ISO 45001:2018 Audit Check List: October 2018
ISO 45001:2018 Audit Check List: October 2018
ISO 45001:2018 Audit Check List: October 2018
net/publication/328568291
CITATIONS READS
0 110,222
1 author:
Wasim Shakoor
Worldwide Sustainability & Compliance Consultants (WSC)
16 PUBLICATIONS 1 CITATION
SEE PROFILE
Some of the authors of this publication are also working on these related projects:
Integrated Management System (IMS) Project (ISO 9001:2015 QMS, ISO 14001:2015 EMS & ISO 45001:2018 OH&SMS ) View project
All content following this page was uploaded by Wasim Shakoor on 28 October 2018.
Department:
4.2 Understanding the needs and expectations of workers and other interested parties
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
4.2 Have you determined the following:
a) the interested parties in addition to workers that are
relevant to the Occupational Health and Safety Yes/No
Management System?
b) the needs and expectations of these interested parties
that are relevant to the Occupational Health and Safety Yes/No
Management System?
c) which of these needs and expectations are, or could
Yes/No
become legal requirements and other requirements?
How do you monitor and review information about these
interested parties and their relevant needs and Yes/No
expectations?
Additional Notes:
Page 1 of 16
5. Leadership
5.1 Leadership and commitment
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
How does Top Management demonstrate leadership and commitment with respect to the OH&S management
system:
a) taking overall responsibility and accountability for the
prevention of work related injury and ill health, as well
Yes/No
as the provision of safe and healthy workplaces and
activities?
b) ensuring that the OH&S policy and related OH&S
objectives are established for the OH&S management
Yes/No
system and are compatible with the strategic direction
of the organization?
c) ensuring the integration of the OH&S management
system requirements into the organization’s business Yes/No
processes?
d) ensuring that the resources needed for the OH&S
Yes/No
management system are available?
e) communicating the importance of effective OH&S
management and of conforming to the OH&S Yes/No
5.1 management system requirements?
f) ensuring that the OH&S management system achieves
Yes/No
its intended outcomes?
g) directing and supporting workers to contribute to the
Yes/No
effectiveness of the OH&S management system?
h) ensuring and promoting continual improvement? Yes/No
i) supporting other relevant management roles to
demonstrate their leadership as it applies to their areas Yes/No
of responsibility?
j) developing, leading and promoting a culture in the
organisation that supports the intended outcomes of Yes/No
the OH&S management system?
k) protecting workers from reprisals when reporting
Yes/No
incidents, hazards, risks and opportunities?
l) ensuring the organisation establishes and implements a
process(es) for consultation and participation of Yes/No
workers?
m) supporting the establishment and functioning of health
Yes/No
and safety committee?
Additional notes:
Page 2 of 16
available as documented information
communicated within the organisation
available to interested parties
relevant and appropriate?
Additional Notes:
Page 3 of 16
opportunities?
3. determining actions to eliminate hazards and
reduce OH&S risks?
4. determining competence requirements, training
needs, training and evaluating training?
5. determining what needs to be communicated and
how it is to be done?
6. determining control measures and their effective
implementation and use?
7. investing incidents and nonconformities and
determine corrective action?
Additional Notes:
6. Planning
6.1 Actions to address risks and opportunities
6.1.1 General
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
When planning for the OH&S management system, have you considered the issues referred to in 4.1 and the
requirements referred to in 4.2 and 4.3 and determined the risks and opportunities that need to be addressed to:
a) give assurance that the OH&S management system can
Yes/No
achieve its intended outcomes?
b) prevent, or reduce, undesired effects? Yes/No
c) achieve continual improvement? Yes/No
When determining the risks and opportunities for the OH&S
management system and its intended outcome has the
organisation taken into account:
hazards Yes/No
OH&S risks and other risks
OH&S opportunities and other opportunities
6.1.1 Legal and other requirements?
Has your organization in its planning process determined
and assessed the risks and opportunities relevant to the
intended outcomes of the OH&S system associated with Yes/No
planned changes permanent or temporary before the
change is implemented?
Does your organization maintain documented information
on:
risks and opportunities?
the process and actions needed to determine and Yes/No
address its risks and opportunities to the extent
necessary to have confidence that they are carried
out as planned?
Additional Notes:
Page 4 of 16
development, testing, production, assembly,
construction, service delivery, maintenance and
disposal?
3. human factors?
