Occupational Health & Safety Management Consultants in Dubai, Abu Dhabi & Saudi Arabia
Nathan ISO Consulting implements and certifies ISO 45001:2018 Occupational Health and Safety Management Systems for contractors, industrial operators and service companies across the UAE, Saudi Arabia and the wider GCC — building systems that hold up under a client HSE audit, not just a certification audit.
Safety performance decides which contractors get invited back and which are quietly removed from the vendor list. Whether you are a construction contractor in Dubai preparing for a Municipality classification, an oil and gas services company registering with ADNOC, a facilities management provider bidding in Abu Dhabi, or an industrial operator in Jubail or Riyadh, our ISO 45001 consultants take you from gap assessment through to a certificate issued by an accredited certification body.
What Is ISO 45001:2018?
ISO 45001:2018 is the international standard for Occupational Health and Safety Management Systems. It replaced OHSAS 18001, which has been withdrawn, and organisations still holding legacy certificates were required to migrate. The standard provides a framework for identifying hazards, controlling risk, meeting legal obligations and continually improving safety performance across an organisation.
Built on the Annex SL high-level structure shared with ISO 9001 and ISO 14001, it integrates cleanly with quality and environmental systems. Its scope covers both safety — preventing injury — and occupational health, which includes exposure to noise, heat, chemicals, dust, vibration and ergonomic risk. In practice, the health half is the more commonly neglected of the two across this region.
| Clause | Requirement area | What must be demonstrated |
|---|---|---|
| Clause 4 | Context | Internal and external issues, needs of workers and other interested parties, OHSMS scope |
| Clause 5 | Leadership and worker participation | Top management accountability that cannot be delegated, plus genuine consultation with non-managerial workers |
| Clause 6 | Planning | Hazard identification, risk and opportunity assessment, legal and other requirements, measurable OH&S objectives |
| Clause 7 | Support | Resources, competence, awareness, communication, documented information |
| Clause 8 | Operation | Operational controls applying the hierarchy of controls, management of change, procurement and contractor control, emergency preparedness |
| Clause 9 | Performance evaluation | Monitoring, measurement, evaluation of compliance, internal audit, management review |
| Clause 10 | Improvement | Incident investigation, nonconformity and corrective action, continual improvement |
The first is leadership. Clause 5.1 makes top management personally accountable for preventing work-related injury and ill health, and states explicitly that this responsibility cannot be delegated to a safety officer. In audit terms, the assessor interviews your General Manager, not your HSE Manager, and expects an informed answer about hazards, incident trends and objectives.
The second is worker participation. Clause 5.4 requires consultation with non-managerial workers on hazard identification, risk assessment, incident investigation and the determination of controls. This is the most frequently failed clause in the region, because participation is usually assumed rather than evidenced. A toolbox talk attendance sheet is communication, not consultation — auditors look for records showing workers raised something and the organisation responded.
The third is the hierarchy of controls. Clause 8.1.2 requires controls in order: eliminate, substitute, engineering controls and work reorganisation, administrative controls including training, and only then personal protective equipment. Risk assessments defaulting to "wear gloves and take care" for every hazard will be challenged.
Why ISO 45001 Certification Matters in the UAE and GCC
UAE Federal Decree-Law No. 33 of 2021 on the Regulation of Labour Relations and its implementing regulations place binding duties on employers to provide a safe working environment, protective equipment, occupational health measures and worker awareness. MOHRE ministerial decisions cover the summer midday work ban, worker accommodation standards and occupational injury reporting. A certified OHSMS is the most credible way to demonstrate these duties are systematically managed rather than informally assumed.
The Abu Dhabi Occupational Safety and Health System Framework, ADOSH-SF (still widely referred to as OSHAD-SF), imposes structured Codes of Practice, entity classification, registration and reporting duties administered through sector regulatory authorities. Dubai Municipality technical guidelines govern construction site safety, scaffolding, excavation, confined space and hot works. Trakhees and the Dubai Development Authority operate their own HSE regimes. ISO 45001 provides the management backbone these frameworks sit within.
Government tenders, ADNOC and Aramco contractor registration, Dubai Municipality contractor classification, major developer vendor lists and In-Country Value scoring all weight certified safety management. For contractors, an uncertified organisation is frequently filtered out before technical evaluation begins.
