WhatsApp contact icon for Nathan ISO Consulting
WhatsApp contact icon for Nathan ISO Consulting

ISO 45001 Certification in Australia — WHS and OHS Management System Consultants

ISO 45001 is the international standard for occupational health and safety management systems. In Australia it sits alongside a legal framework that is already demanding, and that is the most useful thing to understand before you start. The standard does not replace your work health and safety obligations. It gives you a structured way to discharge them and, just as importantly, to prove you discharged them.

That proof matters more than it used to. Officer due diligence duties are personal. Industrial manslaughter offences now exist in most Australian jurisdictions. Regulators increasingly ask not what your policy says but what evidence you have that it was followed.

Nathan ISO Consulting implements ISO 45001 for organisations across every Australian state and territory, including multi-state operations that have to reconcile the harmonised WHS framework with Victoria's separate OHS regime. Certification is issued by JAS-ANZ accredited certification bodies. The standard is ISO 45001:2018, adopted locally as AS/NZS ISO 45001:2018.

ItemDetail
StandardISO 45001:2018 / AS/NZS ISO 45001:2018
Accreditation bodyJAS-ANZ
ReplacedAS/NZS 4801 (withdrawn)
Typical timeline12–24 weeks to certification audit
Certification cycle3 years with annual surveillance audits
CoverageAll states and territories, including remote and FIFO sites

Need ISO 45001 certification support in Australia?

Legal and Regulatory Compliance: Australia's WHS Framework

Most of Australia operates under harmonised work health and safety laws based on the model WHS Act developed by Safe Work Australia. Each jurisdiction enacts its own version, which is why you see the same Act name with different years attached.

Victoria is the outlier, and it matters. Victoria never adopted the model laws. It operates under the Occupational Health and Safety Act 2004 and the OHS Regulations 2017, regulated by WorkSafe Victoria. The concepts are broadly similar but the terminology, duty structure and some obligations differ. A safety system written in WHS language and dropped into a Victorian operation will not read correctly to a WorkSafe inspector.

JurisdictionLegislationRegulator
New South WalesWork Health and Safety Act 2011SafeWork NSW
VictoriaOccupational Health and Safety Act 2004 and OHS Regulations 2017WorkSafe Victoria
QueenslandWork Health and Safety Act 2011Workplace Health and Safety Queensland
Western AustraliaWork Health and Safety Act 2020WorkSafe WA
South AustraliaWork Health and Safety Act 2012SafeWork SA
TasmaniaWork Health and Safety Act 2012WorkSafe Tasmania
Australian Capital TerritoryWork Health and Safety Act 2011WorkSafe ACT
Northern TerritoryWork Health and Safety (National Uniform Legislation) Act 2011NT WorkSafe
CommonwealthWork Health and Safety Act 2011 (Cth)Comcare

If you operate across state lines, your management system has to accommodate both frameworks. We build the legal register to reflect that rather than pretending one set of terminology covers the country.

Sitting above the primary legislation are obligations that catch organisations out with some regularity.

  • Officer due diligence — directors and senior officers hold a personal, non-delegable duty to exercise due diligence. A documented management system is the practical evidence that duty was met.
  • Industrial manslaughter — now an offence in most Australian jurisdictions, carrying significant custodial and financial penalties.
  • Psychosocial hazard regulations and codes of practice, now in force across Australian jurisdictions.
  • Workers compensation scheme obligations, which differ by state: icare NSW, WorkSafe Victoria, WorkCover Queensland, ReturnToWorkSA, WorkCover WA and Comcare.
  • Australian Government Building and Construction WHS Accreditation Scheme, administered by the Office of the Federal Safety Commissioner, for Commonwealth-funded building work above threshold.

Psychosocial Hazards: The Obligation Most Systems Have Not Caught Up With

Psychosocial hazards are now explicitly regulated across Australian jurisdictions, with codes of practice covering unreasonable workload, poor support, bullying, harassment and exposure to traumatic material. This is where we see the largest gap between what safety systems document and what the law expects.

Most existing systems handle physical hazards well and psychosocial hazards not at all. The risk register lists working at heights and confined spaces. It says nothing about workload, role clarity, or how a bullying complaint gets investigated.