4. how work is performed?
c) past relevant incidents, internal or external to the
Yes/No
organisation, including emergencies, and there causes?
d) potential emergency situations? Yes/No
e) people, including consideration off:
1. those with access to the workplace and their
activities, including workers, contractors, visitors
and other persons?
Yes/No
2. those in the vicinity of the workplace who can be
affected by the activities of the organisation?
3. workers at a location not under the direct control
of the organisation?
f) other issues, including consideration of:
1. the design of work areas, processes, installations,
machinery/equipment, operating procedures and
work organisation, including their adaptation to
the needs and capabilities of the workers
involved?
2. situations occurring in the vicinity of the workplace Yes/No
caused by work-related activities under the control
of the organisation?
3. Situations not controlled by the organisation and
occurring in the vicinity of the workplace that can
cause injury and ill health to persons in the
workplace?
g) actual or proposed changes in organisation, operations,
processes, activities and the OH&S management Yes/No
system?
h) changes in knowledge of, and information about,
Yes/No
hazards?
Additional Notes:
6.1.2.2 Assessment of OH&S risks and other risks to the OH&S management stem
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
Has the organisation established implemented and maintained a process to:
a) assess OH&S risks from the identified hazards, while
taking into account the effectiveness of existing Yes/No
controls?
b) determine and assess the other risks related to the
establishment, implementation, operation and Yes/No
6.1.2.2 maintenance of the OH&S management system?
Has the organisation’s methodologies and criteria for the
assessment of OH&S risks been defined with respect to the
Yes/No
scope, nature and timing to ensure they are proactive rather
than reactive and are used in a systematic way?
Does the organisation maintain and retain documented
Yes/No
information on the methodologies and criteria?
Additional Notes:
6.1.2.3 Assessment of OH&S opportunities and other opportunities for the OH&S management system
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
Have the organisation established, implemented and maintained processes to assess:
a) OH&S opportunities to enhance OH&S performance,
6.1.2.3 while taking into account planned changes to the
Yes/No
organisation, its policies, its processes and its activities
and:
Page 5 of 16
1. opportunities to adapt work, work organisation
and work environment to workers?
2. Opportunities to eliminate hazards and reduce
OH&S risks?
b) Other opportunities for improving the OH&S system? Yes/No
Additional Notes:
Page 6 of 16
d) monitored? Yes/No
e) communicated? Yes/No
f) updated as appropriate? Yes/No
Do you maintain and retain documented information on the
Yes/No
OH&S objectives?
When planning how to achieve your OH&S objectives, has your organization determined:
a) What will be done? Yes/No
b) What resources will be required? Yes/No
c) Who will be responsible? Yes/No
d) When it will be completed? Yes/No
6.2.2 e) How the results will be evaluated including indicators
Yes/No
for monitoring?
f) How the actions to achieve OH&S objectives will be
Yes/No
integrated into the organisations business processes?
Do you maintain and retain documented information on the
Yes/No
OH&S plans?
Additional Notes:
7. Support
7.1 Resources
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
Has your organization determined and provided the
resources needed for the establishment, implementation,
7.1. Yes/No
maintenance and continual improvement of the OH&S
management system?
Additional Notes:
7.2 Competence
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
Has your organization:
a) determined the necessary competence of workers that
affects the performance and effectiveness of the OH&S Yes/No
management system?
b) ensured that these workers are competent (including
the ability to identify hazards)on the basis of Yes/No
7.2
appropriate education, training, or experience?
c) where applicable, taken actions to acquire and maintain
the necessary competence, and evaluated the Yes/No
effectiveness of the actions taken?
d) retained appropriate documented information as
Yes/No
evidence of competence?
Additional Notes:
7.3 Awareness
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
How does the organization ensure that workers are aware of:
a) the OH&S and objectives policy? Yes/No
b) their contribution to the effectiveness of the OH&S
system including the benefits of improved OH&S Yes/No
performance?
7.3 c) the implications of not conforming to the OH&S
Yes/No
management system requirements?
d) Incidents and the outcomes of investigations that are
Yes/No
relevant to them?
e) hazards, OH&S risks and actions determined that are
Yes/No
relevant to them?
Page 7 of 16
f)the ability to remove themselves from work situations
that they consider present an imminent and serious
danger to their life or health, as well as the Yes/No
arrangements for protecting them from undue
consequences for doing so?
