Build an OH&S Management System toward ISO 45001:2018 certification
Training for HSE managers, safety officers, P2K3 members, QHSE teams, and internal auditors — understand clauses 4–10, identify OH&S hazards & assess risk, and run internal audits per ISO 19011 before the certification body arrives.
- 4.9/5 · 287 reviews
- 300+ clients nationwide
- 2,000+ trainers
- 1 to hundreds of participants
- Standard · Premium · Private 1-on-1
- Clauses covered
- Clauses 4–10Clauses covered
- Regulatory alignment
- UU 1/1970 + PP 50/2012 SMK3Regulatory alignment
- Predecessor standard
- OHSAS 18001 (expired)Predecessor standard
- Format
- Inhouse, online, hybridFormat
2,000+ trainers and experts
Our group's teaching network, matched to what your team needs.
See class documentationYou see your trainer first
The trainer's profile, track record and field come with the proposal, before you decide.
4.9 out of 5
287 participant reviews.
300+ clients nationwide and 180,000+ private training sessions completed. Among them: MPR RI, Akademi Militer Magelang, DPRD Provinsi Jawa Timur.
One person to hundreds
Private coaching for one participant, a class for one team, or several cohorts at once.
Three budget levels
- Standard: core class, material fitted to the participants’ work
- Premium: senior trainer, deeper material design
- Private 1-on-1: one participant, one trainer, schedule set by the participant
ISO 45001 Awareness + Internal Auditor training equips your OH&S team to identify hazards, assess OH&S risk, and run internal audits per ISO 19011. Neksus trains to readiness; a KAN-accredited certification body performs the audit and issues your ISO 45001:2018 certificate.
The first international standard for OH&S management systems
ISO 45001:2018 is the international Occupational Health and Safety Management System (OHSMS) standard that replaced OHSAS 18001 (transition deadline closed 30 September 2021). Its clause structure follows the Annex SL High Level Structure, aligning it with ISO 9001, 14001, 27001, and 37001. The core of ISO 45001 is the context of the organization (clause 4), leadership & worker participation (clause 5), hazard identification & OH&S risk assessment (clause 6.1.2), operational controls & change management (clause 8), and emergency preparedness (clause 8.2). In Indonesia, ISO 45001 is frequently paired with SMK3 per PP 50/2012 — alignment is performed so one audit cycle covers both frameworks.
- OHSAS 18001 is no longer valid (transition deadline 30 September 2021) — all internationally certified OH&S organizations moved to ISO 45001
- Clause 5.4 — worker consultation & participation is the standard’s main differentiator
- Clause 6.1.2 — proactive hazard identification (beyond reactive incident response)
- Aligned with PP 50/2012 SMK3 and UU 1/1970 Occupational Safety Law
ISO 45001 certificates can only be issued by accredited certification bodies (KAN in Indonesia, internationally recognized via the IAF MLA). Neksus prepares your organization to pass Stage 1 and Stage 2 — without promises of guaranteed certification.
SMK3 is the mandatory Indonesian OH&S framework per PP 50/2012, assessed by SMK3 Independent Audit Bodies. ISO 45001 is the international OH&S standard assessed by accredited certification bodies. Many organizations run both — SMK3 for national regulatory compliance, ISO 45001 for international recognition & tender qualification.
Per the IAF, the OHSAS 18001 to ISO 45001 transition ended 30 September 2021. OHSAS 18001 certificates are no longer valid. If your organization still holds OH&S documentation based on OHSAS 18001, transition training should focus on: context of the organization (clause 4), worker participation (clause 5.4), and risk & opportunity approach (clause 6.1).
ISO 45001:2018 clause 5.4 sets two distinct duties. Item d) lists the topics on which non-managerial workers must be consulted: the needs of interested parties, the OH&S policy, roles and authorities, how legal and other requirements are met, OH&S objectives, controls for outsourcing, procurement and contractors, what is monitored and measured, and the audit programme. Item e) lists the topics that need their direct participation: hazard identification and risk assessment, deciding control measures, competence and training needs, what gets communicated, and incident investigation with corrective action. Item c) asks the organization to remove barriers to participation, such as language and literacy gaps, worker input that never gets a response, and fear of reprisal. In an internal audit this becomes a concrete question: who from the shop floor helped build the HIRADC for this area, and which minutes record it?
