ISO Standards In the IHMM Certified Safety and Health Manager [CSHM] Credential

Illustrating the depth of the IHMM Certified Safety and Health Manager [CSHM] credential, the following ISO international standards are involved with the CHMM. Learn more about the CSHM here > https://ihmm.org/cshm/

ISO Standards Related to the Technical Blueprint

The CSHM Blueprint requires candidates to understand and apply management systems; occupational safety, health, security, and environmental standards; risk identification and control; and organizational goals and objectives. It expressly requires candidates to identify the appropriate ISO or other consensus standard and specifically names ISO 45001 as an example of a compliance-management program.

Important current-edition notes

As of July 2026:

• ISO 45001:2018, including Amendment 1:2024, remains the current OH&S management-system standard, although a second edition is under development. ISO states that it replaced OHSAS 18001.
• ISO 14001:2026 is now the current environmental-management-system standard; ISO 14001:2015 has been withdrawn.
• ISO 19011:2026 is now the current management-system auditing guidance; ISO 19011:2018 has been withdrawn.
• ISO 9001:2015 remains current, but its replacement is scheduled for publication in September 2026.

I. Core ISO Standards Applicable Across the Blueprint

These standards should form the principal ISO reference set for the CSHM program.

The ISO 45000 family is directly aligned with the blueprint’s emphasis on management systems, leadership, worker participation, risk controls, monitoring, and incident investigation.

ISO 31000 addresses the blueprint’s risk-assessment functions; ISO 37301 addresses compliance programs; ISO 9001 addresses the quality principles expressly named in Domain 1; and ISO 10015 and ISO 10018 address competency and employee involvement.

II. Domain-by-Domain ISO Mapping

Domain 1 — Planning, Leadership, and Employee Involvement

Domain 1 covers policies, goals, budgets, certifications, standards, organizational cooperation, risk mitigation, ethics, safety awareness, quality principles, management systems, environmental requirements, and voluntary consensus standards.

Directly applicable standards

• ISO 45001:2018 — Leadership, consultation, worker participation, policy, objectives, resources, responsibilities, and organizational context.
• ISO 45002:2023 — Implementation of leadership and worker-participation requirements.
• ISO 45003:2021 — Psychosocial hazards and organizational culture.
• ISO 9000:2015 and ISO 9001:2015 — Quality principles, process management, resources, and continual improvement.
• ISO 10018:2020 — Employee engagement and involvement.
• ISO 31000:2018 — Risk-informed planning and resource allocation.
• ISO 37301:2021 — Compliance governance and ethical culture.
• ISO 14001:2026 — Environmental policy, compliance obligations, objectives, and operational planning.
• ISO 26000:2010 — Ethical practices, stakeholder interests, labor practices, and social responsibility.
• ISO 37000:2021 — Governance of organizations.
• ISO 37002:2021 — Internal reporting and whistleblowing.
• ISO 30401:2018 — Organizational knowledge.
• ISO 30415:2021 — Diversity and inclusion, where participation barriers are involved.

ISO 26000 provides guidance rather than certifiable management-system requirements.

Domain 2 — Communication and Resources

Domain 2 addresses safety education, training requirements at different organizational levels, participation barriers, hazard and risk communications, OH&S documents, and communication across an enterprise.

Organizational communication and training

• ISO 45001:2018
• ISO 45002:2023
• ISO 45003:2021
• ISO 10015:2019
• ISO 10018:2020
• ISO 30401:2018
• ISO 30422:2022
• ISO 14063:2020
• ISO 22329:2021 — Use of social media in emergencies
• ISO 24495-1:2023 — Plain-language principles

Signs, warnings, and emergency communications

• ISO 7010:2019 — Registered safety signs
• ISO 3864-1 — Design principles for safety signs and markings
• ISO 3864-2 — Product-safety labels
• ISO 3864-3 — Design principles for graphical symbols
• ISO 3864-4 — Colorimetric and photometric properties
• ISO 23601:2020 — Escape and evacuation plans
• ISO 16069:2017 — Safety-way guidance systems
• ISO 7731 — Auditory danger signals
• ISO 8201 — Audible emergency-evacuation signal
• ISO 11428 — Visual danger signals
• ISO 11429 — Combined auditory and visual danger and information signals

ISO 7010 and the ISO 3864 family govern standardized safety signs and their design, while ISO 23601 and ISO 16069 address escape and evacuation information.

Domain 3 — Risk Assessment and Control

Domain 3 requires candidates to define, analyze, assess, and prioritize risk; select corrective actions; prioritize controls; recognize approvals and ratings; and understand effective safety policies.