ISO 45001 requires you to identify hazards and does not distinguish between the physical and the psychological. ISO 45003 provides the supporting guidance specifically for psychosocial risk. If you are building or rebuilding a system now, this needs to be in scope from the start rather than retrofitted after an inspector asks about it.

If You Are Still Running AS/NZS 4801

AS/NZS 4801 has been withdrawn. Certificates against it are no longer issued and it should not appear as a current requirement in tender documentation, although older templates occasionally still list it.

A mature 4801 system already gives you most of the operational content. What ISO 45001 adds is the Annex SL structure, a much stronger requirement around leadership and worker participation, the context and interested parties analysis, and a shift from hazard-focused to risk-and-opportunity-focused thinking. A well-run transition typically takes eight to fourteen weeks, materially less than building from nothing.

How Nathan ISO Consulting Assists

ServiceWhat We Deliver
Gap analysisAssessment against ISO 45001 and against the WHS or OHS legislation applying in every state you operate in
Legal and compliance registerActs, regulations, codes of practice, licences, permits and contractual safety obligations, mapped to the controls that satisfy them
Hazard and risk frameworkHazard identification across physical and psychosocial risks, risk assessment methodology, and hierarchy of controls applied and evidenced
Safety documentationPolicy, objectives, SWMS framework, permit systems, incident and investigation procedures, emergency preparedness and response
Worker consultation arrangementsHSR support, consultation processes that satisfy Clause 5.4, and the records that prove they operated
Contractor managementPrequalification, induction, site control and monitoring arrangements for subcontractors working under your direction
Training and rolloutRole-based training, toolbox delivery, and support while operational records accumulate
Internal audit and management reviewFull internal audit, findings closed, and a documented management review with top management
Certification body selectionShortlisting JAS-ANZ accredited bodies against your risk category, scope and sector
Stage 1 and Stage 2 attendanceWe attend both audits and close out findings ourselves
AS/NZS 4801 transitionMigration of legacy systems, retaining what works and rebuilding only what the standard now requires
OFSC preparationWhere Commonwealth-funded building work is in scope, sequencing OFSC accreditation alongside ISO 45001 to avoid duplicated work

Why Organisations Choose Nathan Over Other Providers

Australia has no shortage of ISO consultants. Most of them fall into one of two camps. Some sell a documentation pack, email it over, and leave you to work out how to make it real. Others charge for a long project and produce a system so heavy that nobody uses it once the auditor leaves. We have been called in to fix both.

What Most Providers DoWhat We Do
Write one safety system in WHS language and use it nationallyBuild separate legal registers for WHS jurisdictions and for Victoria's OHS framework
Cover physical hazards and omit psychosocial risk entirelyBring psychosocial hazards into the risk register and controls from day one, aligned to ISO 45003
Produce SWMS templates and call it a safety systemBuild the consultation, investigation and contractor control processes an auditor actually tests
Leave contractor management at a certificate of currencyBuild the prequalification, induction and monitoring chain, because contractors under your direction are your risk
Treat OFSC accreditation as an unrelated second projectSequence OFSC and ISO 45001 together where both apply
Hand over before the auditAttend Stage 1 and Stage 2 and close out findings ourselves
Rebuild AS/NZS 4801 systems from scratchMigrate what already works and rebuild only what the standard now requires

Our Implementation Process

StageWhat HappensDuration
1. Gap analysisAssessment against ISO 45001 and the WHS or OHS legislation in each state of operation.1–2 weeks
2. Legal registerCompliance obligations register built, including the Victorian OHS framework where relevant.1–2 weeks
3. Risk and hazard frameworkHazard identification across physical and psychosocial risk, controls applied and evidenced.3–4 weeks
4. System buildPolicy, objectives, SWMS framework, incident procedures, emergency response, consultation arrangements.3–5 weeks
5. Implementation and trainingRollout, toolbox talks, HSR consultation running properly, records accumulating.4–8 weeks
6. Internal audit and reviewFull internal audit, findings closed, documented management review.2 weeks
7. Certification auditStage 1 and Stage 2 with a JAS-ANZ accredited body. We attend both.2–4 weeks

ISO 45001 Certification Services Across Australia

Safety systems are audited where the work happens, which means site attendance matters more for ISO 45001 than for any other standard. We plan travel around your operational calendar rather than ours, and for remote and FIFO operations we work to your roster.

