compliance
ISO 45001 — Occupational Health & Safety
Clause-by-clause mapping of ISO 45001:2018 to QEHS modules, records, and review cadence. Use this to evidence conformance during certification audits.
16 min read · 3 sections
Overview
ISO 45001:2018 uses the Annex SL high-level structure (clauses 4–10). Each clause asks for evidence of documented information and operational control. The table below maps clauses to the QEHS artefacts auditors typically ask for.
Clause → evidence map
| Clause | QEHS artefact |
|---|---|
| 4 Context of the organisation | Documents module — "Context analysis" type |
| 5 Leadership and worker participation | Policies module + Consultation records |
| 6.1 Risks and opportunities | Risk register + Hazard assessments |
| 6.1.2 Hazard identification | Hazards module + Inspections findings |
| 6.1.3 Legal and other requirements | Regulatory library (Compliance module) |
| 6.2 OH&S objectives | Objectives module with KPI links |
| 7.2 Competence / 7.3 Awareness | Training module — records, matrix, retakes |
| 7.4 Communication | Notifications log + Toolbox talks |
| 7.5 Documented information | Documents module with version history |
| 8.1.3 Management of change | Change module with workflow approvals |
| 8.2 Emergency preparedness | Emergency drills module + ERP documents |
| 9.1 Monitoring, measurement | KPIs, Inspections, Audits dashboards |
| 9.2 Internal audit | Audits module with audit programme view |
| 9.3 Management review | Management Review module (annual record) |
| 10.2 Incident, nonconformity, corrective action | Incidents + Actions + CAPA workflow |
| 10.3 Continual improvement | Improvements module + trend charts |
Getting certified
- Gap assessment — use the "ISO 45001 audit" template and run an internal audit against each clause.
- Close gaps — each finding becomes an Action with an owner and due date.
- Pre-audit (Stage 1) — the certification body reviews your documented information.
- Certification audit (Stage 2) — on-site sampling of records and interviews. QEHS export packs produce a tamper-evident PDF per clause.
- Surveillance audits — annual, sample-based. Management Review module produces the input/output record automatically.