ISO 9001 vs ISO 45001 — what's the difference?

Australian businesses pursuing ISO certification often encounter two standards early: ISO 9001 (quality management) and ISO 45001 (occupational health and safety). They share the same structure, but they serve different purposes. Here's what you need to know.

The short answer

ISO 9001 ensures you deliver products and services consistently and to a defined standard of quality. It covers customer requirements, operational planning, supplier management, and continuous improvement.

ISO 45001 ensures you manage workplace health and safety risks systematically. It covers hazard identification, risk assessment, worker consultation, emergency preparedness, and incident investigation.

Side-by-side comparison

The shared structure

Both standards use the ISO High Level Structure (HLS) — the same clause numbering from 4 to 10. This means organisations pursuing both standards can build an integrated management system rather than maintaining two separate systems. The clauses are:

• Clause 4 — Context: Understanding your organisation and stakeholders
• Clause 5 — Leadership: Management commitment and policy (blocker clause in both)
• Clause 6 — Planning: Risks, opportunities, and objectives
• Clause 7 — Support: Resources, competence, and documented information
• Clause 8 — Operation: Operational planning and control
• Clause 9 — Performance Evaluation: Monitoring, audit, and management review
• Clause 10 — Improvement: Nonconformity, corrective action, and continual improvement

Where they differ

Despite sharing the same structure, the specific requirements within each clause differ significantly:

• Clause 5 — Worker participation: ISO 45001 has explicit requirements for worker consultation and participation in OH&S decisions (Clause 5.4). ISO 9001 does not have an equivalent requirement.
• Clause 6 — Risk focus: ISO 9001 addresses risks to product and service quality. ISO 45001 addresses risks to worker health and safety, including hazard identification (6.1.2) and legal compliance (6.1.3).
• Clause 8 — Operational controls: ISO 9001 Clause 8 covers design, production, and supplier management (103 questions in Cert Ready). ISO 45001 Clause 8 covers hazard elimination, management of change, contractor OH&S, and emergency preparedness.
• Scope: ISO 9001 focuses on customer satisfaction and product conformity. ISO 45001 focuses on preventing injury, illness, and death.

Which do you need?

The answer depends on your industry and your clients' requirements:

• Professional services, IT, consulting: ISO 9001 is usually sufficient. WHS risks are typically lower, and clients focus on service quality.
• Mining, construction, manufacturing: Most businesses need both. Tier 1 operators and principal contractors typically require ISO 9001 for quality and ISO 45001 for WHS as conditions of prequalification.
• Government contracts: Requirements vary by jurisdiction and contract type. Check your state procurement guidelines.

Pursuing both standards

Because ISO 9001 and ISO 45001 share the High Level Structure, an integrated approach is significantly more efficient than building two separate systems. Shared elements include:

• Management commitment and policy (Clause 5)
• Document control and records management (Clause 7.5)
• Internal audit programme (Clause 9.2)
• Management review (Clause 9.3)
• Corrective action and improvement processes (Clause 10)

Certification bodies also offer integrated audits — a single audit covering both standards — which reduces both time and cost compared to separate audits.

Assess your readiness

Cert Ready supports both standards. The ISO 9001 assessment covers all 269 requirements with a 5-level maturity scoring model. The ISO 45001 assessment covers 45 requirements with binary (Yes/No) scoring. Both produce a prioritised gap report with specific recommendations. Start your assessment.