If you’ve been asked to budget for ISO 45001 certification, you’ve probably found that nobody gives a straight figure. Ask three certification bodies and you’ll often get three different quotes, each built a little differently.

That isn’t because the process is random. There’s simply no set price for ISO 45001 certification. What stays fairly consistent between accredited certification bodies is how much audit work your organization needs, and that is what drives most of the cost.

So instead of guessing at a number, it’s more useful to understand what goes into it. This guide covers the factors that shape an ISO 45001 quote, the costs that sit outside it, and how to compare offers fairly.

Quick Answer

There’s no fixed price for ISO 45001 certification. Each certification body sets its own charges, and most of the cost comes from the number of audit days your organization needs. Those days depend mainly on how many people work within your scope, including relevant contractors, and how serious your OH&S risks are. Surveillance audits, recertification and your own implementation work add to the total.

Why No One Can Quote You a Standard Price

ISO publishes ISO 45001, but it doesn’t certify anyone and doesn’t set fees. Certification is carried out by independent certification bodies, and each one decides its own commercial terms, from its day rate to what it charges for travel or certificates.

The workload behind a quote is more predictable. Accredited certification bodies calculate audit time using the same international method, so for the same scope, their audit days should land fairly close together. Once you understand what drives those days, quotes become much easier to read.

Everything starts with scope: which sites, activities and people your system covers. If you’re still shaping that, it helps to be clear on what an ISO 45001 occupational health and safety management system covers before you ask anyone for a price.

Audit Days: What Really Sets the Price

Accredited certification bodies work out audit time using IAF MD 5, a mandatory document from the International Accreditation Forum. The current version is IAF MD 5:2023. For an OH&S management system, it looks at two things.

How many people are in scope

The starting point is the “effective number of personnel”, meaning permanent, temporary and part-time staff within the certification scope. For OH&S, IAF MD 5 goes further. It says this number “shall also include personnel from contractors and subcontractors performing work or work-related activities that are under the control or influence of the organization.” In other words, contractors working under your control or influence count towards your headcount.

How serious your OH&S risks are

IAF MD 5 places organizations into three complexity categories, high, medium and low, “based on the nature, number and severity of the OH&S risks of an organization.” The difference is substantial. With 26–45 effective personnel, initial certification starts at 7 audit days for high complexity but 4 days for low. With 66–85 people, it starts at 9 days for high and 5 days for low.

An audit day is normally 8 hours. Certification bodies can adjust these starting figures for specific factors, but IAF MD 5 limits any reduction to 30%.

Five Factors That Change Your ISO 45001 Quote

Some of the biggest cost drivers are specific to occupational health and safety, and they’re easy to miss when you first fill in a quotation request.

1. Contractors. Because relevant contractor and subcontractor personnel count towards effective personnel, a site that relies heavily on contractors can need noticeably more audit time than its own payroll suggests.
2. Shift patterns. IAF MD 5 requires that “at least one of the shifts inside and one outside of regular office hours shall be audited during the first cycle of certification.” Night and weekend work has to be built into the audit plan.
3. The nature of the work. Construction, heavy manufacturing, chemical handling and work at height usually sit in a higher risk category than office-based services, which means more audit days.
4. Number of sites. For OH&S, whether a certification body can audit a sample of sites instead of every one depends on the level of OH&S risk at each site. Where the risks are high, sampling may not be allowed, so more sites get audited.
5. How ready you are. If Stage 1 or Stage 2 uncovers major gaps, extra follow-up time may be needed before a certification decision can be made.

Be accurate when you describe your organization. If headcount, contractors or shift work are understated at the quoting stage, the audit time can be revised later, and the quote with it.

The Certification Cycle Is More Than One Audit

A common budgeting mistake is to plan only for the first audit. ISO 45001 certification runs as a cycle, and the certification body is involved throughout it:

• Initial certification. Stage 1 looks at readiness and documentation. Stage 2 checks that the system is actually implemented and working.
• Surveillance audits. Under IAF MD 5, surveillance time each year is about one-third of the initial audit time.
• Recertification. Before the cycle ends, a recertification audit takes place, at about two-thirds of the initial audit time.
• Other charges. Depending on the certification body, these can include application, certificate and travel costs.

