ISO 45001 is the international standard for occupational health and safety (OH&S) management systems: it sets requirements for how an organization identifies work hazards, controls risks, involves workers and keeps improving its performance. For fire protection contractors and facility owners in Saudi Arabia, it is a voluntary framework and an optional certificate. It never replaces the legal duties in the Saudi Labor Law, the Saudi Fire Protection Code (SBC 801) or Civil Defense requirements.
Key takeaways
- The current edition is ISO 45001:2018 with Amendment 1:2024 on climate change; ISO says a revision is planned for publication as ISO 45001:2027.
- Certification is optional, and certificates are issued by independent certification bodies, not by ISO.
- The standard shares the high-level structure of ISO 9001 and ISO 14001, so the three can run as one integrated management system.
- Good practice: a contractor’s system should cover real site hazards (work at height, hot work, energized panels, pressure tests) and the periods when fire systems are out of service.
- A contractor’s certificate is evidence, not proof: check the certification body, scope, sites and validity, then assess method statements and actual site performance.
In this article
- What ISO 45001 is and what it requires
- Editions and amendments: 2018, the 2024 amendment and the next revision
- ISO 45001 and the Saudi Labor Law
- What ISO 45001 means for fire protection contractors
- What ISO 45001 means for facility owners and managers
- How to verify an ISO 45001 certificate and use it in prequalification
- Common mistakes and what drives implementation cost
- How AZEIDK helps
- FAQ
What ISO 45001 is and what it requires
ISO lists its key elements as leadership commitment, worker participation, hazard identification and risk assessment, legal and regulatory compliance, emergency planning, incident investigation and continual improvement.
The standard uses the Plan-Do-Check-Act cycle, and ISO notes it is especially valuable in higher-risk sectors such as construction and manufacturing. The table below maps requirement clauses 4 to 10 to fire protection work.
| Clause | Title | In fire protection work (good practice) |
|---|---|---|
| 4 | Context of the organization | Define the sites, clients and activities covered, including maintenance in occupied buildings. Since the 2024 amendment, the standard also requires deciding whether climate change is a relevant issue; a practical example is extreme heat on rooftop work. |
| 5 | Leadership and worker participation | A stated policy, clear roles, and consultation and participation of technicians (5.4) in assessing their own work risks. |
| 6 | Planning | Hazard identification and risk assessment (6.1.2), legal and other requirements (6.1.3), and measurable objectives. |
| 7 | Support | Resources, competence, awareness, communication and documented information, such as training records for work on alarm panels and fire pumps. |
| 8 | Operation | Operational controls, management of change (8.1.3), procurement (8.1.4), and emergency preparedness and response (8.2). |
| 9 | Performance evaluation | Monitoring and measurement, evaluation of compliance (9.1.2), internal audit (9.2) and management review (9.3). |
| 10 | Improvement | Incident, nonconformity and corrective action (10.2) and continual improvement (10.3). |
Editions and amendments: 2018, the 2024 amendment and the next revision
ISO 45001 was published in March 2018 by technical committee ISO/TC 283 and replaced the earlier British standard OHSAS 18001. ISO says it was reviewed and confirmed in 2024, so this edition remains current.
In February 2024, Amendment 1 (Amd 1:2024) was issued as part of the climate change additions to management system standards. It added to clause 4.1 a requirement that the organization shall determine whether climate change is a relevant issue, and added a note to clause 4.2 that relevant interested parties can have requirements related to climate change.
ISO lists a draft revision under development, planned for publication as ISO 45001:2027. Specifications and prequalification documents should therefore refer to “ISO 45001:2018 including amendments, or a later edition”, and be reviewed once the new edition is out.
ISO 45001 and the Saudi Labor Law
In Saudi Arabia, the legal duty comes first from the Labor Law, published by the Ministry of Human Resources and Social Development. Article 122 requires every employer to take the necessary precautions to protect workers from work hazards and diseases, and to post safety instructions in a visible place in Arabic and, when necessary, in another language workers understand. Article 123 requires the employer to inform workers of their job hazards, provide suitable personal protective equipment and train them in its use.
Article 125 speaks directly to our subject: the employer shall take the necessary precautions to prevent fire, prepare the technical means to fight it, including escape exits kept usable at all times, and post detailed fire prevention instructions in a visible place.
ISO 45001 asks the organization to determine the legal requirements that apply and evaluate its compliance: a tool to manage these duties, not a substitute. The fire systems themselves remain subject to SBC 801 requirements and to Civil Defense safety licensing through the Salamah platform.
What ISO 45001 means for fire protection contractors
Fire protection technicians often work in occupied buildings under changing conditions, so risk assessment should follow the actual tasks, not a generic template. Hazards that deserve their own assessment include:
- Work at height when installing sprinkler piping or detectors under high ceilings.
- Hot work, such as welding and cutting pipe, in a building where some fire protection may be shut down.
- Work on energized fire alarm panels and fire pump controllers.
- Hydrostatic pressure tests and running fire pumps during testing.
- Accidental discharge of gaseous extinguishing systems during maintenance, and entry into the rooms they protect.
