OCC ISO 9001:2015 & ISO 45001:2018 Checklist

• Site conducted

  Select

• Conducted on

  Date

• Prepared by

• Location
  Address

4.1 Understanding the organization and its context

• Has your organization determined external and internal issues relevant to its purpose and its strategic direction that affect its ability to achieve the intended result(s) of its IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization monitor and review information about these external and internal issues?

  Compliant

  OFI

  Minor NC

  Major NC

4.2 Understanding the needs and expectations of interested parties

• Does the organisation determine the interested parties that are relevant to the IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the organisation determine the requirements of these interested parties that are relevant to the IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization monitor and review information about these interested parties and their relevant requirements?

  Compliant

  OFI

  Minor NC

  Major NC

4.3 Determining the scope of the quality management system

• Does your organization determine the boundaries and applicability of the IMS to establish its scope?

  Compliant

  OFI

  Minor NC

  Major NC

• When determining this scope, has your organization considered the external and internal issues referred to in 4.1?

  Compliant

  OFI

  Minor NC

  Major NC

• When determining this scope, has your organization considered the requirements of relevant interested parties referred to in 4.2?

  Compliant

  OFI

  Minor NC

  Major NC

• When determining this scope, has your organization considered the products and services of your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization applied all the requirements of this International Standard if they are applicable within the determined scope of its IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Is the scope of your organization’s IMS available and maintained as documented information? (See 7.5.1a)

  Compliant

  OFI

  Minor NC

  Major NC

• Does the scope state the types of products and services covered, and provide justification for any requirement of this International Standard that your organization determines is not applicable to the scope of its IMS?

  Compliant

  OFI

  Minor NC

  Major NC

4.4 Quality and Health & Safety management system and its processes

• Has your organization established, implemented, maintained and continually improved a IMS, including the processes needed and their interactions, in accordance with the requirements of this International Standard?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization determined the processes needed for the IMS and their application throughout your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization determined the inputs required and the outputs expected from these processes (See 4.4)?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization determined the sequence and interaction of these processes; (See 4.4)?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization determined and applied the criteria and methods (including monitoring, measurements and related performance indicators) needed to ensure the effective operation and control of these processes; (See 9.0)?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization determined the resources needed for these processes and ensure their availability; (See 7.1)?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization assigned responsibilities and authorities for these processes; (See 5.3)?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization addressed the risks and opportunities as determined in accordance with the requirements of 6.1?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization evaluated these processes and implement any changes needed to ensure that these processes achieve their intended results?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization improve the processes and the IMS as per the requirements of 10?

  Compliant

  OFI

  Minor NC

  Major NC

• To the extent necessary, does your organization maintain documented information to support the operation of its processes? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

• To the extent necessary, does your organization retain documented information to have confidence that the processes are being carried out as planned? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

5.1.1 Leadership and commitment general

• Does Top management demonstrate leadership and commitment with respect to the IMS by taking accountability for the effectiveness of the IMS & the prevention of work-related injury and ill health as well as the provision of safe and healthy workplaces and activities?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to the IMS by ensuring that the quality policy and quality objectives are established for the QMS and are compatible with the context and strategic direction of your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to the IMS by ensuring the integration of the IMS requirements into your organization’s business processes?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to the IMS by promoting the use of the process approach and risk-based thinking?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to the IMS by ensuring that the resources needed for the IMS are available?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to the IMS by communicating the importance of effective quality management and of conforming to the IMS requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to the IMS by ensuring that the IMS achieves its intended results

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to the IMS by engaging, directing and supporting persons to contribute to the effectiveness of the IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to the IMS by promoting improvement?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to the IMS by supporting other relevant management roles to demonstrate their leadership as it applies to their areas of responsibility?

  Compliant

  OFI

  Minor NC

  Major NC

5.2 Quality & H&S Policy

• Does Top management demonstrate leadership and commitment with respect to customer focus by ensuring that customer and applicable statutory and regulatory requirements are determined, understood and consistently met?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management establish, implement and maintain a OH&S policy that includes a commitment to provide safe and healthy working conditions to prevent work related injury and ill health which is appropriate to the nature of the organization of its OH&S risks and opportunities

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to customer focus by ensuring that the risks and opportunities that can affect conformity of products and services and the ability to enhance customer satisfaction are determined and addressed?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management demonstrate leadership and commitment with respect to customer focus by ensuring that the focus on enhancing customer satisfaction is maintained?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management establish, implement and maintain a quality policy that is appropriate to the purpose and context of your organization and supports its strategic direction?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management establish, implement and maintain a quality and H&S policy that provides a framework for setting quality and health & safety objectives?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management establish, implement and maintain an OH&S policy that includes a commitment to satisfy applicable legal and other requirements?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does Top management establish, implement and maintain an OH&S policy that includes a commitment to consultation and participation of workers and where they exist workers’ representatives?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does Top management establish, implement and maintain an OH&S policy that includes a commitment to eliminate hazards and reduce OH&S risks? (See 8.1.2)

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does Top management establish, implement and maintain a quality policy that includes a commitment to satisfy applicable requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management establish, implement and maintain a quality policy that includes a commitment to continual improvement of the IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management establish, implement and maintain a OH&S policy that includes a commitment to continual improvement of the OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Is the OH&S policy available and be maintained as documented information?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Is the OH&S policy communicated, understood and applied within the organization?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Is the OH&S policy available to relevant interested parties, as appropriate?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Is the OH&S policy relevant and appropriate?

  Compliant

  OFI

  Minor N/C

  Major N/C

5.2.2 Communicating the quality policy

• Is the quality policy available and be maintained as documented information? (See 7.5.1a)

  Compliant

  OFI

  Minor NC

  Major NC

• Is the quality policy communicated, understood and applied within the organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Is the quality policy available to relevant interested parties, as appropriate?

  Compliant

  OFI

  Minor NC

  Major NC

5.3 Organizational roles, responsibilities and authorities

• Does Top management ensure that the responsibilities and authorities for relevant roles are assigned, communicated and understood within your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Has Top management assigned the responsibility and authority for ensuring that the IMS conforms to the requirements of this International Standard?

  Compliant

  OFI

  Minor NC

  Major NC

• Does Top management ensure that the responsibilities and authorities for relevant roles are assigned, communicated and understood within your organization and maintained as documented information?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does Top management ensure that the responsibilities and authorities for relevant roles are assigned, communicated and understood with workers at each level assuming responsibility for those aspects of the OH&S MS over which they have control?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Has Top management assigned the responsibility and authority for ensuring that the OH&S MS conforms to the requirements of this International Standard?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Has Top management assigned the responsibility and authority for reporting on the performance of OH&S MS to top management?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Has Top management assigned the responsibility and authority for ensuring that the processes are delivering their intended outputs?