State / TerritoryCities and Regions We Serve
New South WalesSydney, Western Sydney, Newcastle, Wollongong, Central Coast, Wagga Wagga, Dubbo, Orange, Tamworth, Albury
VictoriaMelbourne, Dandenong, Geelong, Ballarat, Bendigo, Shepparton, Latrobe Valley
QueenslandBrisbane, Gold Coast, Sunshine Coast, Ipswich, Toowoomba, Townsville, Cairns, Mackay, Rockhampton, Gladstone, Emerald
Western AustraliaPerth, Kwinana, Bunbury, Geraldton, Kalgoorlie, Karratha, Port Hedland, Newman, Albany
South AustraliaAdelaide, Osborne, Whyalla, Port Augusta, Mount Gambier, Roxby Downs
Australian Capital TerritoryCanberra and the wider ACT region
TasmaniaHobart, Launceston, Devonport, Burnie
Northern TerritoryDarwin, Palmerston, Alice Springs, Katherine, Gove

Where First Certification Audits Go Wrong

Worker Consultation That Exists on Paper Only

Clause 5.4 requires participation of workers, not communication to them. Auditors interview staff and ask whether anyone was consulted about the risk assessments.

A Legal Register That Lists Acts But Has Never Been Used

If nobody can point to how a specific regulation flows into a specific control, the register is decoration.

Psychosocial Hazards Absent from the Risk Register

Psychosocial hazards are frequently missing entirely, even though the regulations now expect them to be managed explicitly.

Incident Investigations Without Root Cause

Investigations that record what happened but never establish why, and never lead to a system change.

Contractor Management

Contractor management that stops at collecting a certificate of currency.

Victorian Sites Documented in WHS Terminology

It looks careless, because it is.

Industries We Work With

Construction and civil contracting, mining and resources services, transport and logistics, manufacturing and fabrication, labour hire and recruitment, facilities and property services, waste management, utilities and energy, agriculture and food processing, and healthcare and aged care providers.

Tell us which states you operate in, and we'll plan the project around it.

FAQ'S

No standard can do that. ISO 45001 is a management framework, not a legal instrument. What it does is give you a systematic way to identify your obligations and generate the evidence that you met them, which is directly useful to officers demonstrating due diligence.

Yes. ISO 45001 is jurisdiction-neutral. What changes is your legal register and terminology, which must reflect the Occupational Health and Safety Act 2004 and OHS Regulations 2017 rather than the model WHS laws used elsewhere in Australia.

No. AS/NZS 4801 has been withdrawn and certificates against it are no longer issued. Organisations still running a 4801 system should transition to ISO 45001, which typically takes eight to fourteen weeks given the existing system content.

Yes. The standard requires hazard identification without limiting it to physical hazards, so psychosocial risks fall within scope. ISO 45003 provides detailed supporting guidance, and Australian regulators now expect these hazards to be managed explicitly.

It depends on the agency and contract value. Many state transport, infrastructure and defence tenders require it or an equivalent certified system. Commonwealth-funded building work above threshold requires OFSC accreditation, which is separate but overlaps heavily.

Yes. We work across Kalgoorlie, Karratha, Port Hedland, Newman, Roxby Downs, Gladstone, Emerald and comparable locations, planning attendance around rosters and shutdowns. Documentation and review stages are delivered remotely so travel is spent where it adds value.

Yes, and it is usually worth doing. The three standards share a common structure, so one integrated system with combined audits means a single set of internal audits and one management review rather than three separate cycles.

Typically 12 to 24 weeks. The main constraint is that you need genuine operational records before Stage 2: completed risk assessments, toolbox talks, consultation records, and at least one internal audit and management review cycle.

CONTACT
Reach out to us for any inquiries, collaborations,
or just to say hello!

Contact information for Nathan ISO Consulting

CLIENTELE
Our Valuable Client

WHEN NUMBERS MATTER
Empowering Insights into our Business Performance