Clause 9.1 of ISO 45001:2018 requires organizations to establish, implement, and maintain processes for monitoring, measurement, analysis, and evaluation of OH&S performance. This is the “Check” phase of the PDCA cycle, where you assess whether the system is working as intended and identify opportunities for improvement.
9.1.1: General Monitoring and Measurement
Organizations must determine what needs to be monitored and measured (including legal compliance), the methods for monitoring and measurement to ensure valid results, the criteria for evaluating OH&S performance, when monitoring and measurement shall be performed, and when results shall be analyzed, evaluated, and communicated. Monitoring equipment must be calibrated and maintained where applicable.
Best Practices for Performance Monitoring
- Track both leading indicators (inspections completed, training hours, near-miss reports) and lagging indicators (TRIR, DART, lost-time incidents)
- Use dashboards and trend analysis rather than relying solely on periodic reports
- Calibrate monitoring equipment used for safety measurements (noise meters, air sampling pumps)
- Benchmark performance against industry standards and organizational targets
- Ensure measurement methods are consistent to enable meaningful trend analysis
9.1.2: Evaluation of Compliance
Organizations must plan, implement, and maintain processes to evaluate compliance with legal requirements and other requirements. Determine the frequency and methods for compliance evaluation, take action if needed, and maintain knowledge and understanding of compliance status.
Best Practices for Compliance Evaluation
- Schedule compliance evaluations at defined intervals (quarterly or semi-annually)
- Use audit and inspection software to schedule and document evaluations
- Maintain a compliance calendar linking requirements to evaluation dates
- Address compliance gaps promptly through corrective action processes
- Retain documented information on evaluation results
Common Pitfalls
- Measuring only lagging indicators after incidents have already occurred
- Not acting on monitoring data — collecting information without analyzing it
- Failing to evaluate compliance at defined intervals
- Using uncalibrated monitoring equipment