Additional Notes:
7.4 Communication
7.4.1 General
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
How have you determined the internal and external communications relevant to the OH&S management system,
including:
a) 0n what it will communicate? Yes/No
b) when to communicate? Yes/No
c) with whom to communicate:
1. Internally among the various levels and functions
of the organisation? Yes/No
2. Among contractors and visitors to the workplace?
3. Among other interested parties?
d) how to communicate? Yes/No
How does the organisation take into account diversity
7.4.1 (Gender, language, culture, literacy, disability) aspects when Yes/No
considering communication needs?
How are the views of interested parties considered in
Yes/No
establishing communication processes?
In establishing communication processes has legal and other
requirements been taken into account and that the
Yes/No
information is consistent with other information generated
from the system and reliable?
Who responds to relevant communications on its OH&S
Yes/No
management system?
In what form is documented information retained as
Yes/No
evidence of communications?
Additional Notes:
Page 8 of 16
b) documented information determined by the
organization as being necessary for the effectiveness of Yes/No
the OH&S management system?
When creating and updating documented information, how does your organization ensure appropriate:
a) identification and description (e.g. a title, date, author,
Yes/No
or reference number)?
7.5.2
b) format (e.g. language, software version, graphics) and
Yes/No
media (e.g. paper, electronic)?
c) review and approval for suitability and adequacy? Yes/No
How do you ensure documented information required by your OH&S management system and by ISO45001 is
controlled to ensure:
a) it is available and suitable for use, where and when it is
7.5.3 Yes/No
needed?
b) it is adequately protected (e.g. from loss of
Yes/No
confidentiality, improper use, or loss of integrity)?
For the control of documented information, how does your organization address the following activities, as
applicable:
a) distribution, access, retrieval and use? Yes/No
b) storage and preservation, including preservation of
Yes/No
7.5.3.2 legibility?
c) control of changes (e.g. version control)? Yes/No
d) retention and disposition? Yes/No
How do you ensure documented information of external
Yes/No
origin is identified and controlled?
Additional Notes:
8. Operation
8.1 Operational planning and control
8.1.1 General
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
Does your organization plan, implement and control the processes (see 4.4) needed to meet the requirements of the
OH&S management system and to implement the actions determined in Clause 6 by:
a) establishing criteria for the processes? Yes/No
b) implementing control of the processes in accordance
Yes/No
with the criteria?
c) maintaining and keeping documented information to
the extent necessary to have confidence that processes Yes/No
8.1.1
are being carried out as planned?
d) adapting to workers? Yes/No
How does your organization coordinate the relevant parts of
OH&S management system with other organisations in Yes/No
multi-employer situations?
How does your organization ensure that outsourced
Yes/No
processes are controlled (see 8.4)?
Additional Notes:
Page 9 of 16
8.1.3 Management of change
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
Has the organisation established processes for the implementation and control of planned temporary and
permanent changes that impact performance including:
a) new products, services and processes, or changes to
existing products, services and processes, including:
workplace locations and surroundings?
working organisation? Yes/No
working conditions?
Equipment?
8.1.3
work force?
b) changes to legal requirements and other requirements? Yes/No
c) changes to knowledge or information about hazards
Yes/No
and OH&S risks?
d) developments in Knowledge and technology? Yes/No
Does the organisation review the consequences of
unintended changes, taking action to mitigate any adverse Yes/No
effects, as necessary?
Additional Notes:
8.1.4 Procurement
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
Has the organisation established, implemented and
maintained processes to control the procurement of
8.1.4.1 Yes/No
products and services in order to ensure their conformity to
its OH&S management system?
Does the organisation coordinate its procurement processes with its contractors, in order to identify hazards and
assess and control the OH&S risks arising from:
a) the contractors’ activities and operations that
Yes/No
impact the organisation?
b) the organisation’s activities and operations that
Yes/No
impact the contractors workers?
c) the contractors’ activities and operations that
8.1.4.2 Yes/No
impact other interested parties in the workplace?
How does the organisation ensure that the requirements of
its OH&S management system are met by contractors and Yes/No
their workers?
Does the organisations procurement processes define and
apply occupational health and safety criteria for the Yes/No
selection of contractors?
How does the organisation ensure outsourced functions and
Yes/No
processes are controlled?
Does the organisation ensure that its outsourcing
arrangements are consistent with legal requirements and
Yes/No
8.1.4.3 other requirements and with achieving the intended
outcomes of the OH&S management system?
