ISO 45001 Certification in Australia — WHS and OHS Management System Consultants
ISO 45001 is the international standard for occupational health and safety management systems. In Australia it sits alongside a legal framework that is already demanding, and that is the most useful thing to understand before you start. The standard does not replace your work health and safety obligations. It gives you a structured way to discharge them and, just as importantly, to prove you discharged them.
That proof matters more than it used to. Officer due diligence duties are personal. Industrial manslaughter offences now exist in most Australian jurisdictions. Regulators increasingly ask not what your policy says but what evidence you have that it was followed.
Nathan ISO Consulting implements ISO 45001 for organisations across every Australian state and territory, including multi-state operations that have to reconcile the harmonised WHS framework with Victoria's separate OHS regime. Certification is issued by JAS-ANZ accredited certification bodies. The standard is ISO 45001:2018, adopted locally as AS/NZS ISO 45001:2018.
| Item | Detail |
|---|---|
| Standard | ISO 45001:2018 / AS/NZS ISO 45001:2018 |
| Accreditation body | JAS-ANZ |
| Replaced | AS/NZS 4801 (withdrawn) |
| Typical timeline | 12–24 weeks to certification audit |
| Certification cycle | 3 years with annual surveillance audits |
| Coverage | All states and territories, including remote and FIFO sites |
Need ISO 45001 certification support in Australia?
Legal and Regulatory Compliance: Australia's WHS Framework
Most of Australia operates under harmonised work health and safety laws based on the model WHS Act developed by Safe Work Australia. Each jurisdiction enacts its own version, which is why you see the same Act name with different years attached.
Victoria is the outlier, and it matters. Victoria never adopted the model laws. It operates under the Occupational Health and Safety Act 2004 and the OHS Regulations 2017, regulated by WorkSafe Victoria. The concepts are broadly similar but the terminology, duty structure and some obligations differ. A safety system written in WHS language and dropped into a Victorian operation will not read correctly to a WorkSafe inspector.
| Jurisdiction | Legislation | Regulator |
|---|---|---|
| New South Wales | Work Health and Safety Act 2011 | SafeWork NSW |
| Victoria | Occupational Health and Safety Act 2004 and OHS Regulations 2017 | WorkSafe Victoria |
| Queensland | Work Health and Safety Act 2011 | Workplace Health and Safety Queensland |
| Western Australia | Work Health and Safety Act 2020 | WorkSafe WA |
| South Australia | Work Health and Safety Act 2012 | SafeWork SA |
| Tasmania | Work Health and Safety Act 2012 | WorkSafe Tasmania |
| Australian Capital Territory | Work Health and Safety Act 2011 | WorkSafe ACT |
| Northern Territory | Work Health and Safety (National Uniform Legislation) Act 2011 | NT WorkSafe |
| Commonwealth | Work Health and Safety Act 2011 (Cth) | Comcare |
If you operate across state lines, your management system has to accommodate both frameworks. We build the legal register to reflect that rather than pretending one set of terminology covers the country.
Sitting above the primary legislation are obligations that catch organisations out with some regularity.
Psychosocial Hazards: The Obligation Most Systems Have Not Caught Up With
Psychosocial hazards are now explicitly regulated across Australian jurisdictions, with codes of practice covering unreasonable workload, poor support, bullying, harassment and exposure to traumatic material. This is where we see the largest gap between what safety systems document and what the law expects.
Most existing systems handle physical hazards well and psychosocial hazards not at all. The risk register lists working at heights and confined spaces. It says nothing about workload, role clarity, or how a bullying complaint gets investigated.
ISO 45001 requires you to identify hazards and does not distinguish between the physical and the psychological. ISO 45003 provides the supporting guidance specifically for psychosocial risk. If you are building or rebuilding a system now, this needs to be in scope from the start rather than retrofitted after an inspector asks about it.