Clause 8.1.3 requires a process to implement and control planned changes, temporary or permanent, that affect OH&S performance. It covers new products, services and processes; changes to workplace location, work organization, working conditions, equipment and workforce size; changes to legal and other requirements; changes in knowledge about hazards; and developments in technology. The organization must also review the consequences of unintended changes and mitigate any adverse effects. On site, the gap tends to appear in changes people treat as routine: a cleaning chemical swapped for another brand, a forklift route moved, a night shift added ahead of a busy order season. Internal Auditor participants practise tracing one real change from the request form to the updated HIRADC and the workers who were told about it.
Article 5 of Government Regulation PP 50/2012 requires SMK3 for companies that employ at least 100 workers or carry a high potential hazard, implementing Article 87 of Law 13/2003 on Manpower. Assessment is done by an independent audit body appointed by the Minister of Manpower, using tiered criteria in Appendix II: 64 criteria at the initial level, 122 at the transition level and 166 at the advanced level. ISO 45001 is voluntary and assessed by a certification body. Buyers usually decide by who is asking: labour inspectors and many national tenders ask about SMK3, while multinational clients and global supply chains ask for an ISO 45001 certificate. Neksus training maps where the two meet, for your team's internal use. SMK3 audits and certificates remain entirely with the government-appointed bodies.
Typical OHSMS scopes that get certified
ISO 45001 certifies the OH&S management system covering all workers (including contractors, vendors, and site visitors).
High OH&S risk — working at heights, heavy equipment, confined spaces. Scope: entire project or per major project.
OH&S risk in machine operation, chemicals, electricity, noise, ergonomics. Scope is typically per plant or all production facilities.
Extreme OH&S risk — geological hazards, explosives, process hazards. Scope is typically per operating area (mining site, oil field).
OH&S risk in vehicle movement, loading/unloading, B3 handling, driver fatigue. Scope: fleet + depot/warehouse.
Occupational hazards — infection exposure, radiation, chemicals, ergonomics. Scope: entire hospital or specific clinical unit.
Corporates with operations across different sectors — multi-site sampling per IAF MD 1 is possible when system controls are uniform.
Organizational readiness before inviting a certification body
- OH&S policy authorized by top managementCommitment to preventing work-related injury & ill-health, complying with compliance obligations, consulting & involving workers, and continual improvement.
- HIRADC / hazard identification & OH&S risk assessment (clause 6.1.2)Hazard Identification, Risk Assessment, and Determining Controls for all activities, roles, locations — including non-routine activities and emergency response.
- Compliance obligations registerUU 1/1970 Occupational Safety, PP 50/2012 SMK3, relevant PERMENAKER (e.g. ergonomics, noise, lifting equipment), sector regulations (e.g. ESDM for oil & gas/mining).
- OH&S objectives & programs (clause 6.2)Specific objectives (e.g. zero LTI, 20% near-miss reduction) with programs: actions, resources, owners, schedules.
- Operational controls & change management (clause 8.1)Written procedures for hazardous activities, hierarchy of control (elimination → substitution → engineering → administrative → PPE), change management procedure.
- Emergency preparedness (clause 8.2)Emergency scenarios (fire, explosion, spill, earthquake) identified, written procedures, drills conducted at least annually.
- One internal audit cycle + management reviewInternal audit per ISO 19011, compliance evaluation (clause 9.1.2), and management review with required inputs/outputs per clause 9.3.
- Hazard identification that reaches non-routine work (6.1.2.1)Clause 6.1.2.1 spells out the hazard sources to consider: how work is organized and social factors (workload, working hours, victimization, harassment, bullying), leadership and culture; routine and non-routine activities, including maintenance, construction and disposal; past incidents inside and outside the organization; potential emergencies; and people in and around the workplace, including contractor workers, visitors and neighbours. A matrix that lists only daytime routine tasks does not yet meet this clause.
- Hierarchy of controls recorded per hazard (8.1.2)Clause 8.1.2 sets the order: eliminate the hazard; substitute with less hazardous processes, operations, materials or equipment; use engineering controls and reorganize work; use administrative controls, including training; then PPE. What the auditor looks for is the written reasoning each time a control stops at a lower level, for example why press-machine noise is still handled with hearing protection while an enclosure option has not been installed.
- Procurement, contractors and outsourcing (8.1.4)Clause 8.1.4.1 requires purchased goods and services to be controlled so they conform to the OH&S system. Clause 8.1.4.2 covers coordination with contractors: hazards their activities bring to the organization, hazards the organization's activities bring to their workers, and OH&S criteria for selecting contractors. Clause 8.1.4.3 keeps outsourced functions and processes under control. Prepare an evidence trail from tender documents to the induction at the site gate.
