ISO 45001 Checklist for Trades Businesses: Step by Step

An ISO 45001 checklist for a trades business has seven parts: leadership, hazards, legal duties, training, contractors, incidents and review. Worked through in that order, they form the core of an occupational health and safety management system, whether you employ five people or fifty.

The order follows ISO 45001:2018, but the wording here is for owners of electrical, plumbing, building, roofing, joinery and painting firms. You do not need a safety department. You need to know how work actually gets done on your sites, and you need a few simple records.

What ISO 45001 asks of a trades business

ISO 45001 is the international standard for occupational health and safety management. It does not say which ladder to buy or which gloves to wear. It wants safety run as a system: find the hazards, decide what to do about them, tell people, check that it works, and improve what does not.

Like other management system standards, it has seven main clauses: 4 Context of the organization, 5 Leadership, 6 Planning, 7 Support, 8 Operation, 9 Performance evaluation and 10 Improvement. Trades businesses are usually strong on clause 8, because that is where the real work happens. The gaps tend to sit in planning, records and review, and this checklist concentrates on those.

For a wider look at how ISO standards work for smaller companies, see our guide to ISO certification for small and medium businesses.

Step 1: Define your context and scope (clause 4)

Write down what your business does and where it does it. A roofer working at height on private homes faces different risks from a plumber in occupied buildings or a builder running a larger site.

List who is affected by your work: employees, apprentices, temporary staff, subcontractors, clients and the public near your sites. Add what each group expects of you, including legal duties, insurer requirements and client rules. Then state the scope of your system, meaning the sites, activities and people it covers.

One page is enough.

Step 2: Show leadership and involve your workers (clause 5)

In a small firm, leadership means the owner. The standard expects a short safety policy, named responsibilities, and a say for your workers in decisions that affect their safety.

The policy commits you to preventing injury and ill health, meeting legal requirements and improving continually. It should be short enough to pin up in the workshop and the van.

The policy text matters less than worker participation. Ask your team which tasks feel unsafe, and ask the apprentices too. The people doing the work often know about a hazard before the owner does. Record that you asked and what you changed as a result.

Step 3: Identify hazards and legal duties (clause 6)

Clause 6 is the heart of the system. It asks you to identify hazards, assess risks and opportunities, and know which legal and other requirements apply to you.

A hazard list for a trades business usually includes:

• Work at height, including ladders, scaffolding and roofs
• Electrical work and live installations
• Manual handling and repetitive strain
• Power tools, cutting and grinding
• Dust, solvents, adhesives and other hazardous substances, including asbestos in older buildings
• Noise and vibration
• Vehicles, site traffic and loading
• Working alone or in remote locations
• Heat, cold and weather

For each hazard, judge how serious the risk is and name the controls you use. Try to remove the hazard first, then substitute something safer, then use engineering controls, then safe working methods. Personal protective equipment comes last. This sequence is called the hierarchy of controls, and ISO 45001 expects you to follow it.

Next, list the laws, regulations and client or insurer requirements that apply in your country and canton, state or region. Rules differ between Switzerland, Germany, Austria and France, so check the current local sources and do not rely on a general template. Last, set a few measurable safety objectives, for example toolbox talks on every site or every corrective action closed within an agreed period.

Step 4: Build competence and awareness (clause 7)

Clause 7 covers resources, competence, awareness, communication and documented information.

Check that each person is competent for the tasks they do, through training, qualifications and experience. This applies above all to people who operate lifts, drive vehicles, work at height or handle electrical systems. A simple training matrix does the job: names down one side, skills and certificates across the top, expiry dates in the cells.

Everyone should know the safety policy, the main hazards of their job, and what to do after an incident or near miss. Decide how you pass information on: a short briefing at the start of the day, a message group, a notice in the workshop. Whichever you choose, keep a trace that it happened.

Keep the documents you need and no more. A policy, a hazard register, a training matrix, an incident log and inspection records cover most of what a small firm requires.

Step 5: Control your operations (clause 8)

Clause 8 is where safety meets the job. Four topics matter most in the trades.