Insurers increasingly price certified operations differently, and business interruption from a serious incident — site shutdown, investigation, reputational damage, client removal — carries costs far exceeding the certification investment. Incident frequency typically falls once near-miss reporting rises, which is the earliest reliable indicator a system is working.
If a serious incident occurs, the question asked by the authority, the insurer and the client is whether the organisation took reasonably practicable steps to prevent it. A certified, audited, evidenced management system is the strongest available answer.
Nathan ISO Consulting’s ISO 45001 Services
We begin with a physical site walkover, document review and interviews with both management and frontline workers, then issue a clause-by-clause findings report with a prioritised action plan. For contractors, we assess representative project sites, not just head office.
We build hazard identification and risk assessments with your supervisors and workers rather than for them, covering routine, non-routine and emergency conditions. Assessments your team owns are assessments they can defend in an auditor interview.
A maintained register of federal, emirate, free zone and contractual OH&S obligations with applicability analysis for each of your sites — satisfying Clause 6.1.3 with jurisdiction-correct references, updated as regulations change.
Policy, operational controls, permit-to-work systems, safe systems of work, emergency preparedness and response plans, and procedures matched to your actual activities and site conditions.
We design and implement genuine consultation and participation processes — safety committees, hazard reporting routes, worker representation — with the evidence trail Clause 5.4 requires.
Awareness sessions for all staff, risk assessor training, and internal auditor qualification, delivered in English, Arabic, Hindi, Urdu, Malayalam, Bengali or Nepali as your workforce requires. The workers an auditor interviews must be able to answer.
A full internal audit with genuine findings, corrective actions closed with verified root cause analysis, followed by a properly minuted management review addressing every Clause 9.3 input.
We help you select an appropriately accredited certification body and attend Stage 1 and Stage 2 audits on site, including project site visits under multi-site sampling, managing auditor liaison and nonconformity closure.
Where ISO 9001, ISO 14001 or ISO 39001 are also required, we build one integrated system with a single context analysis, document control framework, audit programme and management review — audited in combined visits at materially lower ongoing cost.
Our ISO 45001 Certification Process
Consultation and fixed proposal. We discuss your sites, activities, risk profile and deadlines, then issue a fixed written quotation at no charge.
Gap assessment. Site walkover, documentation review and worker interviews producing a written findings report.
Scope and system design. Certification scope, context, hazard identification methodology, legal register and measurable OH&S objectives.
Documentation. Policy, operational controls, permit systems, emergency plans and procedures built around your operation.
Training and rollout. Multi-language awareness delivery, risk assessor training, internal auditor qualification and consultation mechanism launch.
Internal audit. A complete audit cycle across all sites and clauses, with real findings and verified corrective action.
Management review. A structured review meeting covering every required input, properly minuted.
Stage 1 audit. Certification body readiness review; we attend and manage responses to observations.
Stage 2 audit. Full implementation audit including site verification and worker interviews, with our consultant present throughout.
Certification and surveillance support. Nonconformity closure, certificate issue, and ongoing support across the three-year cycle.
Why Choose Nathan ISO Consulting
One dedicated lead consultant throughout. No handovers, no re-explaining your operations, continuity through surveillance audits.
Risk assessments built on your sites. With your supervisors, reflecting real activities — never a template register listing hazards you do not have.
Maintained UAE and GCC legal register. Jurisdiction-correct references across federal, emirate, free zone and client requirements.
Multi-language training delivery. Awareness sessions in the languages your workforce actually speaks, which is what determines whether worker interviews go well.
Qualified lead auditors. We know what an assessor opens first and prepare for exactly that.
Internal auditor training included. Capability retained in-house, reducing external dependence after year one.
Full audit attendance, including project sites. On site for Stage 1 and Stage 2, handling auditor liaison in real time.
Regional regulatory depth. Working knowledge of ADOSH-SF, MOHRE requirements, Dubai Municipality guidelines, Trakhees, and Saudi MHRSD and Aramco contractor safety requirements.
Fixed written pricing. Agreed upfront, with no variation invoices for revisions, meetings or audit support.
Independent of certification bodies. Under ISO/IEC 17021 certification must be issued independently. We are consultants, and that separation protects your certificate’s credibility.