Good practice is to turn these assessments into method statements, work permits and documented training, and to coordinate with the owner before any shutdown, because an alarm or sprinkler system out of service changes the risk for everyone in the building. Our NFPA 25 inspection, testing and maintenance guide explains impairment procedures for water-based systems.
Under clause 10.2, it is worth recording site near misses, such as a tool dropped from a scaffold or an unintended alarm during testing.
What ISO 45001 means for facility owners and managers
The standard requires emergency preparedness and response (8.2). In a building, that depends on systems that actually work: fire alarm, voice evacuation, emergency and exit lighting and escape routes. Linking the emergency plan to the maintenance records and test results of these systems is good practice.
Owners can use clause 8.1.4 (procurement) to set clear safety requirements for installation and maintenance contractors before award. Management of change (8.1.3) is also worth applying when fire systems are modified or part of a building changes use.
A management system does not replace personal protective equipment and training in its use, which we covered in our news on workplace PPE.
How to verify an ISO 45001 certificate and use it in prequalification
ISO notes that many certification bodies are accredited, meaning an accreditation body has confirmed their competence. Recommended steps when assessing contractors:
- Ask for a copy of the certificate, the name of the certification body and the accreditation body that accredited it.
- Match the certificate scope to the work required, such as installation and maintenance of fire protection systems, and to the branches and sites that will do the work.
- Check the issue and expiry dates and the certificate status on IAF CertSearch, the International Accreditation Forum (IAF) database; if it does not appear, ask the certification body to confirm directly.
- Ask for short evidence of implementation: risk assessments for similar work, method statements, training records and incident statistics.
- Score the certificate as one criterion, not the only safety requirement, and monitor actual site performance after award.
- Use the same requirement wording for every bidder so the comparison is fair.
Common mistakes and what drives implementation cost
- Treating the certificate as proof of legal compliance, when it assesses the management system and does not replace Labor Law or Civil Defense requirements.
- Accepting a certificate whose scope covers the head office or another activity but not the site work required.
- Accepting an old OHSAS 18001 certificate, which has not been valid as an accredited certificate since 30 September 2021.
- A paper system that technicians never see, although clause 5.4 is dedicated to consultation and participation of workers.
- Leaving subcontractors out of risk assessment, training and supervision.
Implementation and certification cost depends on the number of workers and sites, the type and risk of the work, any existing ISO 9001 or ISO 14001 system to integrate with, the audit days set by the certification body, and the internal training needed.
How AZEIDK helps
AZEIDK has worked in the Saudi market for more than 16 years in fire protection, mechanical, electrical and plumbing (MEP) works, low-current systems and technical maintenance. We support your safety system on the fire systems side: annual maintenance contracts with a schedule of periodic visits and inspections, documented functional tests and reports on observations and recommended corrective actions, and assessment of existing systems and scope of work definition to identify technical gaps and prioritize corrective actions.
We also help with documentation and final handover, organizing as-built drawings, operation and maintenance manuals, inspection and test reports and available equipment certificates, the records a facility manager needs for the emergency plan and compliance evaluation. If you are assessing people rather than management systems, see our guide to the NFPA CFPS certification.
FAQ
Is ISO 45001 certification mandatory in Saudi Arabia?
We found no general legal text requiring it, and ISO says an organization can apply the standard without certification. The Labor Law does require employers to take safety and fire prevention precautions, and some owners may require the certificate in prequalification, in which case the project documents decide.
Does ISO 45001 replace Civil Defense and Saudi code requirements?
No. It is an OH&S management system that asks the organization to identify legal requirements and evaluate its compliance. Design, installation and licensing of fire systems are governed by SBC 801 and Civil Defense, and an ISO 45001 certificate replaces none of them.
What did the 2024 amendment change?
Amendment 1, issued in February 2024, added to clause 4.1 a requirement to determine whether climate change is a relevant issue, and a note to clause 4.2 that interested parties can have climate-related requirements. It is one page long and came with similar amendments to other management system standards.
Is an OHSAS 18001 certificate still acceptable?
Not as an accredited certificate. ISO states that ISO 45001 replaces the British standard OHSAS 18001, and the migration period ended on 30 September 2021 after a six-month extension; accredited OHSAS 18001 certificates have not been valid since then. Prequalification documents should ask for a valid ISO 45001 certificate and should not accept an OHSAS 18001 certificate in its place.
How do I check that a contractor’s certificate is genuine?
Search by company name or certificate details on IAF CertSearch, which shows whether the certificate is valid and the certification body accredited. If it is not listed, ask the certification body for written confirmation, and review scope, sites and expiry date.
Is ISO 45001 practical for a small contractor?
Yes. ISO says the standard applies to any organization regardless of size or sector, and publishes a practical guide for small organizations. The level of detail scales with size and risk, so a small contractor can run a lean system focused on the real hazards of its site work.
Planning fire system maintenance with worker safety in mind? Send us your facility scope and existing systems, and we will propose a schedule of periodic inspection and maintenance visits under a contract scope that fits your emergency plan. Contact the AZEIDK team
