ISO 45001 Internal Audit: Step-by-Step Guide with Checklists & Templates

Why ISO 45001 Internal Audits Are Critical

Clause 9.2 requires internal audits at planned intervals to determine whether the management system conforms to ISO 45001 and is effectively implemented.

Planning Your Internal Audit Programme

The 7-Step Internal Audit Process

Step 1: Audit Preparation

Review previous reports, prepare checklist, confirm logistics.

Step 2: Opening Meeting

Introduce team, confirm scope, explain methodology.

Step 3: Evidence Collection

• Document review — policies, procedures, records
• Interviews — managers, workers, H&S representatives
• Observation — workplace conditions, practices
• Data analysis — statistics, training records

Step 4: Evaluate Evidence

Determine conformity, nonconformity, or observation for each criterion.

Step 5: Classify Findings

Major Nonconformity: Total absence of required element or systematic failure. Minor Nonconformity: Isolated lapse or incomplete records. Opportunity for Improvement: System works but could be more effective.

Step 6: Closing Meeting

Present findings, agree corrective action timelines.

Step 7: Report and Follow-Up

Issue report, track corrective actions, verify effectiveness.

ISO 45001 Internal Audit Checklist

Clause 4: Context

• [ ] Internal and external issues identified?
• [ ] Interested parties determined?
• [ ] Scope defined?

Clause 5: Leadership

• [ ] Top management commitment evidenced?
• [ ] OH&S policy appropriate and communicated?
• [ ] Worker participation mechanisms effective?

Clause 6: Planning

• [ ] Risks and opportunities addressed?
• [ ] Hazard identification comprehensive?
• [ ] Legal register current?
• [ ] OH&S objectives measurable?

Clause 7: Support

• [ ] Resources adequate?
• [ ] Training records current?
• [ ] Workers aware of policy and objectives?
• [ ] Documented information controlled?

Clause 8: Operation

• [ ] Hierarchy of controls applied?
• [ ] Change management process followed?
• [ ] Emergency plans current and tested?

Clause 9: Performance Evaluation

• [ ] Monitoring programme implemented?
• [ ] Compliance evaluated?
• [ ] Management review conducted?

Clause 10: Improvement

• [ ] Incidents investigated with root cause?
• [ ] Corrective actions effective?
• [ ] Continual improvement evidenced?

Common Audit Findings in South African Companies

1. Inadequate worker participation — consultation only, not genuine participation
2. Incomplete context analysis — tick-box exercise
3. Weak change management — changes without OH&S assessment
4. Legal register not current — SA legislation changes frequently
5. Training records incomplete — especially for contractors
6. Emergency drills not conducted or not evaluated
7. Corrective actions addressing symptoms not root causes

ISO 45001 Internal Auditor Training

OHS Compliance Group's course includes:

• Comprehensive ISO 45001 understanding
• Practical audit skills — planning, conducting, reporting
• Hands-on workshops with real scenarios
• Audit checklist templates
• Certificate of competence

Enrol in ISO 45001 Internal Auditor Training or explore all ISO courses.