How to Prepare for an NR-1 Inspection: A Complete Checklist for Businesses

A enforcement of NR-1 requires companies to be prepared not only to submit documents, but also to demonstrate that they have a consistent process for Occupational Risk Management (ORM).

Since May 26, 2026, the revised version of Chapter 1.5 of NR-1 took effect, which now expressly includes work-related psychosocial risk factors in occupational risk management. :contentReference[oaicite:1]{index=1}

This has made it even more important for organizations to review their processes, documents, controls, and records related to Occupational Safety and Health.

But there is one important point:

Being prepared for an audit doesn't just mean putting together a folder of documents.

The Ministry of Labor and Employment states that, with regard to psychosocial risks, there is no single national checklist or exclusive operational protocol for inspection. The analysis primarily considers the requirements of applicable standards, the technical consistency of the GRO process, actual working conditions, preventive measures, and documentary and operational compliance. :contentReference[oaicite:2]{index=2}

Therefore, the best way to prepare is to establish a management system that can demonstrate, in an organized manner:

• What risks were identified;
• How were they evaluated;
• What preventive measures are available;
• Who is responsible;
• What actions are currently underway;
• What evidence proves that the execution took place;
• How the company keeps up with the times.

In this article, you'll find a A Practical Checklist to Prepare Your Company for an NR-1 Inspection.

What can an NR-1 inspection assess?

The inspection can determine whether the organization is complying with the applicable requirements of NR-1 and other standards related to Occupational Safety and Health.

In the context of psychosocial risks, the Ministry of Labor and Employment notes that the assessment may take into account:

• GRO and PGR documentation;
• Risk assessment;
• Methodology used;
• Hazard identification;
• Risk assessment;
• Preventive measures;
• Actual working conditions;
• Interviews;
• Records;
• Evidence.

This means that the company needs to be prepared to demonstrate not only what is documented, but also how management works in practice. :contentReference[oaicite:3]{index=3}

Is there an official checklist for NR-1 inspections?

There is no single, specific national checklist for monitoring psychosocial risk factors.

The Ministry of Labor and Employment itself clarifies that, to date, there is no single operational protocol or standardized instrument specifically for this type of inspection. :contentReference[oaicite:4]{index=4}

This is important because it means the company shouldn't simply try to “check all the boxes” on a list.

The inspection aims to evaluate the the quality and consistency of the risk management process adopted by the organization.

Therefore, more important than having a specific document is being able to demonstrate:

Identification → Assessment → Prevention → Control → Evidence → Monitoring

What is GRO, and why is it important for enforcement?

O GRO — Occupational Risk Management — is a continuous and systematic process of identifying hazards and assessing and controlling occupational risks.

The Ministry of Labor and Employment emphasizes that the PGR implements this management approach and must continuously monitor the company's activities. :contentReference[oaicite:5]{index=5}

In practice, the company must demonstrate that it has a process in place to:

• Identify hazards;
• Assess risks;
• Establish preventive measures;
• Implement controls;
• Track results;
• Review risks as needed.

What is the PGR?

O Risk Management Program (RMP) It consists of, at a minimum:

• Occupational Risk Inventory;
• Action Plan.

The Inventory consolidates information related to hazard identification and risk assessment.

The Action Plan sets forth the preventive measures that must be implemented, improved, or maintained to eliminate, reduce, or control occupational hazards. :contentReference[oaicite:6]{index=6}

Checklist 1: Updated PGR

The first point to review is whether the PGR accurately reflects the organization's current situation.

A common mistake is having an outdated PGR that does not reflect recent changes in operations.

The MTE states that the PGR must continuously monitor activities and account for changes that alter the nature of occupational risks. :contentReference[oaicite:7]{index=7}

Checklist 2: Occupational Risk Inventory

The Risk Inventory is one of the key components of the PGR framework.

The organization must verify that the inventory adequately covers:

• Processes;
• Work environments;
• Activities;
• Dangers;
• Potential health risks;
• Sources or circumstances;
• Groups of exposed workers;
• Preventive measures;
• Risk assessment;
• Criteria used.

NR-1 stipulates that data on hazard identification and risk assessment must be compiled in the Occupational Risk Inventory. :contentReference[oaicite:8]{index=8}

Checklist 3: Psychosocial Risks

With the new version of NR-1 in effect since May 2026, organizations must take work-related psychosocial risk factors into account as part of their occupational risk management process. :contentReference[oaicite:9]{index=9}

This does not mean that every company is required to report the same risk factors.

The MTE itself clarifies that the absence of a particular psychosocial factor in the Inventory does not, in and of itself, constitute an irregularity, provided that the organization can demonstrate that it carried out a technically sound identification and assessment process. :contentReference[oaicite:10]{index=10}

So, please review:

• Methodology used;
• Sources of information;
• Working conditions;
• Work organization;
• Worker participation;
• Evaluation criteria;
• Preventive measures.