  Compliant

  OFI

  Minor NC

  Major NC

• Has Top management assigned the responsibility and authority for reporting on the performance of the IMS and on opportunities for improvement (see 10.1), in particular to top management?

  Compliant

  OFI

  Minor NC

  Major NC

• Has Top management assigned the responsibility and authority for reporting on the performance of the IMS and on opportunities for improvement (see 10.1), in particular to top management?

  Compliant

  OFI

  Minor NC

  Major NC

• Has Top management assigned the responsibility and authority for ensuring that the integrity of the IMS is maintained when changes to the QMS are planned and implemented?

  Compliant

  OFI

  Minor NC

  Major NC

5.4 Consultation and participation of workers

• Does the organization establish, implement and maintain a process for consultation and participation of workers at all level and functions and where they exist, workers’ representatives in the development, planning, implementation, performance evaluation and actions for improvement of the OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does the organization provide mechanisms, time, training and resources necessary for consultation and participation?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does the organization provide timely access to clear, understandable, and relevant information about the OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does the organization determine and remove obstacles or barriers to participation and minimize those that cannot be removed?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the consultation of non-managerial workers when determining the needs and expectations of interested parties? (See 4.2).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the consultation of non-managerial workers when establishing the OH&S policy? (See 5.2).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the consultation of non-managerial workers when assigning organizational roles, responsibilities and authorities? (See 5.3)

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the consultation of non-managerial workers when determining how to fulfil legal requirements and other requirements? (See 6.1.3).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the consultation of non-managerial workers when establishing OH&S objectives and planning to achieve them? (See 6.2)

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the consultation of non-managerial workers when determining applicable controls for outsourcing, procurement and contractors? (See 8.1.4)

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the consultation of non-managerial workers when determining what needs to be monitored, measured and evaluated? (See 9.1).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the consultation of non-managerial workers when planning, establishing, implementing and maintaining an audit programme(s)? (See 9.2.2).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the consultation of non-managerial workers when ensuring continual improvement? (See 10.3).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the participation of non-managerial workers when determining the mechanisms for their consultation and participation?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the participation of non-managerial workers when identifying hazards and assessing risks and opportunities? (See 6.1.1 and 6.1.2).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the participation of non-managerial workers when determining actions to eliminate hazards and reduce OH&S risks? (See 6.1.4)

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the participation of non-managerial workers when determining competence requirements, training needs, training and evaluating training? (See 7.2).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the participation of non-managerial workers when determining what needs to be communicated and how this will be done? (See 7.4).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the participation of non-managerial workers when determining control measures and their effective implementation and use? (See 8.1, 8.1.3 and 8.2).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization emphasize the participation of non-managerial workers when investing incidents and non-conformities and determining corrective actions? (See 10.2).

  Compliant

  OFI

  Minor N/C

  Major N/C

6.1.1 Actions to address risks and opportunities

• Has your organization considered the issues referred to in 4.1 and the requirements referred to in 4.2 and determined the risks and opportunities that need to be addressed to give assurance that the IMS can achieve its intended results?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization considered the issues referred to in 4.1 and the requirements referred to in 4.2 and determined the risks and opportunities that need to be addressed to give assurance that the IMS can enhance desirable effects;

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization considered the issues referred to in 4.1 and the requirements referred to in 4.2 and determined the risks and opportunities that need to be addressed to give assurance that the IMS can prevent, or reduce, undesired effects?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization considered the issues referred to in 4.1 and the requirements referred to in 4.2 and determined the risks and opportunities that need to be addressed to give assurance that the IMS can achieve improvement?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization plan the actions to address these risks and opportunities?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the risks and opportunities for the OH&S MS and its intended outcomes that need addressed by taking into account hazards? (See 6.1.2.1).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization determine the risks and opportunities for the OH&S MS and its intended outcomes that need addressed by taking into account OH&S risks and other risks? (See 6.1.2.2).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization determine the risks and opportunities for the OH&S MS and its intended outcomes that need addressed by taking into account OH&S opportunities and other opportunities? (See 6.1.2.3).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization determine the risks and opportunities for the OH&S MS and its intended outcomes that need addressed by taking into account legal requirements and other requirements? (See 6.1.3).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization in its planning process determine and assess the risks and opportunities that are relevant to the intended outcomes of the OH&S MS associated with any changes to the nature of the organization or OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization in its planning process determine and assess the risks and opportunities that are relevant to the intended outcomes of the OH&S MS associated with any planned changes to the nature of the organization or OH&S MS be undertaken before the change is implemented? (See 8.1.3).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization maintain documented information on risks and opportunities?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization maintain documented information on the processes and actions needed to determine and address its risks and opportunities (see 6.1.2 to 6.1.4) to the extent necessary to have confidence that they are carried out as planned?

  Compliant

  OFI

  Minor N/C

  Major N/C

6.1.2 How the organisation plan to address risks and opportunities

• Does your organization plan how to integrate and implement the actions into its IMS processes (see 4.4)?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization plan how to evaluate the effectiveness of these actions?

  Compliant

  OFI

  Minor NC

  Major NC

• Are actions taken to address risks and opportunities proportionate to the potential impact on the conformity of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

6.1.2.1 Hazard identification

• Does your organization establish, implement and maintain a process(es) for hazard identification that is ongoing and proactive?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization take into account when identifying hazards how work is organized, social factors (including workload, work hours, victimization, harassment and bullying), leadership and the culture in the organization?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization take into account when identifying hazards routine and non-routine activities and situations?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization take into account when identifying hazards past relevant incidents, internal or external to the organization, including emergencies, and their causes?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization take into account when identifying hazards potential emergency situations?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization take into account when identifying hazards people?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization take into account when identifying hazards other issues?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization take into account when identifying hazards actual or proposed changes in organization, operations, processes, activities and the OH&S management system (see 8.1.3)?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization take into account when identifying hazards, changes in knowledge of, and information about, hazards?