General risk and control standards

• ISO 31000:2018 — Risk-management framework and process
• IWA 31:2020 — Application of ISO 31000 within management systems
• ISO 45001:2018 — Hazard identification, OH&S risk assessment, and hierarchy of controls
• ISO 12100:2010 — Machinery hazard identification, risk assessment, and risk reduction
• ISO/TR 14121-2:2012 — Practical machinery risk-assessment methods and examples
• ISO 13849-1 — Safety-related parts of machinery-control systems
• ISO 13850 — Emergency-stop functions
• ISO 13855 — Positioning of safeguards
• ISO 13857 — Safety distances
• ISO 14118 — Prevention of unexpected machinery start-up
• ISO 14119 — Interlocking devices
• ISO 14120 — Guards
• ISO 14122 series — Permanent means of access to machinery
• ISO 14123-1 and ISO 14123-2 — Hazardous substances emitted by machinery

ISO 12100 establishes a machinery risk-assessment and risk-reduction methodology that complements the broader organizational framework in ISO 31000.

Ergonomics and human-factors risk

• ISO 6385:2016 — Ergonomic principles in work-system design
• ISO 26800:2011 — General ergonomics principles
• ISO 11226 — Evaluation of static working postures
• ISO 11228-1 — Lifting, lowering, and carrying
• ISO 11228-2 — Pushing and pulling
• ISO 11228-3:2026 — Repetitive movements and upper-limb exertions
• ISO/TR 12295:2014 — Application guidance for ISO 11226 and ISO 11228
• ISO/TS 20646:2014 — Optimization of musculoskeletal workload
• ISO 9241 series — Ergonomics of human-system interaction

The ISO ergonomics catalog includes manual handling, working postures, danger signals, work-system design, and human-system interaction.

Physical-agent exposure

• ISO 9612:2025 — Determination of occupational-noise exposure
• ISO 11200 series — Noise emitted by machinery and equipment
• ISO 7243 — Heat stress using the WBGT index
• ISO 7933 — Analytical determination and interpretation of heat stress
• ISO 7726:2025 — Instruments for measuring thermal-environment quantities
• ISO 9886 — Evaluation of thermal strain using physiological measurements
• ISO 8996 — Determination of metabolic rate
• ISO 11079 — Cold-stress determination and interpretation
• ISO 5349 series — Hand-transmitted vibration
• ISO 2631 series — Whole-body vibration

Domain 4 — Operations and Programs

Domain 4 is the broadest part of the blueprint. It covers consensus standards, ISO 45001, fire prevention, emergencies, crisis management, business continuity, data security, employee records, soil classification, bloodborne pathogens, waste, air sampling, excessive exposure, process safety, multi-employer worksites, and operational risk controls.

A. Safety and compliance-management programs

• ISO 45001:2018
• ISO 45002:2023
• ISO 45003:2021
• ISO 45004:2024
• ISO 9001:2015
• ISO 14001:2026
• ISO 31000:2018
• ISO 37301:2021
• ISO 19011:2026

B. Emergency preparedness, crisis management, and continuity

• ISO 22301:2019/Amd 1:2024 — Business-continuity management systems
• ISO 22313:2020 — Guidance on ISO 22301
• ISO/TS 22317:2021 — Business-impact analysis
• ISO 22316:2017 — Organizational resilience
• ISO 22320:2018 — Emergency-management incident guidelines
• ISO 22361:2022 — Crisis-management guidelines
• ISO 22398:2013 — Exercises and testing
• ISO 22315 — Mass-evacuation planning
• ISO 22319 — Planning for spontaneous volunteers
• ISO 22322 — Public-warning guidelines
• ISO 22342:2023 — Facility-security plans

ISO 22301 addresses continuity systems, ISO 22320 incident management, ISO 22361 crisis management, and ISO 22398 emergency exercises.

C. Fire prevention and fire protection

• ISO 7240 series — Fire detection and alarm systems
• ISO 7240-1:2025 — General terms and definitions
• ISO 7240-2 — Control and indicating equipment
• ISO 7240-4 — Power-supply equipment
• ISO 7240-5 — Heat detectors
• ISO 7240-7 — Smoke detectors
• ISO 7240-10 — Flame detectors
• ISO 7240-13 — System-component compatibility
• ISO 7240-14 — Design, installation, commissioning, and service
• ISO 7240-19 — Emergency sound systems
• ISO 7240-21 — Alarm-routing equipment
• ISO 11602 series — Portable and wheeled fire extinguishers
• ISO 6182 series — Automatic sprinkler systems
• ISO 14520 series — Gaseous fire-extinguishing systems
• ISO 23932-1 — General principles of fire-safety engineering
• ISO 16732-1 — Fire-risk assessment
• ISO 16738 — Evacuation and life-safety design methods
• ISO 23601:2020 — Escape and evacuation plans

The ISO 7240 family addresses fire detection, warning, component compatibility, system design, installation, and emergency notification.

