Why ISO 45001 Internal Audits Are Critical
Clause 9.2 requires internal audits at planned intervals to determine whether the management system conforms to ISO 45001 and is effectively implemented.
Planning Your Internal Audit Programme
| Process/Area | Recommended Frequency | Rationale |
|---|---|---|
| High-risk operations | Quarterly | Critical safety implications |
| Legal compliance | Bi-annually | Regulatory obligations |
| Emergency preparedness | Bi-annually | Life safety critical |
| Worker participation | Annually | ISO 45001 emphasis area |
| Document control | Annually | System foundation |
The 7-Step Internal Audit Process
Step 1: Audit Preparation
Review previous reports, prepare checklist, confirm logistics.
Step 2: Opening Meeting
Introduce team, confirm scope, explain methodology.
Step 3: Evidence Collection
- Document review — policies, procedures, records
- Interviews — managers, workers, H&S representatives
- Observation — workplace conditions, practices
- Data analysis — statistics, training records
Step 4: Evaluate Evidence
Determine conformity, nonconformity, or observation for each criterion.
Step 5: Classify Findings
Major Nonconformity: Total absence of required element or systematic failure. Minor Nonconformity: Isolated lapse or incomplete records. Opportunity for Improvement: System works but could be more effective.
Step 6: Closing Meeting
Present findings, agree corrective action timelines.
Step 7: Report and Follow-Up
Issue report, track corrective actions, verify effectiveness.
ISO 45001 Internal Audit Checklist
Clause 4: Context
- [ ] Internal and external issues identified?
- [ ] Interested parties determined?
- [ ] Scope defined?
Clause 5: Leadership
- [ ] Top management commitment evidenced?
- [ ] OH&S policy appropriate and communicated?
- [ ] Worker participation mechanisms effective?
Clause 6: Planning
- [ ] Risks and opportunities addressed?
- [ ] Hazard identification comprehensive?
- [ ] Legal register current?
- [ ] OH&S objectives measurable?
Clause 7: Support
- [ ] Resources adequate?
- [ ] Training records current?
- [ ] Workers aware of policy and objectives?
- [ ] Documented information controlled?
Clause 8: Operation
- [ ] Hierarchy of controls applied?
- [ ] Change management process followed?
- [ ] Emergency plans current and tested?
Clause 9: Performance Evaluation
- [ ] Monitoring programme implemented?
- [ ] Compliance evaluated?
- [ ] Management review conducted?
Clause 10: Improvement
- [ ] Incidents investigated with root cause?
- [ ] Corrective actions effective?
- [ ] Continual improvement evidenced?
Common Audit Findings in South African Companies
- Inadequate worker participation — consultation only, not genuine participation
- Incomplete context analysis — tick-box exercise
- Weak change management — changes without OH&S assessment
- Legal register not current — SA legislation changes frequently
- Training records incomplete — especially for contractors
- Emergency drills not conducted or not evaluated
- Corrective actions addressing symptoms not root causes
ISO 45001 Internal Auditor Training
OHS Compliance Group's course includes:
- Comprehensive ISO 45001 understanding
- Practical audit skills — planning, conducting, reporting
- Hands-on workshops with real scenarios
- Audit checklist templates
- Certificate of competence
Enrol in ISO 45001 Internal Auditor Training or explore all ISO courses.
Prêt à commencer votre parcours NEBOSH ?
Join 60,000+ professionals who've earned their health & safety qualifications with OHS Compliance Group.