Hazard identification, risk evaluation and control planning — ISO 45001:2018 Clause 6.1 compliant
ISO 45001:2018 Auto-Save CSV · TXT · JSON PDF Export Hierarchy of Controls
New Hazard / Risk Entry
General Information
Hazard Details
Initial Risk Rating (Before Controls)
–
Risk Level
Select likelihood and severity above
Control Measures (Hierarchy of Controls)
Residual Risk (After Controls)
Hierarchy of Controls — ISO 45001:2018
ISO 45001 Clause 8.1.2 requires organisations to consider the hierarchy of controls when planning OH&S actions. Controls must be applied in order, with elimination being the most effective and PPE the least effective.
1
Elimination
Most Effective
Physically remove the hazard from the workplace. This is the most effective control — if the hazard doesn't exist, no one can be harmed by it.
Examples: Stop using a hazardous chemical, automate a dangerous task, decommission faulty equipment.
2
Substitution
Replace the hazard with something less dangerous. Reduces the risk by changing what causes the hazard.
Examples: Replace a toxic solvent with a water-based alternative, use lower voltage equipment.
3
Engineering Controls
Isolate people from the hazard using physical means. These controls don't rely on worker behaviour.
Residual risk after controls must be reduced to As Low As Reasonably Practicable (ALARP). This means the cost and effort of further risk reduction must not be grossly disproportionate to the benefit gained.
ISO 45001:2018 — Clause 6.1 Guidance
Clause 6.1 requires organisations to determine the risks and opportunities relating to hazards and other OH&S management system issues. Actions must be planned that are proportionate to the potential impact on OH&S performance.
6.1.2 – Hazard Identification
Proactively identify all hazards including routine and non-routine activities, emergencies, human behaviour, and hazards from outside the workplace that could affect workers.
6.1.3 – Legal Requirements
Identify and have access to applicable legal and other requirements. Consider how these requirements apply to OH&S hazards, risks and opportunities.
6.1.4 – Planning Actions
Plan actions to address risks and opportunities, legal requirements, and emergency preparedness. Integrate actions into OHSMS processes.
Worker Participation
ISO 45001 emphasises worker consultation and participation in hazard identification, risk assessment and control planning. Workers should be involved at all stages.
Risk Scoring Guide
Score
Likelihood
1
Rare — may occur in exceptional circumstances
2
Unlikely — could occur at some time
3
Possible — might occur at some time
4
Likely — will probably occur
5
Almost Certain — expected to occur regularly
Score
Severity
1
Negligible — minor discomfort / no injury
2
Minor — first aid injury, no lost time
3
Moderate — lost time injury, medical treatment
4
Major — serious injury, permanent disability
5
Catastrophic — fatality or multiple casualties
OH&S Risk Register
All recorded hazards, risks and opportunities — filter, edit, export. Auto-saved in browser.
0
Total Entries
0
Low
0
Medium
0
High
0
Critical
0
Extreme
0
Open
Ref
Date
Location
Hazard Category
Description
L
S
Score
Risk Level
Controls Summary
Res. Score
Status
Owner
Target
Actions
No hazard entries yet
Add your first hazard or risk using the Tool tab above
OH&S Risk Matrix
5×5 risk matrix aligned to ISO 45001:2018 — click any cell to see its risk level
Risk Scoring Matrix
Risk Score = Likelihood × Severity. Use this matrix to classify initial (inherent) risk level before applying controls.
L=1 Rare
L=2 Unlikely
L=3 Possible
L=4 Likely
L=5 Certain
Low (1–4): Monitor routinelyMedium (5–9): Take planned actionHigh (10–16): Urgent action requiredCritical (17–20): Immediate action/stopExtreme (21–25): Do not proceed
Low Risk (1–4)
Continue with normal operations. Monitor at routine intervals. Ensure controls remain effective. Record in the OH&S register and review at least annually or after significant change.
Medium Risk (5–9)
Additional controls should be implemented. Assign an owner and target date. Review controls regularly. Escalate to line management. Seek worker input on further risk reduction.
High Risk (10–16)
Urgent action required before work proceeds. Escalate to senior management. Implement additional controls immediately. Consider stopping the activity until adequate controls are in place.
Critical / Extreme (17–25)
STOP WORK. Activity must not proceed without senior management authorisation and robust controls. Emergency response may be required. Immediate investigation and corrective action mandatory.
Contact ISO Xpert
Your ISO certification experts — London-based, globally trusted
🦺 Ready to achieve ISO 45001 Certification?
