ISO 45001:2018 Self-Assessment

Fully Compliant Looks Like: A documented context analysis process exists and is actively maintained. External factors (legal changes, market pressures) and internal factors (staff turnover, safety culture) are identified and reviewed at least annually. The outputs directly inform risk assessment and OH&S planning.

Fully Compliant Looks Like: A maintained register of interested parties (workers, contractors, regulators, neighbours, unions) and their relevant needs. Evidence shows systematic engagement with workers and periodic updates. Stakeholder input is clearly linked to OH&S objectives and risk controls.

Fully Compliant Looks Like: A clear, documented scope statement that defines which sites, functions, and activities are covered. The scope is consistent with the context analysis and considers the needs of interested parties. It is maintained as documented information and readily accessible.

Fully Compliant Looks Like: A coherent OH&S management system with clearly defined and interconnected processes. Process interactions are understood, documented, and managed. The system is integrated into day-to-day operations, not treated as a standalone compliance exercise.

Fully Compliant Looks Like: Top management actively champions OH&S through visible leadership, adequate resourcing, and active participation in management reviews and incident investigations. OH&S is a standing agenda item at board/executive meetings. Managers at all levels are held accountable for OH&S performance.

Fully Compliant Looks Like: A well-communicated OH&S policy that is visible throughout the organisation. It includes specific commitments to hazard elimination, worker participation, and continual improvement. It is reviewed at least annually and updated to reflect changing organisational context.

Fully Compliant Looks Like: Everyone in the organisation understands their OH&S responsibilities. Role descriptions clearly define OH&S accountabilities at each level. A safety committee or equivalent structure is in place with defined terms of reference. Management and worker responsibilities are well-documented and communicated.

Fully Compliant Looks Like: Workers actively participate in OH&S through multiple channels (elected representatives, safety committees, direct consultation). Barriers to participation are identified and addressed. Workers are involved in hazard identification, incident investigation, and decisions about their own safety. Feedback is acknowledged and acted upon.

Fully Compliant Looks Like: A systematic process for identifying and evaluating both risks (threats to system outcomes) and opportunities (potential improvements). The risk register is comprehensive, linked to context analysis, and reviewed regularly. Specific actions are planned and tracked for each significant risk and opportunity.

Fully Compliant Looks Like: A comprehensive, ongoing hazard identification process covering all activities (routine and non-routine). Physical, chemical, biological, ergonomic, and psychosocial hazards are included. Risk assessments use a consistent methodology, are documented, and are reviewed when conditions change. Workers participate in the process.

Fully Compliant Looks Like: A current legal register covering all applicable OHS legislation, regulations, codes of practice, and permits. A systematic process tracks legal changes and assesses their impact. Compliance is evaluated at planned intervals and results are documented and acted upon.

Fully Compliant Looks Like: There is a clear process for translating risk assessment outputs into action plans that follow the hierarchy of controls (elimination first, then substitution, engineering controls, administrative controls, PPE). Actions have owners, deadlines, and completion status. Effectiveness is verified through inspection, testing, or review.

Fully Compliant Looks Like: SMART OH&S objectives exist at appropriate levels (strategic, operational, individual). They are clearly linked to identified risks, legal requirements, and the policy commitment. Progress is tracked through regular reviews and reported to management. Objectives are communicated to relevant workers.

Fully Compliant Looks Like: Each objective has a detailed action plan with clear tasks, assigned owners, dedicated resources, and realistic timelines. Progress is measured using defined KPIs and reported at regular intervals. Plans are adjusted when progress deviates from targets.

Fully Compliant Looks Like: Adequate resources (people, budget, equipment, technology) are consistently provided to operate and improve the OH&S system. Resource needs are assessed during planning cycles and justified to management. There is no evidence that OH&S performance suffers from resource constraints.

Fully Compliant Looks Like: A competence management system ensures all workers in OH&S-critical roles are demonstrably competent. Training needs are systematically identified, delivered, and evaluated for effectiveness. Competence is verified through assessment, not just attendance. Records are maintained and reviewed regularly.

