An ISO 45001 certification audit looks at whether your occupational health and safety system is not only documented but actually protecting people. Preparation should focus on the shop floor as much as the office.
Understand the two stages
- Stage 1 reviews your documentation, legal requirements, hazard identification and readiness. The auditor confirms you are ready for Stage 2.
- Stage 2 checks implementation and effectiveness across the site, through interviews, observation and records.
Before Stage 1
- Make sure your OH&S policy, objectives and scope are approved and communicated.
- Complete hazard identification and risk assessment for all activities, including non-routine work and contractors.
- Build a register of applicable legal requirements and evaluate compliance.
- Complete at least one full internal audit and one management review.
Before Stage 2
Walk the site. Look at it the way an auditor will: guarding, PPE use, housekeeping, emergency exits, chemical storage, permits to work.
Talk to workers. ISO 45001 places strong emphasis on consultation and participation of non-managerial workers. Make sure they know the hazards of their job, how to report incidents and near misses, and that their input is used.
Check records. Incident investigations, training, inspections, emergency drills and contractor controls should all be up to date.
Close actions. Address any Stage 1 findings with evidence.
During the audit
- Assign a guide who knows the site well
- Let workers answer for themselves
- Be open about known gaps and the actions in progress
After certification
Certification is the start, not the end. Surveillance audits happen each year, so keep the system running: continue inspections, investigate incidents, review objectives and involve your workforce.