How long does it take to implement ISO 45001?

A typical project takes 6 to 9 months: about three to assess, evaluate risks and document, and the rest to operate the system, audit it and gather the evidence the certification body asks for. A company that already complies well with the STPS standards, or that holds ISO 9001, moves faster.

Is ISO 45001 mandatory in Mexico?

No. It is a voluntary standard; what is mandatory are the STPS NOM standards and the Federal Labor Law. In practice customers, head offices and supply chains require it —especially automotive, construction, mining and energy— and it helps organize legal compliance.

What is the difference between ISO 45001 and OHSAS 18001?

ISO 45001 replaced OHSAS 18001, which stopped being valid in 2021. It adds the context of the organization, top management leadership, consultation and participation of workers, contractor control and the common structure shared with ISO 9001 and 14001.

How much does ISO 45001 consulting cost?

It depends on the number of workplaces and people, the risk level of your processes and what you already have in place. That is why every proposal includes three scope options at a fixed price, starting from a free assessment. Certification body fees are quoted separately.

Do you issue the certificate?

No: certification is granted by an accredited certification body, independent from the consultant. We implement, audit internally and accompany you through the certification audit and the closing of findings.

What about the new ISO 45001:2027?

The standard is under revision and publication is expected in 2027, with more weight on mental health, psychosocial risks and hybrid work. Implementing ISO 45001:2018 today is not wasted work: certified systems will get a transition period, and those already managing NOM-035 start ahead.

ISO 45001:2018 · OH&S

ISO 45001 consulting: occupational health and safety

We implement your occupational health and safety (OH&S) management system to ISO 45001:2018: hazard identification, risk assessment, Mexican STPS legal requirements, worker participation and internal audit, until you are ready for certification with an accredited body.

Occupational health and safety coordinator reviewing the ISO 45001 hazard and risk matrix on a laptop

What is ISO 45001 consulting?

It is the support needed to design, implement and run an occupational health and safety management system that meets ISO 45001:2018, the standard that replaced OHSAS 18001. The goal is not the certificate: it is preventing injury and ill health, controlling the risks of each job and demonstrating legal compliance. In Mexico that means the system has to live alongside the STPS NOM standards, so we start from them instead of treating them as an appendix. It is also the practical route for foreign companies that need their Mexican plant to meet the same standard as headquarters.

What ISO 45001 implementation includes

The requirements of the standard brought down to your workplace: an OH&S management system your people actually use.

Gap assessment

Where you stand today against clauses 4 to 10 of ISO 45001 and against the Mexican NOM standards that apply, with a realistic closure plan.

Hazards, risks and controls

Hazard identification and risk assessment by job and activity, using the hierarchy of controls: eliminate, substitute, engineering, administrative and PPE.

Legal requirements

A register of legal and other requirements: NOM-030, NOM-019, NOM-035, NOM-017, NOM-002 and those specific to your process, with evidence.

Consultation and participation

Mechanisms so workers and the safety and hygiene commission genuinely take part: the most audited and least met requirement.

Contractors and emergencies

Control of contractors and procurement, management of change, and emergency preparedness and response with drills that leave records.

Training with evidence

Staff training on a platform, with Mexican DC-3 certificates and full traceability: awareness stops being an attendance sheet.

ISO 45001 + STPS

ISO 45001 and the Mexican STPS standards in one system

An OH&S management system that ignores Mexican regulation doubles the work: one binder for the auditor and another for the labor inspector. We map each NOM to the ISO 45001 clause behind it, so a single piece of evidence serves both.

NOM-030: OH&S diagnosis and program
NOM-019: safety and hygiene commission and its inspections
NOM-035: psychosocial risk factors
NOM-017 and NOM-002: protective equipment and fire prevention
Accident and incident indicators tied to your IMSS risk premium

Safety manager showing how ISO 45001 relates to the Mexican STPS NOM standards

Process

How we implement ISO 45001, phase by phase

Six phases, each with a deliverable you approve. A typical project takes 6 to 9 months, depending on the size and maturity of your operation.

Assessment and planning
Gap analysis against ISO 45001 and applicable regulation, context, interested parties and scope.
Deliverable: gap report and project plan
Hazards, risks and legal requirements
Hazard identification, assessment of risks and opportunities, and legal register per workplace.
Deliverable: risk matrix and legal register
Policy, objectives and documentation
OH&S policy, measurable objectives, roles and the minimum documented information needed.
Deliverable: documented system
Rollout and training
Operational controls, contractors, emergencies and staff training with DC-3 certificates.
Deliverable: controls running and records
Internal audit and management review
Full internal audit following ISO 19011, corrective actions and management review.
Deliverable: audit report and minutes
Certification support
We accompany you through stage 1 and stage 2 with the accredited certification body you choose, and through closing findings.
Deliverable: nonconformities closed

ISO 45001, OHSAS 18001 and complying with the NOMs only

Complying with regulation is mandatory; managing occupational health and safety is what reduces accidents and sustains continual improvement.

	NOM compliance only	OHSAS 18001 (withdrawn)	ISO 45001:2018
Approach	Requirement by requirement	Hazard control	Risks and opportunities, context and leadership
Role of management	Delegated to safety staff	Management representative	Top management is accountable for performance
Workers	Safety and hygiene commission	Limited consultation	Consultation and participation throughout
Contractors and procurement	Depends on each NOM	Little developed	Explicit requirement (clause 8.1.4)
Integration	Not applicable	Own structure	Harmonized structure with ISO 9001 and 14001
Validity	Permanent	No longer valid since 2021	In force; ISO 45001:2027 revision under way

How far are you from ISO 45001?

In the free assessment we review your operation and the NOM standards that apply, and give you three fixed-price scopes.

Get your free assessment Direct WhatsApp

From the system to the evidence, with one team

Consulting is complemented by the ISO 45001 internal audit, the gap analysis and pre-assessment audit and the legal requirements register. If you already hold quality or environmental certification, consider an integrated management system for ISO 9001, 14001 and 45001.

Training that leaves evidence

Competence and awareness are covered with ISO internal auditor courses, NOM-035 training and safety simulators such as our 360° industrial training simulator. Read how ISO 45001 relates to the Mexican STPS standards.

ISO 45001 consulting in your city

On site for assessments, walk-throughs and audits; remote for everything else.

FAQ

Frequently asked questions about ISO 45001 consulting

Shall we start with an assessment of your OH&S system?

We review your operation, your risks and the NOM standards that apply, and tell you exactly what is missing for ISO 45001. Free and with no commitment.