Fully Compliant Looks Like: Workers at all levels can articulate the OH&S policy, their individual responsibilities, and the key hazards in their work area. They know they have the right and responsibility to stop work if unsafe. Awareness is verified through multiple methods and reinforced regularly.

Fully Compliant Looks Like: A structured communication process ensures the right OH&S information reaches the right people at the right time. Communications are tailored to the audience (considering language, literacy, and accessibility). Two-way communication channels exist for workers to raise concerns and receive feedback.

Fully Compliant Looks Like: All OH&S documentation is effectively controlled with clear procedures for creation, review, approval, and update. Version control is maintained, obsolete documents are removed, and current versions are readily accessible to those who need them. Documented information is legible, identifiable, and properly maintained.

Fully Compliant Looks Like: Operational processes with significant OH&S risks are identified and controlled through documented procedures, permits, or safe systems of work. Controls are based on the hierarchy of controls. Workers are trained and supervised. Effectiveness is verified through inspections, audits, and performance monitoring.

Fully Compliant Looks Like: The hierarchy of controls is systematically applied in all risk control decisions. Elimination is considered first, followed by substitution and engineering controls. Administrative controls and PPE are used only where higher controls are not practicable. Engineering controls are maintained and verified. Decisions are documented.

Fully Compliant Looks Like: A formal management of change process ensures all temporary and permanent changes are assessed for OH&S impact before implementation. Risk assessments are updated, controls are put in place, and workers are consulted and trained. Post-change reviews confirm effectiveness.

Fully Compliant Looks Like: Procurement processes include OH&S criteria for selecting and evaluating suppliers. Contractors are pre-qualified based on OH&S performance, provided with site-specific safety requirements, and monitored during work. contractor incidents are recorded and reviewed. Worker consultation occurs on contractor-related risks.

Fully Compliant Looks Like: Comprehensive emergency plans are in place for all credible scenarios and are readily accessible. Drills are conducted regularly, with participation from relevant stakeholders. Post-exercise evaluations identify improvement actions, which are tracked to closure. Emergency equipment is inspected and maintained. Worker training is current.

Fully Compliant Looks Like: A balanced set of leading indicators (e.g., near-miss reports, training completion, hazard inspections) and lagging indicators (e.g., injury rates, lost time, incidents) are monitored. Monitoring equipment is calibrated. Data is analysed for trends and reported to management review. Performance evaluations drive improvement actions.

Fully Compliant Looks Like: A systematic compliance evaluation process is in place with defined frequency, scope, and methodology. Evaluations are conducted by competent personnel. Results are documented, non-compliances are actioned, and compliance status is reported to management. The process covers all applicable legal and other requirements.

Fully Compliant Looks Like: A risk-based internal audit programme covers all OH&S processes within a defined cycle. Audits are conducted by competent, independent auditors. Reports clearly identify conformities and non-conformities. Corrective actions are assigned, tracked, and verified for effectiveness. Audit results are input to management review.

Fully Compliant Looks Like: Management reviews are conducted at planned intervals (typically annually or more frequently) with comprehensive inputs including audit results, performance data, incident analysis, legal changes, and worker feedback. Top management actively participates. Decisions and action items are clearly documented, assigned, and tracked to completion.

Fully Compliant Looks Like: All incidents and near-misses are reported, investigated promptly using root cause analysis methods. Corrective actions address root causes and are verified for effectiveness. Trends are analysed to identify systemic issues. A positive reporting culture exists with no blame culture preventing incident reporting.

Fully Compliant Looks Like: Continual improvement is embedded in the organisation's culture, not just a compliance exercise. Improvement opportunities are proactively identified through multiple sources (audits, incidents, worker feedback, trend analysis). Actions are prioritised, implemented, and evaluated. Positive trends in OH&S performance are evident over time.