ISO & StandardsChecklist

ISO 45001 Internal Audit Checklist

Use this internal audit checklist to check the effectiveness of your occupational health and safety management system. Visit the work area, speak to workers and record what the evidence shows.

Prepared by Morgan Compliance Group · Published 23 October 2026 · Updated 23 October 2026

Who it's for

Health and safety managers, competent internal auditors and organisations preparing for ISO 45001 surveillance, recertification or certification audits.

ISO 45001 internal audit questions

Review each question, mark Conforms, Nonconformity, Observation or N/A and record what evidence you saw. The blank PDF provides fields for evidence and the completed download captures your notes. Your entries stay in your browser.

Checklist details (optional)

These details and your answers are added to the PDF in your browser. They are not submitted to us.

Conforms 0Nonconformity 0Observation 0N/A 0Not answered 19
Context

Are internal and external issues and interested parties reviewed and current?

Does the scope match the activities and sites?

Leadership and participation

Can top management explain the health and safety policy and their role?

Is there evidence of worker consultation and participation, including non-managers?

Are responsibilities assigned and understood?

Planning

Is hazard identification ongoing, including for new work, changes and non-routine tasks?

Are risk assessments current and do they reflect real work?

Is the legal register current, and has compliance been evaluated?

Are health and safety objectives measurable and monitored?

Support

Do competence and training records match role requirements?

Do workers know the hazards, controls and how to report concerns?

Operation

Are controls in place and followed on site, following the hierarchy of controls?

Is management of change applied?

Are contractors selected, inducted and monitored?

Have emergency arrangements been tested, with records?

Performance

Are inspections, monitoring and incident data reviewed?

Has the internal audit programme been followed?

Did the last management review cover all required inputs?

Improvement

Are incidents and nonconformities investigated to root cause, with corrective actions closed and checked for effectiveness?

How to run an internal audit

  1. Plan the scope, audit criteria and the activities to be sampled.
  2. Review the previous audit findings and check whether agreed actions worked.
  3. Interview relevant people, observe the work and inspect procedures and records.
  4. Record specific evidence supporting every finding, including any gaps or good practice observed.
  5. Agree corrective actions, responsible people and realistic completion dates.
  6. Report the findings to management and follow up outstanding actions.

Auditor independence

Auditors should not audit their own work. Choose someone with the competence and independence to make objective findings. A competent external auditor can help when suitable internal independence or experience is not available.

Free download

iso-45001-internal-audit-checklist-morgan-compliance-group.pdf

PDF

Download free

No sign-up needed.

This resource is general guidance. Adapt it to your own business, activities and risks.

Want an independent internal audit?

Internal audits work best when the auditor is independent of the work. We carry out internal audits against ISO 9001, ISO 14001 and ISO 45001 and give you clear, evidence-based findings.

Book an internal audit

RELATED RESOURCES

Keep exploring

Back to the Resource Centre