How often should ISO 45001 internal audits be conducted?

The standard requires audits at planned intervals but does not specify a fixed frequency. Most organisations complete a full audit cycle annually, covering all clauses and processes at least once per year. High-risk areas, processes with previous non-conformances, or recently changed processes may be audited every 6 months. The audit programme should consider process importance, organisational changes, and previous audit results. Certification bodies expect at least one complete cycle between surveillance audits.

Who can conduct an ISO 45001 internal audit?

Internal auditors must be competent and, where practicable, independent of the activity being audited. Competence includes understanding of ISO 45001 requirements, audit principles and techniques (typically ISO 19011 guidelines), and relevant OH&S legislation. Auditors should not audit their own work. Many organisations train internal staff as auditors through recognised courses (e.g. Exemplar Global certified lead auditor courses). External consultants can also be engaged to perform internal audits.

What is the difference between ISO 45001 and OHSAS 18001?

ISO 45001:2018 replaced OHSAS 18001:2007 as the globally recognised standard for OH&S management systems. Key differences include adoption of the ISO High Level Structure (Annex SL) for easier integration with ISO 9001 and ISO 14001, stronger emphasis on leadership and top management accountability, explicit requirements for worker consultation and participation, a risk-based approach to planning and operational control, and consideration of the context of the organisation including external and internal issues and interested parties. OHSAS 18001 certifications were withdrawn by March 2021.

Can ISO 45001 internal audits be managed digitally?

Yes. Digital audit platforms such as MapTrack allow you to build this checklist as a mobile form, schedule recurring audit cycles, capture findings with evidence photos, track corrective actions to closure, and generate audit reports for management review. Digital records improve consistency, reduce administrative overhead and provide real-time visibility of audit status across multiple sites. Book a demo to see how MapTrack supports OH&S compliance.

Free iso 45001 internal audit checklist

Jump to download form ↓

Enter your email below to download this iso 45001 internal audit checklist as a ready-to-use PDF.

Free ISO 45001:2018 internal audit checklist (PDF-ready). Covers leadership, worker consultation, risk assessment, operational controls, emergency preparedness and improvement.

Last updated: 2026-04-27

Jarrod Milford

Commercial Director

Updated 27 April 2026

How to use: download the PDF, print or complete digitally on any device.

✓PDF format, ready to print or fill on screen
✓Use as-is or customise to suit your operation
✓Go digital in MapTrack for photos, alerts and audit trails

See template in action →

Download free PDF template

Trusted by teams across Australia and New Zealand

We respect your privacy. Unsubscribe anytime.

Preview the template

See the first part of the iso 45001 internal audit checklist below. Download the full version above.

Download to get full template →

What is a iso 45001 internal audit checklist?

An ISO 45001 internal audit checklist is a structured document used to plan and record the findings of an internal audit of an occupational health and safety (OH&S) management system against the requirements of ISO 45001:2018. The checklist systematically walks auditors through each clause of the standard, from context of the organisation and leadership commitment, through planning and support, to operational controls, performance evaluation and improvement. For each requirement, the auditor records whether the organisation conforms, has a minor or major non-conformance, or has an opportunity for improvement, with supporting evidence and observations.

ISO 45001:2018 replaced OHSAS 18001 as the international standard for occupational health and safety management systems. Clause 9.2 of the standard requires organisations to conduct internal audits at planned intervals to confirm the OH&S management system conforms to the requirements of the standard, the organisation own requirements, and is effectively implemented and maintained. Internal audits are a core mechanism for identifying non-conformances, driving corrective actions, and supporting continual improvement of workplace health and safety outcomes. This checklist ensures auditors address every clause systematically and produce consistent, evidence-based audit reports.

Learn more about compliance and inspections in MapTrack.

Benefits of using this iso 45001 internal audit checklist

Systematic coverage: ensures every clause of ISO 45001:2018 is assessed, preventing gaps that could lead to certification audit findings.
Audit consistency: a standardised checklist produces repeatable, comparable audit results across different auditors and audit cycles.
Non-conformance identification: structured evidence gathering identifies both major and minor non-conformances with clear clause references for corrective action.
Continual improvement: audit findings feed directly into the management review and corrective action processes, driving measurable improvement in OH&S performance.
Certification readiness: regular internal audits using this checklist prepare the organisation for external certification or surveillance audits by identifying and resolving issues beforehand.
Worker participation evidence: the checklist specifically covers worker consultation and participation requirements (Clause 5.4), ensuring this critical element is assessed.

