ISO 45001 Gap Analysis

What this tool does, and what it does not

Produces a readiness picture, identifies gaps and orders them into an action list.
It is not a certification audit and does not replace one by a certification body.
It determines no conformity with the standard and is not a declaration of conformity.
It quotes nothing from the standard. Clause numbers appear as a reference only, so you can line the result up against your own copy.

Assessment details

Optional. These are kept in your browser and appear on the printed report.

Organisation / siteAssessed byAssessment date

0 of 32 questions answered

4 · Context of the organisation

What the organisation does, who is affected by it, and where the boundaries of the system it actually manages lie.

Is the scope of the safety management system written down — which sites, activities and processes it covers?
A scope statement, an annex to the framework procedure, or a dedicated section in the system file.
Have the internal and external matters that affect safety in the organisation been examined and written down?
A meeting note, an analysis table, or a section in the management review.
Is there a current list of the parties with an interest in safety, and of their needs and expectations?
A list of interested parties — workers, contractors, authorities, customers, neighbours — with what each requires.

5 · Leadership and worker participation

What management has committed to in writing, who is responsible for what, and how workers actually take part.

Is there an occupational health and safety policy signed by top management?
A dated and signed policy document, rather than a draft.
Has the policy been made known to all workers, and can you show how?
A distribution record, a notice board posting, signatures at induction training.
Are safety roles, responsibilities and authorities defined in writing, by name or by post?
A responsibility matrix, letters of appointment, or role descriptions.
Is there a standing mechanism for consulting workers and involving them in safety decisions, with its outcomes recorded?
Safety committee minutes, consultation rounds, records of worker suggestions and what was done with them.
Have dedicated resources been allocated to safety — budget, time and people — in a way you can point to?
A budget line, a management approval, a work plan with resources attached.

6 · Planning

Identifying risks and opportunities, managing legal requirements, and objectives with a plan for reaching them.

Is there a systematic process for identifying hazards, and does it cover non-routine work and maintenance too?
A risk assessment, a hazard identification procedure, records of walkarounds.
Have the identified risks been assessed and controls decided, including who owns each control?
A risk register with grading, existing controls and additional controls.
Is there a register of the legal and other requirements that apply to the organisation, and is it kept up to date?
A register with a last-updated date and an owner responsible for updating it.
Is fulfilment of the requirements in that register checked periodically, with the outcome recorded?
A compliance evaluation summary, a list of gaps and their status.
Have measurable safety objectives been set, with an owner, a timescale and a way of measuring them?
An annual objectives table, rather than a statement of intent.
Is there a process for examining safety implications before a change to a process, to equipment or to the building?
A management-of-change procedure, a change review form, or a documented discussion.

7 · Support

Competence, awareness, communication and control of documents — what allows the system to work at all.

Has the competence required for each role that affects safety been defined, and is the actual qualification recorded?
A competence matrix, certificates, records of professional training.
Is periodic safety training carried out and recorded, including for new starters and people changing role?
Training records with date, subject, trainer and participants' signatures.
Do workers in fact know what the risks in their work are and what to do in an emergency?
A check on the floor, a short questionnaire, or a briefing note — rather than an assumption.
Is it defined how safety information moves through the organisation, including to contractors and visitors?
A communication procedure, site induction briefings, notice boards, recorded announcements.
Are the system's documents controlled — version, approval, distribution, and removal of superseded copies?
A controlled-document list with version numbers and approval dates.

8 · Operation

Controls on the floor, management of change, contractors and procurement, and emergency preparedness.

Are there safe working instructions for the hazardous processes, and are they available where the work happens?
Operating safety instructions at the workstations, not only in a binder in the office.
Is hazardous work carried out under a work permit — hot work, confined space, work at height?
Completed and signed permit forms from the recent period.
Have safety requirements been set for contractors and suppliers, and is their fulfilment actually checked?
A safety annex in the contract, a signed contractor induction, checks on site.
Do safety considerations enter the procurement process — equipment, materials and services — before the order?
Safety requirements in the purchase specification, safety sign-off before buying.
Is there an emergency preparedness plan, and have drills been run and documented with lessons?
A current emergency plan, the last drill summary, a lessons list and its status.

9 · Performance evaluation

Measurement, monitoring, internal audit and management review.

Is safety performance measured systematically, and against which measures?
Periodic measures — incidents, near misses, closure of findings, training delivered.
Is the measuring and testing equipment used for safety calibrated and in date?
Calibration certificates, an equipment list with the next calibration date.
Are internal audits carried out to a plan, by auditors who are competent and independent of the area being audited?
An audit programme, audit reports, the auditors' qualification.
Is a periodic management review held and recorded, examining safety performance and taking decisions?
Management review minutes with attendees, the data presented, and decisions with owners.

10 · Improvement

Handling incidents and nonconformities, corrective action, and continual improvement that can be shown.

Are incidents and near misses reported, investigated and recorded systematically?
Report forms, investigation reports, an incident register.
Are corrective actions tracked through to closure, with an owner and a target date?
A corrective action register with status, rather than an open list of recommendations.
Is the effectiveness of corrective actions checked — that is, did the problem come back?
A documented effectiveness check, or a trend analysis of recurring incidents.
Can continual improvement be shown over time, rather than only ongoing activity?
Measures compared between periods, objectives met, changes that came out of lessons learned.

Current state

Missing data

Answer at least one question to see a current-state picture.

Professional basis

ISO management system consulting — Hoshen's own materialVerified
Publisher:
Hoshen Engineering & Consulting
Clause / table:
/services#iso
The assessment questions were written by Hoshen. They quote no text from ISO 45001, which the repository does not hold; clause numbers are used as a reference only. The tool is not a certification audit and determines no conformity with the standard.

This is a professional aid. It does not constitute an approval, a certificate of conformity or an expert opinion, and it does not replace a specific assessment by a qualified professional or the requirements of the competent authority.

Your data is stored in this browser alone and is never sent to Hoshen or to anyone else.

Want a professional assessment?

You can send the current-state picture to Hoshen for a professional review of the gaps.

Talk to Hoshen Fire safety services