Has the type and degree of control to be applied to these
functions and processes been defined within the OH&S Yes/No
management system?
Additional Notes:
Page 10 of 16
8.2 Emergency preparation and response
Reference in your Area of
Clause ISO 45001:2018 Requirements verification
system concern?
Has the organisation established , implemented and maintained the processes needed to prepare for and respond to
potential emergency situations identified in 6.1.2.1 and do they include:
a) establishing a planned response to emergency
Yes/No
situations including provision of first aid?
b) providing training for the planned response? Yes/No
c) periodically testing and exercising the planned response
Yes/No
capability?
d) evaluating performance and as necessary, revising the
planned response, including after testing and in
Yes/No
particular after the occurrence of an emergency
situation?
8.2
e) communicating and providing relevant information to
Yes/No
all workers on their duties and responsibilities?
f) communicating relevant information to contractors,
visitors, emergency response services, government Yes/No
authorities, and as appropriate local community?
g) taking into account the needs and capabilities of all
relevant interested parties and ensuring their
Yes/No
involvement, as appropriate, in the development of the
planned response?
Has the organisation maintained documented information
on the process and on the plans for responding to potential Yes/No
emergency situations?
Additional Notes:
9. Performance evaluation
9.1 Monitoring, measurement, analysis and evaluation
9.1.1 General
Reference in your Area of
Clause ISO 45001:2018 Requirements VERIFICATION
system concern?
The organisation shall establish, implement and maintain processes for monitoring, measurement analysis and
performance evaluation. How does your organization determine:
a) What needs to be monitored and measured:
1. the extent to which legal requirements and other
requirements are met?
2. its activities and operations related to identified Yes/No
hazards, risks, and opportunities?
3. progress towards achieving OH&S objective?
4. effectiveness of operational and other controls?
b) the methods for monitoring, measurement, analysis
and performance evaluation needed to ensure valid Yes/No
results?
c) the criteria against which the organisation will evaluate
its OH&S performance?
9.1.1
d) when the monitoring and measuring shall be
Yes/No
performed?
e) when the results from monitoring and measurement
Yes/No
shall be analysed and evaluated and communicated?
How does your organization evaluate the performance and
Yes/No
the effectiveness of the OH&S management system?
How does the organisation ensure that monitoring and
measuring equipment is calibrated or verified as applicable, Yes/No
and used and maintained as appropriate?
In what form does your organization retain appropriate
documented information as evidence of the monitoring,
measurement, analysis and performance evaluation and Yes/No
maintenance, calibration or verification of measuring
equipment?
Additional Notes:
Page 11 of 16
9.1.2 Evaluation of compliance
Reference in your Area of
Clause ISO 45001:2018 Requirements VERIFICATION
system concern?
How does your organization establish implement and
maintain processes for evaluating compliance with legal and Yes/No
other requirements?
a)
determining the frequency and method(s) for the
9.1.2 Yes/No
evaluation of compliance?
b) evaluate compliance and take action if needed? Yes/No
c) maintaining knowledge and understanding of its
compliance status with legal requirements and other Yes/No
requirements?
d) retaining documented information of the compliance
Yes/No
evaluation results?
Additional Notes:
Page 12 of 16
9.3 Management review
Reference in your Area of
Clause ISO 45001:2018 Requirements VERIFICATION
system concern?
ISO 45001 requires “Top management shall review the
organization’s OH&S management system, at planned
Yes/No
intervals, to ensure its continuing suitability, adequacy,
effectiveness”. What format does this review(s) take?
Is your organizations management review planned and carried out taking into consideration:
a) The status of actions from previous management
Yes/No
reviews?
b) Changes in external and internal issues that are
relevant to the OH&S management system including:
1. Needs and expectations of interested parties? Yes/No
2. Legal requirements and other requirements?
3. Risks and opportunities?
c) The extent to which OH&S policy and objectives have
Yes/No
been met?
d) Information on the OH&S performance, including
1. Incidents nonconformities and corrective actions
and continual improvement?
2. Monitoring and measurement results?
3. Results of evaluation of compliance with legal Yes/No
requirements other requirements?
4. Audit results?
5. Consultation and participation of workers?
6. Risks and opportunities?
9.3
e) Adequacy of resources for maintaining an effective
Yes/No
OH&S system?
f) Relevant communication with interested parties? Yes/No
g) Opportunities for continual improvement? Yes/No
Do the outputs of the management review include decisions and actions related to:
The continuing suitability, adequacy, and effectiveness
Yes/No
in achieving the intended outcomes?