Checklist 4: Risk Assessment Methodology

It is not enough to say that the risks have been assessed.

The company needs to be able to explain how he reached his conclusions.

Review:

• What methodology was used;
• What criteria were taken into account;
• How the risks were classified;
• How was the probability assessed?;
• How was the impact taken into account?;
• How the preventive measures were established.

The MTE notes that the audit may examine the methodological consistency of the process used by the organization. :contentReference[oaicite:11]{index=11}

Checklist 5: Worker Participation

Worker participation is a key element in the risk management process.

This participation can be demonstrated in various ways, depending on the organization's specific circumstances.

Examples:

• Appointments;
• Interviews;
• Wiretaps;
• Meetings;
• Minutes;
• Questionnaires;
• Communications;
• Training;
• Follow-up records.

The MTE clarifies that NR-1 does not establish a single model for proving this participation. The most important thing is to demonstrate that it occurred in an effective and continuous manner and was consistent with the GRO process. :contentReference[oaicite:12]{index=12}

Checklist 6: Action Plan

The Action Plan is another essential component of the PGR.

For each relevant metric, check to see if the following exist:

The plan shouldn't just be a list of intentions.

It needs to allow us to track whether the defined measures are being implemented.

Checklist 7: Evidence

One of the biggest challenges during audits and inspections is proving that a particular measure was actually implemented.

Therefore, organize evidence such as:

• Documents;
• Reports;
• Training records;
• Minutes;
• Photos;
• Procedures;
• Checklists;
• Inspection records;
• Evidence of implementation;
• Assessment results.

Ideally, each piece of evidence should be linked to the corresponding requirement, risk, control, or action.

Checklist 8: Responsibilities

A risk management framework must clearly define who does what.

Check to see if there are designated individuals responsible for:

• Risk identification;
• Evaluation;
• Implementation of the measures;
• Monitoring;
• Updating documents;
• Implementation of action plans;
• Presentation of the evidence.

One of the main problems with decentralized structures is the lack of clarity regarding responsibilities.

If no one knows who is responsible, it is unlikely that the action will be properly monitored.

Checklist 9: Recent Changes at the Company

An audit may uncover inconsistencies when the document no longer reflects the actual circumstances of the transaction.

Therefore, check to see if there have been any changes, such as:

• New units;
• New cases;
• New equipment;
• New systems;
• Layout changes;
• New features;
• Changes in work organization;
• New risks;
• Outsourcing;
• Significant changes in operations.

The MTE recommends that risk assessments be reviewed whenever changes occur that could create new risks or alter existing ones. :contentReference[oaicite:13]{index=13}

Checklist 10: Documents and reality must be aligned

One of the most important aspects of preparation is comparing the documents with what actually happens.

Ask:

• Is the process described actually carried out?
• Are there any controls?
• Do the employees know the procedures?
• Are the people in charge correct?
• Do the reported risks reflect reality?
• Have the preventive measures been implemented?
• Is the evidence available?

The MTE notes that inspections may take into account actual working conditions, interviews, and other elements of technical verification. :contentReference[oaicite:14]{index=14}

Therefore:

There's no point in having a perfect PGR on paper if the reality of the company tells a different story.

What happens if the company isn't compliant?

Following the entry into force of the new version of NR-1, organizations are subject to the applicable regulatory requirements.

Regarding the new provisions related to psychosocial risk factors, the MTE stated that, during the 90 days following their entry into force, the “double visit” criterion will apply, initially on an advisory basis. :contentReference[oaicite:15]{index=15}

That does not mean the company is exempt from complying.

The initial period should be used to:

• Identify gaps;
• Review documents;
• Update processes;
• Implement measures;
• Organize evidence;
• Fix problems.

Once the specified period has elapsed, failure to comply with the applicable obligations may result in appropriate administrative measures, depending on the specific circumstances and the relevant legal criteria. :contentReference[oaicite:16]{index=16}

How to Prepare for an NR-1 Inspection in 30 Days?

If the company needs to speed up its preparations, it can put together an action plan within four weeks.

Week 1 — Diagnosis

• Review the PGR;
• Review the Risk Inventory;
• Identify gaps;
• Evaluate the methodology;
• Assess psychosocial risks.

Week 2 — Controls and Measurements

• Review preventive measures;
• Assign responsibilities;
• Update procedures;
• Create action plans;
• Prioritize critical risks.

Week 3 — Evidence

• Organize documents;
• Centralize records;
• Check training sessions;
• Organize meeting minutes and consultations;
• Relate evidence to risks.