- Incident investigation and corrective action (10.2)Clause 10.2 asks the organization to react in a timely way to an incident or nonconformity, investigate root causes with worker participation, review existing risk assessments, set corrective actions that follow the hierarchy of controls and management of change, and then evaluate their effectiveness. Records cover the nature of the incident, the actions taken and the results. A report that ends with the worker was careless has usually stopped short of the root cause.
Audit path from contract to certificate
Per ISO/IEC 17021-1 — 3-year certification cycle.
- 1
Application & contract
1–2 weeksSubmit scope, employee + contractor count, site count, IAF sector, and risk profile. High-risk sectors (construction, mining, oil & gas) trend to higher mandays.
- 2
Stage 1 — Documentation readiness review
1–2 days onsiteAuditor reviews policy, scope, HIRADC, compliance obligations register, OH&S programs, internal audit results, and management review minutes. Output: readiness confirmed, or findings to close.
- 3
Stage 2 — Field implementation audit
3–10 days onsite, depending on scale & sitesField inspection: production areas, heights, confined spaces, B3 storage, contractor areas. Worker interviews, practice observation, P2K3 record review, work permits, contractor audit.
- 4
Closure of findings & certification recommendation
30–90 daysMajor NCs must be closed with effective corrective action evidence. For OH&S, major NCs often involve absent HIRADC for hazardous activities or failed emergency drills.
- 5
Certificate issuance (3-year cycle)
—Certificate carries the scope. Often required for SOE/government tenders and international clients (particularly construction & oil & gas).
- 6
Year 1 & 2 surveillance audits
Annual, 2–5 daysFocus on OH&S monitoring results (incident statistics), changes in hazardous activities, prior finding follow-up, and emergency drills.
- 7
Recertification audit (year 3)
Before certificate expiresFull re-audit. Pass → renewed for another 3 years.
What an ISO 45001 Internal Auditor does — in the field where the hazards live
Internal Auditor training follows ISO 19011:2018 with added focus on technical OH&S competency.
An ISO 45001 internal auditor verifies that significant hazards are controlled by effective controls. They go into the field: examining work-at-height permits, observing PPE use, auditing LOTO procedures, checking lifting-equipment inspection records, auditing OH&S training records for employees and contractors, and reviewing incident response. Independence is critical — an OH&S auditor for area A does not audit their own area. Worker consultation & participation is the differentiator of an ISO 45001 audit: auditors must hear workers’ voices alongside management’s.
- Understanding of ISO 45001 clauses 4–10 and the Annex SL structure
- Understanding of Indonesian OH&S regulation: UU 1/1970, PP 50/2012, relevant PERMENAKER
- HIRADC method: hazard identification, risk assessment, control determination
- Hierarchy of control: elimination, substitution, engineering, administrative, PPE
- Audit of work permits, LOTO, confined space, work at heights, hot work
- Audit of OH&S training records, equipment certifications, and operator competency
- Audit of worker consultation & participation — worker & P2K3 interviews
- ISO 19011 — independence, objectivity, evidence-based
- Major NC
E.g. no HIRADC for high-risk activity (e.g. work at heights), contractors working without a work permit, or emergency drills never performed.
- Minor NC
E.g. lifting-equipment inspection records incomplete for one quarter, OH&S training late for one function, or PPE not replaced per schedule.
- OFI
E.g. recommendation to move control from PPE (lowest) toward engineering control (higher), or adoption of incident-analysis tools (Bowtie, SCAT).
- Observation
E.g. note on recurring near-misses in one area; potential serious incident if unfollowed-up.
Expected outcomes for your team after the training
Awareness vs Internal Auditor vs Lead Auditor preparation (OH&S)
| Criterion | Awareness | Internal Auditor ★ | Lead Auditor preparation |
|---|---|---|---|
| Typical duration | 1 day | 3 days | 5 days (IRCA-style) |
| Target audience | All employees + contractors | HSE internal audit team & P2K3 | Aspiring Lead Auditors / OH&S consultants |
| Main output | Hazard awareness & basic PPE understanding | Field audit checklists + audit simulation + finding reports | Individual certificate from a registered training scheme |
| Delivered by | Training vendor (e.g. Neksus) | Training vendor (e.g. Neksus) | Registered training organization (e.g. IRCA / Exemplar Global) |
| Clauses covered in most depth | 5.4 worker participation, 6.1.2 hazards in each person's own area, 8.2 emergency response | 6.1.2, 8.1.2 hierarchy of controls, 8.1.3 change, 8.1.4 contractors, 10.2 incident investigation | All of clauses 4 to 10, ISO/IEC 17021-1 and leading an audit team |
| Evidence participants take home | A hazard list for their own work area and how to report | An audit plan, field evidence notes and a draft findings report from the mock audit | Exam results from a registered training organization |
Engagement path with Neksus for ISO 45001
- 1
Kickoff & gap analysis
Week 12-hour workshop with the HSE/P2K3 team: existing HIRADC mapping, compliance obligations register, documentation readiness.
