and off-road driving to remote sites, frequently under client-imposed journey management requirements.
Staff transport and workforce bus operators. Passenger safety adding a further duty of care beyond driver protection.
Waste management and municipal services. Heavy vehicles operating in urban environments with frequent pedestrian interaction.
Facilities management and field service. Technicians driving between dispersed sites as a routine part of the role.
Retail and last-mile delivery. High-frequency short-journey operations with light commercial vehicles and motorcycles.
Government and semi-government fleets. Public fleet operations and road infrastructure authorities with their own safety targets.
Locations We Serve
ISO 39001 consultants across Dubai — Jebel Ali, Dubai Investment Park, Dubai Industrial City, Dubai South, Al Quoz, Ras Al Khor, Al Qusais and Deira — plus JAFZA, DMCC and Dubai Logistics City, and fleet operators licensed under the Roads and Transport Authority.
Abu Dhabi city, Mussafah, ICAD, KEZAD, Khalifa Port, Ruwais, Al Dhafra and Al Ain — including ADNOC group contractors operating under client journey management requirements and fleets regulated by the Integrated Transport Centre.
Sharjah city and industrial areas, Hamriyah Free Zone, SAIF Zone; Ajman and Ajman Free Zone; Ras Al Khaimah, RAKEZ and RAK Maritime City; Umm Al Quwain; Fujairah, Fujairah Free Zone and Fujairah Port.
Riyadh, Jeddah, Dammam, Al Khobar, Dhahran, Jubail, Yanbu, Mecca, Medina, Tabuk and Buraidah — including long-haul operations across the Kingdom’s highway network, Aramco and SABIC contractor fleets, and organisations operating under Saher enforcement.
Qatar — Doha, Ras Laffan, Mesaieed and Umm Alhoul. Kuwait — Kuwait City, Shuwaikh, Shuaiba, Ahmadi and Mina Abdullah. Oman — Muscat, Sohar, Salalah, Duqm and Sur. Bahrain — Manama, Sitra, Hidd and Bahrain Logistics Zone.
What Determines the Cost of ISO 39001 Certification?
Certification body audit fees follow mandatory audit-day tables based on headcount, number of sites and operational complexity. Our consultancy fee is separate and fixed in writing before engagement.
The main drivers are fleet size and vehicle class mix, the number of operating locations, whether telematics data already exists or reporting must be built from scratch, driver headcount and training languages required, and whether ISO 39001 is being built standalone or extended from an existing ISO 45001 system. Extending an existing occupational safety system is meaningfully faster and cheaper than building the management infrastructure from nothing.
Get Started with ISO 39001 Certification
For ISO 39001 certification and road traffic safety management support in Dubai, Abu Dhabi, Sharjah, Saudi Arabia, Qatar, Kuwait, Oman or Bahrain, call +971 50 258 5024, email info@nathanisoconsulting.com, or visit our contact page for a fleet risk review and a fixed written proposal.
Frequently Asked Questions About ISO 39001 Certification
A fleet policy is a document. ISO 39001 is a full management system requiring measured objectives, leadership accountability, competence management, monitoring and continual improvement, audited independently. Most organisations already have policy-level material; what the standard adds is the governance structure and evidence trail around it.
Yes, if staff drive regularly as part of their role. Sales representatives, service technicians and delivery staff all generate road risk whether or not vehicles are the core product. Facilities management, healthcare home visits and field service organisations commonly certify for exactly this reason.
Yes, and for most fleet-operating businesses it makes sense. Road risk for driving employees is occupational safety risk, and the two standards share the Annex SL structure, so context, leadership, competence and internal audit requirements overlap substantially.
Not strictly required, but demonstrating measured objectives and monitored performance factors such as speed compliance or harsh braking is very difficult without driving behaviour data. Most organisations we work with either already have telematics for insurance purposes or install a basic system as part of implementation.
