Curriculum
- 2 Sections
- 36 Lessons
- 26 Weeks
- ISO 4500111
- 1.1Introduction to ISO 45001 and Occupational Health & Safety Management Systems (OH&S)
- 1.2Key Terms and Definitions in ISO 45001
- 1.3Context of the Organization (Clause 4 of ISO 45001)
- 1.4Leadership and Worker Participation (Clause 5 of ISO 45001)
- 1.5Planning (Clause 6 of ISO 45001)
- 1.6Support (Clause 7 of ISO 45001)
- 1.7Operation (Clause 8 of ISO 45001)
- 1.8Performance Evaluation (Clause 9 of ISO 45001)
- 1.9Improvement (Clause 10 of ISO 45001)
- 1.10Integrating ISO 45001 with Other Management Systems
- 1.11Risk-Based Thinking and Continuous Improvement in ISO 45001
- ISO 19011: Guidelines for auditing management systems26
- 2.1Introduction to ISO19011
- 2.2Principles of Auditing
- 2.3Managing an Audit Program
- 2.4Establishing Audit Program Objectives
- 2.5Determining Audit Program Risks and Opportunities
- 2.6Establishing the Audit Program
- 2.7Implementing the Audit Program
- 2.8Monitoring the Audit Program
- 2.9Reviewing and Improving the Audit Program
- 2.10Initiating the Audit
- 2.11Determining Audit Feasibility
- 2.12Preparing Audit Activities
- 2.13Reviewing Documented Information
- 2.14Preparing the Audit Plan
- 2.15Assigning Work to the Audit Team
- 2.16Preparing Working Documents
- 2.17Opening Meeting
- 2.18Communication During the Audit
- 2.19Collecting and Verifying Information
- 2.20Generating Audit Findings
- 2.21Preparing Audit Conclusions
- 2.22Closing Meeting
- 2.23Preparing the Audit Report
- 2.24Completing the Audit
- 2.25Follow-Up Activities
- 2.26ISO45001 Exam120 Minutes40 Questions
Key Terms and Definitions in ISO 45001
Importance of Terminology in ISO 45001 Auditing
A clear understanding of key terms and definitions in ISO 45001 is essential for any Lead Auditor. The standard uses precise language to ensure consistency in interpretation and application across different organizations and industries. Misinterpretation of these terms can lead to incorrect audit findings, weak conclusions, and ineffective assessments of an Occupational Health and Safety Management System (OH&SMS).
For auditors, terminology is not just theoretical knowledge. It forms the foundation for evaluating processes such as hazard identification, risk assessment, incident investigation, and corrective action. During audits, the ability to correctly interpret and apply these definitions ensures that findings are objective, accurate, and aligned with the intent of the standard.
One of the most fundamental terms in ISO 45001 is “hazard.” A hazard is defined as any source, situation, or act with the potential to cause injury or ill health. Hazards can arise from a wide range of sources, including physical conditions, equipment, chemicals, human behavior, and organizational factors. For example, unguarded machinery represents a physical hazard, while excessive workload or stress may represent a psychosocial hazard.
Closely linked to hazard is the concept of “risk.” Risk refers to the combination of the likelihood of a hazardous event occurring and the severity of the consequences if it does occur. ISO 45001 requires organizations to assess risks systematically and determine appropriate control measures. Auditors must evaluate whether risk assessments are comprehensive, consistent, and based on realistic assumptions.
It is important for auditors to verify that organizations do not confuse hazards with risks. A hazard is the source of potential harm, while risk is the level of exposure to that harm. This distinction is critical when reviewing risk assessments and control measures.
In addition to risks, ISO 45001 introduces the concept of opportunities. Opportunities are circumstances or actions that can lead to improved occupational health and safety performance. These may include adopting new technologies, improving training programs, or redesigning processes to eliminate hazards.
Auditors should assess whether the organization actively identifies and evaluates opportunities, rather than focusing solely on risk reduction. A mature OH&SMS will demonstrate a balance between controlling risks and pursuing improvements. This reflects a proactive approach to safety management rather than a purely compliance-driven mindset.
The term “worker” in ISO 45001 has a broad definition. It includes employees, contractors, temporary staff, agency workers, and any other individuals performing work under the organization’s control. This inclusive approach ensures that all individuals exposed to workplace risks are considered within the scope of the OH&SMS.
Worker participation is a key requirement of ISO 45001. Participation goes beyond simple consultation and involves actively engaging workers in decision-making processes related to occupational health and safety. This may include involvement in hazard identification, risk assessments, incident investigations, and the development of policies and procedures.
Auditors must evaluate whether worker participation is genuine and effective. This involves reviewing evidence such as meeting records, feedback mechanisms, and examples of worker input influencing decisions. Superficial or tokenistic participation should be identified as a weakness in the system.
Incident, Nonconformity, and Corrective Action
An “incident” is defined as an occurrence arising out of or in the course of work that could or does result in injury or ill health. This includes both actual incidents and near misses. Near misses are particularly important because they provide valuable opportunities to identify weaknesses in the system before harm occurs.
A “nonconformity” refers to a failure to meet a requirement. This could involve non-compliance with ISO 45001 requirements, legal obligations, or the organization’s own procedures. Auditors are responsible for identifying and documenting nonconformities based on objective evidence.
“Corrective action” is the process of eliminating the root cause of a nonconformity to prevent its recurrence. ISO 45001 emphasizes the importance of root cause analysis rather than addressing only the immediate symptoms. Auditors should assess whether corrective actions are thorough, effective, and implemented in a timely manner.
It is also important to distinguish between correction and corrective action. A correction addresses the immediate issue, while corrective action addresses the underlying cause. Both are necessary, but only corrective action ensures long-term improvement.
Continual Improvement
Continual improvement is a recurring activity aimed at enhancing OH&S performance. It is a central principle of ISO 45001 and is embedded within the Plan-Do-Check-Act (PDCA) cycle. Organizations are expected to continually improve the suitability, adequacy, and effectiveness of their OH&SMS.
Auditors must look for evidence of continual improvement across the system. This may include trends in incident data, improvements in risk controls, updates to procedures, and feedback from workers. A static system that does not evolve over time indicates a lack of commitment to improvement.
Continual improvement is not limited to large changes. Small, incremental improvements can also have a significant impact on safety performance. Auditors should recognize both types of improvement when evaluating the system.
ISO 45001 uses the term “documented information” to refer to both documents and records required by the standard. This includes policies, procedures, work instructions, and evidence of activities performed. The standard allows flexibility in how documented information is maintained, including digital formats.
Auditors must verify that documented information is controlled, up-to-date, and accessible to relevant personnel. They should also assess whether documentation reflects actual practices. Discrepancies between documented procedures and real-world activities are a common source of nonconformities.
Understanding these key terms and definitions enables auditors to interpret ISO 45001 requirements accurately and apply them effectively during audits.