ISO Compliance Insights & Best Practices
CART
ISO Compliance Insights & Best Practices
An ISO 45001 gap analysis is the cheapest step in the whole certification project
and the one that determines whether the rest of it is estimable. It answers one question honestly:
against each clause, what exists, what partly exists, and what does not exist at all?
An ISO 45001 gap analysis is not there to produce a score. The score is a by-product. The output that matters is a costed, sequenced
action list: for every clause, the gap, who closes it, how long it takes, and what it depends on.
An assessment that ends at a percentage tells you how you feel; one that ends at a plan tells you what
to do on Monday.
Run it before you commit to a certification date. Certification bodies are booked months ahead and
moving a stage 2 is expensive; an honest ISO 45001 gap analysis is what makes the date credible.
Three or four levels is enough, and more granularity invites false precision:
The distinction between the last two is the one people collapse, and it is the one that decides
whether stage 2 succeeds. A process that started three weeks ago is implemented, not effective, and
an auditor sampling twelve months of records will find that out.
A missing scope statement is an afternoon. A missing worker consultation history is six months,
because the evidence is a trail over time and cannot be manufactured. When you turn the ISO 45001 gap
analysis into a plan, sort by lead time, not by clause number. The long-lead items are consistently:
Everything else — policy, roles, document control, awareness material — is fast, and it
is where projects spend their first month because it feels productive.
Score every clause in a workbook that already knows the questions.
The ISO 45001 Assessment Tool walks each clause in Excel, scores current maturity, and outputs a weighted gap report and action list you can take to management — no consultancy day rate required.
Someone who knows the standard and is willing to be unpopular. The failure mode of an internal ISO
45001 gap analysis is generosity: the person who wrote the risk assessments scores the risk assessment
clauses. If you cannot get independence, get a second reviewer for clauses 5.4, 6.1.2 and 9.1.2, which
are the three where self-assessment is most consistently optimistic.
Interview beyond the safety function. Ask a supervisor how a hazard gets reported and what happened
last time. Ask a contractor who inducted them. Those answers score clauses 5.4 and 8.1.4 more
accurately than any document review will.
For each gap, record the clause, the evidence that is missing, the owner, the effort, the lead time
and the dependency. Then sequence backwards from your target certification date, putting the long-lead
items first even where they are not the biggest gaps. Present it to management as a schedule with
costs, because clause 5.1 requires top management to ensure resources are available, and a plan is how
you ask for them.
Re-run the ISO 45001 gap analysis once before booking stage 1. The second pass takes a fraction of
the time, and it catches the clauses that were marked implemented in month two and quietly lapsed by
month seven. From there, our ISO 45001 implementation
guide covers closing the gaps, and the
ISO 45001 certification guide covers what happens next.
All of these are covered by the ISO 45001 Toolkit. To score where you stand first, use the ISO 45001 Assessment Tool, or browse the free ISO templates.
August 13, 2026
August 13, 2026
August 13, 2026
August 13, 2026