Benefits of digitising forms in MapTrack

When you move your checklists from paper to MapTrack, you get:

Field users can easily scan a QR code to complete a form on mobile. Unlimited users.
Automatically get alerts when faults are identified.
Link every form digitally as a PDF to the relevant asset, location or person.
Receive a digital PDF copy with every submission to your email.
Ability to share forms digitally.
Build conditional logic (show or hide questions based on answers).
Take pictures or attach photos. Not possible with a paper-based form.
Electronic signatures.
Edit forms later without reprinting.
Restrict permissions (who can view, complete or approve).
Build forms with AI (describe what you need and MapTrack suggests the form).
Set recurring audit schedules with automatic reminders and escalation.
Produce regulator-ready PDF compliance packs in one click.
Track corrective actions from finding to close-out with full audit trail.

Book a demo to see how MapTrack handles checklists.

Try MapTrack free for 30 days

Full access to every feature. No credit card required. Per-asset pricing so you scale as your fleet grows.

Start free trial

No credit card required
30 days free trial
Cancel anytime

What to include in a iso 45001 internal audit checklist

This iso 45001 internal audit checklist covers 11 key areas:

Audit details: audit reference number, audit date, auditor name and qualifications, department or process being audited, audit scope.
Clause 4 - Context of the organisation: internal and external issues, interested parties, scope of the OH&S management system.
Clause 5 - Leadership and worker participation: top management commitment, OH&S policy, roles and responsibilities, worker consultation and participation.
Clause 6 - Planning: hazard identification, risk assessment, legal and other requirements, OH&S objectives and action plans.
Clause 7 - Support: resources, competence, awareness, communication, documented information.
Clause 8 - Operation: operational planning and control, emergency preparedness and response, management of change, procurement, contractors.
Clause 9 - Performance evaluation: monitoring and measurement, internal audit programme, management review.
Clause 10 - Improvement: incident investigation, non-conformity and corrective action, continual improvement.
For each clause item: conformity status (conforms, minor NC, major NC, opportunity for improvement, not applicable), evidence reviewed, observations and notes.
Audit summary: total findings by category, follow-up actions, next audit date.
Sign-off: auditor and auditee management representative.

How to use this iso 45001 internal audit checklist

Prepare the audit by completing the header details including audit reference, date, auditor qualifications, scope and the department or process to be audited.: Review the previous audit report and any open corrective actions before starting. Confirm the audit scope covers the planned clauses and processes. Notify the auditee of the audit schedule, scope and any documents to have available, such as the OH&S policy, risk register, training records and incident reports.
Audit Clause 5: Leadership and worker participation. Assess top management commitment, the OH&S policy, defined roles and responsibilities, and evidence of worker consultation.: Interview management to confirm they can articulate the OH&S policy and their role in the management system. Review the OH&S policy for adequacy and communication. Check that roles, responsibilities and authorities are defined, documented and communicated. Verify evidence of worker consultation and participation mechanisms such as safety committees, toolbox talks and hazard reporting systems.
Audit Clause 6: Planning. Review hazard identification processes, risk assessment records, the legal register, and OH&S objectives with their action plans.: Examine the hazard identification and risk assessment process for coverage of routine and non-routine activities, including contractor activities. Review a sample of risk assessments for completeness and currency. Check the legal register for inclusion of relevant legislation and verify a process exists to monitor changes. Review OH&S objectives for measurability, assigned responsibilities and target dates.
Audit Clause 8: Operation. Examine operational controls, emergency preparedness and response plans, management of change procedures, and procurement and contractor controls.: Review operational procedures and safe work method statements for high-risk activities. Check that emergency response plans are documented, communicated and tested through drills. Examine the management of change process for recent changes to plant, processes or chemicals. Verify that procurement and contractor management processes include OH&S requirements and prequalification checks.
Audit Clause 8 continued: Emergency preparedness. Verify that emergency plans are documented, drills have been conducted, and workers know their emergency roles.: Review emergency response plans for fire, chemical spill, medical emergency and natural disaster scenarios. Check drill records for frequency and participation. Interview workers to confirm they know evacuation routes, assembly points and their specific emergency responsibilities. Verify that emergency equipment (first aid kits, spill kits, fire extinguishers) is available and maintained.
Audit Clause 9: Performance evaluation. Review monitoring and measurement records, the internal audit programme, and management review minutes.: Check that OH&S performance indicators are defined, measured and reported. Review the internal audit programme for planned coverage of all clauses and processes. Examine management review minutes for evidence that audit findings, incident trends, compliance status and improvement opportunities are discussed and actioned by top management.
Audit Clause 10: Improvement. Review incident investigations, non-conformity and corrective action records, and evidence of continual improvement initiatives.: Sample recent incident investigations for root cause analysis, corrective actions and effectiveness verification. Check the corrective action register for timely closure and evidence of implementation. Look for evidence of continual improvement projects driven by audit findings, incident trends, worker suggestions or management review decisions.
Complete the audit summary, record all findings by category, assign follow-up actions and sign off the checklist with the auditee management representative.: Tally findings as conforming, minor non-conformance, major non-conformance or opportunity for improvement. Present findings to the auditee in a closing meeting, agree on corrective action owners and target dates, and confirm the next audit date. Both the auditor and auditee representative sign the completed checklist. File the report and distribute to relevant stakeholders.

