Health and safety compliance toolkit

CATEGORY 1: GETTING INVESTMENT IN SAFETY

Getting investment in safety: make the business case that boards actually listen to

The most common barrier to a safer, better-managed workplace is not awareness of what needs to change – it is securing the budget and stakeholder support to change it. Safety and sustainability professionals are rarely short of knowledge about what is needed. The challenge is translating that into a financial and strategic argument that resonates with decision-makers who see compliance and EHS spend as overhead rather than risk mitigation. 

These two resources give you the structure, evidence, and financial language to make that argument persuasively – whether you are making the case for safety management software or your broader EHS program. 

[ASSET 1] 🧮 Safety ROI calculator 

A simple, two-minute safety ROI calculator that shows you exactly how much you could save with EcoOnline’s EHS software – based on a single site.

Plug in a few basic numbers, get a clear savings figure. The kind you can put straight in front of a budget holder without needing to explain the methodology.

Best for: EHS managers and operations directors who need a fast, credible number to start the internal investment conversation

[ASSET 2] 📄 Building a business case for EHS Software

A complete business case template for organizations evaluating or proposing investment in environmental, health, and safety management software. EHS software procurement decisions are rarely straightforward – they involve IT, finance, operations, and senior leadership, each with different priorities and questions. 

This asset is built around the reality that business cases for EHS software fail not because the case is weak, but because it’s not framed in the language of the audience approving it. 

Best for: Safety managers, operations directors, and compliance officers making the case for EHS platform investment to a senior leadership team or procurement committee 

CATEGORY 2: EVERYDAY SAFETY

Everyday safety: practical resources that keep your people protected, shift after shift

Workplace safety compliance does not live in policy documents – it lives in daily habits, team culture, hazard controls, and the operational routines that either get embedded or do not. This section covers the full breadth of everyday safety management: from the psychological health of your workforce to the chemical hazards on your factory floor, and from routine operational safety to the moment a crisis begins to unfold. 

These are the resources that make a practical difference at shift manager, safety officer, and team leader level – where most safety outcomes are actually determined. 

[ASSET 3] 🔍 Health and safety culture audit template 

Safety culture – the shared attitudes, values, and behaviors around safety within an organization – is the single strongest predictor of long-term safety performance. Organizations with strong safety cultures have lower incident rates, better near-miss reporting, higher training completion, and more consistent compliance. Organizations with weak ones have the opposite, regardless of how good their written policies are. 

This audit template provides a structured framework for assessing the current state of safety culture across your organization, covering leadership commitment, worker involvement, communication effectiveness, learning from incidents, and the gap between stated safety values and observable behaviors. Produces a baseline score that can be tracked over time and used to prioritize culture improvement interventions which is aligned to OSHA’s recommended practices for safety and health programs and the worker participation principles underlying ISO 45001.

Best for: Safety managers, HR directors, and senior leaders conducting organizational safety reviews or preparing for ISO 45001 certification 

[ASSET 4] 🧠 Stress management checklist 

Work-related stress, anxiety, and depression account for a significant and growing proportion of occupational illness in the United States — with the American Institute of Stress estimating that workplace stress costs US employers over $300 billion annually in absenteeism, diminished productivity, and healthcare costs.

This checklist gives managers and HR teams a practical tool for identifying stress risk factors at individual and team level, structured around OSHA’s General Duty Clause, which requires employers to provide a workplace free from recognized hazards – including psychosocial hazards – and NIOSH’s framework for worker wellbeing. Designed to be used as part of a stress risk assessment process, a return-to-work conversation, or a broader wellbeing program review. 

Stress management is not a soft issue – it is a compliance obligation and a material operational risk. This checklist treats it as both. 

Best for: HR managers, line managers, safety officers, and occupational health teams managing work-related stress obligations 

[ASSET5] 📊 Platform assessment scorecard 

Evaluating EHS software or sustainability software platforms is a time-intensive process that organizations often approach inconsistently – with different stakeholders assessing different things against different criteria. The result is procurement decisions that satisfy one department and frustrate three others. 

This scorecard provides a standardized evaluation framework for assessing EHS and sustainability platforms across the criteria that matter most: functional coverage, regulatory alignment, integration capability, implementation complexity, vendor support quality, total cost of ownership, and scalability.

This scorecard removes subjectivity from the platform selection process and produces a defensible, auditable decision record. 