  Compliant

  OFI

  Minor N/C

  Major N/C

6.1.2.2 Assessment of OH&S risks and other risks to the OH&S management system

• Does your organization establish, implement and maintain a processes to assess OH&S risks from the identified hazards, while taking into account the effectiveness of existing controls?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a processes to determine and assess the other risks related to the establishment, implementation, operation and maintenance of the OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization use methods and criteria for the assessment of OH&S risks, with respect to their scope, nature and timing to ensure they are proactive rather than reactive and are used in a systematic way?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization maintain and retain documented information on the methods and criteria used?

  Compliant

  OFI

  Minor N/C

  Major N/C

6.1.3 Determination of legal requirements and other requirements

• Does your organization establish, implement and maintain a process to determine and have access to up-to-date legal requirements and other requirements that are applicable to its hazards, OH&S risks and OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process to determine how these legal requirements and other requirements apply to the organization and what needs to be communicated?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process to take these legal requirements and other requirements into account when establishing, implementing, maintaining and continually improving its OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization maintain and retain documented information on its legal requirements and other requirements and ensure that it is updated to reflect any changes?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization plan action to address these risks and opportunities (see 6.1.2.2 and 6.1.2.3) and legal requirements and other requirements (see 6.1.3) and prepare for and respond to emergency situations?

  Compliant

  OFI

  Minor N/C

  Major N/C

6.1.4 Planning action

• Does your organization plan action to address these risks and opportunities (see 6.1.2.2 and 6.1.2.3) and legal requirements and other requirements (see 6.1.3) and prepare for and respond to emergency situations?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization plan action on how to integrate and implement the actions into its OH&S management system processes or other business processes and evaluate the effectiveness of these actions?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does the organization take into account the hierarchy of controls (see 8.1.2) and outputs from the OH&S MS when planning to take action?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does the organization when planning actions consider best practices, technological options and financial, operational and business requirements?

  Compliant

  OFI

  Minor N/C

  Major N/C

6.2.1 Objectives and planning to achieve them

• Has your organization established quality objectives at relevant functions, levels and processes needed for the continual improvement of the IMS and performance?

  Compliant

  OFI

  Minor NC

  Major NC

• Are the quality objectives consistent with the quality policy?

  Compliant

  OFI

  Minor NC

  Major NC

• Are the quality objectives measurable?

  Compliant

  OFI

  Minor NC

  Major NC

• Do the quality objectives take into account applicable requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Are the quality objectives relevant to conformity of products and services and to enhancement of customer satisfaction?

  Compliant

  OFI

  Minor NC

  Major NC

• Are the quality objectives monitored?

  Compliant

  OFI

  Minor NC

  Major NC

• Are the quality objectives communicated?

  Compliant

  OFI

  Minor NC

  Major NC

• Are the quality objectives updated as appropriate?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization maintain documented information on the quality objectives? (See 7.5.1a)

  Compliant

  OFI

  Minor NC

  Major NC

• Are the OH&S objectives consistent with the OH&S policy?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Are the OH&S objectives measurable or capable of performance evaluation?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Do the OH&S objectives take into account applicable requirements?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Do the OH&S objectives take into account the results of the assessment of risks and opportunities? (See 6.1.2.2 and 6.1.2.3).

  Compliant

  OFI

  Minor N/C

  Major N/C

• Do the OH&S objectives take into account the results of consultation with workers (see 5.4) and where they exist, workers’ representatives?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Are the OH&S objectives monitored?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Are the OH&S objectives communicated?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Are the OH&S objectives updated as appropriate?

  Compliant

  OFI

  Minor N/C

  Major N/C

6.2.2 Quality objectives and planning to achieve them

• When planning how to achieve its objectives, does your organization determine what will be done?

  Compliant

  OFI

  Minor NC

  Major NC

• When planning how to achieve its objectives, does your organization determine what resources will be required?

  Compliant

  OFI

  Minor NC

  Major NC

• When planning how to achieve its objectives, does your organization determine who will be responsible and when it will be completed?

  Compliant

  OFI

  Minor NC

  Major NC

• When planning how to achieve its quality objectives, does your organization determine how the results will be evaluated? including indicators for monitoring?

  Compliant

  OFI

  Minor NC

  Major NC

• When planning how to achieve its objectives, does your organization determine how actions to achieve objectives will be integrated into the organization’s business processes?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization maintain documented information on the OH&S objectives?

  Compliant

  OFI

  Minor N/C

  Major N/C

6.3 Planning of changes

• When your organization determines the need for changes to the QMS, are the changes carried out in a planned manner (see 4.4).

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization consider the purpose of the changes and their potential consequences?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization consider the integrity of the QMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization consider the availability of resources?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization consider the allocation or reallocation of responsibilities and authorities?

  Compliant

  OFI

  Minor NC

  Major NC

7.1.1 Resources general

• Does your organization determine and provide the resources needed for the establishment, implementation, maintenance and continual improvement of the IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization consider the capabilities of, and constraints on, existing internal resources?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization consider what needs to be obtained from external providers?

  Compliant

  OFI

  Minor NC

  Major NC

7.1.2 Resources people

• Does your organization determine and provide the staff necessary for the effective implementation of its QMS and for the operation and control of its processes?

  Compliant

  OFI

  Minor NC

  Major NC

7.1.3 Resources infrastructure

• Does your organization determine, provide and maintain the infrastructure necessary for the operation of its processes and to achieve conformity of products and services.

  Compliant

  OFI

  Minor NC

  Major NC

7.1.4 Environment for the operation of processes

• Does organization determine, provide and maintain the environment necessary for the operation of its processes and to achieve conformity of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

7.1.5.1 Monitoring and measuring resources general

• Does your organization determine and provide the resources needed to ensure valid and reliable results when monitoring or measuring is used to verify the conformity of products and services to requirements.

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the resources provided are suitable for the specific type of monitoring and measurement activities being undertaken;

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the resources are maintained to ensure their continuing fitness for their purpose?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain appropriate documented information as evidence of fitness for purpose of the monitoring and measurement resources?

  Compliant

  OFI

  Minor NC

  Major NC

7.1.5.2 Measurement traceability

• When measurement traceability is a requirement, or is considered by your organization to be an essential part of providing confidence in the validity of measurement results, is measuring equipment calibrated or verified, or both, at specified intervals, or prior to use, against measurement standards traceable to international or national measurement standards; when no such standards exist, is the basis used for calibration or verification retained as documented information?

  Compliant

  OFI

  Minor NC

  Major NC

• When measurement traceability is a requirement, or is considered by your organization to be an essential part of providing confidence in the validity of measurement results is measuring equipment identified in order to determine their status?

