The three costs inside every quote
First, certification body fees for the audit cycle: Stage 1 (readiness review), Stage 2 (full audit), then annual surveillance and recertification in year three. Second, implementation support if you hire outside help, from a few thousand dollars of coaching to a full consultant build. Third, and always the largest in practice, your own people's time to build, run, and maintain the system.
Why ISO 45001 quotes run higher than ISO 9001 for the same company
Audit duration tables used by certification bodies factor in the complexity and risk of your activities, not only employee count. A 40-person office gets fewer audit days than a 40-person steel erector or chemical handler, because the auditor must physically verify hazard controls, emergency arrangements, and contractor management across your real operations. High-risk sectors (construction, heavy manufacturing, oil and gas, utilities) should expect quotes toward the upper end of any range.
Costs people forget to budget
- Legal compliance evaluation. ISO 45001 requires you to identify applicable OH&S legal requirements and evaluate compliance with them. If your legal register does not exist yet, building it takes real effort, and some organizations subscribe to a legal-update service.
- Training and competence gaps. Closing competence gaps that hazard assessments expose (first aid, working at height, confined space, lockout) has hard costs.
- Corrective infrastructure. Incident reporting tools, monitoring equipment, occupational health surveillance where hazards require it.
How to compare quotes intelligently
Request the full three-year cost in writing, the number of audit man-days at each visit, and confirmation the quote covers all your sites and shift patterns (night-shift activities are part of your OH&S reality and auditors sample them). A cheap year-one quote with expensive surveillance is a common structure; the three-year total is the only honest comparison. Get at least three quotes, and confirm each body's accreditation status matches what your customers or regulators expect.