ISO 45001 + Construction

ISO 45001 software for construction firms.

Built around the realities of UK construction H&S: hazard identification on live sites, RAMS that actually get used, CDM 2015 duty-holder evidence, worker consultation under Reg 14, RIDDOR-aware incident logging, and contractor competence — all integrated with the ISO 45001:2018 clause framework that tier-1 main contractors increasingly demand alongside SSIP accreditation.

Start 14-Day Trial Book a Demo

CDM is the law. 45001 is the system.

CDM 2015 tells you what to do on a project. ISO 45001:2018 tells you how to run an organisation that consistently does it. Tier-1 main contractors increasingly want both — and the integration of CDM duty-holder evidence into your 45001 management system is where most construction firms struggle.

UK construction has had CDM in some form since 1994. ISO 45001 arrived in 2018, replacing OHSAS 18001. The intersection is where the real audit value sits: the H&S Manager isn't doing two jobs (one for CDM, one for 45001), they're running one integrated system where the CDM evidence (pre-construction information, construction phase plan, H&S file) feeds the 45001 controls (hazard register, training matrix, monitoring, audit findings).

The mistake PICMS most often sees is bolt-on 45001: the firm has CHAS or SafeContractor, runs CDM on every project competently, then tries to layer ISO 45001 on top with separate procedures, separate hazard logs, separate audits. The auditor sees the redundancy immediately and asks why. The answer should be that 45001 IS the system that CDM operates inside — not a parallel one.

The ISO 45001 clauses that matter most for construction

Clause 4.2

Needs and expectations of workers and interested parties

Workers, sub-contractors, clients, HSE, neighbours. Document who they are and what they expect from your H&S system. PICMS interested-parties module tracks this with linked communication evidence.

Clause 5.4

Consultation and participation of workers

The clause that overlaps with CDM Reg 14. Toolbox talks, safety committees, worker reps. The auditor will sample minutes, attendee lists, and the actions that resulted. PICMS communication-plan and training-attendance modules cover both.

Clause 6.1.2

Hazard identification and risk assessment

The big one. Live project hazards + organisational risks. RAMS per task. 5x5 risk scoring with control hierarchies (Elimination > Substitution > Engineering > Admin > PPE). PICMS Hazard Register + RAMS library + per-project hazard linkage.

Clause 6.1.3

Legal and other requirements

The UK H&S legal register: HSWA 1974, MHSWR 1999, CDM 2015, Work at Height 2005, LOLER 1998, PUWER 1998, COSHH 2002, Noise 2005, Vibration 2005. PICMS pre-loads this and auto-bridges new HSE regulatory updates.

Clause 7.2

Competence

CSCS, SMSTS, SSSTS, IPAF, PASMA, first aid, fire warden, asbestos awareness. Training matrix with expiry alerts, refresher tracking, induction completion. The auditor will sample 5 workers and want their full competence trail.

Clause 8.1.3

Management of change

Plant changes, process changes, new substances, personnel changes. Each change needs hazard re-assessment. PICMS Change Log module ties changes to affected hazards + RAMS revisions.

Clause 8.1.4

Procurement (contractors + sub-contractors)

Sub-contractor competence evaluation, ongoing performance review. Cross-references with CDM Reg 8 (appointment of duty-holders). PICMS contractor management module covers PQQ, ongoing review, and CDM appointment records.

Clause 9.1.1

Monitoring, measurement, analysis (RIDDOR + LTIs)

Leading indicators (audits closed, near-misses logged, training current) AND lagging indicators (LTIs, RIDDOR reports, days lost). PICMS dashboard tracks both with month-on-month trends ready for management review.

Clause 10.2

Incident investigation, NCRs, corrective action

Voice-enabled on-site incident logging. 5-Whys investigation. RIDDOR flagging at log-time. Auto-CAPA. The whole 10.2 loop in one workflow.

CDM + SSIP + ISO 45001 in one system

Hazard Register + 5x5 Matrix

Org-level + project-level hazards. Control hierarchy enforced (Elimination first, PPE last). Residual risk after controls. The auditor's sample becomes a one-click filter.

