ISO 45001:2018 for healthcare
ISO 45001 for healthcare: certified online
Clinics, care homes, home care services and their suppliers use ISO 45001 to show that staff safety is managed on purpose. With Zertify you answer 34 yes/no questions online and receive the certificate within 4 hours after passing and payment. No auditor has to visit your wards.
01: Demand
Why do customers and tenders in healthcare ask for ISO 45001?
Healthcare employers carry physical and psychological load in every shift. Staff lift patients, handle sharps, work nights and face aggression at admission desks. A hospital purchasing department, a care group or a public contracting body that sends out a supplier questionnaire wants to know how you manage this. A certificate answers the question with one number instead of ten pages of explanation.
The request does not stop at care providers. It reaches the companies that work inside healthcare buildings: cleaning and laundry services, sterilisation, patient transport, catering, technical maintenance and staffing agencies. Their employees meet the same infection, chemical and lifting hazards, and the client carries part of the risk if something goes wrong on site.
ISO 45001 is the recognised standard for occupational health and safety management. It asks you to find hazards before an accident happens, to involve the people who do the work, and to make senior management responsible. For a buyer, that is a clear and checkable signal.
02: Risks
Which healthcare risks does ISO 45001 address?
The standard does not list hazards for you. It requires you to identify your own and to control them in a set order: remove the hazard first, then substitute, then change the work, and only then rely on training and protective equipment. In healthcare, the hazards that usually come up first are these.
- Patient handling
- Lifting, turning and transferring patients strains backs and shoulders. Controls include ceiling hoists, sliding sheets and a rule for when two people must assist.
- Sharps and biological agents
- Needlestick injuries and contact with blood or infectious patients. Controls include safety needles, disposal containers at the point of use, vaccination offers and correct protective equipment.
- Hazardous substances
- Disinfectants, cleaning agents, cytostatic drugs and anaesthetic gases. Controls include safer products, ventilation, closed transfer systems and clear labelling.
- Violence and aggression
- Emergency departments, psychiatric wards and reception areas carry a higher risk of verbal and physical attacks. Controls include alarm systems, room layout, de-escalation training and a reporting channel.
- Shift work and workload
- Night duty, on-call periods and short rest times affect health and raise error risk. Controls include roster rules, protected rest and a way to report overload.
- Emergencies
- A fire on a ward with bedridden patients or a power failure in a care home needs a plan that people have practised. The standard requires you to prepare for such cases and to review the plan after drills and real events.
03: Requirements
How does a healthcare business meet the key requirements?
The requirements follow the usual management system structure: leadership in clause 5, planning in clause 6, operation in clause 8, performance evaluation in clause 9 and improvement in clause 10. In a clinic or care home, clause 5 means that the managing director or medical director owns the topic. It cannot be delegated to the safety officer alone. The table shows how each key requirement looks in daily work.
| Requirement | Example in a clinic or care home |
|---|---|
| Identify and assess hazards | Each ward manager walks through the department with a checklist and rates lifting, sharps and chemical hazards. |
| OH&S policy with a commitment to prevention | Management signs a one-page policy. It is part of the onboarding folder and hangs in the staff room. |
| Consult and involve workers | Nursing, cleaning and kitchen staff name representatives who review the risk assessments and bring reports from the floor. |
| Hierarchy of controls | A manual transfer is replaced by a hoist before anyone relies on a back-care course. |
| Emergency preparedness and response | An evacuation plan for bedridden residents is tested in a drill and corrected afterwards. |
| Investigate incidents and derive actions | After a needlestick injury the team finds the cause, for example an overfull disposal container, and changes the process. |
04: Preparation
What should be ready before you start the self-assessment?
The questions are easy to answer when the underlying documents exist. Gather these five items first.
A hazard list per area
Wards, laboratory, kitchen, laundry, reception and vehicles each have their own hazards. One page per area is enough.
A signed policy
Short, dated and signed by the person at the top of the organisation.
A record of worker consultation
Minutes of a team meeting or safety round where staff raised concerns and received an answer.
An emergency plan
Fire, evacuation, medical emergency and power failure, with named responsibilities.
An incident log
Accidents, near misses and the action taken. An empty log is a warning sign, not a good result.
If one of these is missing, write it before you begin. It takes less time than most managers expect.
05: Zertify
How do you get ISO 45001 certified with Zertify?
You complete an online self-assessment with 34 yes/no questions for ISO 45001. Fourteen of them are mandatory requirements of the standard and must all be answered yes. Among the other 20 questions you need at least 14 yes answers. After you pass and pay, the certificate follows. It is issued by G6 Agency AG under licence from SICE, and SICE reviews every assessment before the certificate is issued.
The certificate is valid for 3 years and is confirmed every year by a short online re-audit. Every certificate has a number and a QR code on the PDF. A purchasing department or a customer auditor opens the public verification page and sees the status without calling you.
The price is CHF 699 (€699) in the first year, then CHF 469 (€469) per year including the yearly online re-audit. Prices include 8.1% Swiss VAT for customers in Switzerland and Liechtenstein. Billing is an automatic yearly subscription. You can cancel at any time in the customer account to the end of the current year, and the certificate then ends with the paid year. If you certify two standards the discount is 20%, for three or more it is 30%, also on the yearly fee. You do not need an account to buy.
06: Alternatives
When is the classic route with an on-site audit the better choice?
Some tenders and framework agreements name an on-site audit by a certification body in their text. If yours does, that wording decides, and you should read it before you choose a route. In all other cases the requesting party usually wants proof that a system exists and can be verified.
The classic route means an auditor visits your sites, and scheduling and fees are higher. Indicative ranges are on the cost guide. If your clients have not specified a route, the guides below help you compare the options for your size and sector.
07: FAQ
Questions about ISO 45001 in healthcare
08: Guide
Related pages
Check where your organisation stands on ISO 45001
Answer the 34 questions online and see which requirements you already meet.
Free and without registration.