Standards & Documentation

ISO 45001

Pirkka ParonenWritten by Pirkka Paronen
Tomi LehtinenReviewed by Tomi Lehtinen

Key Points

  • Provides a framework for proactive occupational health and safety management.
  • Requires organizations to identify hazards, assess risks, and implement controls.
  • Follows a Plan-Do-Check-Act continuous improvement cycle.
  • Replaces the former OHSAS 18001 standard.

Definition

International standard for occupational health and safety management systems.


Related Terms

HSE / HSEQ / HSSE

These acronyms refer to Health, Safety, Environment, and sometimes Quality or Security. They represent key focus areas in industrial operations.

Compliance

Compliance in industrial safety refers to the systematic adherence to laws, regulations, industry standards, and internal policies that govern how work is planned, executed, and documented. It spans a wide range of requirements — from national occupational health and safety legislation and environmental regulations to international standards like ISO 45001 and industry-specific frameworks such as IOGP guidelines. For organizations operating in high-risk industries like oil and gas, chemicals, energy, and construction, compliance is not merely a legal obligation but a fundamental element of operational integrity. Non-compliance can result in severe consequences including regulatory fines, facility shutdowns, loss of operating licenses, criminal prosecution of responsible individuals, and — most critically — workplace injuries or fatalities that could have been prevented. In practice, compliance requires continuous monitoring, regular auditing, thorough documentation, and a culture of accountability at every level of the organization. Permit-to-work systems are one of the primary tools for demonstrating compliance, as they create auditable records showing that work was properly planned, risks were assessed, controls were implemented, and approvals were obtained before hazardous activities began. Digital PTW platforms significantly strengthen compliance capabilities by enforcing mandatory workflow steps, preventing permits from being issued without required approvals or safety checks, maintaining comprehensive audit trails, and generating compliance reports that can be presented to regulators and auditors as evidence of systematic safety management.

Governance

Governance in the context of industrial safety and operations refers to the framework of rules, roles, responsibilities, and processes through which an organization makes decisions, assigns accountability, and ensures that policies are consistently followed. It encompasses everything from the board-level oversight of health and safety performance to the day-to-day enforcement of standard operating procedures on the plant floor. A strong governance framework defines who has the authority to approve work permits, who is accountable for safety performance in each area, how incidents are investigated and reported, and how corrective actions are tracked to completion. In permit-to-work systems, governance determines the approval hierarchy — for example, which roles can issue permits for high-risk activities like hot work or confined space entry versus routine maintenance tasks. It also establishes how exceptions are handled, how the PTW process itself is audited, and how performance metrics are reviewed by management. Without effective governance, even well-designed safety systems can fail because responsibilities become unclear, procedures are inconsistently applied, and there is no mechanism for accountability or continuous improvement. Organizations that implement digital safety management platforms benefit from built-in governance structures including role-based access control, automated approval workflows, audit trails, and compliance dashboards that provide management with real-time visibility into safety performance.

ISO 14001

Environmental management standard focusing on sustainability.

OSHA

OSHA (Occupational Safety and Health Administration) is the United States federal agency responsible for setting and enforcing workplace safety and health standards across all industries. Established in 1971 under the Occupational Safety and Health Act, OSHA operates within the Department of Labor and covers most private-sector employers and workers in the United States. OSHA develops and publishes comprehensive safety regulations covering a wide range of hazardous activities directly relevant to permit-to-work processes, including confined space entry (29 CFR 1910.146), lockout/tagout procedures for energy isolation (29 CFR 1910.147), hot work safety, fall protection, and hazard communication. These standards establish minimum requirements for how hazardous work must be planned, controlled, and documented. While OSHA regulations are legally binding only within the United States, their influence extends globally — many multinational companies adopt OSHA standards as their internal safety benchmarks regardless of operating location, and OSHA's approach to workplace safety has shaped regulations and best practices worldwide. OSHA enforces compliance through workplace inspections, and violations can result in significant fines, mandatory corrective actions, and in severe cases, criminal prosecution. For organizations implementing digital permit-to-work systems, OSHA standards provide a critical reference point for designing permit workflows, defining safety checklists, and establishing documentation requirements that demonstrate regulatory compliance.

More in Standards & Documentation

RAMS

RAMS (Risk Assessment and Method Statement) is a combined safety document that pairs a thorough risk assessment with a detailed description of how work will be carried out safely, step by step. It is one of the most widely used safety planning documents in construction, oil and gas, energy, and heavy industrial projects. The risk assessment component identifies all hazards associated with the work activity, evaluates the likelihood and severity of each risk, and specifies the control measures required to reduce risks to an acceptable level. The method statement component then provides a sequential description of how the work will be performed, incorporating the identified controls into each step. This dual approach ensures that safety considerations are embedded directly into the work methodology rather than treated as a separate overlay. RAMS documents are typically prepared by the contractor or work team performing the activity and must be reviewed and approved by the site safety team or permit authority before any work commences. They serve as a key supporting document in the permit-to-work process — a permit cannot be issued for complex or high-risk work without an approved RAMS. In practice, RAMS also functions as a communication tool during toolbox talks, ensuring that every worker understands both the risks involved and the exact sequence of safe work steps. Digital safety management platforms streamline RAMS creation, review, and approval workflows, and maintain version-controlled libraries of RAMS templates for recurring activities.