D. Information security, privacy, and employee records

• ISO/IEC 27001:2022 — Information-security management systems
• ISO/IEC 27002:2022 — Information-security controls
• ISO/IEC 27005:2022 — Information-security risk management
• ISO/IEC 27007:2020 — ISMS auditing
• ISO/IEC 27035 series — Information-security incident management
• ISO/IEC 27701:2025 — Privacy-information management systems
• ISO/IEC 29100 — Privacy framework
• ISO/IEC 27018 — Protection of personally identifiable information in public clouds
• ISO 15489-1:2016 — Records-management principles
• ISO 30301:2019 — Management systems for records

These standards are directly relevant to Blueprint Tasks 4.5 and 4.6 concerning data-storage security and confidential employee information. ISO/IEC 27001 establishes the information-security system, ISO/IEC 27002 identifies controls, ISO/IEC 27701 addresses privacy, and ISO 15489-1 addresses recordkeeping.

E. Soil classification and excavation

• ISO 14688-1:2017 — Identification and description of soils
• ISO 14688-2:2017 — Principles for soil classification
• ISO 14689 — Identification and classification of rock
• ISO 17892 series — Geotechnical laboratory testing of soil
• ISO 22475-1 — Sampling methods and groundwater measurements
• ISO 25177 — Field description of soil
• ISO 18400 series — Soil-quality sampling and site investigation
• ISO 11074 — Soil-quality vocabulary

ISO 14688-1 and ISO 14688-2 are the most directly responsive ISO standards for Blueprint Task 4.7. They address soil identification, description, and engineering classification.

These standards supplement but do not replace OSHA’s excavation classifications and protective-system requirements where U.S. regulatory compliance is tested.

F. Bloodborne pathogens and biological hazards

• ISO 45006:2023 — Infectious-disease risk management at work
• ISO 35001:2019/Amd 1:2024 — Biorisk management for laboratories and related organizations
• ISO/TS 7446:2026 — Implementation guidance for ISO 35001
• ISO 15190:2020 — Medical-laboratory safety
• ISO 15189:2022 — Medical-laboratory quality and competence
• ISO 23908:2024 — Sharps-injury protection
• ISO 16603 — Resistance of protective clothing to penetration by blood and body fluids
• ISO 16604 — Resistance to penetration by bloodborne pathogens
• ISO 374-5:2024 — Gloves protecting against microorganisms
• ISO 16321-4:2025 — Eye and face protection against biological hazards
• ISO/TS 16975-4:2022 — Respiratory protection during infectious-disease outbreaks

G. Waste classification and management

• ISO 14001:2026
• ISO 14040 and ISO 14044
• ISO 14051
• ISO 59004, ISO 59010, and ISO 59020
• ISO 15270 — Guidelines for recovery and recycling of plastic waste
• ISO 18601 through ISO 18606 — Packaging and the environment
• ISO 21640 — Specifications and classes for solid recovered fuels
• ISO 24161 — Waste collection and transportation-management terminology

There is no single ISO standard that substitutes for legal hazardous-waste classification under RCRA. The ISO standards provide management, environmental-performance, circularity, testing, and material-specific frameworks; the legal determination remains controlled by applicable federal or state waste law.

H. Workplace-air sampling and exposure assessment

• ISO 7708 — Inhalable, thoracic, and respirable particle-size fractions
• ISO 13137:2022 — Personal sampling pumps
• ISO 18158:2016 — Workplace-air terminology
• ISO 20581:2016 — Performance of procedures for measuring chemical agents
• ISO 15767 — Uncertainty in weighing collected aerosols
• ISO 22065:2020 — Pumped samplers for gases and vapors
• ISO 23861:2022 — Sampling airborne mixtures of particles and vapors
• ISO 21832:2018 — Measuring procedures for airborne metals and metalloids
• ISO 30011:2025 — Metals and metalloids by ICP-MS
• ISO 15202 series — Metals and metalloids by ICP
• ISO 16017 series — Volatile organic compounds using sorbent tubes and thermal desorption
• ISO 16200 series — Volatile organic compounds using solvent desorption
• ISO 16258-1 — Respirable crystalline silica by X-ray diffraction
• ISO 8518:2022 — Particulate lead and lead compounds
• ISO 17735:2019 — Airborne isocyanates
• ISO/TR 27628 — Ultrafine particles and nanoaerosols
• ISO 28439 — Ultrafine aerosol size and number concentration
• ISO/TR 14294 — Dermal-exposure measurement
• ISO/IEC 17025:2017 — Testing- and calibration-laboratory competence
• ISO 17034 — Reference-material producers
• ISO/IEC 17043 — Proficiency testing

The ISO workplace-atmosphere catalog contains general sampling requirements and substance-specific methods covering aerosols, metals, vapors, gases, silica, lead, isocyanates, and nanomaterials.

