ISO 45001 Gap Analysis Template for Australian Businesses

If you've got an audit date looming, a client prequalification in play, or leadership asking whether your WHS system is “ISO ready”, don't start with a generic checklist. Start with an ISO 45001 gap analysis template that tests what your business does on site, in the workshop, and through subcontractors.

That matters in Australian construction, manufacturing, and industrial services because a neat document set can still hide weak consultation, poor change control, and patchy contractor oversight. A useful gap analysis doesn't just compare documents against clauses. It shows where your WHS system will fail under pressure, and where your PCBU duties aren't being properly evidenced.

Table of Contents

• Preparing for Your ISO 45001 Gap Analysis
  • Start with the right people and the right scope
  • Gather evidence before you open the template
• Anatomy of an Effective Gap Analysis Template
  • Why clause-based structure still works
  • The columns that make the template useful
• How to Conduct and Score the Analysis
  • Use three evidence streams
  • Keep the scoring simple and consistent
  • Example of a properly scored finding
• Common Gaps in Australian High-Risk Industries
  • Where construction businesses usually come unstuck
  • What manufacturers often miss
• Prioritising Findings for a Corrective Action Plan
  • Don't chase a compliance percentage
  • A simple priority model that works
• From Gap Analysis to a Living WHS Management System
  • Build legal fit into the system
  • Turn closed actions into operating discipline

Preparing for Your ISO 45001 Gap Analysis

Most gap analyses go wrong before the first clause is reviewed. The team picks a template, the HSE manager fills it out alone, and everyone treats it like pre-audit admin. That approach usually produces a document that looks complete and tells you very little.

If you're aiming for ISO 45001 certification support, preparation needs to be operational, not clerical. Build the review around how work is planned, supervised, changed, and verified.

Start with the right people and the right scope

A workable analysis team usually includes more than the WHS lead. For an industrial business, bring in the people who control how work really gets done.

• Leadership input: A director, general manager, or operations manager needs to be involved because clauses around leadership, objectives, resources, and review can't be tested properly without decision-makers.
• Frontline supervision: Site supervisors, leading hands, and production supervisors will tell you whether procedures survive contact with deadlines, shutdowns, breakdowns, and labour turnover.
• Worker voice: HSRs, committee members, or experienced operators help test whether consultation is real or just recorded.
• Technical support: Maintenance, HR, training, procurement, and project teams often hold the evidence for competence, contractor control, and change management.

Define the scope early. One fabrication workshop is different from a multi-site civil contractor. If you're reviewing a business with mobile crews, labour hire, and subcontractors, your template needs to follow those interfaces, not just the head office document tree.

Practical rule: If the person scoring the clause can't explain how the control works on a normal Tuesday shift, the score is too generous.

Gather evidence before you open the template

Don't start scoring from memory. Pull together the material that will let you test both design and implementation.

A solid evidence pack usually includes:

• Core WHS documents: policy, objectives, risk registers, procedures, legal registers, emergency plans
• Operational controls: SWMS, permits, JSAs or task risk assessments, maintenance controls, plant verification records
• Workforce records: inductions, licences, VOCs, training matrices, consultation records, toolbox talks
• Assurance records: inspections, audits, incident investigations, corrective actions, management review minutes
• Contractor controls: prequalifications, onboarding records, site rules, monitoring records, non-conformance follow-up

This is also the point to set the tone. A gap analysis only works when people are willing to say, “the procedure exists, but the site isn't following it,” or “we consult after the decision has already been made.” If that honesty isn't there, the template becomes theatre.

Anatomy of an Effective Gap Analysis Template

A useful template has to do two jobs at once. It has to follow the structure of the standard, and it has to capture enough operational detail to drive corrective action later.

Why clause-based structure still works

ISO 45001 was published in 2018 and uses the same high-level management system structure as ISO 9001 and ISO 14001, which is why practical templates usually review an organisation clause by clause across leadership, planning, support, operation, performance evaluation, and improvement. In Australia, that structure is useful because it helps bridge internal WHS systems and audit-ready evidence in a form that aligns to the 2018 standard's review approach, as shown in NQA's ISO 45001 migration gap analysis tool.

That doesn't mean a spreadsheet alone is enough. It means the clause structure gives you a disciplined review path. It stops the analysis from becoming a loose discussion about “how safety is going” and forces each requirement to be tested against evidence.

