ISO 45001 Certification in Riyadh
Quick Answer
ISO 45001 is the international standard for occupational health and safety management systems, published by the International Organization for Standardization. It requires an organization to identify workplace hazards, assess risk, and build a system that actively prevents injury. Certification is issued by an accredited certification body after an independent audit.
What Is ISO 45001?
ISO 45001 requires organizations to identify workplace hazards, assess risk through a hierarchy of controls, and build a system that prevents injury and ill health rather than reacting after incidents occur. It replaced the widely used OHSAS 18001 standard in 2018 and places far greater emphasis on worker participation, leadership accountability, and understanding the organizational context in which safety risks actually arise.
Certification is issued by an independent, accredited certification body, never by ISO itself. In Saudi Arabia, legitimate certification bodies must hold accreditation from SASO’s Saudi Accreditation Committee (SAC), and businesses should confirm this accreditation explicitly covers ISO 45001 before signing an engagement, since some certifiers hold accreditation for other standards without holding it for this one.
What are the steps to get ISO 45001 Certification in Riyadh?
our services
- ISO Certification Riyadh
- ISO 9001 Certification Riyadh
- ISO 14001 Certification Riyadh
- ISO 27001 Certification Riyadh
- ISO 22000 Certification Riyadh
- ISO 45001 Certification Riyadh
- ISO 42001 Certification Riyadh
- ISO 20000-1 Certification Riyadh
- ISO 13485 Certification Riyadh
- ISO 17025 Certification Riyadh
- CE Mark Certification Riyadh
- GMP Certification Riyadh
- GDPR Certification Riyadh
- Halal Certification Riyadh
ISO 45001 Certification Process in Riyadh
Gap Assessment
We review your current safety practices against every ISO 45001 clause and produce a specific, written list of what's missing, covering hazard identification, worker consultation, and emergency response readiness.
A documented gap assessment identifying every ISO 45001 clause not yet met by your current safety practices.
Documentation Development
We build the OH&S policy, hazard register, and operational controls your gap assessment identified as missing, matched to your actual site conditions rather than a generic template that doesn't reflect your real hazard profile.
A complete OH&S policy, hazard register, and operational controls matched to your site conditions.
Implementation & Training
Your team, particularly site supervisors, is trained on the new controls, and the system runs long enough to generate real incident and near-miss records an auditor can meaningfully review.
Trained staff and the incident and near-miss records that demonstrate the system genuinely runs.
Internal Audit & Management Review
We conduct a structured internal audit, followed by a formal management review responding to the findings and closing gaps before external assessment.
A documented internal audit report and management review minutes showing findings were addressed.
Certification Audit
Your SASO-accredited certification body conducts a two-stage external audit, resulting in your ISO 45001 certificate, valid for three years with annual surveillance visits.
Your ISO 45001 certificate, valid for three years with annual surveillance visits.
Gap Assessment
We review your current safety practices against every ISO 45001 clause and produce a specific, written list of what's missing, covering hazard identification, worker consultation, and emergency response readiness.
A documented gap assessment identifying every ISO 45001 clause not yet met by your current safety practices.
Documentation Development
We build the OH&S policy, hazard register, and operational controls your gap assessment identified as missing, matched to your actual site conditions rather than a generic template that doesn't reflect your real hazard profile.
A complete OH&S policy, hazard register, and operational controls matched to your site conditions.
Implementation & Training
Your team, particularly site supervisors, is trained on the new controls, and the system runs long enough to generate real incident and near-miss records an auditor can meaningfully review.
Trained staff and the incident and near-miss records that demonstrate the system genuinely runs.
Internal Audit & Management Review
We conduct a structured internal audit, followed by a formal management review responding to the findings and closing gaps before external assessment.
A documented internal audit report and management review minutes showing findings were addressed.
Certification Audit
Your SASO-accredited certification body conducts a two-stage external audit, resulting in your ISO 45001 certificate, valid for three years with annual surveillance visits.
Your ISO 45001 certificate, valid for three years with annual surveillance visits.
Why Riyadh Businesses Need ISO 45001?
ISO 45001 matters in Riyadh because the sheer scale of active giga-project construction across the city has made safety-management credentials a routine contractor qualification requirement, not an optional differentiator.
- Giga-project construction scale : With RCRC-governed projects including New Murabba, King Salman Park, the Riyadh Metro, and the Sports Boulevard all under active construction simultaneously, prime contractors face enormous safety-management scrutiny, and they push that scrutiny down through every tier of their supply chain, often making certified safety management a precondition for site access rather than a preference.
Ministry of Human Resources oversight : Saudi Arabia’s labour law and workplace-safety regulations, enforced by the Ministry of Human Resources and Social Development, set the legal floor. ISO 45001 gives Riyadh employers a structured system to exceed that floor and demonstrate it credibly to buyers and regulators alike, turning compliance from a defensive posture into a genuine competitive advantage in tender evaluations.
Etimad tender scoring : For construction and industrial tenders on the Etimad Platform, ISO 45001 alongside ISO 9001 can meaningfully strengthen a bid’s technical evaluation, particularly for contracts involving physical site work where safety incidents carry direct project-delay and liability consequences.
Genuine accreditation matters : Always verify current SAC accreditation before choosing a certification body, since a certificate from an improperly accredited body may not be recognized by prime contractors or government evaluators when it matters most.
ISO 45001 Certification Cost in Riyadh
- Nature of the business : A low-hazard office environment costs far less to certify than a construction site or manufacturing facility with genuine physical hazards, since the depth of the hazard register and operational controls scales directly with real-world risk.