Industries We Serve
Construction and civil contracting. Permit-to-work, scaffolding and access, lifting operations, excavation, work at height, heat stress and midday break compliance, and multi-nationality workforce management.
Oil, gas and petrochemical services. Process safety interfaces, confined space and hot work regimes, H2S controls, contractor safety management and client emergency response integration.
Manufacturing and industrial. Machine guarding, lockout-tagout, chemical handling and GHS labelling, noise and dust exposure, forklift and pedestrian segregation, ergonomic assessment.
Facilities management, cleaning and hospitality. High workforce turnover competence control, chemical safety, façade and window work at height, electrical safety and lone working.
Logistics, warehousing and transport. Racking inspection, materials handling equipment, loading bay controls, driver fatigue and journey management.
Marine, ports and offshore. Confined space entry, lifting and mooring operations, working over water and vessel interface safety.
Healthcare and laboratories. Biological and chemical exposure, sharps management, ergonomic risk and emergency response.
Utilities and energy. High voltage work, permit control, isolation procedures and contractor management across distributed assets.
Locations We Serve
ISO 45001 consultants across Dubai — Business Bay, Deira, Al Quoz, Al Qusais, Ras Al Khor, Jebel Ali, Dubai Investment Park, Dubai Industrial City, Dubai South and Dubai Production City — plus free zone entities in JAFZA, DMCC, DAFZA, Dubai Silicon Oasis, Dubai Maritime City and DIFC, and organisations operating under Trakhees and the Dubai Development Authority.
Supporting organisations in Abu Dhabi city, Mussafah, ICAD I, II and III, KEZAD, Khalifa Port, Ruwais, Al Dhafra, Masdar City, ADGM and Al Ain — including ADNOC group contractors and entities registered under ADOSH-SF sector regulatory authorities.
Sharjah city and industrial areas, Hamriyah Free Zone, SAIF Zone; Ajman and Ajman Free Zone; Ras Al Khaimah, RAKEZ and RAK Maritime City; Umm Al Quwain and UAQ Free Trade Zone; Fujairah, Fujairah Free Zone and Fujairah Port.
Riyadh, Jeddah, Dammam, Al Khobar, Dhahran, Jubail, Yanbu, Ras Al Khair, Mecca, Medina, Taif, Tabuk, Abha, Hail and Buraidah — including Royal Commission for Jubail and Yanbu industrial cities, MODON industrial cities, King Abdullah Economic City, SPARK, NEOM and Red Sea project contractors, and Aramco and SABIC supply chain organisations.
Qatar — Doha, Lusail, Ras Laffan Industrial City, Mesaieed and the Qatar Free Zones. Kuwait — Kuwait City, Shuwaikh, Shuaiba, Ahmadi and Mina Abdullah. Oman — Muscat, Sohar and Sohar Free Zone, Salalah, Duqm Special Economic Zone and Sur. Bahrain — Manama, Sitra, Hidd and Bahrain International Investment Park.
What Determines the Cost of ISO 45001 Certification?
Certification body audit fees are calculated from headcount, number of sites and risk category using mandatory audit-day tables set by the accreditation body. Construction and high-hazard industries fall into higher risk categories than office-based operations, which increases audit days.
Our consultancy fee is separate, quoted as a fixed sum in writing before engagement, and depends on scope, number of active project sites, workforce size and languages required, and whether you are implementing alongside ISO 9001 or ISO 14001. Audit attendance is included rather than billed as an extra. Implementing multiple standards together costs meaningfully less than certifying sequentially, because context, leadership, competence, document control, internal audit and management review are shared clauses.
Get Started with ISO 45001 Certification
For ISO 45001 certification in Dubai, Abu Dhabi, Sharjah, the Northern Emirates, Saudi Arabia, Qatar, Kuwait, Oman or Bahrain, call +971 50 258 5024, email info@nathanisoconsulting.com, or visit our contact page. We begin with a gap assessment and provide a realistic timeline and fixed written proposal before you commit to anything.
Frequently Asked Questions About ISO 45001 Certification
Not as a general legal requirement. Occupational safety duties under Federal Decree-Law No. 33 of 2021 and emirate frameworks such as ADOSH-SF are mandatory, and ISO 45001 is the most widely accepted way of demonstrating those duties are systematically managed. Contractually, most major clients and government tenders now require it.