Looking at the whole cycle gives a much truer picture of cost than the price of the first visit alone.

Costs That Never Appear on the Quote

The certification body’s charges are only one part of the budget. The rest sits inside your own organization, and for a first certification it’s often the larger share:

• Building the system. Hazard identification, risk assessment, legal requirements, worker consultation and participation, operational controls and emergency preparedness.
• People’s time. Staff involved in writing procedures, collecting records, running internal audits and holding management reviews.
• Training. Awareness for workers, and competence for the people who will run and audit the system.
• Safety improvements. Equipment, controls or changes to how work is done that the system shows are needed.
• External help. Consultancy, if you decide not to build everything in-house.

Training is where many budgets fall short. A team that’s new to the standard usually needs a common starting point before it can implement or audit anything, and ISO 45001:2018 OHSMS training for beginners is one practical way to build it. It also helps to understand how the Plan-Do-Check-Act principles behind ISO 45001 connect planning, operation, checking and improvement, because that structure shapes most of the internal work.

Certifying ISO 45001 Alongside Other Standards

Many organizations run ISO 45001 together with ISO 9001 or ISO 14001. A combined audit may reduce total audit time compared with auditing each standard separately, but that depends on how genuinely integrated the systems are and on the certification body’s own assessment.

Integration also affects your internal team. The people auditing an integrated system still need competence in each standard it covers, which is why many organizations look at CQI and IRCA certified Lead Auditor courses for ISO 9001, ISO 14001 and ISO 45001 standard by standard.

Does the 2027 Revision Affect Your Budget?

It might, depending on timing. Certification is currently to ISO 45001:2018, including its 2024 climate action amendment. ISO expects the revised edition to replace ISO 45001:2018 in the first half of 2027. If you certify now, a transition to the new edition may affect a later audit in your cycle, so ask your certification body how it plans to handle it once the new edition is published.

Organization Certification vs. Individual Training

These two costs often get mixed up, so it’s worth being clear. ISO 45001 certification is for an organization’s management system and is granted by a certification body after an audit. Training is for individuals, to build their own knowledge and auditing skills.

That means a Lead Auditor course is a training cost, not a certification cost. It won’t certify your company, but it can help someone inside the organization prepare for the certification audit and keep the system audit-ready afterwards.

Questions to Ask Before You Accept a Quote

Putting the same questions to every certification body makes quotes directly comparable:

1. Does your accreditation cover ISO 45001 and our type of work? Ask which accreditation body it comes from.
2. How many audit days have you calculated? Get Stage 1, Stage 2, each surveillance audit and recertification separately.
3. What headcount and risk category did you use? Check that contractors and shift workers were counted.
4. How will shifts and sites be covered? Ask how night, weekend or remote-site work will be audited.
5. What’s included, and what’s extra? Look for application, certificate, travel and additional-site charges.
6. How will the 2027 edition be handled? Ask what happens in your cycle once it’s published.

If one quote shows far fewer audit days than the others for the same scope, find out why before you choose it. A lower price built on too few days may not hold up.

Conclusion

There’s no single price for ISO 45001 certification, but the cost isn’t a mystery either. It mostly comes down to audit days, which depend on your people, your contractors, your shifts and your level of OH&S risk, plus the internal work of building and running the system. Compare audit days before you compare prices, and budget for the full certification cycle rather than the first audit alone.

Frequently asked questions

3FOLD Training is a CQI and IRCA Approved Training Partner (view the CQI IRCA profile), and its CQI and IRCA certified ISO 45001 Lead Auditor course is delivered 100% live online. The course trains individuals to plan and carry out OHSMS audits. It isn’t part of an organization’s certification fee and doesn’t replace the certification body’s audit.