Governance DocsGovernance Docs
Browse Toolkits

CART

No products in the cart.

ISO Compliance Insights & Best Practices

ISO 45001 certification cost 2026 infographic: typical audit fees by company size and OH&S risk category

ISO 45001 Certification Cost: A Complete 2026 Breakdown

ISO 45001 certification cost in 2026 lands between roughly $3,000 and $14,000 for most small and mid-sized organizations, before you count the internal hours it takes to build the occupational health and safety management system in the first place. The range is wide because certification bodies do not price ISO 45001 like a product. They price auditor days, and for health and safety those days come out of a formula published by the International Accreditation Forum that depends on how dangerous your work is, not just how many people you employ.

This guide breaks the number into the buckets that show up on invoices — the standard, the build, the certification audit and the three-year cycle — plus the variable that makes an ISO 45001 quote different from an ISO 9001 quote for the same headcount: your OH&S risk category. It closes with the cost implication of the second edition, now at Draft International Standard stage.

What ISO 45001 certification cost actually buys you

You are buying an audit, not a document. An accredited certification body sends auditors to verify that your OH&S management system meets ISO 45001:2018, and if it does, issues a certificate valid for three years. ISO writes the standard and certifies nobody, so every quote comes from a registrar. The full certification process is covered in our pillar guide; this post is only about the money.

The initial assessment is split in two. Stage 1 is a documentation and readiness review, often partly remote. Stage 2 is the full on-site audit against every clause. Because auditors have to see hazards in operation — machinery, work at height, confined spaces, chemical stores — and interview workers rather than just managers, there is a hard floor on how much of an OH&S audit can be done from a desk. That floor is why ISO 45001 certification cost resists the discounting you see in software-only frameworks.

How certification bodies calculate the audit fee

Audit duration for OH&S management systems is governed by IAF MD 22, the mandatory document every accredited registrar has to follow when certifying to ISO 45001 — the health and safety counterpart of IAF MD 5. It works on three inputs:

  1. Effective number of personnel. Everyone working inside the certified scope, including shift workers, contractors under your control and part-timers, as full-time equivalents.
  2. OH&S complexity category. MD 22 sorts sectors into high, medium and low risk by what happens when the system fails to control a hazard. Construction, mining, chemicals, metal fabrication and healthcare are high; food processing, general engineering and electronics assembly are medium; offices, retail, finance and public administration are low.
  3. Number of sites and shifts. Multi-site scopes are sampled under MD 22’s own rules, and a registrar that does not audit every shift has to document why.

Table OH&SMS 1 in MD 22 turns the first two inputs into a starting number of audit days for Stage 1 plus Stage 2 combined. A few rows from it:

Effective personnelHigh riskMedium riskLow risk
1–53 days2.5 days2.5 days
6–103.5 days3 days3 days
16–255.5 days4.5 days3.5 days
46–658 days6 days4.5 days
86–12511 days8 days5.5 days
176–27513 days10 days7 days

The registrar then adjusts up for multiple buildings, heavy regulation, an accident rate above the sector average or a workforce that needs interpreters, and down for a mature system or a very small site — but MD 22 caps any reduction at 30 percent of the table figure. Multiply the final day count by the day rate and you have the certification audit fee. That is the whole formula. Anyone quoting a flat price has already run it and would rather you did not.

ISO 45001 certification cost by company size in 2026

Accredited certification bodies in the US market typically charge between $1,200 and $2,500 per auditor day in 2026; UK registrars publish roughly £850 to £1,500. Applying those day rates to the MD 22 table gives the ISO 45001 certification cost ranges below. They are typical figures drawn from published 2026 guidance by accredited certification bodies, not a quote — pricing varies by country, sector and registrar.