Best for: Safety managers, sustainability leads, IT teams, and procurement officers evaluating EHS or sustainability software 

[ASSET 6] ⚗️ Chemical substitution checklist 

Chemical substitution – replacing a hazardous substance with a less hazardous one – sits at the top of the hierarchy of controls under COSHH (key legislation for any global high-risk organization with facilities in the United Kingdom) and represents the most effective long-term strategy for reducing chemical risk in the workplace. In practice, substitution decisions are often made informally, inconsistently, or not at all, because there is no structured process to guide them. 

This checklist shows you how to substitute hazardous chemicals. It guides safety officers and operational managers through a systematic assessment of substitution viability for a given substance: evaluating technical feasibility, cost implications, regulatory status of the proposed alternative, and residual risk. Helps organizations demonstrate to the HSE in the UK and OSHA compliance officers in the US that substitution has been genuinely considered – not just noted and dismissed. 

Best for: Safety managers, chemical safety assessors, and operational managers in manufacturing, chemicals, cleaning, construction, and any sector involving regular hazardous substance use 

[ASSET 7] 📋 Chemical inventory template 

A complete, accurate chemical inventory is the foundation of effective COSHH management in the UK or chemical hazard management under the OSHA HazCom Standard in the US. Without it, risk assessments are incomplete, emergency response is impaired, and regulatory exposure is significant. 

This template provides a structured format for recording and maintaining a comprehensive chemical inventory, covering substance identification, location, quantity, hazard classification, SDS reference, storage requirements, and responsible person. Designed to be maintained as a living document rather than a point-in-time record, with built-in review prompts and version control. 

Best for: Chemical safety assessors, safety officers, and operational managers in any workplace where hazardous substances are stored, used, or generated 

[ASSET 8] 🌫️ Dust control safety checklist 

OSHA’s National Emphasis Program on respirable crystalline silica and combustible dust has significantly increased enforcement activity in recent years — particularly in construction, woodworking, food manufacturing, and metal processing. OSHA’s silica standard (29 CFR 1910.1053) sets strict permissible exposure limits and requires written exposure control plans for affected workers.

This checklist provides a structured framework for assessing dust control measures against current regulatory requirements and HSE guidance, covering exposure identification, LEV (local exhaust ventilation) effectiveness, RPE provision and fit-testing, housekeeping procedures, health surveillance obligations, and worker information and training.

Best for: Safety managers, chemical management assessors, and operational managers in woodworking, construction, food manufacturing, stone processing, and any sector with significant airborne dust exposure 

[ASSET 9] 🚨 Crisis management status meeting template 

When a crisis unfolds – whether an industrial incident, a dangerous occurrence, a significant near-miss, or an acute operational emergency – the quality of the response in the first hours is often what determines both the human outcome and the regulatory and reputational consequences that follow. 

This structured meeting template is designed to run the crisis management status meetings that most organizations know they should have but rarely prepare for in advance. It provides a consistent agenda framework covering situation status, life safety priorities, OSHA regulatory notification obligations, communications decisions, resource deployment, and next review timing. 

Best for: Senior managers, safety leads, and crisis response teams in any organization where a major incident, dangerous occurrence, or operational emergency is a foreseeable risk 

[ASSET 10] 📁 Crisis management plan checklist 

A crisis management plan that has never been reviewed, tested, or updated is not a plan – it is a liability. This checklist assesses the completeness and operational readiness of an existing crisis management plan, or provides the structural framework for building one from scratch. 

It covers the core components of an effective crisis management plan: risk scenario identification, escalation protocols, roles and responsibilities, communication trees, regulatory notification requirements, media and stakeholder management, business continuity linkages, and post-incident review processes. Each checklist item is framed as an actionable question with a clear pass/fail criterion, making gaps immediately visible.

Best for: Safety managers, business continuity leads, operations directors, and senior leadership teams responsible for organizational crisis preparedness 

CATEGORY 3: COMPLIANCE SIMPLIFIED

Compliance simplified: audit-ready resources that turn complexity into clarity

Regulatory compliance is not static, and the scope of what organizations are expected to manage is widening. ISO 45001 has reset expectations for occupational health and safety management systems. OSHA chemical hazard and combustible dust enforcement is intensifying in high-exposure sectors, with the National Emphasis Program on combustible dust driving increased inspection activity across manufacturing and processing industries. And ESG – once the concern of listed companies and large corporates – is increasingly relevant to mid-market organizations managing supply chain obligations, investor scrutiny, and sustainability reporting requirements. 

