ADOSH-SF and ISO 45001 Evidence Crosswalk for Contractors

Contractors working in Abu Dhabi frequently maintain two systems: one shaped by the ADOSH-SF framework (formerly OSHAD) because the entity or client requires it, and one shaped by ISO 45001 because a certificate is contractually expected. The two overlap heavily in evidence, but they are not equivalent — one is a regulatory framework with sector and entity requirements, the other a voluntary management-system standard assessed by a certification body.

Scope and limitations: this crosswalk is an operational aid for organising evidence. It is not legal advice and does not replace the applicable ADOSH-SF documents, entity-specific requirements, client contract terms, or the ISO 45001 standard text. Verify current requirements with the relevant authority and your certification body before relying on any mapping.

Where the same record satisfies both

Where they diverge and you need something extra

• Notification timelines: regulatory frameworks specify who must be told, in what form and how quickly after a reportable event. A conforming ISO 45001 investigation file does not by itself prove a notification was made on time.
• Entity-specific requirements: sector regulatory authorities and clients add mandatory elements. Certification does not exempt a contractor from them.
• Practitioner registration: a regulatory framework may require registered or approved HSE practitioners in named roles; ISO 45001 asks only that competence is determined and evidenced.
• Performance reporting: periodic statistical reporting to an authority or entity is a regulatory artefact, not a management-system one.
• Certification scope: an ISO 45001 certificate covers the scope on the certificate. If the project is outside it, the certificate proves nothing about that project.

"Maintain one evidence set with two indexes. Duplicating the evidence is how the two systems start to disagree with each other."

Running one evidence set with two indexes

1. Hold each record once, with a single owner and a single revision history.
2. Tag every record with the ISO 45001 clause and the regulatory element it supports.
3. Report by index: an ISO internal audit filters by clause; a client or authority review filters by element.
4. Track the deltas explicitly — notification timelines, registration, statistical reporting — as their own controlled items.
5. Review the mapping whenever the framework, the client requirement or the certificate scope changes.

Next step: use the ISO 45001 evidence matrix to see the clause-level view, and confirm the underlying records exist using the UAE construction HSE documentation checklist.

1. ISO 45001 — Occupational health and safety management systems
2. Abu Dhabi Occupational Safety and Health Centre (ADOSH)