If You Are Still Running AS/NZS 4801
AS/NZS 4801 has been withdrawn. Certificates against it are no longer issued and it should not appear as a current requirement in tender documentation, although older templates occasionally still list it.
A mature 4801 system already gives you most of the operational content. What ISO 45001 adds is the Annex SL structure, a much stronger requirement around leadership and worker participation, the context and interested parties analysis, and a shift from hazard-focused to risk-and-opportunity-focused thinking. A well-run transition typically takes eight to fourteen weeks, materially less than building from nothing.
How Nathan ISO Consulting Assists
| Service | What We Deliver |
|---|---|
| Gap analysis | Assessment against ISO 45001 and against the WHS or OHS legislation applying in every state you operate in |
| Legal and compliance register | Acts, regulations, codes of practice, licences, permits and contractual safety obligations, mapped to the controls that satisfy them |
| Hazard and risk framework | Hazard identification across physical and psychosocial risks, risk assessment methodology, and hierarchy of controls applied and evidenced |
| Safety documentation | Policy, objectives, SWMS framework, permit systems, incident and investigation procedures, emergency preparedness and response |
| Worker consultation arrangements | HSR support, consultation processes that satisfy Clause 5.4, and the records that prove they operated |
| Contractor management | Prequalification, induction, site control and monitoring arrangements for subcontractors working under your direction |
| Training and rollout | Role-based training, toolbox delivery, and support while operational records accumulate |
| Internal audit and management review | Full internal audit, findings closed, and a documented management review with top management |
| Certification body selection | Shortlisting JAS-ANZ accredited bodies against your risk category, scope and sector |
| Stage 1 and Stage 2 attendance | We attend both audits and close out findings ourselves |
| AS/NZS 4801 transition | Migration of legacy systems, retaining what works and rebuilding only what the standard now requires |
| OFSC preparation | Where Commonwealth-funded building work is in scope, sequencing OFSC accreditation alongside ISO 45001 to avoid duplicated work |
Why Organisations Choose Nathan Over Other Providers
Australia has no shortage of ISO consultants. Most of them fall into one of two camps. Some sell a documentation pack, email it over, and leave you to work out how to make it real. Others charge for a long project and produce a system so heavy that nobody uses it once the auditor leaves. We have been called in to fix both.
| What Most Providers Do | What We Do |
|---|---|
| Write one safety system in WHS language and use it nationally | Build separate legal registers for WHS jurisdictions and for Victoria's OHS framework |
| Cover physical hazards and omit psychosocial risk entirely | Bring psychosocial hazards into the risk register and controls from day one, aligned to ISO 45003 |
| Produce SWMS templates and call it a safety system | Build the consultation, investigation and contractor control processes an auditor actually tests |
| Leave contractor management at a certificate of currency | Build the prequalification, induction and monitoring chain, because contractors under your direction are your risk |
| Treat OFSC accreditation as an unrelated second project | Sequence OFSC and ISO 45001 together where both apply |
| Hand over before the audit | Attend Stage 1 and Stage 2 and close out findings ourselves |
| Rebuild AS/NZS 4801 systems from scratch | Migrate what already works and rebuild only what the standard now requires |
Our Implementation Process
| Stage | What Happens | Duration |
|---|---|---|
| 1. Gap analysis | Assessment against ISO 45001 and the WHS or OHS legislation in each state of operation. | 1–2 weeks |
| 2. Legal register | Compliance obligations register built, including the Victorian OHS framework where relevant. | 1–2 weeks |
| 3. Risk and hazard framework | Hazard identification across physical and psychosocial risk, controls applied and evidenced. | 3–4 weeks |
| 4. System build | Policy, objectives, SWMS framework, incident procedures, emergency response, consultation arrangements. | 3–5 weeks |
| 5. Implementation and training | Rollout, toolbox talks, HSR consultation running properly, records accumulating. | 4–8 weeks |
| 6. Internal audit and review | Full internal audit, findings closed, documented management review. | 2 weeks |
| 7. Certification audit | Stage 1 and Stage 2 with a JAS-ANZ accredited body. We attend both. | 2–4 weeks |
ISO 45001 Certification Services Across Australia
Safety systems are audited where the work happens, which means site attendance matters more for ISO 45001 than for any other standard. We plan travel around your operational calendar rather than ours, and for remote and FIFO operations we work to your roster.
