Build an OH&S Management System toward ISO 45001:2018 certification
Training for HSE managers, safety officers, P2K3 members, QHSE teams, and internal auditors — understand clauses 4–10, identify OH&S hazards & assess risk, and run internal audits per ISO 19011 before the certification body arrives.
- Clauses covered
- Clauses 4–10Clauses covered
- Regulatory alignment
- UU 1/1970 + PP 50/2012 SMK3Regulatory alignment
- Predecessor standard
- OHSAS 18001 (expired)Predecessor standard
- Format
- Inhouse, online, hybridFormat
ISO 45001 Awareness + Internal Auditor training equips your OH&S team to identify hazards, assess OH&S risk, and run internal audits per ISO 19011. Neksus trains to readiness; a KAN-accredited certification body performs the audit and issues your ISO 45001:2018 certificate.
The first international standard for OH&S management systems
ISO 45001:2018 is the international Occupational Health and Safety Management System (OHSMS) standard that replaced OHSAS 18001 (transition deadline closed 30 September 2021). Its clause structure follows the Annex SL High Level Structure, aligning it with ISO 9001, 14001, 27001, and 37001. The core of ISO 45001 is the context of the organization (clause 4), leadership & worker participation (clause 5), hazard identification & OH&S risk assessment (clause 6.1.2), operational controls & change management (clause 8), and emergency preparedness (clause 8.2). In Indonesia, ISO 45001 is frequently paired with SMK3 per PP 50/2012 — alignment is performed so one audit cycle covers both frameworks.
- OHSAS 18001 is no longer valid (transition deadline 30 September 2021) — all internationally certified OH&S organizations moved to ISO 45001
- Clause 5.4 — worker consultation & participation is the standard’s main differentiator
- Clause 6.1.2 — proactive hazard identification (beyond reactive incident response)
- Aligned with PP 50/2012 SMK3 and UU 1/1970 Occupational Safety Law
ISO 45001 certificates can only be issued by accredited certification bodies (KAN in Indonesia, internationally recognized via the IAF MLA). Neksus prepares your organization to pass Stage 1 and Stage 2 — without promises of guaranteed certification.
SMK3 is the mandatory Indonesian OH&S framework per PP 50/2012, assessed by SMK3 Independent Audit Bodies. ISO 45001 is the international OH&S standard assessed by accredited certification bodies. Many organizations run both — SMK3 for national regulatory compliance, ISO 45001 for international recognition & tender qualification.
Per the IAF, the OHSAS 18001 to ISO 45001 transition ended 30 September 2021. OHSAS 18001 certificates are no longer valid. If your organization still holds OH&S documentation based on OHSAS 18001, transition training should focus on: context of the organization (clause 4), worker participation (clause 5.4), and risk & opportunity approach (clause 6.1).
Typical OHSMS scopes that get certified
ISO 45001 certifies the OH&S management system covering all workers (including contractors, vendors, and site visitors).
High OH&S risk — working at heights, heavy equipment, confined spaces. Scope: entire project or per major project.
OH&S risk in machine operation, chemicals, electricity, noise, ergonomics. Scope is typically per plant or all production facilities.
Extreme OH&S risk — geological hazards, explosives, process hazards. Scope is typically per operating area (mining site, oil field).
OH&S risk in vehicle movement, loading/unloading, B3 handling, driver fatigue. Scope: fleet + depot/warehouse.
Occupational hazards — infection exposure, radiation, chemicals, ergonomics. Scope: entire hospital or specific clinical unit.
Corporates with operations across different sectors — multi-site sampling per IAF MD 1 is possible when system controls are uniform.
Organizational readiness before inviting a certification body
- OH&S policy authorized by top managementCommitment to preventing work-related injury & ill-health, complying with compliance obligations, consulting & involving workers, and continual improvement.
- HIRADC / hazard identification & OH&S risk assessment (clause 6.1.2)Hazard Identification, Risk Assessment, and Determining Controls for all activities, roles, locations — including non-routine activities and emergency response.
- Compliance obligations registerUU 1/1970 Occupational Safety, PP 50/2012 SMK3, relevant PERMENAKER (e.g. ergonomics, noise, lifting equipment), sector regulations (e.g. ESDM for oil & gas/mining).
- OH&S objectives & programs (clause 6.2)Specific objectives (e.g. zero LTI, 20% near-miss reduction) with programs: actions, resources, owners, schedules.