Continual improvement opportunities? Yes/No
Any need for changes to the OH&S management
Yes/No
system?
Resource needs? Yes/No
Actions needed? Yes/No
Opportunities to improve integration of the OH&S
Yes/No
system with other business processes?
Any implications for the strategic direction of the
Yes/No
organisation?
How are the relevant outputs from management review
communicated to workers and where they exist workers Yes/No
representatives?
In what form does your organization retain documented
information as evidence of the results of management Yes/No
reviews?
Additional Notes:
10. Improvement
10.1 General
Reference in your Area of
Clause I ISO 45001:2018 Requirements VERIFICATION
system concern?
How do you determine and select opportunities for
improvement and implement any necessary actions to
10.1 Yes/No
achieve intended outcomes of your OH&S management
system?
Additional Notes:
Page 13 of 16
10.2 Incident, nonconformity and corrective action
Reference in your Area of
Clause ISO 45001:2018 Requirements VERIFICATION
system concern?
When an incident or nonconformity occurs, how does your organization:
a) React in a timely manner to the incident or
nonconformity and, as applicable:
Yes/No
1) Take action to control and correct it?
2) Deal with the consequences?
b) Evaluate, with the participation of workers and the
involvement of other relevant interested parties, the
need for corrective action to eliminate the root cause(s)
of the incident or nonconformity, in order that it does
not recur or occur elsewhere, by:
1) investigating the incident or reviewing the Yes/No
nonconformity?
2) determining the causes of the incident or
nonconformity?
3) determining if similar incidents have occurred, if
nonconformities exist, or if could potentially occur?
c) review existing assessments of OH&S risks and other
Yes/No
risks, as appropriate?
d) determine and implement any action needed, including
10.2. corrective action, in accordance with the hierarchy of Yes/No
controls and the management of change?
e) assess OH&S risks and that relate to new or changed
Yes/No
hazards, prior to taking action?
f) review the effectiveness of any action taken, including
Yes/No
corrective action?
g) make changes to the OH&S management system, if
Yes/No
necessary?
Does your organization take corrective actions appropriate
to the effects or potential effects of the incidents or Yes/No
nonconformities encountered?
In what form does your organization retain documented information evidence of:
a) the nature of the incidents or nonconformities and any
Yes/No
subsequent actions taken?
b) the results of any action and corrective action including
Yes/No
their effectiveness?
How is this information communicated to relevant workers,
and, where applicable, workers representatives, and other Yes/No
interested parties?
Additional Notes:
6.2.2 Planning to achieve the OH&S objectives 4.3.3 Objectives and programme(s)
7 Support 4.4.1 Resources, roles, responsibility, accountability
7.1 Resources and authorities
7.2 Competence 4.4.2 Competence, training and awareness
7.3 Awareness
7.4 Communication 4.4.3 Communication, participation and consultation
7.4.1 General 4.4.3.1 Communication
7.4.2 Internal Communication
7.4.3. External Communication
No Equivalent No Equivalent
7.5 Documented Information 4.4.4 Documentation
7.5.1 General 4.4.5 Control of Documents
7.5.2 Creating and updating 4.5.4 Control of Records
7.5.3 Control of documented information
8 Operation 4.4 Implementation and operation
8.1 Operational planning and control 4.4.6 Operational Control
8.1.1 General 4.3.1 Hazard identification, risk assessment and
8.2.2 Elimination hazards and reducing OH&S risks determining control
Page 15 of 16
8.1.4.2 Contractors
8.1.4.3 Outsourcing
8.2 Emergency preparedness and response 4.4.7 Emergency preparedness and response
9 Performance Evaluation 4.5.1 Performance measurement and monitoring
9.1 Monitoring, measurement, analysis and
performance evaluation
9.1.1 General
9.1.2 Evaluation of Compliance 5.5.2 Evaluation of compliance
9.2 Internal Audit 4.5.5 Internal Audit
9.2.1 General
9.2.2 Internal Programme
9.3 Management Review 4.6 Management Review
10 Improvement 4.5.3.1 Incident investigation
10.2 Incident, nonconformity and corrective action 4.5.3.2 Nonconformity corrective action and
preventive action
10.3 Improvement 4.2 OH&S Policy
Page 16 of 16