I. Personal protective equipment

• ISO/TS 16975-1 — Respiratory-protection program principles
• ISO/TS 16975-2 — Respirator selection, use, and maintenance
• ISO 16975-3 — Respirator fit-testing procedures
• ISO/TS 16975-4 — Respiratory protection during infectious-disease outbreaks
• ISO 17420-1:2021 — General requirements for respiratory protective devices
• ISO 16321 series — Occupational eye and face protection
• ISO 374 series — Gloves protecting against chemicals and microorganisms
• ISO 21420:2020 — General requirements for protective gloves
• ISO 13688 — General requirements for protective clothing
• ISO 16602 — Chemical-protective clothing
• ISO 13982-1 — Clothing protecting against solid particulates
• ISO 17491 series — Tests for chemical-protective clothing
• ISO 6529:2026 — Chemical permeation testing
• ISO 11612 — Clothing protecting against heat and flame
• ISO 14116 — Limited flame-spread clothing
• ISO 20471 — High-visibility clothing
• ISO 20345 — Safety footwear
• ISO 13997 — Cut resistance

ISO maintains extensive separate catalogs for protective clothing, gloves, respiratory equipment, eye protection, footwear, hearing protection, and other PPE.

J. Process-safety management

No general ISO standard directly duplicates OSHA’s process-safety-management regulation. Depending upon the industry, the following may be implicated:

• ISO 45001:2018
• ISO 31000:2018
• ISO 12100:2010
• ISO 17776 — Management of major-accident hazards in offshore petroleum operations
• ISO 10418 — Offshore process-safety systems
• ISO 23251 — Pressure-relieving and depressuring systems
• ISO 4126 series — Safety devices protecting against excessive pressure
• ISO 10628-1 and ISO 10628-2 — Process-flow and piping-and-instrumentation diagrams
• ISO 20815 — Production assurance and reliability management
• ISO 15544 — Emergency response for offshore installations

These standards would be scenario-dependent and would not displace OSHA 29 C.F.R. § 1910.119.

Domain 5 — Monitoring and Measurement

Domain 5 addresses control priorities, identifying the body responsible for a standard, distinguishing mandatory from voluntary standards, prioritizing hazards, analyzing safety data, communicating preventive action, conducting audits and inspections, and distinguishing leading from lagging indicators.

Applicable standards

• ISO 45004:2024 — Principal standard for OH&S performance indicators
• ISO 45001:2018 — Monitoring, measurement, analysis, evaluation, internal audit, and management review
• ISO 19011:2026 — Audit programs and methods
• ISO 14031:2021 — Environmental-performance indicators
• ISO 9001:2015 — Performance evaluation and corrective action
• ISO 37301:2021 — Compliance monitoring and evaluation
• ISO 10012 — Measurement-management systems
• ISO/IEC 17025:2017 — Validity and quality of laboratory measurements
• ISO 5725 series — Accuracy, trueness, and precision of measurement methods
• ISO 3534 series — Statistical vocabulary and symbols
• ISO 2859 series — Acceptance sampling by attributes
• ISO 3951 series — Acceptance sampling by variables
• ISO 13053 series — Quantitative process-improvement methods

ISO 45004 is the closest direct match to Blueprint Tasks 5.5 and 5.9 because it addresses OH&S measurement, analysis, evaluation, and development of performance indicators.

Domain 6 — Incident Investigation and Analysis

Domain 6 covers causal factors, corrective actions, analysis of injury data, prioritization, and determinations of whether incidents are recordable or reportable.

Applicable standards

• ISO 45001:2018 — Incident, nonconformity, corrective action, and continual improvement
• ISO 45002:2023 — Implementation guidance for incident investigation
• ISO 45004:2024 — Incident and injury performance data
• ISO 31000:2018 — Risk analysis following an incident
• ISO 22320:2018 — Incident-management coordination
• ISO 9001:2015 — Root causes, nonconformity, and corrective action
• ISO 19011:2026 — Collection and evaluation of audit evidence
• ISO 14224 — Reliability and maintenance data for petroleum and related industries, where relevant
• ISO 55001:2024 — Asset-management systems, where equipment condition or failure contributed to an incident

ISO standards can guide causal analysis, corrective action, and performance evaluation, but U.S. determinations of whether an injury or fatality is legally recordable or reportable remain governed by OSHA requirements.