ISO 45001:2018 Auditor Training

This module takes a step-by-step look at the relevant clauses in the ISO 45001:2018 standard in order to understand what they mean and what your company needs to do to comply with them.

Clear, well-written, and non-bureaucratic documentation is an important part of an OH&S Management System.

A point worth noting here is that documents are used for storing and sharing information, while records are essentially hard copies of results (such as from an audit) or evidence of activities that have been performed. And while documents get revised from to time and are generally kept up-to-date, records are static and never revised.

This part introduces auditing techniques, including the fundamentals (audit methodologies), and the roles and responsibilities expected from a company's internal auditor.

• Internal Auditing Basics
• Audit Types
• Roles and Responsibilities

Audit proceedings and findings must be documented according to ISO's specific requirements. The reports you compile (which show nonconformities and the corrective actions taken to address them) must be retained as they will be reviewed during the certification audit and subsequent surveillance audits. Points covered in this module include:

• Audit Preparation
• Conducting an Audit
• Audit Reporting
• Audit Completion and Follow-Up

This part introduces the concept of risk management in an ISO 45001 OH&S Management System. The concept in expanded on in the following module.

This part looks at hazard identification and risk assessment, which form the core of the OH&S Management System's drive for control and improvement. The terms are easy to understand: hazards have the potential to cause harm; risks relate to the potential for hazards to arise.

Auditors will examine the controls you have in place for hazard identification and risk assessment, and will expect you to have kept records to verify that your controls have been effectively applied. From a practical standpoint, a simple methodology might look like this:

• Look for Hazards
  Take a close look at your workplace. What are the potential hazards? What activities, materials, substances, tools or machinery have potential to cause harm?
• Who Might Be Harmed and How
  Identify not only employees but contractors and the general public. Pay attention to the young and elderly, as well as inexperienced and disabled staff.
• Evaluate Risks
  What's the likelihood of the hazards you've identified actually occurring? If the hazard were to occur, what harm would ensue? Are you prioritizing risk? If risks are deemed unacceptable, what are you doing to control them?
• Record your Findings
  Maintaining written records is essential. Keep them to demonstrate compliance with legal requirements and the ISO 45001:2018 standard, and as evidence to show the external auditor during your company's certification audit.
• Review and Revise
  Regularly review risk assessments to ensure that controls are still adequate for existing hazards. Risk assessments should also be reviewed and revised whenever new hazards are introduced into the workplace (such as new substances or machinery).