- 2
1-day awareness
Week 2For all employees + key contractors. Goal: every worker understands their area’s hazards and the expected controls.
- 3
3-day Internal Auditor workshop
Weeks 3–4ISO 45001 clauses 4–10, Indonesian OH&S regulation, field audit of work permits/LOTO/confined space, and ISO 19011 technique.
- 4
Mock audit in critical areas
Week 5Facilitator accompanies audits in production, heights, or contractor areas. Participants practice field observation and worker interviews.
- 5
Readiness review & recommendations
Week 6Report: remaining gaps, priority actions, Stage 1 document readiness.
- 6
Handoff to the certification body
Week 7+Stage 1 document package is ready. Body selection is entirely your decision.
Target roles
OHSMS owner, primary contact with the certification body and Manpower Office.
Runs daily OH&S programs, work permits, and area inspections.
Worker & management representatives on the P2K3 — mandatory per PERMENAKER 4/1987.
4–8 cross-site auditors to preserve audit independence.
Accountable for OH&S implementation at the operating location.
Contractors & subcontractors are within OH&S scope — competence evaluation & supervision required.
Manages OH&S training, operator certification, and competence records.
Directs the OH&S policy and leads the management review.
Examples of accredited certification bodies for ISO 45001 in Indonesia
The list below is not a Neksus recommendation. Body selection is entirely your organization’s decision.
Broad experience in manufacturing, construction, and oil & gas.
Often chosen for 9001+14001+45001 IMS combinations.
Strong experience in mining, oil & gas, and large construction.
Strong in energy, marine, and infrastructure construction.
Maritime, energy, and global manufacturing sectors.
State-owned inspection & certification body, frequently used in SOE tenders.
The bodies above are examples of organizations accredited (typically through KAN and the IAF MLA network) that can perform certification audits. They are not Neksus partners and do not receive referrals from Neksus. Choosing a certification body is entirely your organization’s decision based on scope, sector, and internal procurement requirements.
Typical outcome patterns from comparable clients
EPC contractor 500 employees + 1500 subcontractors on a major construction project, first-time certification.
Awareness for all workers + 3-day Internal Auditor for 10 cross-project people + mock audits at work-at-heights and confined-space areas.
Stage 1 passed without critical findings; Stage 2 produced 4 Minor NCs (contractor training records & lifting equipment inspections) closed within 60 days.
300-employee manufacturing plant, transition from OHSAS 18001 (now expired) to ISO 45001.
2-day Internal Auditor transition training focused on clauses 4 (context), 5.4 (worker participation), and 6.1 (risk & opportunity).
Transition audit passed within a single cycle at no extra cost; ISO 45001 easier to integrate with the existing ISO 9001.
SOE mining multi-site with a three-year zero-LTI target.
Awareness + Internal Auditor + field mock audits + coaching on OH&S leading indicators (PSI — Process Safety Indicators).
ISO 45001 certificate issued; LTIR fell significantly across two annual reporting cycles after implementation.
Procurement information
- Contract formatInhouse training or continuous program (including mock audits in critical OH&S areas).
- LocationOnsite at the client site, regional onsite, or live online.
- Language of deliveryIndonesian or bilingual ID/EN.
- Materials & participant certificateModules, handouts, HIRADC template, field audit checklists, Neksus participation certificate.
- Tax documentationVAT invoice, receipt, BAST. SOE/government e-procurement support available.
- Payment terms30% advance on contract, 70% on training completion.
- SMK3 alignment coachingSeparate manday-based scheme: aligning ISO 45001 documentation with SMK3 PP 50/2012 (166 criteria).
Frequently Asked Questions
Discuss ISO 45001:2018 readiness for your organization
Send your scope, sector, and risk profile. The Neksus team studies your context and prepares a program design.
- Awareness, Internal Auditor, and field mock audits in critical OH&S areas
- Facilitators with Safety Officer and cross-industry OH&S audit backgrounds
- Alignment with UU 1/1970, PP 50/2012 SMK3, and relevant PERMENAKER
- Materials and checklists tailored to your sector’s risk profile