These nine resources cover the full compliance landscape and highlight how audit-ready evidence practices enabled prepared companies to avoid legal and financial fallout. Each asset is designed to make a complex regulatory requirement simpler to understand, easier to evidence, and faster to act on. 

[ASSET 11] 📘 Requirements of ISO 45001 

ISO 45001:2018 is the international standard for occupational health and safety management systems – and the framework against which a growing number of clients, insurers, and procurement frameworks now assess supplier compliance. Understanding what it actually requires, in operational rather than theoretical terms, is the essential first step for any organization pursuing or maintaining certification. 

In the United States, ISO 45001 certification is voluntary but increasingly required by major clients, insurers, and federal procurement frameworks — particularly in construction, manufacturing, and defense contracting.”

This guide translates the requirements of ISO 45001 into clear, practitioner-level language across all ten clauses of the standard: from context of the organization and leadership commitment through to performance evaluation and continual improvement. Includes an explanation of how ISO 45001 relates to what auditors are specifically looking for at each stage. 

Best for: Safety managers, compliance officers, and senior leaders preparing for ISO 45001 certification, surveillance audit, or recertification 

[ASSET 12] ✅ ISO 45001 audit checklist 

A clause-by-clause audit checklist mapped directly to the requirements of ISO 45001:2018. Designed for use in internal audits, pre-certification gap assessments, and surveillance audit preparation – giving safety teams a structured tool to assess their management system against each specific requirement before an external auditor does. 

Each checklist item is framed as an auditable question with space to record evidence reference, conformity status, and any identified corrective actions. Formatted to produce an output that is immediately useful as a gap analysis report – not just a completed form. 

Best for: Internal auditors, safety managers, and compliance officers preparing for Stage 1 or Stage 2 ISO 45001 certification audits or ongoing surveillance 

[ASSET 13] ⚠️ COSHH risk assessment template 

The Control of Substances Hazardous to Health Regulations 2002 require employers to assess the risk from hazardous substances and implement adequate control measures. A suitable and sufficient COSHH risk assessment is not optional – it is a statutory requirement, and one that HSE inspectors in the UK examine closely. This is crucial for organizations who have a presence in the UK.

This template provides a structured format for completing COSHH risk assessments that meet regulatory requirements and withstand inspection scrutiny. A suitable chemical hazard assessment is not optional — it is a regulatory requirement, and one OSHA compliance officers examine closely during inspections.

Best for: COSHH assessors, safety managers, and operational managers in any workplace where employees are exposed to hazardous substances 

[ASSET 14] 🔎 COSHH management: inspection readiness checklist 

OSHA inspections focused on COSHH compliance follow a consistent pattern – and organizations that know what inspectors look for are significantly better positioned to demonstrate compliance and avoid enforcement action. This checklist is structured around exactly that: the specific evidence, documentation, and control measures that HSE inspectors expect to find during a COSHH-focused inspection. 

Best for: Safety managers and COSHH assessors preparing for HSE inspection or conducting pre-inspection internal reviews in sectors with significant chemical hazard exposure. Or for anyone thinking about COSHH risk assessment software.

[ASSET 15] 🌫️ COSHH and DSEAR dust checklist 

Hazardous dust sits at the intersection of two distinct regulatory frameworks: COSHH governs health risks from dust inhalation; DSEAR – the Dangerous Substances and Explosive Atmospheres Regulations 2002 – governs the explosion and fire risk from combustible dust accumulation. Many organizations manage one and overlook the other, creating significant compliance gaps and physical risk. 

This checklist provides a structure to support compliance with both COSHH and DSEAR in a single assessment process. Particularly relevant for sectors including woodworking, manufacturing, pharmaceutical production, construction, and metal processing. 

Best for: Safety managers, COSHH and DSEAR assessors, and operational managers in any sector with significant combustible or respirable dust hazard 

[ASSET 16] 📐 Setting your baseline 

Effective ESG management – and credible ESG reporting – begins with knowing where you currently stand. Without a defined baseline, progress cannot be measured, targets cannot be set meaningfully, and reported performance has no context. This is as true for a business at the start of its sustainability journey as it is for one preparing its first formal ESG disclosure. 