  Compliant

  OFI

  Minor NC

  Major NC

• When measurement traceability is a requirement, or is considered by your organization to be an essential part of providing confidence in the validity of measurement results safeguarded from adjustments, damage or deterioration that would invalidate the calibration status and subsequent measurement results?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine if the validity of previous measurement results has been adversely affected when measuring equipment is found to be unfit for its intended purpose?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine previous measurement results has been adversely affected when measuring equipment is found to be unfit for its intended purpose, does your organization take appropriate action as necessary?

  Compliant

  OFI

  Minor NC

  Major NC

7.1.6 Organizational knowledge

• Does your organization determine the knowledge necessary for the operation of its processes and to achieve conformity of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Is organizational knowledge maintained and made available to the extent necessary?

  Compliant

  OFI

  Minor NC

  Major NC

• When addressing changing needs and trends, does your organization consider its current knowledge and determine how to acquire or access any necessary additional knowledge and required updates?

  Compliant

  OFI

  Minor NC

  Major NC

7.2 Competence

• Does your organization determine the necessary competence of person(s) doing work under its control that affects the performance and effectiveness of the IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that these persons are competent on the basis of appropriate education, training, or experience?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization where applicable, take actions to acquire the necessary competence, and evaluate the effectiveness of the actions taken?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain appropriate documented information as evidence of competence? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

7.3 Awareness

• Does your organization ensure that persons doing work under your organization’s control are aware of the quality and H&S policy?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that persons doing work under your organization’s control are aware of the relevant quality and H&S objectives?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that persons doing work under your organization’s control are aware of their contribution to the effectiveness of the IMS, including the benefits of improved performance?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that persons doing work under your organization’s control are aware of the implications of not conforming to the IMS requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that persons doing work under your organization’s control are aware of incidents and the outcomes of the investigations that are relevant to them?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure that persons doing work under your organization’s control are aware of the hazards, OH&S risks and actions determined that are relevant to them?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure that persons doing work under your organization’s control are aware of the ability to remove themselves from work situations that they consider present an imminent and serious danger to their life or health as well as the arrangements for protecting them from undue consequences for doing so?

  Compliant

  OFI

  Minor N/C

  Major N/C

7.4 Communication

• Does your organization determine the internal and external communications relevant to the QMS, including what it will communicate?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the internal and external communications relevant to the QMS, including when to communicate?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the internal and external communications relevant to the QMS, including with whom to communicate?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the internal and external communications relevant to the QMS, including how to communicate?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the internal and external communications relevant to the QMS, including who communicates?

  Compliant

  OFI

  Minor NC

  Major NC

7.4.1 Communication General

• Does your organization determine the internal and external communications relevant to the OH&S MS, including what it will communicate?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization determine the internal and external communications relevant to the OH&S MS, including when to communicate?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization determine the internal and external communications relevant to the OH&S MS, including with whom to communicate?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization determine the internal and external communications relevant to the OH&S MS, including internally among various levels and functions; among contractors and visitors and interested parties?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization determine the internal and external communications relevant to the OH&S, including how to communicate?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization taken into account the internal and external communications relevant to the OH&S of diversity aspects (gender, language, culture, literacy, disability) when considering its communication needs?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure that the views of external interested parties are considered in establishing its communication processes?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization when establishing its communication processes take into account its legal requirements and other requirements?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization when establishing its communication processes take into account its ensure that OH&S information to be communicated is consistent with information generated within the OH&S MS is reliable?

  Compliant

  OFI

  Minor N/C

  Major N/C

• How does your organization respond to relevant communications on its OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization retain documented information as evidence of its communications as appropriate?

  Compliant

  OFI

  Minor N/C

  Major N/C

7.4.2 Internal communication

• Does your organization internally communicate information relevant to OH&S MS among various levels and functions including changes to OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure its communication processes enables workers to contribute to continual improvement?

  Compliant

  OFI

  Minor N/C

  Major N/C

7.4.3 External communication

• Does your organization externally communicate information relevant to the OH&S MS as established by the organizations’ communication process and taking into account its legal requirements and other requirements?

  Compliant

  OFI

  Minor N/C

  Major N/C

7.5.1 Documented information general

• Does your organization’s IMS include documented information required by this International Standard?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization’s IMS include documented information determined by your organization as being necessary for the effectiveness of the IMS?

  Compliant

  OFI

  Minor NC

  Major NC

7.5.2 Creating and updating

• When creating and updating documented information, does your organization ensure appropriate identification and description (e.g. a title, date, author, or reference number)?

  Compliant

  OFI

  Minor NC

  Major NC

• When creating and updating documented information, does your organization ensure appropriate format (e.g. language, software version, graphics) and media (e.g. paper, electronic)?

  Compliant

  OFI

  Minor NC

  Major NC

• When creating and updating documented information, does your organization ensure appropriate review and approval for suitability and adequacy?

  Compliant

  OFI

  Minor NC

  Major NC

7.5.3.1 Control of documented information

• Is documented information (required by the QMS and ISO 9001) controlled to ensure it is available and suitable for use, where and when it is needed?

  Compliant

  OFI

  Minor NC

  Major NC

• Is documented information (required by the QMS and ISO 9001) controlled to ensure it is adequately protected from loss of confidentiality, improper use, or loss of integrity?

  Compliant

  OFI

  Minor NC

  Major NC

7.5.3.2 Control of documented information

• For the control of documented information, does your organization address the distribution, access, retrieval and use?

  Compliant

  OFI

  Minor NC

  Major NC

• For the control of documented information, does your organization address storage and preservation, including preservation of legibility?

  Compliant

  OFI

  Minor NC

  Major NC

• For the control of documented information, does your organization address control of changes (e.g. version control)?

  Compliant

  OFI

  Minor NC

  Major NC

• For the control of documented information, does your organization address retention and disposition?

  Compliant

  OFI

  Minor NC

  Major NC

• Is documented information of external origin determined by your organization to be necessary for the planning and operation of the QMS identified as appropriate, and be controlled?

  Compliant

  OFI

  Minor NC

  Major NC

• Is documented information retained as evidence of conformity protected from unintended alterations?

  Compliant

  OFI

  Minor NC

  Major NC

• Is documented information (required by the OH&S MS and ISO 45001) controlled to ensure it is available and suitable for use, where and when it is needed?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Is documented information (required by the OH&S MS and ISO 45001) controlled to ensure it is adequately protected from loss of confidentiality, improper use, or loss of integrity?

