Where the months actually go
Implementation consumes most of the calendar: hazard identification and risk assessment across all activities, building the legal register, establishing worker consultation channels, operational controls, and emergency preparedness. Then the system must run long enough to produce evidence: completed risk assessments being used, consultation meetings with minutes, at least one emergency drill, an internal audit, a management review, and incident or near-miss reports moving through your process. Certification bodies then need lead time for Stage 1 and Stage 2, typically 4 to 8 weeks apart.
Factors that stretch the timeline
- Hazard profile. A consultancy identifies hazards in weeks; a multi-process factory with chemicals, machinery, and contractors needs a structured assessment program that takes months to complete credibly.
- Worker consultation maturity. ISO 45001 requires consultation and participation of workers, with emphasis on non-managerial workers. If no mechanism exists (committees, representatives, structured toolbox talks), building genuine participation takes longer than writing any procedure.
- Legal register from zero. Identifying every applicable OH&S regulation for your activities and jurisdictions is slow, careful work the first time.
- Multi-site and shift operations. Every site and shift pattern adds sampling scope for both your internal audit and the certification audit.
A realistic 6-month plan for a small organization
Months 1 to 2: gap analysis, hazard identification and risk assessment, legal register, policy, consultation mechanism established. Months 3 to 4: operational controls and training in place, emergency plan written and drilled, system generating records. Month 5: internal audit, management review, corrective actions closed, Stage 1. Month 6: Stage 2, close findings, certification decision. Booking the certification body during month 2, not month 5, is what makes this schedule real.