- Operational controls & change management (clause 8.1)Written procedures for hazardous activities, hierarchy of control (elimination → substitution → engineering → administrative → PPE), change management procedure.
- Emergency preparedness (clause 8.2)Emergency scenarios (fire, explosion, spill, earthquake) identified, written procedures, drills conducted at least annually.
- One internal audit cycle + management reviewInternal audit per ISO 19011, compliance evaluation (clause 9.1.2), and management review with required inputs/outputs per clause 9.3.
Audit path from contract to certificate
Per ISO/IEC 17021-1 — 3-year certification cycle.
- 1
Application & contract
1–2 weeksSubmit scope, employee + contractor count, site count, IAF sector, and risk profile. High-risk sectors (construction, mining, oil & gas) trend to higher mandays.
- 2
Stage 1 — Documentation readiness review
1–2 days onsiteAuditor reviews policy, scope, HIRADC, compliance obligations register, OH&S programs, internal audit results, and management review minutes. Output: readiness confirmed, or findings to close.
- 3
Stage 2 — Field implementation audit
3–10 days onsite, depending on scale & sitesField inspection: production areas, heights, confined spaces, B3 storage, contractor areas. Worker interviews, practice observation, P2K3 record review, work permits, contractor audit.
- 4
Closure of findings & certification recommendation
30–90 daysMajor NCs must be closed with effective corrective action evidence. For OH&S, major NCs often involve absent HIRADC for hazardous activities or failed emergency drills.
- 5
Certificate issuance (3-year cycle)
—Certificate carries the scope. Often required for SOE/government tenders and international clients (particularly construction & oil & gas).
- 6
Year 1 & 2 surveillance audits
Annual, 2–5 daysFocus on OH&S monitoring results (incident statistics), changes in hazardous activities, prior finding follow-up, and emergency drills.
- 7
Recertification audit (year 3)
Before certificate expiresFull re-audit. Pass → renewed for another 3 years.
What an ISO 45001 Internal Auditor does — in the field where the hazards live
Internal Auditor training follows ISO 19011:2018 with added focus on technical OH&S competency.
An ISO 45001 internal auditor verifies that significant hazards are controlled by effective controls. They go into the field: examining work-at-height permits, observing PPE use, auditing LOTO procedures, checking lifting-equipment inspection records, auditing OH&S training records for employees and contractors, and reviewing incident response. Independence is critical — an OH&S auditor for area A does not audit their own area. Worker consultation & participation is the differentiator of an ISO 45001 audit: auditors must hear workers’ voices alongside management’s.
- Understanding of ISO 45001 clauses 4–10 and the Annex SL structure
- Understanding of Indonesian OH&S regulation: UU 1/1970, PP 50/2012, relevant PERMENAKER
- HIRADC method: hazard identification, risk assessment, control determination
- Hierarchy of control: elimination, substitution, engineering, administrative, PPE
- Audit of work permits, LOTO, confined space, work at heights, hot work
- Audit of OH&S training records, equipment certifications, and operator competency
- Audit of worker consultation & participation — worker & P2K3 interviews
- ISO 19011 — independence, objectivity, evidence-based
- Major NC
E.g. no HIRADC for high-risk activity (e.g. work at heights), contractors working without a work permit, or emergency drills never performed.
- Minor NC
E.g. lifting-equipment inspection records incomplete for one quarter, OH&S training late for one function, or PPE not replaced per schedule.
- OFI
E.g. recommendation to move control from PPE (lowest) toward engineering control (higher), or adoption of incident-analysis tools (Bowtie, SCAT).
- Observation
E.g. note on recurring near-misses in one area; potential serious incident if unfollowed-up.
Expected outcomes for your team after the training
Awareness vs Internal Auditor vs Lead Auditor preparation (OH&S)
| Criterion | Awareness | Internal Auditor ★ | Lead Auditor preparation |
|---|---|---|---|
| Typical duration | 1 day | 3 days | 5 days (IRCA-style) |
| Target audience | All employees + contractors | HSE internal audit team & P2K3 | Aspiring Lead Auditors / OH&S consultants |
| Main output | Hazard awareness & basic PPE understanding | Field audit checklists + audit simulation + finding reports | Individual certificate from a registered training scheme |
| Delivered by | Training vendor (e.g. Neksus) | Training vendor (e.g. Neksus) | Registered training organization (e.g. IRCA / Exemplar Global) |
Engagement path with Neksus for ISO 45001
- 1
Kickoff & gap analysis
Week 12-hour workshop with the HSE/P2K3 team: existing HIRADC mapping, compliance obligations register, documentation readiness.