In MapTrack, you can automate compliance tracking and audit trails. Each submission is stored as a timestamped PDF against the asset record.

Get the free template

Enter your email above to download the full iso 45001 internal audit checklist as a PDF.

Back to download form

How often should you complete this checklist?

ISO 45001:2018 Clause 9.2 requires internal audits to be conducted at planned intervals. Most organisations audit the entire OH&S management system at least once per year, with high-risk processes or areas with previous non-conformances audited more frequently (e.g. every 6 months). The internal audit programme should consider the importance of the processes concerned, changes affecting the organisation, and the results of previous audits. Certification bodies typically expect to see at least one complete internal audit cycle between surveillance audits. New management systems or those with significant changes should consider more frequent auditing until the system is mature and stable.

Frequently asked questions

What is ISO 45001:2018 and what does it require for internal audits?: ISO 45001:2018 is the international standard for occupational health and safety management systems. It replaced OHSAS 18001 and provides a framework for organisations to manage OH&S risks, prevent work-related injury and ill health, and provide safe and healthy workplaces. Clause 9.2 requires organisations to conduct internal audits at planned intervals to determine whether the OH&S management system conforms to the requirements of the standard and the organisation own requirements, and is effectively implemented and maintained. Internal audit results must be reported to relevant management and used to drive corrective actions and continual improvement.
How often should ISO 45001 internal audits be conducted?: The standard requires audits at planned intervals but does not specify a fixed frequency. Most organisations complete a full audit cycle annually, covering all clauses and processes at least once per year. High-risk areas, processes with previous non-conformances, or recently changed processes may be audited every 6 months. The audit programme should consider process importance, organisational changes, and previous audit results. Certification bodies expect at least one complete cycle between surveillance audits.
Who can conduct an ISO 45001 internal audit?: Internal auditors must be competent and, where practicable, independent of the activity being audited. Competence includes understanding of ISO 45001 requirements, audit principles and techniques (typically ISO 19011 guidelines), and relevant OH&S legislation. Auditors should not audit their own work. Many organisations train internal staff as auditors through recognised courses (e.g. Exemplar Global certified lead auditor courses). External consultants can also be engaged to perform internal audits.
What is the difference between ISO 45001 and OHSAS 18001?: ISO 45001:2018 replaced OHSAS 18001:2007 as the globally recognised standard for OH&S management systems. Key differences include adoption of the ISO High Level Structure (Annex SL) for easier integration with ISO 9001 and ISO 14001, stronger emphasis on leadership and top management accountability, explicit requirements for worker consultation and participation, a risk-based approach to planning and operational control, and consideration of the context of the organisation including external and internal issues and interested parties. OHSAS 18001 certifications were withdrawn by March 2021.
Can ISO 45001 internal audits be managed digitally?: Yes. Digital audit platforms such as MapTrack allow you to build this checklist as a mobile form, schedule recurring audit cycles, capture findings with evidence photos, track corrective actions to closure, and generate audit reports for management review. Digital records improve consistency, reduce administrative overhead and provide real-time visibility of audit status across multiple sites. Book a demo to see how MapTrack supports OH&S compliance.

Need to automate compliance tracking and audit trails?

Register every asset in MapTrack, attach digital forms, and get a complete history of every inspection, service and compliance record.

Start free trial Book a demo

Compliance and inspections · All templates · Pricing · Book a demo