Home · Compliance · ISO 45001
ISO certification · ISO 45001Health and safety

Keybridge prepares ISO 45001 certification in Iraq and Kurdistan.

Identify workplace hazards, control safety risks and improve working practices. We confirm the scope and the buyer’s stated requirements before preparation starts. Buyer acceptance depends on the certificate scope, issuing body and the requirements set by the buyer. We review those requirements before preparation.

ISO 45001 Occupational health and safety management systems

ISO 45001 at a glance

Published
March 2018. ISO 45001:2018 is the current edition. It replaced OHSAS 18001, whose certificates stopped being valid in 2021.
Structure
Annex SL high level structure. 10 clauses. Clauses 4 to 10 carry the auditable requirements, and worker consultation runs through all of them.
Certifiable
Yes. The company is certified for the sites and activities named in the scope. There is no certificate for a person or a piece of equipment under this standard.
Certificate validity
The assessment body confirms the applicable schedule and continuing requirements for your scope.
Surveillance
The assessment body confirms the applicable schedule and continuing requirements for your scope.
Audit days, 10 to 50 people
The assessment body confirms the applicable schedule and continuing requirements for your scope.
What the scope covers
Only the sites and activities written into the scope. Anything left out of it is not covered.
What the certificate says
The company name, the standard, the scope and the dates the certificate runs.
Language of the system
We write the documentation in the language the company works in: Arabic, Kurdish or English.

What ISO 45001 is

ISO 45001:2018 is the international standard for an occupational health and safety management system. It asks a company to find the hazards in every task, remove or control them by the hierarchy of controls, involve the workers in that decision, and record what happens when something goes wrong. It replaced OHSAS 18001.

What the standard requires

  1. Clauses 1 to 3 cover scope, normative references and terms. Clauses 4 to 10 are the requirements an auditor checks.
  2. Clause 4, context. List the parties that matter, state which sites and activities the system covers, and include every worker on those sites, subcontracted labour included.
  3. Clause 5, leadership and worker participation. Management signs the health and safety policy and sets up a route for workers to raise a hazard without being punished for it.
  4. Clause 6, planning. Identify the hazards in every task, assess the risk, list the legal requirements, and set objectives with numbers and dates.
  5. Clause 7, support. Competence and training records for every safety critical task, plus consultation records, communication and document control.
  6. Clause 8, operation. Control hazards by the hierarchy of controls, run a permit to work system, control contractors and procurement, and keep an emergency plan that is tested.
  7. Clause 9, performance evaluation. Measure incidents, near misses and leading indicators, evaluate legal compliance, run internal audits on a plan, and hold a management review.
  8. Clause 10, improvement. Investigate every incident and near miss, find the cause, correct it, and show the correction worked.

Who needs ISO 45001 in Iraq and Kurdistan

Oil and gas service companiesA documented safety system helps demonstrate how site-work risks are managed. Each operator sets its site-access and supplier requirements.
Construction and civil contractorsISO 45001 may be relevant to the management of this activity. Confirm the applicable scope and any buyer requirement before seeking certification.
Drilling and well servicesCrews work with pressure, height and rotating equipment, and the operator audits the written control for each one.
Transport and fuel logisticsISO 45001 may be relevant to the management of this activity. Confirm the applicable scope and any buyer requirement before seeking certification.
Security companiesGuards work nights on remote sites, and the client checks training, PPE issue records and incident reporting.
Manufacturers and fabricatorsMachine guarding, welding, lifting and confined space entry each need a written control and a competent person named.
Camp and facility servicesKitchens, generators, gas cylinders and cleaning chemicals carry the hazards the camp operator inspects.

The buyers that ask for ISO 45001

Buyer or listWhat they ask for
Ministry of Natural Resources Approved Vendor ListCheck the current registration instructions for your activity and category. Confirm whether this standard is requested and which issuing bodies are accepted.
Kurdistan operatorsReview this buyer’s current supplier criteria for the products or services offered. Certificate scope, buyer acceptance and tender eligibility need to be checked separately.
Basra operatorsReview this buyer’s current supplier criteria for the products or services offered. Certificate scope, buyer acceptance and tender eligibility need to be checked separately.
EPC contractorsReview the project’s supplier requirements and the work package you intend to deliver. A contractor may set requirements beyond the certificate itself.
KRG Approved Suppliers CenterCheck the current registration instructions for your activity and category. Confirm whether this standard is requested and which issuing bodies are accepted.
UN agencies through UNGMCheck the individual procurement notice for the required certificate and scope. Registration on UNGM does not replace the tender’s qualification criteria.
Federal Ministry of PlanningCheck the current registration instructions for your activity and category. Confirm whether this standard is requested and which issuing bodies are accepted.
Foreign partners and lendersCheck the financing or procurement conditions for the relevant project. Confirm whether certification is requested rather than assuming it from the sector.

What shapes your investment

  • Number of sites in the scope and whether the auditor has to travel to Erbil, Sulaymaniyah, Baghdad or Basra.
  • Headcount including subcontracted labour, which sets how many auditor days the audit takes.
  • Risk level of the work, from an office to hot work, confined space entry and lifting on a live oilfield.
  • Number of shifts, because an auditor who has to see a night shift adds days.
  • How many licences, permits and insurance requirements the legal register has to track.
  • Languages the documentation is written in, and whether the crews read Arabic, Kurdish or English.
  • How much usable documentation already exists in the company.
  • The date the documents are needed by.
  • Whether ISO 45001 is built alone or together with ISO 9001 and ISO 14001 as one system; the certification body determines the audit time.

The proposal names the scope, the deliverables and the dates before work starts.