ISO 45001 Human Resource Management Procedure Template

ISO 45001 contains no clause that says determine training needs. Look for one and you will not find it, which is why most safety management systems do not have the determination.

The obligation is there. It is assembled rather than stated. Clause 6.1.2.1 identifies hazards. Clause 6.1.4 requires action to be planned to address them. Clause 8.1.2 d) names training explicitly as an administrative control in the hierarchy. Clause 7.2 b) requires competence to include the ability to identify hazards. Clause 7.3 e) requires workers to be aware of the hazards and risks relevant to them. Five clauses, four different parts of the standard, and a clause-by-clause checklist points at none of them together.

The consequence is specific rather than abstract. When the hierarchy of controls selects training as the control for a hazard, training is the control. If it is not delivered, verified and held current, the control is not in place — and the residual risk rating recorded against that hazard is wrong. The risk assessment is the first document an inspector reads, and those ratings have been signed off, circulated and relied on.

This procedure closes the loop. The hazard register is the input to the competence determination, the control selected under Clause 8.1.2 d) names the competence it depends on, and the record shows the line from one to the other.

What is included

• Complete Clause 7.2 and 7.3 procedure — 46 pages, editable Microsoft Word format
• Section 7.3 — the determination the standard never names. Four questions run against your hazard register and risk assessments, flagging every hazard where training itself is the selected control
• Section 7.7 — the Clause 7.3 f) arrangements in full, as an eight-question table with a place for top management approval
• Section 7.2 — the ability to identify hazards as a named competence, evaluated by walking the worker’s own area rather than by classroom test
• Section 7.11 — maintaining competence, with intervals set by how fast a skill decays rather than by certificate expiry. Clause 7.2 c) says acquire and maintain, and the second word needs its own mechanism
• Section 7.8 — training for consultation and participation under Clause 5.4 a), including language and literacy barriers
• Section 7.10 — emergency response competence, with drill performance recorded as the evaluation rather than attendance
• Channel-enumerated trigger — twelve routes in, with declining a task on safety grounds and lacking confidence in a task deliberately kept as separate routes
• Single-owner accountability with named alternates for every gating role
• Records table with no blanks — eleven records, each with clause driver, owner, retention and location
• Exception and contingency paths — ten, each with an owner, a limit and an approver. The serious-injury row deliberately admits no interim supervision
• Key performance indicators — five, including a count of residual ratings relying on training you cannot evidence
• Maturity ladder — four levels across eight elements, scoreable as a self-assessment
• Full clause cross-reference — twenty obligations mapped to where each is discharged
• Appendix A — competence and awareness register, six parts
• Appendix B — competence shortfall and action record, built as the release gate. Closure requires confirming the residual rating is supported again
• Appendix C — desk-level work instruction with per-step timings, and two worked examples deliberately different in shape
• Appendix D — determination worksheet, the seven things to settle before the procedure runs

Written as a working document, not an outline

It arrives as a filled-in worked example, so you can see what each element looks like when it is done properly, with bracketed placeholders wherever a value is genuinely yours to set — thresholds, roles, intervals, retention periods. You are editing a working document rather than filling in a hollow template.

Every MSI procedure carries the same seven structural marks: a real trigger with informal routes included, one accountable owner with named alternates, stated thresholds rather than intentions, the record as the gate rather than a report about the work, a defined exception path, trainable in one sitting, and an event-based review trigger with the calendar as a backstop only.

Who it is for

Health and safety managers, HSE leads and consultants at organizations certified or certifying to ISO 45001. It is most useful where the competence matrix was built from job titles and the risk assessment was built from hazards, and the two documents have never met — which is the ordinary state of affairs rather than a sign that anything has gone wrong.

What it changes

• You find the ratings that assume a control you cannot demonstrate. Every hazard where training was selected under Clause 8.1.2 d) and the training record is missing, expired, or covers a different person from the one who does the task.
• You write the arrangements Clause 7.3 f) presumes you already have. A worker uncertain whether they will be paid will hesitate, which is precisely the outcome the clause exists to prevent.
• You evaluate hazard identification honestly. It cannot be tested in a classroom, because the classroom contains none of the worker’s hazards. Walk the area with them; the gap between what they name and what the assessment lists is the content of their training need.
• You use the drill you already run. Recording what each responder did, rather than that they attended, converts an existing activity into evidence at no additional cost.
• You stop retraining people who already know how. A person who cannot perform a task is a competence problem. A competent person who occasionally performs it wrongly is not, and the form asks which before the action is chosen.

Format and license

Editable Microsoft Word (.docx), 46 pages. Adapt it, rebrand it, and adopt it into your document control system. Purchase grants your organization a perpetual, non-exclusive license to edit, rebrand and use the template, including at multiple sites under common ownership. It may not be resold, sublicensed, distributed outside the buying organization, or published in whole or in substantial part.

MSI Template v1.0 · July 2026 · Built to ISO 45001:2018.

Questions

Is this a template or a finished procedure?

Both, deliberately. It is written as a filled-in worked example so you can see what each element looks like when done properly, with bracketed placeholders wherever a value is genuinely yours to set.

Will this pass an audit?

A procedure does not pass an audit; an organization does. What this gives you is a procedure that addresses every requirement of the clause with a named owner and a named record, and that describes a process people can actually follow. Conformity is demonstrated by implementation and evidence — a perfect document over an operation that ignores it is still a finding. Unfilled placeholders are unmet requirements, so fill them.

Does it cover the whole standard?

No. It covers Clauses 7.2 and 7.3 in full, plus the requirements ISO 45001 places elsewhere that belong here — Clause 5.4 a) on training for participation, Clause 8.1.2 d) on training as a control, and Clause 8.2 on emergency response. It is one procedure in a management system and it references the neighboring processes rather than replacing them.

We use different clause numbering and our own document numbers.

Every cross-reference sits in a table at the back rather than baked into the body text, precisely so you can renumber without unpicking the procedure. Document numbers appear as bracketed placeholders throughout.

Does this include a process interaction map?

No, and that is deliberate. ISO 45001 carries no requirement to determine and show the sequence and interaction of processes, so supplying a map would add a document you then have to control for no clause reason. Section 10.0 discharges what the standard does ask with an interface table. Maps are supplied with the ISO 9001, ISO 13485 and ISO 7101 variants, where a clause does require one.

Can you help us implement it?

Yes. Call Management Systems International at 760-434-9141 to schedule a planning session.

---

Management Systems International, LLC is a veteran-owned and female-owned ISO consulting firm founded in 1998. Over twenty-eight years we have supported more than eighty certifications, attended more than two hundred audits, and trained more than six hundred professionals.

ISO 45001 is a trademark of the International Organization for Standardization. This template is an independent work by Management Systems International, LLC and is not endorsed by or affiliated with ISO or any certification body. Clause references are provided so you can locate each requirement in your own licensed copy of the standard; the standard itself is not reproduced.

This template is guidance, not legal advice. Occupational health and safety obligations vary by jurisdiction, by operation and over time, and the protections available to a worker who declines dangerous work vary considerably between them. You are responsible for identifying which obligations apply to you and confirming their current text against the primary source.

© 2026 Management Systems International, LLC · All rights reserved.