Week 4 — Readiness Test

Run a simulation.

Pick a few risks at random and try to answer:

• What is the risk?
• How was he identified?
• How was it evaluated?
• What measures are in place?
• Who is responsible?
• What evidence is there?
• What's the status?

If the team takes too long to respond, there is an opportunity to improve how information is organized.

Complete Checklist for NR-1 Compliance Inspections

How can you keep preparing for an audit from turning into a race against time?

One of the most common problems is waiting until an inspection, audit, or request for evidence arises before starting to organize everything.

This creates a reactive operation.

A more mature organization continuously works on:

Requirement → Risk → Control → Evidence → Monitoring → Action

So, when an audit takes place, the company doesn't have to start searching for information in dozens of folders, spreadsheets, and emails.

This information is already part of the management routine.

How does technology help in preparing for NR-1 inspections?

Technology can help centralize information related to risk management and compliance requirements.

A GRC platform can manage:

• Regulatory requirements;
• Risks;
• Controls;
• Owners;
• Evidence;
• Nonconformities;
• Action plans;
• Deadlines;
• Metrics;
• Dashboards.

This establishes traceability between the identified problem and the action taken.

For example:

NR-1 Requirement → Identified Risk → Preventive Measure → Person Responsible → Evidence → Status

This structure allows managers to track progress toward compliance without relying on scattered controls.

How does Triskle help with preparation for an audit?

A Triskle GRC It allows you to centralize processes related to risk management, compliance, controls, documentation, and action plans.

For an organization that needs to strengthen its readiness for regulatory requirements, the platform can help with:

• Regulatory requirements management;
• Risk management;
• Monitoring of controls;
• Centralization of evidence;
• Recording of nonconformities;
• Action plans;
• Supervision of guardians;
• Deadline tracking;
• Metrics;
• Executive dashboard.

The goal is to prevent the company from discovering a gap only after an inspection is already underway.

With ongoing management, the organization can identify problems earlier, prioritize corrective actions, and track its progress toward maturity.

Frequently Asked Questions About NR-1 Compliance Inspections

How to Prepare for an NR-1 Inspection?

Review the GRO, the PGR, the Risk Inventory, the Action Plan, the methodology used, the preventive measures, the evidence, and the records related to worker participation.

Is there an official checklist for NR-1 inspections?

With regard to psychosocial risks, the MTE notes that there is no single national checklist or exclusive operational protocol. Inspections take into account the applicable standards, the actual working conditions, the methodology used, and the available documentation and evidence. :contentReference[oaicite:17]{index=17}

What can an inspector request during an NR-1 inspection?

Documentation and information may vary on a case-by-case basis. Inspectors may review elements of the GRO/PGR, Risk Inventory, Action Plan, methodology, preventive measures, records, and other elements related to actual working conditions.

Does the PGR need to be updated?

Yes. The PGR must continuously monitor the company's activities and take into account any changes that alter the nature of occupational risks. :contentReference[oaicite:18]{index=18}

Do psychosocial risks have to be included in the inventory?

The absence of a particular psychosocial factor in the Inventory does not, in and of itself, constitute an irregularity, provided that the organization can demonstrate that it carried out a technically sound identification and assessment process and that it substantiated its conclusion. :contentReference[oaicite:19]{index=19}

Do I need to create a separate document for psychosocial risks?

The focus of NR-1 is on occupational risk management. It is not simply a matter of creating a standalone document, but rather of integrating work-related factors into the process of identification, assessment, and prevention.

Does employee participation need to be documented?

The organization must be able to demonstrate the effective and consistent participation of workers in the relevant stages of the GRO. The MTE notes that there is no single mandatory document required to provide this evidence. :contentReference[oaicite:20]{index=20}

Under what circumstances can an inspection for compliance with NR-1 result in a fine?

The requirements of the new text have been in effect since May 26, 2026. Regarding the new provisions related to psychosocial risks, the MTE initially announced that the “double-visit” criterion would be applied on an advisory basis during the 90 days following the effective date. After this period, appropriate administrative measures may be taken in response to any identified noncompliance.

Get ready for a enforcement of NR-1 It shouldn't mean scrambling to find documents when the tax inspector is already at the door.

The preparation begins long before that.

A mature company needs to be clear about:

• What risks are there?;
• How were they evaluated;
• What measures were implemented;
• Who is responsible;
• What evidence is there;
• What actions are still pending;
• How risks are monitored.

The main purpose of the audit is not simply to submit documents.

It is about demonstrating that there is a risk management process that is consistent and aligned with the organization's actual circumstances.

Therefore, the best strategy is not to prepare solely for an audit.

It means building a company that is prepared every day.

REQUEST A DEMO →