ISO 45001 guide
ISO 45001 checklist: every requirement in the order you will meet it, with the evidence auditors sample
Clause by clause: ISO 45001:2018 requirements: every clause explained →
A 52-item ISO 45001:2018 checklist, including the 2024 climate amendment, running from context to improvement in implementation order, with the evidence certification auditors usually sample and double weight on the thirteen items where OH&S audits most often raise findings.
Key points
- Fifty-two checks cover clauses 4 to 10 of ISO 45001:2018 with Amendment 1:2024, each with the evidence a certification auditor typically samples. Within each clause, items run in the order an implementation project usually reaches them.
- Four strands open in the first month regardless of clause number: hazard identification with the people who do the work, the legal register for each jurisdiction, worker consultation and incident reporting. All four need operating time before they produce records worth auditing.
- Thirteen items carry double weight, from consultation and risk assessment to permits, contractors, drills and incident investigation. In Sterling's experience these are where OH&S certification audits most often raise findings.
- The list is a working inventory for your team. It is not a gap analysis and not an audit; an independent, accredited certification body decides on certification, and Sterling does not certify.
How to use the ISO 45001 checklist
Read the list from context to improvement, yet begin the slow strands on day one. A safety management system earns its certificate through records that only appear as work is done: risk assessments signed by the crew who carry out the task, a legal register whose compliance has been evaluated, committee minutes with actions closed, near-miss reports, inspection sheets and at least one emergency drill. Start those early and the remaining items slot in around them.
Two support items also belong at the start. Document control lives in clause 7, but the first procedure or permit form you issue already needs an owner, a revision number and an approval. The incident and corrective action route in clause 10 must be running before the system goes live, because every incident and near miss logged during the operating period is material the auditor will want to trace.
Tick a line only when the record exists and matches what happens on the shop floor, the site or the depot. Evidence notes are typical rather than complete; auditors may ask for other records and will speak to people doing the job, from the forklift driver to the contractor's supervisor on the night shift. Double-weight items count twice in the progress bar, which tracks preparation and does not forecast the outcome of any audit.
Ticks stay only in this browser on this device. Print the list or save it as a PDF to share with site managers and safety representatives, and press Reset when you begin a new site or a new year.
What this checklist does not replace
A column of ticks can look more reassuring than it is. Four things sit outside it.
- The readiness check. Sterling's free online readiness check offers a short first view before a project is agreed. This page is the long list you work through once implementation is under way.
- The gap analysis. Sterling's first engagement stage looks at documents, practice on site, records and people against each requirement, then returns a prioritised plan with owners and dates. A checkbox cannot tell whether the guard on the press matches the risk assessment; a walk round the line can.
- The Stage 1 readiness review. This belongs to the certification body and is run under its own accreditation rules.
- The standard itself. Every line here restates a requirement in plain English. ISO 45001:2018 and its 2024 amendment, sold by ISO and national standards bodies, remain the reference text.
Clause 4: Context of the organisation
Settle what shapes your safety risk, who has a stake in it and which people and places the system covers. The hazard register, the legal register and the audit programme all inherit that boundary.
Clause 5: Leadership and worker participation
ISO 45001 puts worker participation in the same clause as leadership for a reason: auditors test both by talking to people, from the managing director to the newest operative.
Clause 6: Planning
This clause holds the heaviest workload. Hazard identification and the legal register take weeks per site, so they open in the first month and keep running for as long as the system does.
Clause 7: Support
Resources, competence, awareness, communication and document control are shared with ISO 9001 and ISO 14001, but the OH&S version asks one extra thing of competence: people must be able to recognise hazards.
Clause 8: Operation
Stage 2 includes a tour of the workplaces, so this clause is tested with the auditor's own eyes. Controls on paper that are not visible on the floor are the fastest route to a finding.
Clause 9: Performance evaluation
Monitoring and compliance evaluation need data from the operating period, so plan them early. Internal audit and management review close the cycle before the certification body arrives.
Clause 10: Improvement
Incident handling comes first on this list because it has to work from the first week; near misses count as incidents under the standard's definition, so they belong in the same route.