Rescue Plan

A rescue plan is a documented emergency response procedure that defines exactly how workers will be rescued if an incident occurs during high-risk work activities. It is a mandatory requirement for work that takes place in environments where standard evacuation procedures may be inadequate — including confined space entry, work at height, work over water, and operations in remote or isolated locations. The rescue plan must be specific to the work activity and location, not a generic document, because rescue requirements vary dramatically depending on the type of hazard, the physical environment, and the number of workers involved. A comprehensive rescue plan identifies the rescue team members and their roles, specifies the rescue equipment that must be on-site and ready for immediate use (such as harnesses, winches, breathing apparatus, and first aid supplies), defines communication protocols for activating the rescue response, details the physical access and egress routes that rescuers will use, and establishes the interface with external emergency services. Crucially, the rescue plan must be communicated to all workers before work begins — typically during the pre-task toolbox talk — and should be rehearsed or tested where practical to ensure that the rescue can actually be executed within the required timeframe. In permit-to-work systems, the rescue plan is a prerequisite for permit issuance: the permit cannot be approved until a site-specific rescue plan has been reviewed and accepted by the approving authority. Many regulatory frameworks mandate that rescue capability must be demonstrated before high-risk work commences, making the rescue plan not just a best practice but a legal requirement.

PPE

Personal Protective Equipment (PPE) encompasses all equipment, clothing, and devices worn or used by workers to protect them from workplace hazards that cannot be fully eliminated through other control measures. In the hierarchy of controls — the universally accepted framework for managing workplace risks — PPE is positioned as the last line of defense, used only when hazards cannot be adequately controlled through elimination, substitution, engineering controls, or administrative measures. Common categories of PPE in industrial settings include head protection (hard hats), eye and face protection (safety glasses, goggles, face shields), hearing protection (earplugs, earmuffs), respiratory protection (masks, respirators, self-contained breathing apparatus), hand protection (gloves rated for specific hazards), foot protection (safety boots), fall protection (harnesses, lanyards), and specialized clothing (flame-resistant coveralls, chemical suits, high-visibility vests). The selection of appropriate PPE must be based on the specific hazards identified during the risk assessment — using the wrong type of PPE can be as dangerous as using none at all. In the permit-to-work process, required PPE is explicitly specified on the permit document based on the task risk assessment, and verification that all workers have the correct PPE is a prerequisite for work to commence. PPE must be properly fitted to each worker, regularly inspected for damage or wear, maintained according to manufacturer specifications, and replaced when it no longer provides adequate protection. Training workers in the correct use, care, and limitations of their PPE is equally important.

ATEX Equipment

ATEX equipment refers to tools, instruments, electrical devices, and machinery that have been specifically designed, tested, and certified for safe use in potentially explosive atmospheres where flammable gases, vapors, mists, or combustible dusts may be present. The term ATEX derives from the French "Atmosphères Explosibles" and refers to two European Union directives — Directive 2014/34/EU (covering equipment) and Directive 1999/92/EC (covering workplace safety) — that establish the legal framework for explosion protection in the EU and EEA. ATEX-certified equipment is engineered to prevent ignition sources such as electrical sparks, arcs, hot surfaces, and static discharge that could trigger an explosion in a hazardous atmosphere. Equipment is classified according to the zone in which it can be used: Zone 0 (continuous explosive atmosphere), Zone 1 (likely to occur in normal operation), and Zone 2 (not likely but possible) for gas environments, with corresponding Zones 20, 21, and 22 for dust environments. Each piece of ATEX equipment carries markings indicating its equipment group, category, and temperature class, which must match the specific hazardous area classification of the worksite. In the permit-to-work process, the use of ATEX-rated equipment is a mandatory requirement whenever work is performed in classified hazardous zones. The permit must specify which tools and devices are ATEX-approved for the designated area, and non-ATEX equipment must be strictly excluded. ATEX equipment requires regular inspection, maintenance, and recertification to ensure ongoing compliance — damaged or improperly maintained ATEX equipment can lose its protective properties and become an ignition source itself.


Frequently Asked Questions

How does ISO 45001 relate to PTW systems?

ISO 45001 requires organizations to control high-risk work through planned processes. PTW systems are a practical tool for implementing this requirement, ensuring that hazardous work is properly authorized and controlled.

Is ISO 45001 certification mandatory?

Certification is voluntary but often required by clients, especially in oil and gas, construction, and energy sectors. It demonstrates commitment to worker safety and regulatory compliance.


Pirkka Paronen

Pirkka Paronen

CEO, Gate Apps

CEO of Gate Apps, expert in digital permit-to-work and HSEQ software.

Need help with this?

Our team can help you implement best practices.

Work permits digitally

100% Satisfaction Guarantee.

Join leading companies like Meyer Turku, Orion, and YIT who trust Gate Apps for their permit-to-work processes.

Secure data hostingUnlimited usersGo live in 4 weeks