VCA vs. ISO 45001: what is the difference?
VCA and ISO 45001 both cover safe working. VCA is managed by the SSVV (Stichting Samenwerken Voor Veiligheid, the foundation that manages VCA) , while ISO 45001 is the international standard available through NEN (Netherlands Standardization Institute) . Even so, they are very different things. This article explains the differences and when you need each one.
VCA vs ISO 45001: the short answer
VCA is a checklist for contractors. It is practical: do you have the diplomas? Do you hold toolbox talks? Do you record incidents? It is designed specifically for companies that work at other organisations’ sites.
ISO 45001 is a management system for occupational health and safety. It is broader: it covers the whole organisation, not only work at clients’ sites. You decide for yourself which risks exist and how you tackle them.
Where do they come from?
VCA originated in the 1990s in the Dutch and Belgian petrochemical industry. Companies such as Shell wanted assurance that contractors worked safely. They created a checklist that later grew into the current VCA certification. VCA is mainly widespread in the Netherlands, Belgium, Germany and Austria.
ISO 45001 is the international standard for occupational health and safety, published by the International Organization for Standardization . It has replaced the older OHSAS 18001 since 2018. ISO 45001 is used worldwide in all sectors.
The main differences
| Aspect | VCA | ISO 45001 |
|---|---|---|
| Type | Checklist with fixed requirements | Management system with frameworks |
| Scope | Contractors at client sites | All employees, whole organisation |
| Approach | Prescribed measures | Risk-based, you fill it in yourself |
| Flexibility | Limited, fixed checklist | High, you decide how |
| Region | Netherlands, Belgium, Germany | Worldwide |
| Diploma requirement | Yes, B-VCA/VOL-VCA mandatory | No, you decide |
| Toolbox talks | Mandatory | Not specifically required |
VCA is concrete, ISO 45001 is abstract
This is the biggest difference. VCA says exactly what you must do:
- Your employees must hold B-VCA
- You must hold toolbox meetings
- You must record incidents
- You must carry out workplace inspections
ISO 45001 sets frameworks but no concrete content:
- You must identify risks
- You must take measures
- You must ensure competence
- You must improve continuously
With VCA, it is clear what the auditor checks. With ISO 45001, you must show yourself that your approach works.
ISO 45001 does not require VCA diplomas or toolbox talks. But if you decide that this is the best way to control your risks, then you must do it. The choice is yours, but you must be able to explain your choices.
When do you need VCA?
VCA is needed if you work at other companies’ sites and they ask for it. This applies mainly to:
- Contractors and subcontractors in construction
- Installation companies
- Maintenance companies
- Technical service providers
- Companies working in industry or petrochemicals
Without VCA, many clients will not let you in. Check the VCA levels to decide whether you need VCA* or VCA**.
When do you need ISO 45001?
ISO 45001 is relevant if you:
- Want a systematic approach to safety for your whole organisation
- Work internationally and need a standard recognised worldwide
- Already have ISO 9001 or ISO 14001 and want to integrate it
- Have clients who ask for ISO 45001
- Want to take your safety management to a higher level
ISO 45001 is often requested by multinationals, government bodies and in sectors where safety is critical.
Can you have both?
Yes, and many companies do. The two complement each other.
VCA ensures you meet the practical requirements that clients set. You have the diplomas, you hold the toolbox talks, you keep records.
ISO 45001 ensures a systematic approach at organisational level. You look more broadly than just the work on site.
If you already have VCA, you have a head start on ISO 45001. Many things overlap:
- Risk inventory (RI&E, risk inventory and evaluation)
- Incident recording
- Training and instruction
- Management involvement (at VCA**)
The audits can sometimes be combined, which saves time and money.
Which should you choose?
| Situation | Advice |
|---|---|
| You work as a contractor in NL/BE | Start with VCA |
| You only have your own sites | ISO 45001 is more logical |
| Clients ask for VCA | You have no choice: VCA |
| You want to work internationally | ISO 45001 is more widely recognised |
| You already have ISO 9001 | ISO 45001 fits well in your system |
| You want both | Start with VCA, add ISO 45001 later |
Most companies in construction and technical services start with VCA because the market asks for it. ISO 45001 often comes later, when the company grows or when clients ask for it.
More information
- What is VCA?: Complete guide to VCA certification
- VCA requirements: The checklist explained
- ISO 45001: Everything about the occupational safety standard
- VCA vs. Veiligheidsladder: Another comparison
- SCCM on ISO 45001 vs VCA : Technical comparison