Standards — ISO 45003
ISO 45003 is guidance. You cannot be certified against it.
It is the first international standard on psychological health and safety at work, and it is written as guidelines rather than requirements. That single fact decides what an organisation can honestly say about it, and it is the fact most often got wrong by people selling work against it.
01 — What it is
Guidelines, sitting alongside ISO 45001.
ISO 45003:2021 gives guidelines for managing psychosocial risk inside an occupational health and safety management system based on ISO 45001. It is applicable to organisations of any size and in any sector, and it names the hazards it is concerned with: how work is organised, social factors at work, and the work environment, equipment and hazardous tasks.
ISO 45001 is the certifiable standard. ISO 45003 is the guidance that sits next to it. An organisation can be certified to ISO 45001 and can demonstrate that it has applied ISO 45003 in doing so, which is a different and more defensible claim than certification against 45003 itself.
The distinction is not academic, because the words “ISO 45003 certification” are sold in this market. There is no accredited certification to sell. UKAS is the UK's national accreditation body, and the international agreement it works under for occupational health and safety “only relates to ISO 45001, and does not cover OHSAS 18001 or any other OH&MS standard that may be in circulation”. ISO 45003 is any other standard.
What is actually being sold under that name is one of three things: a non-accredited certificate from a certification body, a conformity check bolted onto a genuine ISO 45001 audit, or a “recognition” of work done. Each can be worth having. None is an accredited certification, and a buyer who thinks they have bought one has not.
Individuals are a different matter, and the distinction is worth drawing rather than blurring. Training against the standard does exist and is worth having. Craig Fearn completed BSI's own course, Psychological health and safety at work (ISO 45003), and passed BSI's examination in July 2024. That is a training certificate held by a person. It does not make an organisation certified, it is not an accreditation, and it is named here in those exact terms because the whole point of this page is that the words matter.
Two certificates, both issued by BSI: attendance on the course, and a certificate of achievement for the examination, certificate number ENR-01531684, examination completed 3 July 2024. The certificate is here, rather than described. BSI also records it in its Training Academy portal and states it can be verified through a blockchain-backed solution, so it is checkable by somebody with no reason to take anybody's word for anything.
That is a fair question to put to whoever else quotes you for this work: not whether they mention the standard, but what they hold against it and whether you can see it.
Sources: ISO catalogue entry for ISO 45003:2021, which gives guidelines rather than requirements, and UKAS on the scope of the IAF agreement. Both checked 3 August 2026.
02 — How it maps
The same six questions, in different vocabulary.
A UK health and safety function already runs on the HSE Management Standards. An assessment worth commissioning produces one set of findings that answers both, rather than a second exercise in a second vocabulary.
| ISO 45003 hazard category | HSE Management Standards | What that means in practice |
|---|---|---|
| Aspects of how work is organised | Demands, Control, Change | Workload, hours, autonomy over method and pace, and how change is managed and communicated. |
| Social factors at work | Relationships, Support, Role | Supervision and sponsorship, conflict and its handling, role clarity and conflicting roles. |
| Work environment, equipment and hazardous tasks | Demands | The physical conditions of the work, where they bear on psychological rather than physical risk. |
03 — Why it usually arrives
Somebody else asked for it.
ISO 45003 rarely comes up on its own. It arrives because a customer, a parent company, an insurer or a tender has asked how psychosocial risk is managed, and the honest answer is that nobody has assessed it in a way that could be shown to anybody.
The work that answers it is the same assessment this site sells under its HSE name: a stress risk assessment against the six Management Standards, mapped to ISO 45003 so the findings can be handed to whoever asked. Where suicide risk is in scope, BS 30480 is the newer standard that covers it.
If somebody has asked you about ISO 45003.
The first conversation is about what they actually want to see, which is usually narrower than the standard. It costs nothing and does not end in a proposal you did not ask for.