OHSAS 18001 was withdrawn and organisations were required to migrate. ISO 45001 adopts the Annex SL structure, adds requirements for organisational context and interested parties, significantly strengthens top management accountability, introduces mandatory worker consultation and participation, and places greater emphasis on the hierarchy of controls and on occupational health.
No. The Abu Dhabi framework is a regulatory requirement administered by sector authorities and continues to apply independently. They work well together — a properly built ISO 45001 system provides the management structure the framework Codes of Practice sit within, and we design implementations so both are satisfied by one system.
Ten to fourteen weeks is realistic for a single-site organisation. Contractors with multiple live project sites should plan on four to six months because of audit sampling and site access. Timelines shorten if you already hold ISO 9001, since several clauses are shared.
The standard requires competence appropriate to the risk and clear assignment of responsibility, not a specific job title. A small, low-risk office-based organisation can satisfy this without a dedicated officer. A construction contractor cannot — both the risk profile and local regulatory requirements demand qualified safety personnel on site.
Yes, and it is one of the most decisive parts of Stage 2. The auditor speaks with non-managerial workers, often through a translator, about hazards in their work, how they raise concerns, what training they received and whether anything changed as a result. This is why genuine consultation and multi-language awareness training matter.
Yes, and it is usually the better decision. All three share the Annex SL structure, so an integrated system uses one context analysis, one document control framework, one internal audit programme and one management review, audited in combined visits.
Nonconformities are normal and not a failure. Minor findings are closed by submitting a corrective action plan with evidence, usually within thirty to ninety days. Major findings require verified closure, sometimes with a follow-up visit, before the certificate is issued. We handle root cause analysis and evidence packaging.
Only what the scope states. For contractors, project sites should be included, with the certification body applying a multi-site sampling plan. A certificate scoped only to head office is of limited value to a client evaluating your site safety performance, and experienced procurement teams read scope statements carefully.
Client requirements tell you what to do on that client’s site. ISO 45001 gives you a system that works across every client, demonstrates due diligence independently, and is recognised by the next client without renegotiation. Most organisations find the certified system absorbs client requirements rather than duplicating them.
These are captured as legal requirements in your compliance obligations register and as identified hazards in your risk assessment, with operational controls covering work scheduling, shaded rest areas, hydration provision and supervisor monitoring. Summer audit visits frequently examine this specifically.
No, but you must demonstrate control over subcontractor safety performance — competence verification, induction, equipment inspection, and monitoring while they work under your scope. Subcontractor management gaps are among the most common findings for main contractors in this region.
No. An absence of recorded incidents is not evidence of controlled risk — it is often evidence of under-reporting, which auditors are trained to probe. The standard requires hazard identification, risk assessment and controls regardless of incident history.
Look for accreditation from a recognised body such as EIAC in Dubai, ENAS at UAE federal level, GAC in Saudi Arabia, UKAS, ANAB or an equivalent IAF member. Accreditation must also cover your industry sector. We are independent of all certification bodies and advise accordingly.
Safety concerns preventing injury from immediate hazards — falls, machinery, electricity. Occupational health concerns longer-term exposure — noise-induced hearing loss, respiratory disease from dust or silica, heat illness, chemical exposure, musculoskeletal disorders. The health half is routinely the weaker of the two in regional implementations.
Through documented consultation mechanisms appropriate to the workforce — safety committees with genuine worker representation, hazard reporting systems accessible in relevant languages, toolbox talk records showing two-way input, and evidence that raised issues were actioned and fed back.
Municipality classification criteria vary by category and are set by the Municipality, not by ISO. A certified OHSMS supports classification submissions and reduces inspection findings, but you should confirm current classification requirements directly with the relevant authority for your contractor category.
Yes, provided the system has been operating long enough to generate evidence — records, monitoring data, at least one internal audit and one management review. New entities can realistically certify within a few months of commencing operations if the OHSMS is built alongside the business.
Yes. Internal auditor training is included in our full implementation programmes and available standalone. We also deliver risk assessor training, which is often the more valuable capability for a contractor to hold in-house.
By keeping the system live — recording monitoring data, investigating incidents to root cause, completing the internal audit programme, running consultation mechanisms genuinely, and holding management review on schedule. A system built for the initial audit and then paused is the most common surveillance finding across the region.
0
Projects
0
Services
0
Clients Serving
0
Countries Serving