Planning each job. Before work starts, someone looks at the site, the task and the people, and decides on controls. A short checklist is enough for routine jobs. Unusual or high-risk work needs a written method statement.

Managing change. Clause 8.1.3 asks you to manage changes that affect safety, such as a new tool, a new material, a new type of site or new staff. Ask what the change does to the risk before you introduce it.

Contractors and procurement. Clause 8.1.4 covers contractors and outsourced work. When you use subcontractors or temporary workers, check that they are competent, tell them about site hazards and agree who is responsible for what. When you work on another firm's site, find out their rules before you arrive.

Emergencies. Clause 8.2 requires emergency planning. Decide where the first aid kits are, who is trained, how to reach emergency services from each site, and what happens after a serious fall, burn or electric shock. Practise the plan at least once.

Step 6: Measure, audit and review (clause 9)

A system nobody checks drifts away from how the work is really done. Clause 9 asks you to monitor and measure, evaluate compliance, run an internal audit and hold a management review.

In a small firm, this can stay modest:

• Inspect tools, ladders, vehicles and protective equipment on a set schedule
• Walk a site each month and note what you see
• Track incidents, near misses and corrective actions
• Once a year, check the whole system against the standard
• Once a year, sit down as owner and review results, objectives, resources and what to change

The internal audit should be done by someone who sees the work with fresh eyes. In a very small firm that can be a trusted colleague or an external adviser who does not run the process being checked.

Step 7: Handle incidents and improve (clause 10)

Clause 10 covers incidents, nonconformities, corrective actions and continual improvement. The practice is simple. When something goes wrong or nearly does, record it, find the cause, fix the cause and check that the fix worked.

Near misses are lessons you get for free. A dropped tool, a slipped ladder or a wrongly coloured cable shows where the next injury could come from. Do not look for someone to blame. Look for what in the system allowed it.

The ISO 45001 checklist for trades businesses

Tick an item only when you can show evidence for it.

• Scope written down: activities, sites, people covered
• Interested parties and their requirements listed
• Short safety policy signed by the owner and shared with the team
• Roles and responsibilities for safety named
• Process for workers to raise concerns and be consulted
• Hazard register covering all main tasks and sites
• Risk assessment with controls, following the hierarchy of controls
• Legal and other requirements listed and checked as current
• Safety objectives set with a clear owner and date
• Training matrix with qualifications and expiry dates
• Induction for new employees, apprentices and temporary staff
• Routine for communicating safety information on site
• Job planning or method statement for higher-risk work
• Change management step for new tools, materials and site types
• Contractor and subcontractor checks and site briefings
• Emergency plan, first aiders and contact details for each site
• Inspection schedule for tools, ladders, vehicles and PPE
• Incident and near miss log with causes and corrective actions
• Internal audit completed once a year
• Management review held and recorded
• List of improvements decided and who will carry them out

When a self-assessment is enough, and when it is not

A Zertify certificate rests on a self-assessment. You answer structured questions on how your business meets the requirements of the standard, and your answers are reviewed against the criteria.

For many trades businesses this is a sound first step. It gives you a structured check of your safety management, a certificate you can show clients, and a base to build on. It suits firms that want to demonstrate they take safety seriously without the time and cost of the classic route, an on-site audit by a certification body.

Sometimes it is not enough. If a tender, a main contractor, a customer contract or a regulator explicitly asks for an on-site audit by a certification body, you need that route. Read the exact wording of the requirement first, because many clients ask for evidence of a safety system and not specifically for an on-site audit.

How Zertify fits in

Zertify guides you through the standard and documents the result. The ISO 45001 page shows what the assessment covers, and the pricing page lists the fees, so you know the cost before you begin.

When you are ready, start the assessment. Once you pass and have paid, Zertify issues your certificate within 4 hours. The checklist above becomes the evidence behind your answers, which makes the assessment quicker and more honest.

A realistic way to start

Do not try to finish everything in a week. Pick one site or one team, build the hazard register, set up the incident log and hold one toolbox talk. Then widen the scope. Safety management is a habit, and the standard gives that habit a clear shape.