What ISO 45001 Auditors Look For
Certification audits rarely fail a system for missing documents. They fail it when the documents and the site do not match.
Two stages, two different tests
ISO 45001 certification follows a set sequence, in which Stage 1 reviews the documented management system and Stage 2 audits on site how that system is implemented. A certificate runs for a three-year cycle, with surveillance audits each year.
Organizations usually prepare hardest for Stage 1 by completing the manual, filling the registers and tidying the procedures. Stage 2 asks something else, because the auditor goes to the workplace, talks to workers and asks to see tasks done.
Where findings come from
Exhibit 1: Areas of ISO 45001 where documents and practice commonly diverge, and what an auditor does to test them.
| Clause area | Typical gap | How it is tested on site |
|---|---|---|
| 5.4: Consultation and participation of workers | A policy exists but crews are not consulted | Workers are asked how they raise concerns |
| 6.1.2: Hazard identification | A generic template is used for every site | A job safety analysis is compared with the actual task |
| 7.5: Documented information | Nobody controls versions or retires old procedures | Documents in use are checked against the register |
| 8.1: Operational planning and control | Steps are done in a different order from the procedure | A crew is asked to walk through a permit-to-work |
| 9.2: Internal audit | No program, or audits that find nothing | Audit records and follow-up actions are sampled |
In each row the document may be perfectly written, and the finding arises because the site does something else.
Practice and procedure: which one to change
When the two differ, the instinct is to retrain crews to follow the document, and sometimes that is right. Often the crew's method is the safer one, developed through experience the author did not have.
Where practice is sound, rewrite the procedure to match it, and where it is not, fix the practice and explain why. Either way the gap closes for a reason people on site understand.
In one composite engagement, an upstream operator rebuilt its system around field-verified practice and retired about a third of its safety documents. It was certified with no nonconformities at Stage 2. See the ISO 45001 case study.
Why a smaller system audits better
Management systems grow by addition, as a procedure follows an incident, a form follows a regulation, and nothing is ever removed. An auditor sampling a large library is likely to pick something that has drifted.
A system rebuilt around what the organization needs is usually shorter, and every remaining procedure describes work that happens. That leaves an auditor less to sample and less to find.
It is also easier to keep current, since an internal audit team can cover the whole set between surveillance visits, which is the point of Clause 9.2.
Preparing for the audit
- Choose three high-risk procedures and watch each being carried out against the written steps.
- Assign an owner for document control and give them authority to retire procedures.
- Run a mock audit that follows the Stage 1 and Stage 2 format.
- Train internal auditors before certification so the first surveillance audit is routine.
Check your readiness for ISO 45001
We can run a clause-by-clause gap assessment with field verification and a mock audit before your certification body arrives.
Organizational Resilience Amid Regional Instability
Continuity plans are written for a fire or an outage on your own site. Regional disruption arrives from outside and breaks the assumptions those plans rest on.
Why Process Safety Management Fails Quietly
A HAZOP study is accurate on the day it is signed. Each modification afterwards is a small bet that nothing relevant has changed.
When Near-Miss Reports Stop: A Process Safety Warning Sign
A falling near-miss count at a chemical plant usually means operators no longer believe reporting achieves anything. Supervisors can see the signs first.