Our expert OH&S consultants are here to guide you through every step of certification.
ISO Xpert Ltd ("ISO Xpert", "we", "our" or "us"), registered in England and Wales, with offices at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is committed to protecting your personal data.
1. Information We Collect
Identity Data: Name, title, company
Contact Data: Email, telephone, postal address
Technical Data: IP address, browser type, time zone
Usage Data: How you use our website and tools
Note: The ISO 45001 Risk Assessment Tool stores all data locally within your browser only. No risk register data is transmitted to our servers.
2. Legal Basis (UK GDPR)
We process data under Consent, Contract, Legitimate Interests, and Legal Obligation as defined in UK GDPR Article 6.
3. Your Rights
You have the right to access, rectify, erase, restrict, port and object to processing. Contact info@iso-xpert.com to exercise your rights. You may also lodge a complaint with the ICO at ico.org.uk.
4. Data Retention
Client data is generally retained for 7 years after the end of a contractual relationship, or as required by law.
These Terms of Use govern your access to the website and digital tools provided by ISO Xpert Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
1. Acceptance
By using this website or the ISO 45001 Risk Assessment Tool, you confirm you are at least 18 years of age and agree to comply with these Terms.
2. Intellectual Property
All content — including the ISO 45001 Risk Assessment Tool, text, graphics, logos and software — is the exclusive intellectual property of ISO Xpert Ltd, protected by UK copyright law and international treaties. The ISO Xpert name, logo and brand identity are proprietary trademarks.
3. Disclaimer
This tool is provided as a practical aid only. It does not constitute professional legal, regulatory, OH&S or certification advice. Risk assessments should always be reviewed by competent persons. Always verify compliance with your certification body and applicable health and safety legislation.
4. Limitation of Liability
ISO Xpert Ltd shall not be liable for any indirect, incidental, or consequential damages arising from use of this tool. Users are responsible for ensuring that risk assessments meet applicable legal and regulatory requirements in their jurisdiction.
5. Governing Law
These Terms are governed by the laws of England and Wales. Disputes are subject to the exclusive jurisdiction of courts of England and Wales.
Quick answers about the ISO 45001 gap analysis tool, data privacy, audit preparation, and ISO Xpert consulting.
What is the ISO 45001 gap analysis tool and how does it work?
The ISO 45001 gap analysis tool is a free browser-based checklist that compares your current management system against the clauses of ISO 45001. You answer clause-by-clause questions and rate each requirement as Compliant, Partial or Non-compliant. The tool calculates a live compliance score, highlights gaps on a heat-map, captures evidence and corrective-action notes, and exports the full assessment as JSON, CSV, TXT or print-ready PDF for management review and Stage 1 / Stage 2 audit preparation.
Is the ISO 45001 gap analysis tool really free to use?
Yes — the ISO 45001 tool is 100% free with no sign-up, no email capture, no credit card, no watermarks, and no usage limits. It runs entirely in your browser; nothing is transmitted to ISO Xpert servers. You can clear or export your data at any time.
Where is my ISO 45001 assessment data stored?
All ISO 45001 assessment data is stored locally in your browser’s storage. Nothing is uploaded to our servers. This makes the tool GDPR-friendly and suitable for confidential audit data classified up to Restricted. Export anytime as JSON (re-importable), CSV (Excel-pivotable), TXT (executive summary) or PDF (audit-trail evidence).
Can I use this tool to prepare for ISO 45001 certification or surveillance audits?
Yes. The ISO 45001 gap analysis is designed to support preparation for certification by UKAS-, IAS- or ANAB-accredited bodies. Use the exported report as evidence of internal audit, feed it into management review, and prioritise high-severity non-conformities ahead of Stage 1 / Stage 2 visits. ISO Xpert consultants can assist with documented information, internal audits and full implementation if required.
How long does a ISO 45001 gap analysis typically take?
Most users complete an initial ISO 45001 gap analysis in 60 to 120 minutes for a single site, depending on system maturity and clause depth. The tool auto-saves continuously, so you can pause, switch devices via JSON export/import, and resume at any time. Re-assessments after corrective action usually take 20 to 40 minutes.
Does ISO Xpert offer ISO 45001 consulting or training?
Yes. ISO Xpert Ltd (London, UK) provides ISO 45001 gap analysis consulting, internal audits, Stage 1 and Stage 2 certification preparation, lead auditor / internal auditor training, and full management-system implementation. Contact info@iso-xpert.com or WhatsApp +44 7853 109840.