ScopeMD 22 starting daysCertification audit (Stage 1 + Stage 2)Annual surveillance audit
1–10 people, low risk (office, services)2.5–3$3,000 – $7,500$1,500 – $3,000
16–25 people, medium risk (light manufacturing)4.5$5,500 – $11,500$2,000 – $4,000
16–25 people, high risk (construction, fabrication)5.5$6,500 – $14,000$2,500 – $5,000
46–65 people, high risk8$9,500 – $20,000$3,500 – $7,000
100+ people or multi-siteQuote-driven$15,000 – $35,000+$6,000 – $12,000+

Read the two 16–25 rows together and you see what surprises people about ISO 45001 certification cost: the same 20-person company pays about 20 percent more for the same certificate if it welds steel than if it assembles electronics, and more still than if it sells insurance. The auditor needs longer to watch a hazardous process being controlled than to check a filing system.

For a company of 10 to 25 people, a realistic all-in first-year ISO 45001 certification cost — standard, implementation effort, training and the certification audit — is $9,000 to $22,000. If a quote comes in dramatically under that for an accredited certificate, ask which accreditation body the registrar holds and check its public register before you sign. Unaccredited certificates exist in this market and are worth what the tender evaluator says they are worth, which is usually nothing.

The costs that never appear on the registrar’s invoice

Most people budget the audit and are then surprised by everything around it. These are the parts of ISO 45001 certification cost that get missed:

  • The standard itself. ISO 45001:2018 is CHF 196 from the ISO Store, about US$240 at current rates. The 2024 climate action amendment, Amd 1, is free, and your auditor will expect to see it reflected in your context review.
  • Internal time. The largest cost in almost every project and the one nobody invoices. Published 2026 consultancy estimates put internal effort for a small organization at roughly 170 to 340 hours across hazard identification, the legal register, procedures, worker consultation and the internal audit. At $50 an hour loaded, that is $8,500 to $17,000 of salary you spend whether or not you write it down.
  • Consultants. Optional, and the most compressible line. Typical 2026 engagements run $5,000 to $15,000 for a small single-site organization and $15,000 to $40,000 for a mid-sized one. High-risk sectors sit at the top of each band because the hazard work is real work.
  • Training. An ISO 45001 internal auditor course is typically $800 to $2,000 per person; a lead implementer course $1,500 to $3,000. You need at least one trained internal auditor, because clause 9.2 requires internal audits and clause 7.2 requires you to be able to show the people doing them are competent.
  • Legal compliance work. Clause 6.1.3 requires you to determine and keep current the legal and other requirements that apply to your hazards. If you have never built a legal register, that is a separate project with its own cost, and a common source of first-time nonconformities.
  • Extras. Auditor travel, an annual registration fee, sometimes a certification decision fee, and a return visit at the day rate if Stage 2 finds a major nonconformity. Ask for these in writing.

The three-year cycle is the real budget

A certificate is not a one-off purchase. MD 22 sets the maintenance pattern: annual surveillance audits at about one third of the initial audit time, and a recertification audit in year three at about two thirds of a fresh initial audit, with neither falling below one audit day. For a 20-person medium-risk company that paid $8,000 for the initial audit, a reasonable cycle looks like this:

YearAuditTypical fee
1Stage 1 + Stage 2$8,000
2Surveillance$2,700
3Surveillance$2,700
4Recertification$5,500

Across the first cycle, budget two to two and a half times the initial audit fee in certification body charges alone, then add what it costs to keep the system alive between audits: refresher training, the annual internal audit, incident investigations and management review. The organizations that find ISO 45001 certification cost painful are usually the ones that treated year one as the finish line.

How the ISO 45001 revision changes the cost math

ISO 45001:2018 is the current edition, confirmed by ISO in 2024, but it now sits at stage 90.92 — “to be revised” — and its successor, ISO/DIS 45001, reached Draft International Standard stage in 2026. ISO’s catalogue says the 2018 edition is expected to be replaced within the coming months; certification bodies are planning for publication in 2027 with a three-year transition, the same window quoted for ISO 14001:2026. Treat the dates as anticipated until ISO publishes.

