ISO 45006:2023

Overview

ISO 45006:2023 provides guidelines for occupational health and safety management focused on preventing, controlling and managing infectious diseases in the workplace. It helps organizations of all sizes and sectors identify infectious-disease hazards, assess related risks, and put in place proportionate controls to protect workers and other relevant interested parties. The standard addresses both high‑severity infectious diseases and lower‑severity diseases that nonetheless significantly affect operations. Note: it is not a substitute for mandated infection controls in clinical settings (hospitals, medical/biological laboratories).

Key topics and requirements

ISO 45006 covers the full risk‑management lifecycle for infectious disease threats, including:

• Context of the organization: understanding internal and external issues and stakeholder diversity.
• Characteristics of infectious diseases: factors affecting transmission and severity.
• Leadership and worker participation: roles, responsibilities, consultation and competence.
• Communication: methods for internal and external reporting and stakeholder engagement.
• Hazard identification and risk assessment: systematic identification, assessment and documentation (Annex A includes example risk tables).
• Selection and implementation of controls: use of the hierarchy of controls, planning changes, and additional considerations for contagious, non‑contagious and endemic diseases.
• Personal protective equipment (PPE): selection guidance including gloves, face and respiratory protection.
• Operational controls: workplace infection controls, common areas, meetings, deliveries, travel, working from home and working in multiple locations.
• Psychosocial health: managing psychosocial hazards and supporting worker well‑being.
• Emergency preparedness and response: planning for suspected/confirmed cases, screening, testing, contact tracing, quarantine and vaccination.
• Performance evaluation and improvement: monitoring, measurement, analysis, management review and continual improvement.

Practical applications

ISO 45006 is practical for organizations seeking to integrate infectious‑disease risk controls into their occupational health and safety (OHS) management:

• Employers, safety managers and OHS professionals designing workplace infection‑prevention programs.
• HR, facilities and operations teams planning return‑to‑work measures, remote work policies and business continuity.
• Small and medium enterprises needing scalable guidance for outbreak preparedness.
• Contractors and suppliers managing work across multiple locations or in public settings.

Benefits include clearer risk controls, better worker engagement, reduced workplace transmission, and strengthened emergency response and continuity planning.

Related standards

• ISO 45001 (Occupational health and safety management systems) - complementary for OHS system integration.
• National public‑health and regulatory guidance - required for clinical or laboratory settings and for legally mandated infection controls.

Keywords: ISO 45006:2023, occupational health and safety management, infectious diseases, workplace infection control, risk assessment, PPE, emergency preparedness.