Context of the Organisation, Interested Parties & Scope

Has the company identified internal and external issues affecting the IMS? <br>Evidence Required: SWOT or PEST analysis, strategic review documents, risk register

Are external issues (legal, technological, competitive, culture, social, economic) documented and reviewed?<br>Evidence Required: Market analysis reports, compliance updates, meeting minutes

Are internal issues (legal, technological, competitive, culture, social, economic) documented and reviewed?<br>Evidence Required: Employee feedback reports, internal assessment plans

Is there a documented process for monitoring and reviewing these issues? <br>Evidence Required: Management review records, periodic assessment plans

Are tools like SWOT or PEST analysis used for evaluation?<br>Evidence Required: Completed analysis documents, senior management review notes

Is there a Risk and Opportunities matrix for OH&S and ISMS risks?<br>Evidence Required: Documented risk assessments, control action plans

Are results from monitoring external and internal issues maintaina in documented information?<br>Evidence Required: Records in IMS repository, periodic review reports

Has the company defined all relevant interested parties?<br>Evidence Required: Interested parties matrix, stakeholder engagement records

Are the needs and expectations of interested parties?<br>Evidence Required: Feedback surveys, contract agreements, customer requirements

Are relevant legal requirements, compliance obligations and applicable standards identified?<br>Evidence Required: Regulatory compliance documents, legal register

Is there an 'Interested Parties' matrix maintained and reviewed?<br>Evidence Required: Documented matrix with periodic updates

Is information about interested parties monitored and reviewed?<br>Evidence Required: Review Meeting minutes, email correspondences, compliance tracking systems

Does the system ensure that an effective OH&S management system is in place?<br>Evidence Required: Workplace safety assessments, incident reports, audit records

Has the company defined the boundaries and aplicability of the IMS?<br>Evidence Required: IMS scope document, system boundary reports

Are external and internal issues considered when defining the scope?<br>Evidence Required: Strategy documents, requirement documentation

Are the company's products and services defined within the IMS scope?<br>Evidence Required: Customer and regulatory requirement documentation

Are interested parties' requirements taken into account?<br>Evidence Required: Customer and reglatory requirement documentation

Are the company's products and services defined within the IMS scope?<br>Evidence Required: Service and product catelogues, operational process descriptions

Are planned and performed work-related activities included in scope determination?<br>Evidence Required: Work instructions, activity logs, process maps

Are all applicable requirements of ISO 9001 / 14001 / 27001 / 45001 reviewed?<br>Evidence Required: ISO compliance checklists, internal audit reports

Is justification provided for any excluded requirements?<br>Evidence Required: Documented rationale for exclusions in the IMS guide

Is the IMS scope documented in the IMS guide and made available to relevant parties?<br>Evidence Required: IMS guide distribution logs, access records

Are responsibilies for implementing and maintaining the IMS defined?<br>Evidence Required: Job descriptions, responsibility matrices, role assignments

Does the MD & Senior Management Team monitor and review external / internal issues and interested parties at least annually?<br>Evidence Required: Meeting minutes, review reports, corrective action logs

Does the HSEQL ensure the process is monitored and reviewed?<br>Evidence Required: Audit reports, internal assessments, competency assessments

Are internal auditors allocated to audit IMS processes effectively?<br>Evidence Required: Auditor training records, audit plans, competency assessments

Is the IMS guide maintained with the agreed scope?<br>Evidence Required: IMS Guide with version history, controlled document logs

Are PEST analysis, Interested Parties Matrix and Risk Registers up to date?

Is the IMS process documented and aligned with compliance & risk policies?<br>Evidence Required: IMS Process documents, policy alignment records

Are management reviews conducted at planned intervals?<br>Evidence Required: Review schedules, meeting records, action item tracking

Are necessary changes made to the IMS based on regulatory or organisational changes?<br>Evidence Required: Change control records, regulatory updates, internal communications