  Compliant

  OFI

  Minor N/C

  Major N/C

8.1 Operational planning and control

• Does your organization plan, implement and control the processes (see 4.4) needed to meet the requirements for the provision of products and services, and to implement the actions determined in Clause 6 by determining the requirements for the products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization plan, implement and control the processes (see 4.4) needed to meet the requirements for the provision of products and services, and to implement the actions determined in Clause 6 by establishing criteria for the processes?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization plan, implement and control the processes (see 4.4) needed to meet the requirements for the provision of products and services, and to implement the actions determined in Clause 6 by establishing criteria for the acceptance of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization plan, implement and control the processes (see 4.4) needed to meet the requirements for the provision of products and services, and to implement the actions determined in Clause 6 by determining the resources needed to achieve conformity to product and service requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization plan, implement and control the processes (see 4.4) needed to meet the requirements for the provision of products and services, and to implement the actions determined in Clause 6 by implementing control of the processes in accordance with the criteria?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization plan, implement and control the processes (see 4.4) needed to meet the requirements for the provision of products and services, and to implement the actions determined in Clause 6 by determining, maintaining and retaining documented information to the extent necessary to have confidence that the processes have been carried out as planned?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization plan, implement and control the processes (see 4.4) needed to meet the requirements for the provision of products and services, and to implement the actions determined in Clause 6 by determining, maintaining and retaining documented information to the extent necessary to demonstrate the conformity of products and services to their requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Are the outputs of the planning process suitable for your organization’s operations?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization control planned changes and review the consequences of unintended changes, taking action to mitigate any adverse effects, as necessary?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that outsourced processes are controlled (see 8.4)?

  Compliant

  OFI

  Minor NC

  Major NC

8.1.2 Eliminating hazards and reducing OH&S risks

• Does your organization establish, implement and maintain a process for the elimination of hazards and reduction of OH&S risks using the hierarchy of controls to eliminate the hazard?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process for the elimination of hazards and reduction of OH&S risks using the hierarchy of controls to substitute with less hazardous processes, operations, materials or equipment?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process for the elimination of hazards and reduction of OH&S risks using the hierarchy of controls to use engineering controls and reorganization of work?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process for the elimination of hazards and reduction of OH&S risks using the hierarchy of controls to use administrative controls, including training?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process for the elimination of hazards and reduction of OH&S risks using the hierarchy of controls to use adequate personal protective equipment?

  Compliant

  OFI

  Minor N/C

  Major N/C

8.1.3 Management of change

• Does your organization establish a process(es) for the implementation and control of planned temporary and permanent changes that impact OH&S performance to include new products, services and processes, or changes to existing products, services and processes?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish a process(es) for the implementation and control of planned temporary and permanent changes that impact OH&S performance to include changes to legal requirements and other requirements?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish a process(es) for the implementation and control of planned temporary and permanent changes that impact OH&S performance to include changes in knowledge or information about hazards and OH&S risks?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish a process(es) for the implementation and control of planned temporary and permanent changes that impact OH&S performance to include developments in knowledge and technology?

  Compliant

  OFI

  Minor N/C

  Major N/C

8.1.4.1 Procurement

• Does your organization establish, implement and maintain a process(es) to control the procurement of products and services in order to ensure their conformity to its OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

8.1.4.2 Contractors

• Does your organization ensure it coordinates its procurement process(es) with its contractors, in order to identify hazards and to assess and control the OH&S risks arising from the contractors’ activities and operations that impact the organization?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure it coordinates its procurement process(es) with its contractors, in order to identify hazards and to assess and control the OH&S risks arising from the organization’s activities and operations that impact the contractors’ workers?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure it coordinates its procurement process(es) with its contractors, in order to identify hazards and to assess and control the OH&S risks arising from the contractors’ activities and operations that impact other interested parties in the workplace?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure that the requirements of its OH&S MS are met by contractors and their workers?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure its procurement process(es) defines and apply occupational health and safety criteria for the selection of contractors?

  Compliant

  OFI

  Minor N/C

  Major N/C

8.1.4.3 Outsourcing

• Does your organization ensure that outsourced functions and processes are controlled?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure that its outsourcing arrangements are consistent with legal requirements and other requirements and with achieving the intended outcomes of the OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure the type and degree of control to be applied to these functions and processes is be defined within the OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

8.2 Emergency preparedness and response

• Does your organization establish, implement and maintain a process(es) needed to prepare for and respond to potential emergency situations, as identified in 6.1.2.1?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process(es) needed to prepare for and respond to potential emergency situations, as identified in 6.1.2.1 to include establishing a planned response to emergency situations, including the provision of first aid?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process(es) needed to prepare for and respond to potential emergency situations, as identified in 6.1.2.1 to include providing training for the planned response?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process(es) needed to prepare for and respond to potential emergency situations, as identified in 6.1.2.1 to include periodically testing and exercising the planned response capability?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process(es) needed to prepare for and respond to potential emergency situations, as identified in 6.1.2.1 to include evaluating performance and, as necessary, revising the planned response, including after testing and, in particular, after the occurrence of emergency situations?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process(es) needed to prepare for and respond to potential emergency situations, as identified in 6.1.2.1 to include communicating and providing relevant information to all workers on their duties and responsibilities?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process(es) needed to prepare for and respond to potential emergency situations, as identified in 6.1.2.1 to include communicating relevant information to contractors, visitors, emergency response services, government authorities and, as appropriate, the local community?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization establish, implement and maintain a process(es) needed to prepare for and respond to potential emergency situations, as identified in 6.1.2.1 to include taking into account the needs and capabilities of all relevant interested parties and ensuring their involvement, as appropriate, in the development of the planned response?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization maintain and retain documented information on the process(es) and on the plans for responding to potential emergency situations?

  Compliant

  OFI

  Minor N/C

  Major N/C

8.2.1 Requirements for products and services - Customer Communication

• Does communication with customers include providing information relating to products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does communication with customers include handling enquiries, contracts or orders, including changes?

  Compliant

  OFI

  Minor NC

  Major NC

• Does communication with customers include obtaining customer feedback relating to products and services, including customer complaints?

  Compliant

  OFI

  Minor NC

  Major NC

• Does communication with customers include handling or controlling customer property?

  Compliant

  OFI

  Minor NC

  Major NC

• Does communication with customers include establishing specific requirements for contingency actions, when relevant?

