About Workplace Mental Health
An ISO 45003 gap analysis is the most useful first step any organisation can take towards managing psychological health and safety properly. It is a structured comparison of what you do now against ISO 45003, the global standard for psychological health and safety at work, and it gives you an honest map of where you stand and what to do next. I sat on the drafting panel for that standard, and I have since carried out gap analyses for major organisations including BT and Rolls-Royce. So let me be plain about what an ISO 45003 gap analysis actually involves, and what it does not.
What an ISO 45003 gap analysis is for
Most organisations already do something about mental health. They have a policy, an employee assistance programme, perhaps some training. The trouble is that these efforts are usually scattered, and nobody can say with confidence whether they add up to a system that actually manages psychosocial risk. A gap analysis answers that question. It tells you, clause by clause, where your current practice meets the standard, where it falls short, and where there is simply nothing in place. The output is not a verdict on whether your people care. It is a clear picture of how well your management arrangements protect them.
It is worth clearing up a common point of confusion. ISO 45003 is a guidance standard rather than a standalone certifiable one, so it cannot be certified on its own in the way some standards can. You can, however, gain a certificate by being assessed against the British Standards Institution’s competency framework. That assessment comes in two parts. The first part is the gap analysis, which compares both your documents and your day-to-day practice against the standard. The second part is an assessment of your systems and processes that confirms what your documents describe is actually happening within the organisation. A word of caution: many providers claim they can certify you to ISO 45003, but only bodies such as the British Standards Institution, working to their own established criteria, can genuinely do that.
What an ISO 45003 gap analysis involves
A good gap analysis works on three levels: what you say, what you do, and what people actually experience. The first level is a desktop review of your documents. We read your policies, risk assessments, procedures, training records and governance arrangements against each clause of the standard. This shows whether the framework exists on paper.
The second level is stakeholder interviews. Documents tell you what is meant to happen; conversations tell you what happens in practice. We speak to leaders, managers, health and safety and human resources colleagues, and employees themselves. This is where the gaps usually appear, because a fine policy that nobody knows about is, for practical purposes, no policy at all. The third level is the lived reality of psychosocial risk in the organisation: the demands people carry, the control they have over their work, the support available, the quality of relationships, role clarity, and how change is handled. These are the very areas that drive work-related stress, which still accounts for around half of all work-related ill health in the UK.
From those three levels comes the deliverable that matters: a written report that rates your position against each clause, sets out the evidence, and gives you a prioritised roadmap. Not a wish list, but a sequence. What to fix first because it carries the most risk, what to build next, and what can wait. A gap analysis that ends in a tidy document but no plan of action has failed at the only thing it was for.
What happens after the gap analysis
The report is the start, not the finish. The roadmap should translate directly into work: closing the highest-risk gaps, strengthening your psychosocial risk assessment, training managers in the parts of the job that protect mental health, and putting in the governance that keeps it all under review. For organisations heading towards certification, this is also where you build the evidence trail an assessor will want to see. For everyone else, it is simply how scattered activity becomes a managed system.
One caution from experience. Do not treat the gap analysis as a compliance exercise to be survived. The organisations that get the most from it are the ones that use it to ask harder questions about how work is designed, and that connect it to a real plan. If you want to see how this fits into a broader approach, our piece on what real interventions into workplace mental health look like is a good companion read.
Frequently asked questions
What is an ISO 45003 gap analysis?
An ISO 45003 gap analysis is a structured review of your current policies, practices and culture against ISO 45003, the global standard for psychological health and safety at work. It identifies where you meet the standard, where you fall short, and provides a prioritised roadmap to close the gaps.
How long does an ISO 45003 gap analysis take?
It varies with the size and complexity of the organisation, but most ISO 45003 gap analyses combine a desktop document review with a round of stakeholder interviews and result in a written report within a few weeks. The implementation work that follows takes longer, because that is where real change happens.
If you want to know where your organisation genuinely stands, our ISO 45003 gap analysis and certification support gives you a clear, evidence-based picture and a practical plan, and our strategic workplace mental health advisory helps you act on it. Start a conversation at being-real.co.uk.
About Peter Kelly and Being Real
Peter Kelly is an occupational psychologist with more than twenty years at the Health and Safety Executive, where he helped shape national policy on work-related stress and built the evidence base for psychological health and safety. He sat on the drafting panel for ISO 45003, the global standard for psychological health and safety at work, and has completed ISO 45003 gap analyses for organisations including BT and Rolls-Royce. Being Real helps organisations move from policy to practice on workplace mental health. You can contact the team at being-real.co.uk.