RAMS Library + AI Drafting

Per-task RAMS pre-loaded. AI-drafted site-specific RAMS in minutes (you review and sign off). PDF + send-to-client + audit log. The RAMS scramble before a job ends.

RIDDOR-Aware Incident Centre

Voice-enabled on-site logging via mobile. 5-Whys investigation. RIDDOR flagging at log-time with deadline tracking (10 day for over-7-day, 15 day for dangerous occurrence). Auto-CAPA generation.

Training Matrix + Competence

Per-person trail: CSCS, SMSTS, SSSTS, IPAF, PASMA, first aid, fire warden, asbestos awareness. Expiry alerts, refresher tracking, induction completion, toolbox talk attendance.

Contractor Management

Sub-contractor PQQ, CDM duty-holder appointment records, ongoing performance review per project, visitor sign-in. The 45001 8.1.4 and CDM Reg 8 evidence in one place.

UK H&S Legal Register

HSWA 1974, MHSWR 1999, CDM 2015, Work at Height 2005, LOLER 1998, PUWER 1998, COSHH 2002, Noise/Vibration. Pre-loaded. Auto-bridges new HSE updates.

COSHH Register

Substance inventory with COSHH assessments, SDS attached, exposure controls, health surveillance triggers, scheduled reviews. The auditor's standard sample.

Leading + Lagging KPIs

Audit closures, near-miss reporting rate, training compliance %, LTIs, RIDDOR count, days lost. Trend lines feed the management review with no spreadsheet work.

What PICMS doesn't do

Auditor-credible vendors don't pretend software replaces a competent H&S Manager. PICMS does not:

  • Issue your ISO 45001 certificate. The UKAS-accredited certification body does that. PICMS gets you audit-ready.
  • Replace your H&S Manager / SHE Lead. Site safety is a competent-person discipline.
  • Submit RIDDOR for you. PICMS flags reportable events and tracks the deadline; the actual HSE RIDDOR portal submission is yours.
  • Replace the Principal Designer or Principal Contractor competent-person duties under CDM 2015. Those roles still need real people with the right experience.
  • Conduct toolbox talks for you. PICMS records attendance and topic coverage; the talk itself is human work.

What PICMS does is integrate CDM 2015 evidence and SSIP scheme evidence into a single ISO 45001 management system, so your H&S Manager isn't running three parallel paper trails and your certification audit is a verification exercise rather than a documentation hunt.

Who PICMS ISO 45001 for Construction is built for

  • Principal Contractors running concurrent projects who need integrated CDM + SSIP + 45001 evidence.
  • Sub-contractors and trade contractors moving from SSIP-only to 45001-certified to qualify for tier-1 framework work.
  • Specialist contractors (M&E, scaffolding, lifting, demolition, civils) where 45001 + sector accreditation is non-negotiable for tier-1 frameworks.
  • Multi-site contractors needing org-level + project-level hazard tracking with role-based access.
  • ISO consultants managing multiple construction clients — see PICMS Partners.

Pricing

  • Construction Starter — £89/month. 5 users, CHAS/Constructionline/SafeContractor evidence + hazard register + RAMS + training matrix + COSHH + RIDDOR-aware incidents. ISO 45001 certification path is NOT included — see Professional.
  • Professional — £449/month. 5 users, 3 ISO standards (typically 9001 + 14001 + 45001 for construction), autonomous AI evidence agents, Construction pack included. Recommended tier for ISO 45001 certification work.
  • Certification — £699/month. 5 ISO standards, 30 users, unlimited AI, two industry packs. Right for principal contractors running integrated EHSQ + cyber compliance.

See full pricing →

Related reading

Run CDM, SSIP and ISO 45001 in one system.

14 days free, full feature access, no credit card surprise. Built by an IRCA® Registered Principal Auditor who's stood across the desk from HSE inspectors.

Start Free Trial Book a Demo