Eight to twelve weeks for a single fleet operation with existing safety practices to build on, extending to twelve to sixteen weeks where no prior occupational safety system exists. Multi-site or multi-country fleet operations should plan on three to four months.
It scales to relevance. An office-based business with a few pool cars used occasionally has a much smaller risk profile than a round-the-clock logistics fleet. For very low exposure, a road safety programme inside an existing ISO 45001 system may suit better than standalone certification, and we will say so if that is the honest answer for your risk profile.
No. It is management-system based rather than prescriptive about technology. It requires you to determine appropriate vehicle safety standards for your fleet and risk profile, which may or may not include advanced driver assistance systems depending on vehicle age, route risk and budget.
Drivers operating under your control and on your behalf fall within your management system regardless of employment status. You must verify their competence, apply your journey planning and fatigue controls, and include them in monitoring — subcontracted driver management is a common gap for logistics operators using overflow capacity.
A documented response covering immediate scene actions, casualty care by trained first responders, notification chains, evidence preservation, and investigation reaching root cause within a defined window. What happens in the minutes after a collision materially affects outcomes, so this is not treated as an administrative afterthought.
You set them, based on your performance factor assessment and current baseline. The standard requires targets to be measurable and monitored, not that they hit particular numbers. A target such as achieving ninety-five percent speed compliance by route within twelve months is appropriate; improving safety culture is not.
This is the central tension in most fleet operations and the standard forces it into the open. Practically, it means route planning that accounts for realistic driving hours including rest breaks, and a documented escalation route when a delivery commitment cannot be met safely. Auditors examine whether fatigue limits survive contact with commercial pressure.
Yes. Where you transport workers, clients or the public, their safety falls within the system — seatbelt compliance, vehicle suitability, driver competence for passenger-carrying vehicles, and emergency procedures. Workforce bus operations in this region carry particular exposure given the numbers transported.
Look for accreditation from a recognised IAF member — EIAC, ENAS, GAC in Saudi Arabia, UKAS or ANAB — with ISO 39001 in the accreditation scope. Because this is a less commonly requested standard, accreditation scope availability varies, so we confirm it during scoping.
Yes. Certification assesses whether you have a functioning management system, not whether your historical performance was good. An organisation with honest incident data, genuine root cause analysis and evidence of improvement action is in a stronger position than one presenting an implausibly clean record that suggests under-reporting.
That depends on vehicle class and jurisdiction rather than on ISO 39001 — heavy vehicle, passenger-carrying and hazardous goods categories carry their own licensing requirements under UAE and Saudi traffic law. The standard requires you to verify that drivers hold the correct category and that licences remain current, which is a control many fleets apply inconsistently.
Sandstorms, fog, heavy rain and flooding are addressed through journey planning and operational controls — pre-departure weather checks, defined conditions under which journeys are postponed, and communication protocols for drivers already en route. Recent regional flooding events have made this an area auditors probe more directly.
Yes, provided all operations fall within the declared scope and the certification body’s sampling plan. Your legal requirements register must address each jurisdiction separately, since traffic law, licensing and enforcement regimes differ between the UAE, Saudi Arabia and the other Gulf states.
It is not automatic, and no consultant can promise it. What we can say is that underwriters respond to evidence of managed risk, and several UAE fleet operators have seen improved renewal terms after implementing a documented, data-backed programme. The stronger and more direct financial benefit is usually reduced collision and repair costs.
We design the competence framework and training requirements, and deliver awareness and supervisor training. Practical behind-the-wheel defensive driving instruction is typically delivered by specialist driving schools, and we help you specify what that training must cover and verify that it does.
By continuing to collect and analyse driving performance data, reviewing objectives against actual results, investigating incidents to root cause, running the competence re-assessment cycle, and holding management review on schedule. A system where telematics data is collected but no longer reviewed is the most common surveillance finding.
0
Projects
0
Services
0
Clients Serving
0
Countries Serving