The proposed changes matter for cost because they are mostly additive: stronger treatment of psychosocial risk and wellbeing, explicit coverage of remote and hybrid work, climate-related hazards such as heat stress, and more on outsourced processes. None of it requires a rebuild, but all of it requires a gap analysis, some new documented evidence and a transition audit.

The pricing rule certification bodies published for the ISO 14001:2026 transition is worth planning around now: a transition audited as part of your recertification is close to free, because the recertification duration already covers every clause; a transition folded into a surveillance audit typically adds half a day to a day and a half per site; and a standalone transition audit runs $3,000 to $10,000. If your certificate is due for renewal in 2028 or 2029, align the edition change with recertification and you avoid the surcharge entirely.

Four ways to reduce ISO 45001 certification cost without cutting corners

  1. Get the scope and the risk category right before you request quotes. Scope drives effective personnel; sector drives the complexity category; together they drive days. Gerrymandering the scope to exclude your most hazardous activity gets found at Stage 1 and looks worse than the cost it saved.
  2. Insist on day rate times days, and align the 2027 transition with recertification. The first makes quotes comparable; the second is often worth several thousand dollars on its own.
  3. Do not write the documentation from scratch. A hazard identification procedure, an OH&S policy, a legal register, an incident investigation procedure, an emergency plan and a full set of records consume weeks of senior time. Start from the mandatory documents and records list and work outward.
  4. Run a gap analysis and a real internal audit before Stage 2. Finding a major yourself costs a day; the auditor finding it costs a day plus a fee plus a delayed certificate.

On the third point: our ISO 45001 Toolkit is a 50+ template document set written to ISO 45001:2018, for $99. Against a consultant engagement in the $5,000 to $40,000 range, or against the internal hours the same paperwork costs you, it is the cheapest variable in the whole budget. It does not replace the audit, and nothing does.

ISO 45001 certification cost FAQ

Is ISO 45001 certification worth the cost?

It depends on whether someone is asking for it. The ISO Survey 2024 counted 542,527 valid ISO 45001 certificates worldwide, and a large share exist because a principal contractor, a tender or a supply chain requirement made certification a condition of doing business. If that is you, the return is obvious. If nobody is asking, an uncertified OH&S system built to the same standard delivers most of the benefit at a fraction of the price. ISO 45001 is voluntary; it is not a legal requirement in any major jurisdiction.

Is ISO 45001 certification cost higher than ISO 9001 or ISO 14001?

For a low-risk office, about the same. For anything with real hazards, yes, and the gap widens with headcount. The MD 22 high-risk column runs roughly 20 to 40 percent above the medium-risk column, and medium already sits above a typical MD 5 quality audit. See our ISO 14001 certification cost breakdown for the environmental comparison.

Can I reduce the fee by integrating ISO 45001 with ISO 9001 or ISO 14001?

Yes. MD 22 hands integrated audits to IAF MD 11, which allows the combined audit time to be reduced where the systems share documentation, management review, internal audit and corrective action processes. Registrars apply a reduction to the combined day count rather than charging the full duration for each standard, and the annual surveillance and admin fees are consolidated. The reduction is capped, so do not expect a two-for-one.

The short version

ISO 45001 certification cost is auditor days multiplied by a day rate, and the day count comes from IAF MD 22’s table of headcount against OH&S risk category. A small low-risk organization should expect $3,000 to $7,500 for the initial audit; a 20-person manufacturer $5,500 to $14,000 depending on its hazards; and everyone should budget two to two and a half times the initial fee across the three-year cycle. The standard is $240, the consultant is optional, the internal hours are not, and the cheapest decision you can make is to align the 2027 edition transition with recertification.

When a standard changes, know first

One email a month: edition changes, new deadlines, and what they mean for documentation you already have. No sales sequence.

We don’t spam! Read our privacy policy for more info.