The columns that make the template useful

The best templates are simple to read and hard to game. If a column doesn't help identify a gap, explain a risk, or assign action, it probably doesn't belong.

Each column should have a clear purpose.

Clause Ref. and Requirement Summary

Use the formal clause number and a plain-English summary. That lets supervisors and managers understand what is being tested without reading the full standard line by line.

Conformance Score 0-4

A short scoring scale helps compare areas consistently. The score shouldn't be the main story, but it helps show relative maturity and supports later rechecks.

Evidence and Comments

Weak templates usually fail because “Procedure exists” is not evidence. Better entries refer to records, observations, interviews, and inconsistencies.

For example, an evidence note might refer to a SWMS review process, recent toolbox records, and the fact that workers on one crew couldn't explain the revised isolation step. That tells you much more than a tick.

A template without an evidence column becomes a checklist. A template with weak evidence becomes an argument during the audit.

Identified Gap and Risk Priority

Separate the observation from the consequence. The gap is the failure or weakness. The priority reflects the exposure created by that weakness. That distinction matters when you have dozens of findings competing for attention.

Corrective Action, Owner, Due Date

If a finding can't be assigned to one owner with one due date, it isn't ready to close. Multi-owner actions often drift because everyone assumes someone else is handling them.

If you're building or selecting an ISO 45001 gap analysis template, this column set is usually enough. You don't need a bloated workbook with dashboards, conditional formatting, and extra tabs unless the business will maintain them.

How to Conduct and Score the Analysis

A proper gap analysis is part review, part field verification, part cross-examination. If you only assess documents, you'll overrate the system. If you only inspect the site, you'll miss structural weaknesses in leadership, planning, and review.

For operational clauses, use the same discipline you'd apply in a practical workplace risk assessment process. Test whether the control exists, whether people understand it, and whether it works in the field.

Use three evidence streams

A sound review uses three types of evidence. One without the others creates blind spots.

1. Document review
   Check policies, procedures, registers, plans, investigation reports, training records, and management review outputs. This tells you how the system is designed.

2. Interviews
   Speak with managers, supervisors, workers, HSRs, maintenance personnel, and contractor representatives. This shows whether the system is understood and used.

3. Site observation
   Verify controls at the point of work. Walk active jobs, workshops, loading zones, isolation points, laydown areas, and amenities. Compare what you see with what the procedure claims.

If those three sources line up, confidence goes up. If they conflict, trust the conflict. It usually reveals the underlying gap.

Keep the scoring simple and consistent

Use a plain scoring model and apply it the same way across all clauses.

• 0: No defined process or no evidence the requirement is addressed
• 1: Ad hoc or informal practice. Inconsistent and largely undocumented
• 2: Documented approach exists, but implementation is partial or unreliable
• 3: Implemented and generally effective, with some gaps in consistency or review
• 4: Embedded, evidenced, and periodically reviewed for effectiveness

Don't score generously because a document exists. A polished procedure with no field adoption is not a 3. A site doing the right thing with no documented system behind it isn't a 4 either.

Example of a properly scored finding

Take hazard identification and assessment of risks. In a manufacturing business, the template entry might look like this:

That entry does three things. It shows evidence. It states the gap clearly. It creates a practical action.

Common Gaps in Australian High-Risk Industries

In high-risk sectors, the same weak points appear repeatedly. They aren't always the most obvious clauses either. Businesses often have paperwork for the visible items and less discipline around the controls that sit between planning and execution.

The consequences are not theoretical. Safe Work Australia national data cited in this ISO 45001 gap analysis reference show 200 worker fatalities in 2024, including 70 in manufacturing, 60 in construction, and 58 in transport, postal and warehousing. For a gap analysis, that means operational evidence, corrective-action closure, and leading indicators deserve more attention than clean formatting.

Where construction businesses usually come unstuck

Construction businesses often score themselves well on operational planning because they have SWMS, prestarts, permits, and inductions. The gap is usually in the quality and consistency of use.

Common examples include:

• Consultation that happens after the decision: Workers attend toolbox talks, but changes to sequence, plant, or access are made before consultation occurs.
• Management of change in live environments: New subcontractors, altered traffic routes, temporary works, or revised methodologies are introduced without a formal review of new hazards.
• Contractor assurance that stops at onboarding: The subcontractor file looks fine, but supervision and verification on site are uneven across crews and supervisors.