| State / Territory | Cities and Regions We Serve |
|---|---|
| New South Wales | Sydney, Western Sydney, Newcastle, Wollongong, Central Coast, Wagga Wagga, Dubbo, Orange, Tamworth, Albury |
| Victoria | Melbourne, Dandenong, Geelong, Ballarat, Bendigo, Shepparton, Latrobe Valley |
| Queensland | Brisbane, Gold Coast, Sunshine Coast, Ipswich, Toowoomba, Townsville, Cairns, Mackay, Rockhampton, Gladstone, Emerald |
| Western Australia | Perth, Kwinana, Bunbury, Geraldton, Kalgoorlie, Karratha, Port Hedland, Newman, Albany |
| South Australia | Adelaide, Osborne, Whyalla, Port Augusta, Mount Gambier, Roxby Downs |
| Australian Capital Territory | Canberra and the wider ACT region |
| Tasmania | Hobart, Launceston, Devonport, Burnie |
| Northern Territory | Darwin, Palmerston, Alice Springs, Katherine, Gove |
Where First Certification Audits Go Wrong
Clause 5.4 requires participation of workers, not communication to them. Auditors interview staff and ask whether anyone was consulted about the risk assessments.
If nobody can point to how a specific regulation flows into a specific control, the register is decoration.
Psychosocial hazards are frequently missing entirely, even though the regulations now expect them to be managed explicitly.
Investigations that record what happened but never establish why, and never lead to a system change.
Contractor management that stops at collecting a certificate of currency.
It looks careless, because it is.
Industries We Work With
Construction and civil contracting, mining and resources services, transport and logistics, manufacturing and fabrication, labour hire and recruitment, facilities and property services, waste management, utilities and energy, agriculture and food processing, and healthcare and aged care providers.
Tell us which states you operate in, and we'll plan the project around it.
FAQ'S
No standard can do that. ISO 45001 is a management framework, not a legal instrument. What it does is give you a systematic way to identify your obligations and generate the evidence that you met them, which is directly useful to officers demonstrating due diligence.
Yes. ISO 45001 is jurisdiction-neutral. What changes is your legal register and terminology, which must reflect the Occupational Health and Safety Act 2004 and OHS Regulations 2017 rather than the model WHS laws used elsewhere in Australia.
No. AS/NZS 4801 has been withdrawn and certificates against it are no longer issued. Organisations still running a 4801 system should transition to ISO 45001, which typically takes eight to fourteen weeks given the existing system content.
Yes. The standard requires hazard identification without limiting it to physical hazards, so psychosocial risks fall within scope. ISO 45003 provides detailed supporting guidance, and Australian regulators now expect these hazards to be managed explicitly.
It depends on the agency and contract value. Many state transport, infrastructure and defence tenders require it or an equivalent certified system. Commonwealth-funded building work above threshold requires OFSC accreditation, which is separate but overlaps heavily.
Yes. We work across Kalgoorlie, Karratha, Port Hedland, Newman, Roxby Downs, Gladstone, Emerald and comparable locations, planning attendance around rosters and shutdowns. Documentation and review stages are delivered remotely so travel is spent where it adds value.
Yes, and it is usually worth doing. The three standards share a common structure, so one integrated system with combined audits means a single set of internal audits and one management review rather than three separate cycles.
Typically 12 to 24 weeks. The main constraint is that you need genuine operational records before Stage 2: completed risk assessments, toolbox talks, consultation records, and at least one internal audit and management review cycle.





















0
Projects
0
Services
0
Clients Serving
0
Countries Serving