- 2
1-day awareness
Week 2For all employees + key contractors. Goal: every worker understands their area’s hazards and the expected controls.
- 3
3-day Internal Auditor workshop
Weeks 3–4ISO 45001 clauses 4–10, Indonesian OH&S regulation, field audit of work permits/LOTO/confined space, and ISO 19011 technique.
- 4
Mock audit in critical areas
Week 5Facilitator accompanies audits in production, heights, or contractor areas. Participants practice field observation and worker interviews.
- 5
Readiness review & recommendations
Week 6Report: remaining gaps, priority actions, Stage 1 document readiness.
- 6
Handoff to the certification body
Week 7+Stage 1 document package is ready. Body selection is entirely your decision.
Target roles
OHSMS owner, primary contact with the certification body and Manpower Office.
Runs daily OH&S programs, work permits, and area inspections.
Worker & management representatives on the P2K3 — mandatory per PERMENAKER 4/1987.
4–8 cross-site auditors to preserve audit independence.
Accountable for OH&S implementation at the operating location.
Contractors & subcontractors are within OH&S scope — competence evaluation & supervision required.
Manages OH&S training, operator certification, and competence records.
Directs the OH&S policy and leads the management review.
Examples of accredited certification bodies for ISO 45001 in Indonesia
The list below is not a Neksus recommendation. Body selection is entirely your organization’s decision.
Broad experience in manufacturing, construction, and oil & gas.
Often chosen for 9001+14001+45001 IMS combinations.
Strong experience in mining, oil & gas, and large construction.
Strong in energy, marine, and infrastructure construction.
Maritime, energy, and global manufacturing sectors.
State-owned inspection & certification body, frequently used in SOE tenders.
The bodies above are examples of organizations accredited (typically through KAN and the IAF MLA network) that can perform certification audits. They are not Neksus partners and do not receive referrals from Neksus. Choosing a certification body is entirely your organization’s decision based on scope, sector, and internal procurement requirements.
Typical outcome patterns from comparable clients
EPC contractor 500 employees + 1500 subcontractors on a major construction project, first-time certification.
Awareness for all workers + 3-day Internal Auditor for 10 cross-project people + mock audits at work-at-heights and confined-space areas.
Stage 1 passed without critical findings; Stage 2 produced 4 Minor NCs (contractor training records & lifting equipment inspections) closed within 60 days.
300-employee manufacturing plant, transition from OHSAS 18001 (now expired) to ISO 45001.
2-day Internal Auditor transition training focused on clauses 4 (context), 5.4 (worker participation), and 6.1 (risk & opportunity).
Transition audit passed within a single cycle at no extra cost; ISO 45001 easier to integrate with the existing ISO 9001.
SOE mining multi-site with a three-year zero-LTI target.
Awareness + Internal Auditor + field mock audits + coaching on OH&S leading indicators (PSI — Process Safety Indicators).
ISO 45001 certificate issued; LTIR fell significantly across two annual reporting cycles after implementation.
Procurement information
- Contract formatInhouse training or continuous program (including mock audits in critical OH&S areas).
- LocationOnsite at the client site (Jabodetabek with no extra travel charge), regional onsite, or live online.
- Language of deliveryIndonesian or bilingual ID/EN.
- Materials & participant certificateModules, handouts, HIRADC template, field audit checklists, Neksus participation certificate.
- Tax documentationVAT invoice, receipt, BAST. SOE/government e-procurement support available.
- Payment terms30% advance on contract, 70% on training completion.
- SMK3 alignment coachingSeparate manday-based scheme: aligning ISO 45001 documentation with SMK3 PP 50/2012 (166 criteria).
Frequently Asked Questions
Discuss ISO 45001:2018 readiness for your organization
Send your scope, sector, and risk profile. The Neksus team studies your context and prepares a program design within 2 business days.
- Awareness, Internal Auditor, and field mock audits in critical OH&S areas
- Facilitators with Safety Officer and cross-industry OH&S audit backgrounds
- Alignment with UU 1/1970, PP 50/2012 SMK3, and relevant PERMENAKER
- Materials and checklists tailored to your sector’s risk profile