A clause can look covered on paper while site conditions say otherwise. That's why interviews and observation matter so much in construction.

If a principal contractor can't show how a changed work method was reviewed, communicated, and checked, the gap isn't administrative. It's operational.

What manufacturers often miss

Manufacturing sites tend to have stronger document control and more stable processes. Their blind spot is often assuming fixed plant means fixed risk.

In practice, gaps show up in areas such as:

• Non-routine work: cleaning, maintenance, fault-finding, line changeovers, isolation deviations
• Incident learning: investigations identify immediate causes but don't lead to stronger engineering, supervision, or verification controls
• Performance evaluation: dashboards track activity, but management reviews don't test whether the measures are driving safer work

Another recurring issue is evidence quality. A plant may have inspection records, actions, and meetings, but the evidence doesn't prove effectiveness. It shows activity. Auditors and regulators are usually more interested in whether the organisation can demonstrate systematic hazard control, worker consultation, and performance evaluation than whether a template was fully completed, as reflected in SafetyCulture's ISO 45001 gap report approach.

Prioritising Findings for a Corrective Action Plan

After a full review, most businesses end up with more findings than they can sensibly close in one push. That's normal. What matters is whether you sort them by exposure and get movement on the gaps that can hurt people, breach duties, or undermine the audit.

Don't chase a compliance percentage

The most useful benchmark isn't a headline score. It's whether the business is closing its highest-risk gaps before the external audit. A practical template should rank findings by legal exposure, worker risk, and control failure, then assign owners and due dates so actions can be tracked like a CAPA register, which is also the approach discussed in SafetyCulture's guidance on ISO 45001 gap reporting.

That's also where many organisations lose momentum. They finish the spreadsheet, present a summary to leadership, and treat the exercise as complete. It isn't. The gap analysis only has value once the findings are converted into action and rechecked.

A simple priority model that works

You don't need a complicated scoring engine. A practical triage model is enough.

Use the priority decision to ask a harder question: if this gap stays open for another month, what could go wrong?

That keeps the discussion grounded. A missing version number on a form may matter, but it shouldn't outrank weak isolation control, poor contractor verification, or unreviewed change to mobile plant interactions.

A workable CAPA entry needs:

• One accountable owner: not a committee
• One due date: realistic and visible
• Required resources: training, document revision, engineering input, consultation, supervision time
• Closure evidence: updated procedure, briefing records, verification checks, audit trail, field observation

Field test: If the corrective action can only be proven by uploading a revised document, it probably hasn't fixed the operational gap yet.

From Gap Analysis to a Living WHS Management System

The spreadsheet should never become the system. It should trigger system changes that people can see in planning, supervision, contractor control, and review.

Build legal fit into the system

One of the most underexplained problems with any ISO 45001 gap analysis template is legal tailoring for Australia. Many templates focus tightly on clauses 4 to 10 and action tracking, but they don't show how to map those clauses to Australian WHS duties, consultation expectations, or jurisdictional variation. That matters because most jurisdictions follow the model WHS framework, while Victoria and Western Australia use different OHS laws, which is why a living system has to account for local obligations as noted in this Australian-focused ISO 45001 gap analysis discussion.

For multi-site organisations, generic templates become dangerous. A corporate procedure may look compliant at group level and still miss a state-specific duty, consultation pathway, or documentation expectation.

Turn closed actions into operating discipline

A closed action should change something real. That might be a revised SWMS review trigger, a better contractor verification step, a stronger pre-start change process, or a management review agenda that tests WHS performance.

Use the gap analysis outputs to drive:

• Procedure updates: only where the procedure was part of the failure
• Supervisor briefings: so the control is understood where work is directed
• Worker and contractor communication: especially when the change affects task execution
• Follow-up verification: audit, inspection, and observation to confirm the new control is working
• Repeat review cycles: after internal audit, management review, major operational change, or significant incidents

The strongest systems treat the gap analysis as a recurring diagnostic. Not annual paperwork. Not a certification event. A recurring test of whether the WHS management system still matches the work being done.

If you're still managing ISO 45001 actions across spreadsheets, email trails, and disconnected site records, Safety Space gives you a cleaner way to run the system. It helps Australian businesses track corrective actions, centralise evidence, monitor multi-site and subcontractor performance, and keep WHS obligations visible without drowning in admin.