ISO 39001 road traffic safety management gives companies a structured way to address the risks they create or influence on the road. It is more than a driver-training course, an inspection checklist or a certificate displayed in reception.
For a Malaysian company, a useful starting point is to understand how business decisions affect road safety: who travels, what vehicles they use, how work is scheduled and what happens when a driver raises a concern. This guide explains how to begin without treating paperwork as the end goal.
ISO 39001 sets requirements for a road traffic safety management system. Its purpose is to help organisations reduce road-crash deaths and serious injuries within the areas they can influence.
As checked on 20 September 2026, ISO lists ISO 39001:2012 and the published 2024 climate-action amendment; a replacement is under development. Confirm the applicable edition and amendments before implementation or a certification project. A draft revision is not a published replacement.
Obtain the standard through an authorised source. This article is an introduction, not a reproduction of its requirements, a complete gap assessment or legal advice.
Implementation means establishing and operating the management system. Certification is a separate assessment by an external certification body. ISO explains that it develops standards but does not certify organisations.
A company can start improving its controls before seeking certification. However, completing a training session, adopting a policy or using the checklist below does not demonstrate conformity with every requirement.
If certification is a business objective, confirm the proposed scope, certification body’s relevant accreditation and assessment arrangements. Do not describe the company as certified before certification has actually been granted for that scope.
Start with a practical activity map. Consider company vehicles, employees using personal vehicles for business, deliveries, contractor interfaces, site entrances and other relevant interactions with road users. Consider commuting where the company has meaningful influence rather than assuming all exposure ends at the depot gate.
Record which operations the proposed system covers and why. A pilot can help test a process, but its boundaries should not be confused with the final management-system or certification scope.
Starting output: A short scope statement, a list of relevant activities and the people responsible for them.
A safety coordinator needs support from the people who control budgets, schedules, purchasing and contractor arrangements. Ask management to resolve practical conflicts: what happens when a delivery deadline clashes with a driver’s need to stop, or when a replacement vehicle costs more?
Assign responsibility for decisions, not just forms. Identify who can remove an unsafe vehicle from service, approve alternative travel and close an overdue corrective action.
ISO’s startup guide describes a Plan–Do–Check–Act approach: plan improvements, put them into practice, evaluate results and act on what is learned. The practical examples below are editorial suggestions, not a complete statement of the standard.
Collect the information you already have: vehicle and driver lists, distance travelled, incident reports, maintenance records and feedback from operations. Identify missing or inconsistent data instead of presenting an incomplete total as a reliable baseline.
Look beyond repair costs. Separate exposure, safety outcomes and the factors that influence those outcomes. ISO’s startup guide distinguishes risk exposure, final safety outcomes and intermediate safety outcomes.
A low incident count alone does not establish that controls are effective. Check what reporting covers and whether employees feel able to raise concerns.
Bring drivers, supervisors and the relevant managers into the review. Ask what makes a normal working day difficult, where existing procedures break down and which decisions the company can change.
For example, repeated rushed departures may call for revised dispatch times as well as coaching. Recurring vehicle defects may need a stronger maintenance handover, not another reminder to complete a checklist.
For each priority, record an owner, the action, the resources needed and how effectiveness will be checked. Keep urgent safety issues on a prompt action path rather than waiting for the full management-system project.
Choose objectives that address your baseline and risk priorities. Avoid importing another company’s targets without checking whether the measures fit your operation.
| Example concern | Possible action | Evidence to review |
|---|---|---|
| Safety defects remain unresolved | Clarify vehicle withdrawal and repair release responsibilities | Defect age, repair evidence and repeat defects |
| Drivers report unrealistic schedules | Review travel allowances and escalation arrangements | Schedule revisions and driver feedback |
| Recurring risky driving events | Check context and provide targeted coaching | Reviewed event trends and follow-up observations |
These are suggested management checks, not prescribed ISO targets. Set a baseline, target, owner and review date for the measures you adopt. Use consistent definitions and, where appropriate, account for changes in distance travelled when comparing periods.
Make sure people understand their responsibilities and can carry them out. Drivers may need practical instruction; dispatchers may need guidance on schedule changes; managers may need to practise handling an unsafe-to-drive report.
Review how the company responds to a breakdown or serious incident. Confirm who receives the first report, who arranges support and how lessons reach the people who can make changes.
Do not treat attendance records as the only evidence of competence. Ask employees to explain or demonstrate the decisions expected of them in a realistic scenario.
Identify the legal, contractual and other requirements relevant to your actual vehicles and activities. Assign a competent person to maintain that review. This article does not provide a Malaysian legal register or state that certification replaces statutory duties.
The 2024 amendment addresses climate action. Include it in your review of the applicable standard rather than relying on an older checklist. For Malaysian operations, questions worth considering include whether changing flood exposure or severe weather affects routes, continuity or interested-party expectations. These examples are prompts for assessment, not automatic conclusions that every organisation faces the same risk.
Check both documents and practice. A procedure might look complete while drivers cannot access the reporting channel or supervisors routinely override the stated arrangements.
Prepare internal audit and management review processes against the applicable requirements. Record findings, investigate causes, assign corrective actions and check whether the changes work. Seek competent support where your team lacks the necessary assessment skills.
The following sequence is an example for organising initial work, not a promise of certification readiness within a month:
The next stage depends on the size, complexity and current maturity of the organisation—not the number of documents created.
No. Its relevance depends on an organisation’s interaction with road traffic and its ability to influence safety, rather than a haulage label alone.
No. Training may support competence, but the management system also involves organisational decisions, implementation, evaluation and improvement.
No. Certification is provided by external certification bodies, not ISO itself.
No. It is not a guarantee of accident-free operations or a substitute for continuing to manage risks and meet applicable obligations.
Contact ADHINS to discuss your transport operations, driver training needs and road safety priorities. Bring your current procedures and operational concerns so the discussion can focus on practical gaps.
Confirm the scope of any proposed advisory work separately. This article does not claim that ADHINS is a certification body or that a particular service guarantees ISO 39001 certification.
©2026 ADHINS Management Sdn Bhd. All Rights Reserved.