This resource guides organizations through the process of establishing an ESG baseline across the three pillars: environmental (including energy consumption, carbon emissions, waste, and water), social (including workforce safety performance, diversity data, and community impact), and governance (including policy coverage, audit frequency, and compliance status). Designed to be completed with data that most organizations can access without specialist support. 

Best for: Sustainability managers, ESG leads, finance directors, and operations teams beginning a formal ESG program or preparing for their first external disclosure 

[ASSET 17] 📊 Collecting ESG data 

The gap between understanding what ESG data needs to be collected and actually having a reliable, consistent process for collecting it is where most early-stage ESG programs stall. Data comes from multiple systems, departments, and geographies – often in incompatible formats, at different frequencies, and with different levels of quality assurance. 

This resource provides a practical framework for designing and implementing an ESG data collection process: covering data source mapping, collection frequency, ownership assignment, quality assurance, and the connection between operational data and disclosure metrics. It’s important because businesses lose deals when sustainability data isn’t audit-ready.

Best for: Sustainability managers, finance teams, and operations leads responsible for populating ESG reports, responding to investor questionnaires, or meeting supply chain disclosure requirements 

[ASSET 18] 🌍 Climate risk checklist 

Climate risk management – both physical risks from a changing climate and transition risks from the shift to a lower-carbon economy – is increasingly material to business strategy, financial planning, and regulatory compliance. The Task Force on Climate-related Financial Disclosures (TCFD) framework has become the global standard for assessing and reporting climate risk.

This checklist guides organizations through a structured assessment of their climate risk exposure across both risk categories: physical risks (including acute events such as flooding and extreme heat, and chronic shifts such as temperature change and water stress) and transition risks (including policy and regulatory change, technology disruption, and market shifts). Produces a risk register that can feed directly into strategic planning, financial disclosure, and ESG reporting processes. 

Best for: Sustainability managers, finance directors, risk managers, and senior leaders in organizations with TCFD disclosure obligations or material exposure to climate-related risk 

[ASSET 19] 💻 Sustainability software checklist 

Selecting the right sustainability software platform is a significant decision – and one that many organizations approach without a clear framework for evaluation. Platforms vary enormously in their coverage of environmental, social, and governance data, their alignment to specific reporting frameworks, their integration capability with existing ERP and operational systems, and their total cost over a realistic implementation timeline. 

This checklist provides a structured set of evaluation criteria for assessing sustainability software platforms before procurement, covering: data collection and management capability, reporting framework alignment, carbon accounting methodology, supply chain data management, audit trail and assurance readiness, integration architecture, and vendor support and roadmap. Designed to be used alongside the Platform Assessment Scorecard included in Category 2. 

Best for: Sustainability managers, ESG leads, IT directors, and procurement teams evaluating sustainability management software platforms 

WHO THIS IS FOR

Built for the people who actually carry responsibility for workplace safety

Health and safety compliance sits differently depending on where you sit in an organization. A safety manager needs operational tools. A board director needs financial framing. An HR lead needs audit evidence. A frontline supervisor needs something they can run in a five-minute briefing. 

This toolkit was built to be useful across all of those contexts – which is why it is structured in three distinct categories rather than as a single document. 

It is most immediately useful if you are: 

• A Health & Safety Manager who needs ready-to-deploy tools that reduce preparation time and improve audit readiness 

• An Operations Director responsible for compliance across multiple sites, contractors, or workforce types 

• An HR Director managing safety obligations alongside people strategy and workforce risk 

• A Business Owner or Managing Director in a sector where regulatory exposure is high and the consequences of failure are serious 

• A Safety Consultant who needs deployment-ready templates for client engagements 
• A Compliance Officer managing the gap between current arrangements and the requirements of an upcoming audit or certification process 

WHY THIS MATTERS NOW

The regulatory environment is getting harder to navigate (and enforcement is not softening)

OSHA penalties have remained consistently high across construction, manufacturing, logistics, and healthcare. Fines under the sentencing guidelines now routinely reach six and seven figures for organizations of meaningful size. The days of a cautionary word from an inspector and a chance to put things right are largely gone for organizations that should have known better.

The financial case for proactive compliance is supported by the numbers:

Beyond the numbers: Over 5,000 workers are fatally injured in US workplaces every year, and nearly 2.8 million sustain non-fatal injuries serious enough to be recorded under OSHA’s recordkeeping rule. The majority of those events involved hazards that were known, foreseeable, and controllable.