ISO 45001 Checklist

ISO 45001 sets out the requirements for establishing, implementing, maintaining, and continually improving an OHSMS. The standard follows the high-level structure shared across ISO management system standards, with core clauses covering context of the organisation (Clause 4), leadership and worker participation (Clause 5), planning (Clause 6), support (Clause 7), operation (Clause 8), performance evaluation (Clause 9), and improvement (Clause 10). A key distinction from other management system standards is the emphasis on worker consultation and participation at all levels. Using an ISO 45001 requirements checklist ensures you address each clause methodically. For a full breakdown, see our guide to ISO 45001 requirements.

Before working through your ISO 45001 checklist, take time to lay the groundwork. Key preparation steps include:

• Secure top management commitment – Leadership must demonstrate accountability for the OHSMS and allocate adequate resources for implementation
• Define the scope – Determine which activities, locations, and workers (including contractors) are covered by the OHSMS
• Understand your context – Identify internal and external issues affecting OH&S performance, along with the needs and expectations of workers and other interested parties
• Obtain the standard – Acquire a copy of BS EN ISO 45001:2023+A1:2024 to reference throughout implementation

The following ISO 45001 checklist outlines the key steps to implement and maintain your OHSMS effectively.

• Conduct a Gap Analysis – Compare your current health and safety arrangements against the requirements of ISO 45001. Identify where your existing processes meet the standard and where gaps need to be addressed.
• Define your Health and Safety Management System (OHSMS) – Document the scope, boundaries, and applicability of your OHSMS. Clearly state which locations, activities, workers, and interested parties are included.
• Form an OHSMS Team and Assign Responsibilities – Appoint an OHSMS lead and assign roles for risk assessment, policy development, worker consultation, training, and audit activities. Ensure responsibilities are clearly communicated.
• Carry out Comprehensive Risk Assessment – Identify hazards, assess OH&S risks and opportunities, and determine controls. Consider routine and non-routine activities, emergency situations, and the needs of all workers including contractors and visitors.
• Create and Maintain a Risk Register – Record all identified hazards, associated risks, current controls, and risk owners. Keep the register updated as conditions change or new hazards are identified.
• Prepare and Document a Risk Treatment Plan – For each unacceptable risk, determine treatment actions using the hierarchy of controls: elimination, substitution, engineering controls, administrative controls, and personal protective equipment (PPE).
• Complete the Statement of Applicability (SoA) – Document which requirements and controls apply to your OHSMS, with justification for any exclusions. This provides a clear reference for auditors and internal teams.
• Implement OHSMS Policies – Develop and implement your OH&S policy, ensuring it includes commitments to providing safe working conditions, eliminating hazards, reducing risks, consulting workers, and meeting legal and other requirements.
• Establish Ongoing Employee Training – Ensure all workers are aware of the OH&S policy, relevant hazards, their roles within the OHSMS, and the consequences of not conforming. Provide role-specific competency training where required.
• Conduct Internal Audits – Plan and carry out internal audits at planned intervals, working through an ISO 45001 audit checklist to verify your OHSMS conforms to the standard’s requirements and your organisation’s own policies. Use audit findings to drive corrective actions and improvements.
• Perform Periodic Reviews of the OHSMS – Top management must review the OHSMS at planned intervals to confirm its continuing suitability, adequacy, and effectiveness. Record the outcomes and any actions arising from each review.
• Compile and Maintain Records – Maintain documented information as evidence of OHSMS activities, including risk assessments, incident investigations, training records, audit results, management review minutes, and monitoring data.
• Complete an External Certification Audit for ISO 45001 Compliance – Engage an accredited certification body to conduct your Stage 1 (documentation review) and Stage 2 (implementation audit). Address any nonconformities raised to achieve certification.

Working through an ISO 45001 checklist is more effective when your team has the right training. SEQM Training offers CQI and IRCA certified courses to support every stage of your OHSMS journey, including the ISO 45001 Lead Auditor Course, the ISO 45001 Auditor Conversion Course, and the ISO 45001 Internal Auditor Course.