  Compliant

  OFI

  Minor NC

  Major NC

8.2.2 Requirements for products and services - Determining the requirements for products and services

• When determining the requirements for the products and services to be offered to customers, does your organization ensure that the requirements for the products and services are defined, including any applicable statutory and regulatory requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• When determining the requirements for the products and services to be offered to customers, does your organization ensure that the requirements for the products and services are defined, including those considered necessary by your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• When determining the requirements for the products and services to be offered to customers, does your organization ensure that your organization can meet the claims for the products and services it offers?

  Compliant

  OFI

  Minor NC

  Major NC

8.2.3.1 Review of the requirements for products and services

• Does your organization ensure that it has the ability to meet the requirements for products and services to be offered to customers?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization conduct a review before committing to supply products and services to a customer, including requirements specified by the customer, including the requirements for delivery and post-delivery activities?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization conduct a review before committing to supply products and services to a customer, including requirements not stated by the customer, but necessary for the specified or intended use, when known?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization conduct a review before committing to supply products and services to a customer, including requirements specified by your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization conduct a review before committing to supply products and services to a customer, including statutory and regulatory requirements applicable to the products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization conduct a review before committing to supply products and services to a customer, including contract or order requirements differing from those previously expressed?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that contract or order requirements differing from those previously defined are resolved?

  Compliant

  OFI

  Minor NC

  Major NC

• Are customer’s requirements confirmed by your organization before acceptance, when the customer does not provide a documented statement of their requirements?

  Compliant

  OFI

  Minor NC

  Major NC

8.2.3.2 Review of the requirements for products and services

• Does your organization retain documented information, as applicable on the results of the review? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information, as applicable on any new requirements for the products and services? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

8.2.4 Changes to requirements for products and services

• Does your organization ensure that relevant documented information is amended, and that relevant persons are made aware of the changed requirements, when the requirements for products and services are changed? (See 7.5.2)

  Compliant

  OFI

  Minor NC

  Major NC

8.3.1 Design and development of products and services general

• Does your organization establish, implement and maintain a design and development process that is appropriate to ensure the subsequent provision of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

8.4.1 Control of externally provided processes, products and services general

• Does your organization ensure that externally provided processes, products and services conform to requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the controls to be applied to externally provided processes, products and services when products and services from external providers are intended for incorporation into your organization’s own products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the controls to be applied to externally provided processes, products and services when products and services are provided directly to the customer(s) by external providers on behalf of your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the controls to be applied to externally provided processes, products and services when a process, or part of a process, is provided by an external provider as a result of a decision by your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine and apply criteria for the evaluation, selection, monitoring of performance, and re-evaluation of external providers, based on their ability to provide processes or products and services in accordance with requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information of these activities and any necessary actions arising from the evaluations? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

8.4.2 Type and extent of control

• Does your organization ensure that externally provided processes, products and services do not adversely affect your organization’s ability to consistently deliver conforming products and services to its customers?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that externally provided processes remain within the control of its QMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization define both the controls that it intends to apply to an external provider and those it intends to apply to the resulting output?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization take into consideration the potential impact of the externally provided processes, products and services on your organization’s ability to consistently meet customer and applicable statutory and regulatory requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization take into consideration the effectiveness of the controls applied by the external provider?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the verification, or other activities, necessary to ensure that the externally provided processes, products and services meet requirements?

  Compliant

  OFI

  Minor NC

  Major NC

8.4.3 Information for external providers

• Does your organization ensure the adequacy of requirements prior to their communication to the external provider?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization communicate to external providers its requirements for the processes, products and services to be provided?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization communicate to external providers its requirements for the approval of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization communicate to external providers its requirements for the approval of methods, processes and equipment?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization communicate to external providers its requirements for the approval of the release of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization communicate to external providers its requirements for competence, including any required qualification of persons?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization communicate to external providers its requirements for the external providers’ interactions with your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization communicate to external providers its requirements for the control and monitoring of the external providers’ performance to be applied by your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization communicate to external providers its requirements for the verification or validation activities that your organization, or its customer, intends to perform at the external providers’ premises?

  Compliant

  OFI

  Minor NC

  Major NC

8.5.1 Control of production and service provision

• Does your organization implement production and service provision under controlled conditions?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization implemented controlled conditions that include the availability of documented information that defines the characteristics of the products to be produced, the services to be provided, or the activities to be performed?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization implemented controlled conditions that include the availability of documented information that defines the results to be achieved?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization implemented controlled conditions that include the availability and use of suitable monitoring and measuring resources?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization implemented controlled conditions that include the implementation of monitoring and measurement activities at appropriate stages to verify that criteria for control of processes or outputs, and acceptance criteria for products and services, have been met?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization implemented controlled conditions that include the use of suitable infrastructure and environment for the operation of processes?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization implemented controlled conditions that include appointment of competent persons, including any required qualification?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization implemented controlled conditions that include validation, and periodic revalidation, of the ability to achieve planned results of the processes for production and service provision, where the resulting output cannot be verified by subsequent monitoring or measurement?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization implemented controlled conditions that include the implementation of actions to prevent human error?

  Compliant

  OFI

  Minor NC

  Major NC

• Has your organization implemented controlled conditions that include the implementation of release, delivery and post-delivery activities?

  Compliant

  OFI

  Minor NC

  Major NC

8.5.2 Identification and traceability

• Does your organization use suitable means to identify outputs when it is necessary to ensure the conformity of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization identify the status of outputs with respect to monitoring and measurement requirements throughout production and service provision?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization control the unique identification of the outputs when traceability is a requirement, and shall retain the documented information necessary to enable traceability? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

8.5.3 Property belonging to customers or external providers

• Does your organization exercise care with property belonging to customers or external providers while it is under your organization’s control or being used by your organization?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization identify, verify, protect and safeguard customers’ or external providers’ property provided for use or incorporation into the products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• When the property of a customer or external provider is lost, damaged or otherwise found to be unsuitable for use, does your organization report this to the customer or external provider and retain documented information on what has occurred? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

8.5.4 Preservation

• Does your organization preserve the outputs during production and service provision, to the extent necessary to ensure conformity to requirements?

  Compliant

  OFI

  Minor NC

  Major NC

8.5.5 Post-delivery activities

• Does your organization meet requirements for post-delivery activities associated with the products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• In determining the extent of post-delivery activities that are required, does your organization consider statutory and regulatory requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• In determining the extent of post-delivery activities that are required, does your organization consider the potential undesired consequences associated with its products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• In determining the extent of post-delivery activities that are required, does your organization consider the nature, use and intended lifetime of its products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• In determining the extent of post-delivery activities that are required, does your organization consider customer requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• In determining the extent of post-delivery activities that are required, does your organization consider customer feedback?