- Number of employees : Audit duration scales with headcount, directly affecting the certification body’s fee, particularly on multi-shift construction sites with large rotating workforces.
- Number of departments and sites : Multi-site construction or industrial operations mean more hazard registers and a broader internal audit programme, since each site typically carries a distinct risk profile requiring its own assessment.
- Existing documentation maturity : Companies with a functioning safety culture, even informal, spend less on documentation development than those starting from nothing, since much of the work becomes formalizing existing good practice rather than building it from scratch.
- DIY vs. consultant vs. end-to-end support : In-house implementation costs staff time and carries higher first-audit failure risk, while a consultant-led or end-to-end engagement typically compresses the timeline and reduces the risk of nonconformities at audit.
- Certification body chosen : Fees vary by certification body size and auditor day rates, all valid provided SAC accreditation is current, so it’s worth comparing both price and accreditation scope before committing.
- Bundling with ISO 9001 or ISO 14001 : An integrated audit shares overhead rather than duplicating it, and many Riyadh construction and industrial firms pursue all three standards together given how closely their operational controls overlap.
Mandatory Documents Required (By Clause)
- Clause 4 — Context of the Organization : Requires identifying safety-relevant issues and defining scope. Document needed: a written Scope Statement.
- Clause 5 — Leadership : Requires top-management ownership of safety commitment and worker participation. Document needed: a signed OH&S Policy.
- Clause 6 — Planning : Requires hazard identification and risk assessment. Document needed: a Hazard Identification and Risk Assessment Register.
- Clause 7 — Support : Covers competence and communication. Document needed: training records and worker-consultation records.
- Clause 8 — Operation : Covers operational controls for identified hazards. Document needed: operational control procedures and emergency-preparedness plans.
- Clause 9 — Performance Evaluation : Requires monitoring and internal audit. Document needed: monitoring records, internal audit reports, and management review minutes.
- Clause 10 — Improvement : Requires incident investigation and corrective action. Document needed: Incident Investigation and Corrective Action records.
Industries in Riyadh That Need ISO 45001
Construction & Contracting
The single largest driver in Riyadh, every tier of the giga-project supply chain increasingly requires certified safety management as a baseline condition of working on active sites.
Read moreManufacturing & Industrial
Factories in Riyadh's industrial cities managing machinery and physical hazards need ISO 45001 to satisfy both regulators and corporate buyers who increasingly audit supplier safety records before placing contracts.
Read moreOil, Gas & Petrochemicals
High-hazard energy-sector operations need ISO 45001 as a core part of their compliance package, given the severity of potential incidents in this sector and the corresponding regulatory and insurance scrutiny.
Read moreLogistics & Warehousing
Companies managing forklift traffic and manual-handling risk benefit from structured hazard management as Riyadh's logistics sector scales alongside giga-project material flows.
Read moreFacilities Management & Hospitality
Large facility operators tied to Riyadh's hospitality and giga-project expansion need documented safety systems covering both staff and visitor safety across sprawling, high-footfall properties.
Read moreHealthcare
Hospitals and clinics manage both patient-facing and staff occupational risks, including manual-handling injuries, exposure risks, and workplace hazards specific to clinical environments.
Read moreCase Study
- A steel-erection subcontractor working across multiple Riyadh giga-project sites approached ShineCert after a principal contractor made ISO 45001 a condition for renewing their site access. Their day-to-day safety practices were reasonably sound, but incident investigation was informal and worker-consultation records were inconsistent across different sites, making it difficult for the company to produce coherent evidence when the prime contractor’s own auditors asked for it.
- Over eight weeks, incident investigation was formalized with genuine root-cause analysis, and toolbox-talk records were centralized to demonstrate worker consultation across all active sites rather than just the one under the most scrutiny. Certification was achieved with one minor nonconformity, resolved within the standard window, and site access was renewed ahead of the subcontractor’s next project mobilization.
Choosing a Certification Body in Riyadh
Verify current SAC accreditation for your specific standard and industry scope before signing with any certification body, this is non-negotiable, since accreditation can be scope-limited.
| Approach | What It Involves | Best For |
|---|---|---|
| DIY | Your team manages documentation and process alone | Companies with existing safety-management expertise |
| Hiring a Consultant | External expert guides documentation and audit prep | Companies wanting guidance while choosing their own certifier |
| ShineCert End-to-End | We manage gap assessment through audit-readiness | Companies wanting one point of accountability |
Why Choose ShineCert?
ShineCert at a glance: 10 years of ISO consulting experience, 10,000+ organizations certified globally, with our own office based right here in Riyadh, local, on-the-ground support, not a remote engagement handled from another country.
We are not a certification body, we never audit or issue our own certificates. Our only incentive is getting your system genuinely ready for a first-time pass, and our Riyadh team understands the specific pace and pressure of working across giga-project sites, not just the theory of the standard.
Frequently Asked Questions
No, it’s voluntary. It becomes practically necessary for giga-project contractor qualification and increasingly for Etimad construction tenders.
Look for genuine local presence, a verified track record, and no conflict of interest with the certification body.
It depends on your business’s hazard profile, headcount, and existing safety-documentation maturity, see the cost breakdown above.
Yes, prime contractors on Riyadh’s active giga-projects routinely require it from every tier of their supply chain.
Confirm current accreditation under SASO’s Saudi Accreditation Committee (SAC) for ISO 45001 specifically.