What must be ready for Stage 1, and working by Stage 2
The certification body looks at the system twice. Stage 1 reviews the documented system and whether you are prepared; Stage 2 is held at your sites and, under the IAF rules for OH&S audits, includes seeing controls during operational activities. The table gives a target for each clause at each point.
| Clause | Ready for Stage 1 (readiness review) | Working by Stage 2 (certification audit) |
|---|---|---|
| 4 Context of the organisation | Scope, issues, interested parties and the climate decision recorded | Scope matches every site and worker group the auditor meets |
| 5 Leadership and worker participation | Policy signed; roles assigned; committee formed | Committee minutes over several months; operatives describe how they are consulted |
| 6 Planning | Hazard register, risk assessments and legal register for each site; objectives set | Assessments reflect the tasks observed; registers updated after real changes |
| 7 Support | Competence defined; documents approved and controlled | Competence proven for sampled workers and contractors; current forms at the point of use |
| 8 Operation | Controls, permit system, contractor rules and emergency plans issued | Controls visible on the tour; permits sampled; a drill held and learned from |
| 9 Performance evaluation | Inspections running; internal audit and review planned or started | Compliance evaluated; full internal audit cycle and management review completed |
| 10 Improvement | Incident and near-miss reporting in use | Investigations reach causes; corrective actions verified |
Where a clause falls short of the Stage 2 column, move the audit date rather than hoping the sample avoids the gap. Most organisations need four to eight months from kick-off to reach that column, with office-based organisations at the shorter end and multi-site or high-hazard operations at the longer end.
ISO 45001 timeline: how long certification takes, stage by stage
ISO 45001 Stage 1 and Stage 2 audits: what auditors check on site
How Sterling works through the checklist with you
Risk assessments, legal register and drill records in place before the certification body visits.
Sterling's expert and experienced consultants open with a gap analysis against every line of this list, walk your sites with supervisors and safety representatives, and give each open item an owner and a date. Hazard identification, the legal register and worker consultation start in the first weeks so the evidence has time to build. Records are held in Effivity, included with the engagement at no additional cost, and the internal audit and management review are completed with you before Stage 1. We ensure successful certification for our clients. Sterling does not certify: the decision and the certificate come from the independent, accredited certification body you appoint.
Book a free discovery callISO 45001 checklist: questions buyers ask
Is this ISO 45001 checklist free to use?
Yes, it is free and needs no registration. Tick lines as the records appear, print or save a PDF to keep a copy, and press Reset to start again for another site.
Does the checklist follow ISO 45001:2018 or the new revision?
It follows ISO 45001:2018 with Amendment 1:2024, the edition certification bodies audit today. A revision is in progress; ISO expects the new edition in the first half of 2027, with a transition period to follow, and this list will be updated once the text is published.
Which ISO 45001 checklist items take the longest?
Risk assessments completed with workers for every activity and site, the legal register and its compliance evaluation, and enough months of committee minutes, inspections, drills and incident records to show the system runs. None of them can be compressed into the last few weeks.
Do contractors and agency staff count for the checklist?
Yes. The standard defines a worker as anyone performing work or work-related activities under the organisation's control, so contractors and agency staff belong in hazard identification, consultation, competence, incident reporting and the scope. Certification bodies also count them when setting audit time.
Our sites have different hazards. Do we need a checklist for each?
Use one pass for the system-wide items and a separate pass for each site's hazards, risk assessments, legal requirements, controls, emergency plans and inspections. Under the IAF rules, sites with different activities and risks are not sampled, so each one can expect a visit.
Where are our ticks saved?
They stay in the browser you are using and never leave your device; Sterling receives none of them. During an engagement the evidence itself sits in Effivity, so every site works from the same records.
More ISO 45001 guides
Every guide in the ISO 45001 series is written for one question and links back to the hub for the whole picture.
- ISO 45001 certification in Australia
- ISO 45001 benefits
- ISO 45001 certification process, step by step
- Choosing an ISO 45001 certification body
- ISO 45001 common mistakes
- ISO 45001 for construction
- ISO 45001 contractor management: prequalification to permits
- ISO 45001 certification cost: what moves the price
- ISO 45001 hazard identification and risk assessment
- ISO 45001 internal audit: planning, conduct and reporting
- ISO 45001 legal register and evaluation of compliance
- ISO 45001 requirements explained, clause by clause
Keep exploring
Explore more about ISO 45001
Watch a video on how to implement ISO 45001 here.
Watch a video on ISO 45001 requirements here.
ISO 45001 resources
Services for ISO 45001
Talk to a consultant
Work through the ISO 45001 checklist with an OH&S expert beside you.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice