How to Obtain ISO Certification: A Step-by-Step Guide

Lorna McBreen, Founder of Exceeding Safety Standards Ltd

Achieving ISO certification for your organisation is not just a milestone; it's a testament to your commitment to health, safety, and operational excellence. Here’s a detailed guide on how you can navigate the process successfully:

Step 1: Ensure Compliance with ISO 45001 and ISO 14001 Standards

The journey begins with aligning your company's environmental, health and safety policy with the relevant ISO standards, such as ISO 45001 for Occupational Health and Safety Management Systems and ISO 14001 for Environmental Management Systems. Your EHS policy forms the backbone of your management system, outlining your commitment to mitigating risks, enhancing workplace safety, and ensuring environmental sustainability.

Step 2: Implement ISO Improvement Programs

Next, allocate time for implementing an occupational health and safety improvement program, particularly focusing on ISO 45001, and an environmental management program, if applicable, for ISO 14001. These programs should address identified gaps, promote continuous improvement, and ensure all aspects of the ISO standards are met.

Step 3: Conduct Internal Audits

Internal audits are critical for evaluating the effectiveness of your management system. These audits help identify non-conformities and areas needing improvement before the official certification process begins, ensuring alignment with both ISO 45001 and ISO 14001 standards.

Step 4: Contact Certification Companies

Once confident that you meet the requirements of both ISO 45001 and ISO 14001, reach out to accredited certification bodies. They will guide you through the certification process and help schedule a desk-top review and subsequent certification audit.

Step 5: Desk-Top Review Exercise

The certification assessor typically conducts a desk-top review (Stage 1), which is similar to a gap analysis. This initial review allows you to update or establish procedures necessary to comply fully with ISO 45001, ISO 14001 standards.

Step 6: Full Certification Audit

Following the desk-top review, the certification assessor will visit your site for a full certification audit (Stage 2). This audit will vary in length depending on your company’s size and the safety or environmental risks associated with your industry. During this audit, all clauses of ISO 45001 and ISO 14001 will be rigorously examined, and evidence will be reviewed, including a site walk-around.

Step 7: Close Out Meeting

At the conclusion of the audit, a close-out meeting is held to discuss the findings. You’ll be informed whether your organisation meets the required standards and if you’re recommended for certification under ISO 45001, ISO 14001, or both.

Step 8: Surveillance Visits

Post-certification, expect periodic (usually six-monthly) surveillance visits. These visits ensure ongoing compliance with ISO standards and provide opportunities for continuous improvement in both health, safety, and environmental management systems.

Step 9: Re-Certification Audit

Every three years, your organisation will undergo a re-certification audit. This comprehensive review reaffirms your commitment to maintaining ISO standards, validating your ongoing dedication to excellence in occupational health, safety, and environmental management.

Conclusion

Obtaining ISO certification requires careful planning, dedication to compliance, and ongoing commitment to improvement. By following these steps, your organisation can successfully navigate the certification process and demonstrate its commitment to high standards of health, safety, and environmental management.

At Exceeding Safety Standards, we support organisations in achieving their ISO 45001 and ISO 14001 certifications, helping you implement effective management systems and maintain compliance with the highest standards.