  Compliant

  OFI

  Minor NC

  Major NC

8.5.6 Control of changes

• Does your organization review and control changes for production or service provision, to the extent necessary to ensure continuing conformity with requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information describing the results of the review of changes, the person(s) authorizing the change, and any necessary actions arising from the review? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

8.6 Release of products and services

• Does your organization implement planned arrangements, at appropriate stages, to verify that the product and service requirements have been met?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the release of products and services to the customer does not proceed until the planned arrangements have been satisfactorily completed, unless otherwise approved by a relevant authority and, as applicable, by the customer?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information on the release of products and services including evidence of conformity with the acceptance criteria?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information on the release of products and services including traceability to the person(s) authorizing the release? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

8.7.1 Control of nonconforming outputs

• Does your organization ensure that outputs that do not conform to their requirements are identified and controlled to prevent their unintended use or delivery?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization take appropriate action based on the nature of the nonconformity and its effect on the conformity of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization take appropriate action based on the nature of nonconforming products and services detected after delivery of products, during or after the provision of services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization deal with nonconforming outputs (in one or more of the following ways), correction; segregation, containment, return or suspension of provision of products and services; informing the customer; obtaining authorization for acceptance under concession.

  Compliant

  OFI

  Minor NC

  Major NC

• Is conformity to the requirements verified when nonconforming outputs are corrected?

  Compliant

  OFI

  Minor NC

  Major NC

8.7.2 Control of nonconforming outputs documented information

• Does your organization retain documented information that describes the nonconformity? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information that describes the actions taken?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information that describes any concessions obtained?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information that identifies the authority deciding the action in respect of the nonconformity?

  Compliant

  OFI

  Minor NC

  Major NC

9.1.1 Monitoring, measurement, analysis and evaluation

• Does your organization determine what needs to be monitored and measured?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the methods for monitoring, measurement, analysis and evaluation needed to ensure valid results?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine when the monitoring and measuring shall be performed?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the criteria against how it will evaluate its OH&S performance?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization determine when the results from monitoring and measurement shall be performed, analysed and evaluated?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization evaluate the performance and the effectiveness of the IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain appropriate documented information as evidence of the results? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that monitoring and measuring equipment is calibrated or verified as applicable, and is used and maintained as appropriate?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization retain appropriate documented information as evidence of the results of monitoring measurement, analysis and performance evaluation and on the maintenance, calibration or verification of measuring equipment?

  Compliant

  OFI

  Minor N/C

  Major N/C

9.1.2 Evaluation of compliance (ISO 45001)

• Does your organization establish, implement and maintain a process(es) for evaluating compliance with legal requirements and other requirements (see 6.1.3)?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization determine the frequency and methods for the evaluation of compliance?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization evaluate compliance and take action if needed (see 10.2)?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization maintain knowledge and understanding of its compliance status with legal requirements and other requirements?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization retain documented information of the compliance evaluation results?

  Compliant

  OFI

  Minor N/C

  Major N/C

9.1.2 Customer satisfaction (ISO 9001)

• Does your organization monitor customers’ perceptions of the degree to which their needs and expectations have been fulfilled?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine the methods for obtaining, monitoring and reviewing this information?

  Compliant

  OFI

  Minor NC

  Major NC

9.1.3 Analysis and evaluation

• Does your organization analyse and evaluate appropriate data and information arising from monitoring and measurement.

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the results of analysis are used to evaluate conformity of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the results of analysis are used to evaluate the degree of customer satisfaction?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the results of analysis are used to evaluate the performance and effectiveness of the QMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the results of analysis are used to evaluate if planning has been implemented effectively?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the results of analysis are used to evaluate the effectiveness of actions taken to address risks and opportunities?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the results of analysis are used to evaluate the performance of external providers?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the results of analysis are used to evaluate the need for improvements to the QMS?

  Compliant

  OFI

  Minor NC

  Major NC

9.2.1 Internal audit

• Does your organization conduct internal audits at planned intervals to provide information on whether the IMS conforms to your organization’s own requirements for its IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization conduct internal audits at planned intervals to provide information on whether the QMS conforms to the requirements of ISO 9001:2015 and ISO 45001:2018?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization conduct internal audits at planned intervals to provide information on whether the IMS is effectively implemented and maintained?

  Compliant

  OFI

  Minor NC

  Major NC

9.2.2 Internal audit programme

• Does your organization plan, establish, implement and maintain an audit programme(s) including the frequency, methods, responsibilities, planning requirements and reporting, which shall take into consideration the importance of the processes concerned, changes affecting your organization, and the results of previous audits?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization define the audit criteria and scope for each audit?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization select auditors and conduct audits to ensure objectivity and the impartiality of the audit process?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that the results of the audits are reported to relevant management?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization take appropriate correction and corrective actions without undue delay?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information as evidence of the implementation of the audit programme and the audit results? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

9.3.1 Management review general

• Does Top management review your organization’s IMS, at planned intervals, to ensure its continuing suitability, adequacy, effectiveness and alignment with the strategic direction of your organization?

  Compliant

  OFI

  Minor NC

  Major NC

9.3.2 Management review input

• Does the management review planned and carried out taking into consideration the status of actions from previous management reviews?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration the status of actions from previous management reviews?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does the management review planned and carried out taking into consideration changes in external and internal issues that are relevant to the IMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration information on the performance and effectiveness of the IMS, including trends in customer satisfaction and feedback from relevant interested parties, legal requirements and risk and opportunities?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration information on the performance and effectiveness of the IMS, including trends in the extent to which objectives have been met?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration information on the performance and effectiveness of the iMS, including trends in process performance and conformity of products and services?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration information on the performance and effectiveness of the QMS, including trends in incidents, nonconformities and corrective actions?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration information on the performance and effectiveness of the IMS, including trends in monitoring and measurement results, results of evaluation of compliance with legal requirements and other requirements?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration information on the performance and effectiveness of the IMS, including trends in audit results?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration information on the performance and effectiveness of the QMS, including trends in the performance of external providers?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration the adequacy of resources?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration consultation and participation of workers?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does the management review planned and carried out taking into consideration the effectiveness of actions taken to address risks and opportunities (see 6.1)?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration opportunities for improvement?

  Compliant

  OFI

  Minor NC

  Major NC

• Does the management review planned and carried out taking into consideration the adequacy of resources for maintaining an effective OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does the management review planned and carried out taking into consideration the relevant communications with interested parties?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does the management review planned and carried out taking into consideration opportunities for improvement?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Do the outputs of the management review include the continuing suitability, adequacy and effectiveness of the OH&S MS in achieving its intended outcomes?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Do the outputs of the management review include any need for changes to the OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Do the outputs of the management review include decisions and actions related to any need for changes to the OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Do the outputs of the management review include decisions and actions related to resource needs?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization retain documented information as evidence of the results of management reviews? (See 7.5.1b)

  Compliant

  OFI

  Minor N/C

  Major N/C

9.3.3 Management review outputs

• Do the outputs of the management review include decisions and actions related to opportunities for improvement?

  Compliant

  OFI

  Minor NC

  Major NC

• Do the outputs of the management review include decisions and actions related to any need for changes to the QMS?

  Compliant

  OFI

  Minor NC

  Major NC

• Do the outputs of the management review include decisions and actions related to resource needs?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information as evidence of the results of management reviews? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

10.1 Improvement general

• Does your organization determine and select opportunities for improvement and implement any necessary actions to meet customer requirements and enhance customer satisfaction?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine and select opportunities for improvement and implement any necessary actions to improving products and services to meet requirements as well as to address future needs and expectations?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine and select opportunities for improvement and implement any necessary actions to correcting, preventing or reducing undesired effects?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization determine and select opportunities for improvement and implement any necessary actions to improving the performance and effectiveness of the IMS?

  Compliant

  OFI

  Minor NC

  Major NC

10.2.1 Nonconformity and corrective action

• When nonconformities occur, including any arising from complaints, does your organization react to the nonconformity take action to control and correct it?

  Compliant

  OFI

  Minor NC

  Major NC

• When nonconformities occur, including any arising from complaints, does your organization react to the nonconformity deal with the consequences?

  Compliant

  OFI

  Minor NC

  Major NC

• When nonconformities occur, including any arising from complaints, does your organization evaluate the need for action to eliminate the cause(s) of the nonconformity, in order that it does not recur or occur elsewhere by reviewing and analysing the nonconformity?

  Compliant

  OFI

  Minor NC

  Major NC

• When nonconformities occur, including any arising from complaints, does your organization evaluate the need for action to eliminate the cause(s) of the nonconformity, in order that it does not recur or occur elsewhere by determining the causes of the nonconformity?

  Compliant

  OFI

  Minor NC

  Major NC

• When nonconformities occur, including any arising from complaints, does your organization evaluate the need for action to eliminate the cause(s) of the nonconformity, in order that it does not recur or occur elsewhere by determining if similar nonconformities exist, or could potentially occur?

  Compliant

  OFI

  Minor NC

  Major NC

• When nonconformities occur, including any arising from complaints, does your organization implement any action needed?

  Compliant

  OFI

  Minor NC

  Major NC

• When nonconformities occur, including any arising from complaints, does your organization evaluate the need for action to eliminate the cause(s) of the nonconformity, in order that it does not recur or occur elsewhere by review existing assessments of OH&S risks and other risks, as appropriate (see 6.1)?

  Compliant

  OFI

  Minor N/C

  Major N/C

• When nonconformities occur, including any arising from complaints, does your organization evaluate the need for action to eliminate the cause(s) of the nonconformity, in order that it does not recur or occur elsewhere by determining and implementing any action needed, including corrective action, in accordance with the hierarchy of controls (see 8.1.2) and the management of change (see 8.1.3)?

  Compliant

  OFI

  Minor N/C

  Major N/C

• When nonconformities occur, including any arising from complaints, does your organization evaluate the need for action to eliminate the cause(s) of the nonconformity, in order that it does not recur or occur elsewhere by assessing OH&S risks that relate to new or changed hazards, prior to taking action?

  Compliant

  OFI

  Minor N/C

  Major N/C

• When nonconformities occur, including any arising from complaints, does your organization review the effectiveness of any corrective action taken?

  Compliant

  OFI

  Minor NC

  Major NC

• When nonconformities occur, including any arising from complaints, does your organization update risks and opportunities determined during planning, if necessary?

  Compliant

  OFI

  Minor NC

  Major NC

• When nonconformities occur, including any arising from complaints, does your organization make changes to the IMS, if necessary?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization ensure that corrective actions are appropriate to the effects of the nonconformities encountered?

  Compliant

  OFI

  Minor NC

  Major NC

• When nonconformities occur, including any arising from complaints, does your organization make changes to the OH&S MS, if necessary?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization ensure that corrective actions are appropriate to the effects of the nonconformities encountered?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization retain documented information as evidence of the nature of the nonconformities and any subsequent actions taken?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization retain documented information as evidence of the nature of the results of any corrective action?

  Compliant

  OFI

  Minor N/C

  Major N/C

10.2.2 Nonconformity and corrective action documented information

• Does your organization retain documented information as evidence of the nature of the nonconformities and any subsequent actions taken? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization retain documented information as evidence of the nature of the results of any corrective action? (See 7.5.1b)

  Compliant

  OFI

  Minor NC

  Major NC

10.3 Continual Improvement

• Does your organization continually improve the suitability, adequacy and effectiveness of the IMS?

  Select Compliant OFI Minor NC Major NC

  • Compliant
  • OFI
  • Minor NC
  • Major NC

• Does your organization consider the results of analysis and evaluation, and the outputs from management review, to determine if there are needs or opportunities that shall be addressed as part of continual improvement?

  Compliant

  OFI

  Minor NC

  Major NC

• Does your organization continually improve the suitability, adequacy, and effectiveness of the OH&S MS by enhancing OH&S performance?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization continually improve the suitability, adequacy, and effectiveness of the OH&S MS by promoting a culture that supports an OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization continually improve the suitability, adequacy, and effectiveness of the OH&S MS by promoting the participation of workers in implementing actions for the continual improvement of the OH&S MS?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization continually improve the suitability, adequacy, and effectiveness of the OH&S MS by communicating the relevant results of continual improvement to workers and where they exist, workers’ representatives?

  Compliant

  OFI

  Minor N/C

  Major N/C

• Does your organization continually improve the suitability, adequacy, and effectiveness of the OH&S MS by maintaining and retaining documented information as evidence of continual improvement?

  Compliant

  OFI

  Minor N/C

  Major N/C